$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: 2jmnh2uwhJlcOKYW9YtbJ7gO67NXQulBIs+5uVe6HKg= Subject key identifier: E0:A3:ED:BF:64:C2:40:56:9C:1D:92:84:80:B3:7D:EE:08:00:DF:B9 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 4ADAA944EE662C90AB3C44CF852B529E25A5433D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0486 Signing time: Sun 24 Nov 2024 01:50:38 +0000 Manifest this update: Sun 24 Nov 2024 01:45:38 +0000 Manifest next update: Wed 27 Nov 2024 09:30:38 +0000 Files and hashes: 1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: zpSUnhg+vbDp0nz+AD3Un58JoxVMxxup4VM/yiIczeo=) 2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: Kw6Usn9FPCQUTq3aNzIi149Nm6pyfuxOcoMkAS6ghSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:da:a9:44:ee:66:2c:90:ab:3c:44:cf:85:2b:52:9e:25:a5:43:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Nov 24 01:45:38 2024 GMT Not After : Nov 27 09:30:38 2024 GMT Subject: CN=E0A3EDBF64C240569C1D928480B37DEE0800DFB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:93:4e:a0:46:db:f0:d1:91:e1:67:f7:ae: 6f:f5:29:ed:eb:e6:64:73:2f:f4:63:ac:00:99:ce: cb:17:9f:e4:fa:12:1f:2b:f5:2f:dc:32:18:9e:f5: 52:93:11:97:c8:7e:0c:93:58:bf:7e:bd:9d:18:85: 47:5b:29:be:52:c7:c6:95:d1:8c:a9:4a:0f:a4:7d: c6:a8:a9:09:e7:a3:c2:db:3d:41:02:62:96:df:85: ba:b8:e5:38:d2:39:cf:ae:92:4e:8c:da:6b:f3:35: 89:f2:a2:f9:8d:dd:1e:e2:36:d5:c5:b5:eb:81:7c: 66:25:1e:6a:85:04:eb:98:b6:60:33:60:9d:c5:ab: 5f:ef:34:77:f4:10:0e:f9:51:23:02:51:93:c5:25: 17:41:d0:b5:af:ac:00:be:35:22:2c:c0:b4:34:d6: 6c:28:db:09:dd:9e:9c:42:49:98:44:07:f5:be:a6: d1:02:30:32:d3:cd:b1:b7:72:57:28:c6:eb:84:c2: b3:52:7e:28:63:62:7c:d6:93:eb:1b:6a:26:bb:fe: 1c:b6:96:90:16:5a:1c:c0:a6:2f:50:a5:81:66:a0: 93:9d:eb:dd:3e:de:fa:1d:bc:e9:fd:5c:d1:4a:a0: 48:d6:31:aa:90:6f:fd:f3:0c:49:e8:d6:0a:d2:b5: 58:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A3:ED:BF:64:C2:40:56:9C:1D:92:84:80:B3:7D:EE:08:00:DF:B9 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2a:d6:21:56:db:05:60:8b:fd:2e:57:98:9e:7a:c5:fe:77: b4:ce:aa:5e:f1:65:fa:53:4d:13:50:b9:3d:6f:8e:42:12:bd: c1:99:78:dd:8e:4e:cd:5c:77:e4:7a:0f:52:02:e4:8e:00:fc: ec:9b:f1:58:b7:8e:b2:49:31:47:56:c3:d4:e4:4c:59:62:d0: c4:c5:3b:b7:03:9f:90:32:e0:cb:39:b9:88:75:8e:3f:2f:7f: ae:d8:ab:f5:a1:e7:8e:06:87:a9:e6:f7:4d:be:58:26:40:00: 23:f2:73:97:a6:ff:71:f5:86:cb:83:81:b1:e0:e6:31:d0:b8: 63:87:99:19:db:19:f4:63:a5:36:a6:6f:78:d3:4d:36:7c:03: eb:d6:07:e7:fd:a7:48:8e:8c:23:e9:7c:47:6a:28:d4:ba:59: 70:34:3f:d4:13:e3:95:64:3f:a8:64:ab:26:fe:3d:f4:4f:c2: f1:5b:8f:1f:3a:12:62:31:9e:5f:57:a6:39:ce:bd:59:64:e3: 43:9c:ab:0c:e1:b7:15:8f:74:a7:f6:86:90:0b:ee:60:0f:05: 1a:90:28:03:8e:6c:32:9b:ac:8a:44:5c:26:84:ed:f1:a3:65: 73:db:47:1b:cd:cf:45:eb:fd:36:2b:6c:75:d1:b6:8a:2c:06: d7:46:31:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStqpRO5mLJCrPETPhStSniWlQz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNDExMjQwMTQ1MzhaFw0yNDExMjcwOTMwMzhaMDMxMTAvBgNV BAMTKEUwQTNFREJGNjRDMjQwNTY5QzFEOTI4NDgwQjM3REVFMDgwMERGQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjsJNOoEbb8NGR4Wf3rm/1Ke3r 5mRzL/RjrACZzssXn+T6Eh8r9S/cMhie9VKTEZfIfgyTWL9+vZ0YhUdbKb5Sx8aV 0YypSg+kfcaoqQnno8LbPUECYpbfhbq45TjSOc+ukk6M2mvzNYnyovmN3R7iNtXF teuBfGYlHmqFBOuYtmAzYJ3Fq1/vNHf0EA75USMCUZPFJRdB0LWvrAC+NSIswLQ0 1mwo2wndnpxCSZhEB/W+ptECMDLTzbG3clcoxuuEwrNSfihjYnzWk+sbaia7/hy2 lpAWWhzApi9QpYFmoJOd690+3vodvOn9XNFKoEjWMaqQb/3zDEno1grStVgvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4KPtv2TCQFacHZKEgLN97ggA37kwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwq1iFW2wVgi/0uV5ieesX+d7TOql7xZfpT TRNQuT1vjkISvcGZeN2OTs1cd+R6D1IC5I4A/Oyb8Vi3jrJJMUdWw9TkTFli0MTF O7cDn5Ay4Ms5uYh1jj8vf67Yq/Wh544Gh6nm902+WCZAACPyc5em/3H1hsuDgbHg 5jHQuGOHmRnbGfRjpTamb3jTTTZ8A+vWB+f9p0iOjCPpfEdqKNS6WXA0P9QT45Vk P6hkqyb+PfRPwvFbjx86EmIxnl9XpjnOvVlk40OcqwzhtxWPdKf2hpAL7mAPBRqQ KAOObDKbrIpEXCaE7fGjZXPbRxvNz0Xr/TYrbHXRtoosBtdGMYs= -----END CERTIFICATE-----Generated at Sun Nov 24 03:16:16 2024 by rpki-client on console-ams.rpki-client.org