$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft File: DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json) Hash identifier: QJhIufcjQh5f6t6cpWg/e+Wm6rRQKK0k7xgfrg5ZL5c= Subject key identifier: AE:9F:B9:4C:11:72:9C:47:E1:E9:09:8C:7F:FD:36:93:A7:21:0A:B8 Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 Certificate issuer: /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Certificate serial: 09BE57F5A648B060ABDA5C276E4E9C54556BD1F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft Manifest number: 0482 Signing time: Wed 20 Nov 2024 16:01:54 +0000 Manifest this update: Wed 20 Nov 2024 15:56:54 +0000 Manifest next update: Sun 24 Nov 2024 03:16:54 +0000 Files and hashes: 1: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: 8mQYzB1g0N9/kAIrWX3si1LgH6siHpQM/MErsP7sMDw=) 2: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: ZCH3XXiTrQMOGAjRhT39z3F568gOjmz+EgX36Ate/V4=) 3: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: eSgwREqiukx+Bu24MhQ7q7tE/ZpQO4wOn+TtzTJ1FTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:be:57:f5:a6:48:b0:60:ab:da:5c:27:6e:4e:9c:54:55:6b:d1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Validity Not Before: Nov 20 15:56:54 2024 GMT Not After : Nov 24 03:16:54 2024 GMT Subject: CN=AE9FB94C11729C47E1E9098C7FFD3693A7210AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4c:39:58:0c:10:18:d4:2d:e8:2a:52:e5:0e: 54:00:d1:3e:62:f0:d0:0f:23:eb:2c:a7:d4:f7:12: bc:12:c5:0f:68:60:95:ba:ed:fd:32:69:6b:93:22: 6d:f2:13:c2:4c:be:97:6b:8e:ca:bf:5d:b3:c9:25: 11:26:f0:de:cb:c9:77:07:dd:da:b2:d9:0f:70:f0: 6c:60:7f:b3:81:ce:8a:8a:59:ba:6d:bc:52:07:1f: 86:5f:8e:43:22:a2:31:3f:52:38:1f:fb:9e:3c:6b: 64:67:b0:6b:89:3f:ef:d7:1d:72:9b:39:50:c4:c6: 44:74:22:dc:17:6f:32:36:d0:be:09:36:8f:69:0d: 24:de:c2:90:3f:e6:64:74:d7:85:38:5e:83:b5:6b: f4:a7:86:00:04:fe:7b:c0:c2:cc:de:4f:b6:b0:3c: b5:b1:51:db:9a:a4:31:9e:5e:a2:a8:7b:c4:26:6f: 1f:9d:fd:49:45:e7:34:1c:ac:34:7e:d5:4c:8b:66: d2:b9:1a:b9:1e:db:68:9e:26:40:52:44:23:c7:f3: cb:d7:29:ba:34:fb:06:fa:cf:7a:00:96:de:13:c3: a5:2a:fc:c4:27:88:cc:fe:10:4a:cf:63:1b:30:27: 5e:97:6c:68:b9:8b:7e:92:fc:27:77:44:ab:ec:ab: 60:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9F:B9:4C:11:72:9C:47:E1:E9:09:8C:7F:FD:36:93:A7:21:0A:B8 X509v3 Authority Key Identifier: keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ea:af:a7:4e:f6:33:7f:c2:8a:d1:17:49:47:37:a5:b4:a1: 64:ee:54:bd:32:cc:4a:a7:16:4d:cb:f9:a1:4e:85:46:9d:d3: 3f:92:8e:8f:e0:4c:47:4d:33:dd:f3:5e:dc:1d:a0:44:b3:4a: a7:db:40:7d:dc:a9:e2:d0:78:8f:ce:fb:6a:b5:d7:ee:3a:42: 29:54:c1:4b:0b:87:dd:58:b4:ea:18:e8:98:2a:59:9b:18:25: fa:c8:f5:75:8b:30:bc:ca:c5:2a:19:bb:c9:43:60:5e:c4:dc: f5:bc:a8:f2:bd:17:31:2a:e4:32:e6:67:be:8b:b8:00:99:d1: 7b:45:ac:33:53:7b:e4:77:1d:16:82:85:4c:71:57:69:f6:3a: ca:7c:1f:fb:09:c6:a6:78:b1:62:5f:9f:79:6e:5e:ee:c7:c0: e4:b7:49:87:91:76:2d:d7:93:4c:2c:cc:3d:ac:58:0a:00:ba: 1a:fc:e4:00:04:4c:d6:9b:b5:95:af:f6:c6:1a:83:d6:67:84: 9f:91:af:80:c7:53:f8:9b:bc:2c:e7:5f:c6:f0:f6:d4:b8:c1: 63:9a:23:f2:91:71:5e:bb:b7:f4:75:2e:52:26:ed:87:e9:9e: c7:90:2a:e7:a5:d5:15:63:26:8c:01:c3:cb:71:8c:47:42:ca: 80:7d:b1:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCb5X9aZIsGCr2lwnbk6cVFVr0fcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBD MUIwRjkxNTAeFw0yNDExMjAxNTU2NTRaFw0yNDExMjQwMzE2NTRaMDMxMTAvBgNV BAMTKEFFOUZCOTRDMTE3MjlDNDdFMUU5MDk4QzdGRkQzNjkzQTcyMTBBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTDlYDBAY1C3oKlLlDlQA0T5i 8NAPI+ssp9T3ErwSxQ9oYJW67f0yaWuTIm3yE8JMvpdrjsq/XbPJJREm8N7LyXcH 3dqy2Q9w8Gxgf7OBzoqKWbptvFIHH4ZfjkMiojE/Ujgf+548a2RnsGuJP+/XHXKb OVDExkR0ItwXbzI20L4JNo9pDSTewpA/5mR014U4XoO1a/SnhgAE/nvAwszeT7aw PLWxUduapDGeXqKoe8Qmbx+d/UlF5zQcrDR+1UyLZtK5Grke22ieJkBSRCPH88vX Kbo0+wb6z3oAlt4Tw6Uq/MQniMz+EErPYxswJ16XbGi5i36S/Cd3RKvsq2C1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrp+5TBFynEfh6QmMf/02k6chCrgwHwYDVR0j BBgwFoAU3ICGACKk1dFNt4CCuscF4MGw+RUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjA3YjM3Yy0wNTA3LTQ5MTMtODMyOS0zZjE2MWI2YWZmNTYvMC9EQzgwODYwMDIy QTRENUQxNERCNzgwODJCQUM3MDVFMEMxQjBGOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBDMUIw RjkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1 RTBDMUIwRjkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnqr6dO9jN/worRF0lHN6W0oWTuVL0yzEqn Fk3L+aFOhUad0z+Sjo/gTEdNM93zXtwdoESzSqfbQH3cqeLQeI/O+2q11+46QilU wUsLh91YtOoY6JgqWZsYJfrI9XWLMLzKxSoZu8lDYF7E3PW8qPK9FzEq5DLmZ76L uACZ0XtFrDNTe+R3HRaChUxxV2n2Osp8H/sJxqZ4sWJfn3luXu7HwOS3SYeRdi3X k0wszD2sWAoAuhr85AAETNabtZWv9sYag9ZnhJ+Rr4DHU/ibvCznX8bw9tS4wWOa I/KRcV67t/R1LlIm7YfpnseQKuel1RVjJowBw8txjEdCyoB9sdc= -----END CERTIFICATE-----Generated at Wed Nov 20 18:59:47 2024 by rpki-client on console-ams.rpki-client.org