$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: lAsLYaxdH0qmu7P1dYbmUVAkn5m0XpVsIIC/5RYwNFw= Subject key identifier: F9:AD:61:55:B9:C9:63:CF:18:02:89:5C:EF:64:BB:42:E6:56:A2:3C Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 0428470C464806AA3B58F59D0EFBCAC1F5C30ED9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: DB Signing time: Mon 25 Nov 2024 06:00:51 +0000 Manifest this update: Mon 25 Nov 2024 05:55:51 +0000 Manifest next update: Thu 28 Nov 2024 06:55:51 +0000 Files and hashes: 1: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: rgZhMMMnE/8X/ajx3/StMU1scrnbaZrzmmCgG9/im6M=) 2: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: 1cDD60STcZ4Y47APVGWoxuIQa9L+B9gWJ3e6wOL8H70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 06:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:28:47:0c:46:48:06:aa:3b:58:f5:9d:0e:fb:ca:c1:f5:c3:0e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Nov 25 05:55:51 2024 GMT Not After : Nov 28 06:55:51 2024 GMT Subject: CN=F9AD6155B9C963CF1802895CEF64BB42E656A23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:4b:df:0b:df:39:df:16:fd:e6:60:ac:ce: a1:59:d1:22:07:3c:e8:a1:0a:ee:78:3b:ca:34:fd: 5b:1a:ee:8b:b7:3c:d4:f4:84:81:3d:be:49:0e:ca: f7:25:2a:b0:bc:4f:1e:5c:04:9c:09:84:e7:5d:1a: 6f:c3:93:2b:de:93:fc:3e:6f:75:40:95:8c:e4:7d: 74:80:68:ba:47:db:98:d7:76:a4:2e:95:cb:34:ec: a3:90:58:f5:da:0a:a9:51:10:c7:c3:26:4d:5f:04: d7:82:85:5a:86:a7:38:9e:9b:fb:16:81:95:41:44: b4:2e:0e:2b:a4:87:d3:bf:85:51:d6:64:dd:e3:7c: b3:09:81:ef:ce:9e:38:a0:a7:ce:01:ae:66:58:8a: 90:0a:09:6a:63:c2:86:85:cd:89:b2:02:5b:42:5f: a4:b8:da:e3:8e:f4:0e:d5:45:9e:3b:75:a7:62:4a: b3:e8:bc:11:54:3b:43:98:3f:a7:15:6c:56:e9:28: 75:98:39:fd:61:79:57:b5:06:9f:dc:b1:db:f0:ed: b1:05:31:9b:3d:5e:1c:25:29:25:1a:14:4d:f7:4f: 47:00:d4:d2:6e:38:8e:ab:ed:95:4e:cb:d7:ee:f7: 5f:0d:4c:be:83:b5:72:cb:d1:71:c5:b6:ff:e8:91: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AD:61:55:B9:C9:63:CF:18:02:89:5C:EF:64:BB:42:E6:56:A2:3C X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:cf:e0:a6:22:ba:18:e8:71:46:b4:b2:d1:df:99:1f:cd:25: b8:b8:74:58:6b:c9:7e:c0:ae:7a:df:ad:62:b3:a2:40:b7:f8: 52:be:32:80:5a:ee:03:18:9d:9e:1c:40:b7:b3:53:c4:d8:a8: c3:96:50:28:f7:fe:49:8f:35:3b:e0:9a:6f:4c:9a:d8:87:e2: 55:c2:f4:7a:ef:88:ef:be:ce:c2:0b:06:18:af:4b:f5:bc:8b: ee:e3:36:a5:04:11:91:fe:9c:ea:7a:8d:c3:36:42:06:0c:92: f0:f4:b1:0d:b0:96:c7:cb:65:55:d7:a2:f1:99:7c:2a:5d:45: 1e:9f:7e:19:ba:06:84:f1:d2:41:1e:e9:77:3e:f9:47:73:03: f7:ac:72:d5:e0:95:3c:7f:33:4c:ff:55:0b:f1:a4:0c:c1:45: c6:b7:6f:4f:99:7b:b9:3c:d0:15:7e:83:13:72:ae:58:a8:49: 7b:51:6e:0b:66:7c:cd:52:63:26:01:f1:80:cb:ae:33:e6:f7: e9:0a:ef:c3:7d:44:76:35:73:44:2a:6e:ac:02:b5:0e:87:37: be:74:2f:76:fd:7d:76:ad:59:64:7e:f1:0b:22:d2:7e:c9:3d: 24:22:00:7f:12:2d:5d:d5:6e:8b:ce:28:f2:fa:c8:cf:72:c8: 93:a0:a7:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBChHDEZIBqo7WPWdDvvKwfXDDtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNDExMjUwNTU1NTFaFw0yNDExMjgwNjU1NTFaMDMxMTAvBgNV BAMTKEY5QUQ2MTU1QjlDOTYzQ0YxODAyODk1Q0VGNjRCQjQyRTY1NkEyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlUvfC9853xb95mCszqFZ0SIH POihCu54O8o0/Vsa7ou3PNT0hIE9vkkOyvclKrC8Tx5cBJwJhOddGm/Dkyvek/w+ b3VAlYzkfXSAaLpH25jXdqQulcs07KOQWPXaCqlREMfDJk1fBNeChVqGpziem/sW gZVBRLQuDiukh9O/hVHWZN3jfLMJge/Onjigp84BrmZYipAKCWpjwoaFzYmyAltC X6S42uOO9A7VRZ47dadiSrPovBFUO0OYP6cVbFbpKHWYOf1heVe1Bp/csdvw7bEF MZs9XhwlKSUaFE33T0cA1NJuOI6r7ZVOy9fu918NTL6DtXLL0XHFtv/okYGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+a1hVbnJY88YAolc72S7QuZWojwwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANPP4KYiuhjocUa0stHfmR/NJbi4dFhryX7A rnrfrWKzokC3+FK+MoBa7gMYnZ4cQLezU8TYqMOWUCj3/kmPNTvgmm9MmtiH4lXC 9HrviO++zsILBhivS/W8i+7jNqUEEZH+nOp6jcM2QgYMkvD0sQ2wlsfLZVXXovGZ fCpdRR6ffhm6BoTx0kEe6Xc++UdzA/esctXglTx/M0z/VQvxpAzBRca3b0+Ze7k8 0BV+gxNyrlioSXtRbgtmfM1SYyYB8YDLrjPm9+kK78N9RHY1c0QqbqwCtQ6HN750 L3b9fXatWWR+8Qsi0n7JPSQiAH8SLV3VbovOKPL6yM9yyJOgp3s= -----END CERTIFICATE-----Generated at Mon Nov 25 07:18:32 2024 by rpki-client on console-ams.rpki-client.org