$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: tawYAo3QWCJmr7PFRIo5g53DtO/Ru7xWBiCK4D7I0Wc= Subject key identifier: C6:B2:85:2D:67:DA:9F:B0:AD:AB:6C:E5:44:62:F1:48:D4:6E:FF:B4 Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 0211C126211D5425DBF59DB61D72210FC45D7C9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: 46 Signing time: Sat 23 Nov 2024 15:01:12 +0000 Manifest this update: Sat 23 Nov 2024 14:56:12 +0000 Manifest next update: Wed 27 Nov 2024 01:30:12 +0000 Files and hashes: 1: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: 0ggAGkCTESTQmediwbon0rJdC0RXMVHdy6Sw5Kl3+ss=) 2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: +7YR+QuAeVk3+sgZlcgzGSfoLo31AJ2VMqC4Rm6spP4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:11:c1:26:21:1d:54:25:db:f5:9d:b6:1d:72:21:0f:c4:5d:7c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Nov 23 14:56:12 2024 GMT Not After : Nov 27 01:30:12 2024 GMT Subject: CN=C6B2852D67DA9FB0ADAB6CE54462F148D46EFFB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:29:10:df:d7:da:99:8b:12:6f:b6:6e:37: a7:87:51:d4:41:f4:f4:fc:4b:ab:16:2d:5a:e3:9b: a1:55:5d:2f:52:b4:b1:cc:a9:f1:f6:10:d7:48:cf: b8:be:9f:5e:97:8c:07:55:12:3d:83:57:8e:b3:7a: 98:6e:38:ff:50:bf:ea:89:58:64:a8:50:cb:99:de: 00:1a:c5:ba:5b:cd:73:b3:b9:76:e6:9c:15:ee:ba: cb:b4:a6:16:7a:05:b3:fa:2c:a2:73:31:4b:02:42: eb:6f:02:26:bf:61:f8:f2:20:bf:27:14:19:c2:7c: 32:d5:fa:e4:c9:66:c6:d9:b4:e0:7a:1e:f4:8c:01: 25:be:b6:25:6b:51:0a:15:7d:e5:6a:85:29:3c:a8: c4:02:10:56:f9:a3:bc:81:a4:ff:23:69:72:3c:63: f0:15:30:fd:a0:f4:97:87:f8:a0:5d:5a:49:28:37: 5b:2d:cf:fe:37:14:56:b8:82:e5:a3:40:8b:24:47: 3a:0e:59:1f:4d:85:20:af:42:21:fe:01:3a:68:d5: f0:eb:4b:e5:e3:ca:ef:17:40:4f:45:a3:d9:29:ea: 4c:fe:ae:78:8a:80:43:da:fb:3f:22:ee:91:61:84: 24:6d:22:e1:ed:9a:bc:94:f9:8b:f9:d3:ca:2a:e6: 5c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B2:85:2D:67:DA:9F:B0:AD:AB:6C:E5:44:62:F1:48:D4:6E:FF:B4 X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4e:e4:89:d3:56:59:8b:3f:c2:a7:5c:ef:7b:5a:33:3b:04: fc:cc:ee:59:f3:90:7c:6c:02:62:74:55:4e:93:e7:a8:ea:a9: 96:cf:e3:0b:36:ac:f9:08:4c:bd:14:dc:1e:2a:b5:2d:5a:ae: 8a:a5:db:1b:e4:bb:06:dc:0e:81:0c:d4:7c:77:e9:40:42:78: 9a:7a:25:61:68:f4:9d:c4:25:77:4a:31:3f:b4:3b:f2:3d:fd: ec:76:97:0a:75:e2:aa:c5:9c:43:bb:fa:f6:3c:04:b8:1b:c9: d9:9c:18:5b:70:4c:8a:36:45:99:0d:e0:4f:f2:ef:02:21:7a: 78:1d:02:09:a1:5e:87:25:2f:c4:f7:01:3b:6b:8a:db:fd:7f: 2f:02:2b:95:3b:8e:2e:d9:00:03:ee:0c:15:a2:70:53:3f:5a: df:55:c3:f8:97:29:90:e2:ed:3a:57:b0:84:6c:fe:2a:67:86: eb:04:2b:96:07:cb:c0:3d:d2:d4:2b:15:f8:2b:04:1f:ea:5f: bd:4b:5c:67:61:45:80:56:07:ea:ea:63:ff:32:c5:a9:15:8d: 67:43:23:6a:78:19:24:6d:2c:2b:9d:2a:00:e0:68:ee:83:1b: ee:f6:e1:8b:5f:18:d7:84:92:1a:02:64:c5:b4:f4:46:49:0d: 68:fa:18:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhHBJiEdVCXb9Z22HXIhD8RdfJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNDExMjMxNDU2MTJaFw0yNDExMjcwMTMwMTJaMDMxMTAvBgNV BAMTKEM2QjI4NTJENjdEQTlGQjBBREFCNkNFNTQ0NjJGMTQ4RDQ2RUZGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdUCkQ39famYsSb7ZuN6eHUdRB 9PT8S6sWLVrjm6FVXS9StLHMqfH2ENdIz7i+n16XjAdVEj2DV46zephuOP9Qv+qJ WGSoUMuZ3gAaxbpbzXOzuXbmnBXuusu0phZ6BbP6LKJzMUsCQutvAia/YfjyIL8n FBnCfDLV+uTJZsbZtOB6HvSMASW+tiVrUQoVfeVqhSk8qMQCEFb5o7yBpP8jaXI8 Y/AVMP2g9JeH+KBdWkkoN1stz/43FFa4guWjQIskRzoOWR9NhSCvQiH+ATpo1fDr S+Xjyu8XQE9Fo9kp6kz+rniKgEPa+z8i7pFhhCRtIuHtmryU+Yv508oq5lyNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxrKFLWfan7Ctq2zlRGLxSNRu/7QwHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZO5InTVlmLP8KnXO97WjM7BPzM7lnzkHxs AmJ0VU6T56jqqZbP4ws2rPkITL0U3B4qtS1aroql2xvkuwbcDoEM1Hx36UBCeJp6 JWFo9J3EJXdKMT+0O/I9/ex2lwp14qrFnEO7+vY8BLgbydmcGFtwTIo2RZkN4E/y 7wIhengdAgmhXoclL8T3ATtritv9fy8CK5U7ji7ZAAPuDBWicFM/Wt9Vw/iXKZDi 7TpXsIRs/ipnhusEK5YHy8A90tQrFfgrBB/qX71LXGdhRYBWB+rqY/8yxakVjWdD I2p4GSRtLCudKgDgaO6DG+724YtfGNeEkhoCZMW09EZJDWj6GB4= -----END CERTIFICATE-----Generated at Sat Nov 23 16:20:59 2024 by rpki-client on console-ams.rpki-client.org