$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: f1/lZ8aOVa0AYmcQVAiVmjLlrv94RcZvN7bNsxI5YCc= Subject key identifier: 51:DA:80:61:99:A1:8D:01:55:0A:9F:EF:A8:51:1D:73:C7:42:F3:2C Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 25EF19DE196AB0D34CEC148205914830D00E4418 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 0415 Signing time: Sun 24 Nov 2024 07:41:31 +0000 Manifest this update: Sun 24 Nov 2024 07:36:31 +0000 Manifest next update: Wed 27 Nov 2024 10:32:31 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: hxrsBhkoonVicYqwdAK2LIl+CmChDbO2q9Xw6efsK9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ef:19:de:19:6a:b0:d3:4c:ec:14:82:05:91:48:30:d0:0e:44:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: Nov 24 07:36:31 2024 GMT Not After : Nov 27 10:32:31 2024 GMT Subject: CN=51DA806199A18D01550A9FEFA8511D73C742F32C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:b9:32:11:fc:5c:5e:9a:51:d0:6f:06:06: 12:dc:9d:e3:37:3d:bc:c7:97:90:69:6b:76:fc:1c: c9:af:24:82:63:cc:f2:64:8c:ea:ae:82:ed:15:79: fd:47:6a:e4:56:be:6f:48:ce:a0:d4:d4:67:ce:48: 35:be:12:38:62:fa:8d:5e:0b:b2:73:92:2b:03:ff: a0:d8:06:8a:a3:7a:ce:7a:57:d1:e5:90:96:46:42: f8:f2:ac:6d:bf:ff:6b:8d:7d:df:9d:c2:f1:a4:c5: f7:a5:73:2b:09:d4:53:db:e0:23:0a:3a:1e:c0:c6: 9d:49:12:6c:dd:f5:4e:01:a0:f1:bb:6b:77:35:d0: 37:c8:43:1a:10:cf:02:81:48:da:cb:59:4d:8b:67: 1c:c4:65:6d:16:4b:be:94:54:d2:75:60:e2:88:b9: e8:68:de:ba:7f:81:0f:d0:f3:b8:ab:14:45:67:99: fd:38:14:3f:c0:85:a9:92:88:f1:bf:72:fd:d5:2b: 63:9b:ff:ee:b4:88:16:84:8c:83:c1:ac:a8:4d:34: 8a:64:c6:63:36:56:0d:b0:ef:35:01:e1:16:0f:03: 29:2a:e4:f0:7f:64:54:20:11:35:59:82:7b:b4:41: 99:93:74:cc:04:25:79:dd:d2:2e:aa:8d:f5:76:7e: 54:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DA:80:61:99:A1:8D:01:55:0A:9F:EF:A8:51:1D:73:C7:42:F3:2C X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fd:09:b7:40:6e:de:8b:b7:53:e9:e1:c4:3e:42:ca:da:c3: 99:f2:e5:ae:01:03:25:de:22:31:c7:25:fb:3c:20:37:3d:d3: e5:47:11:a1:c7:d4:e9:61:29:c7:3e:3a:57:9f:31:cc:ef:10: 4e:63:6f:46:71:e7:db:c1:8c:c9:3c:47:19:b9:6f:b2:99:7a: 02:eb:bd:3d:8d:b7:d1:0c:8d:c8:14:59:a6:04:4a:19:fa:ea: dd:9e:c9:1b:be:9d:4c:f0:3a:e5:40:bd:2d:de:ee:16:28:7d: 3f:78:a1:5f:7a:0d:e2:d4:8e:15:d0:a4:38:26:1e:58:57:31: 08:32:5d:11:23:e2:fb:b3:19:d3:1c:6a:01:be:45:de:60:20: f2:98:98:21:d2:90:87:35:1c:3c:75:ab:8b:86:a0:74:57:71: 2a:8a:52:2f:e7:db:da:cd:1b:ae:40:52:63:08:f4:d1:bf:cd: 86:0f:f5:e5:7b:9f:88:12:81:7f:1d:d7:dc:82:d9:5c:6a:bc: f4:7f:7d:01:c0:09:d2:e8:3d:a8:8b:52:04:16:45:43:9c:26: d4:e9:69:40:9e:ad:0d:ac:cd:1a:1e:26:66:b3:47:89:78:2a: fe:60:95:72:fc:86:35:72:c5:b7:58:cc:13:83:01:48:ce:c7: b2:8f:b8:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJe8Z3hlqsNNM7BSCBZFIMNAORBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNDExMjQwNzM2MzFaFw0yNDExMjcxMDMyMzFaMDMxMTAvBgNV BAMTKDUxREE4MDYxOTlBMThEMDE1NTBBOUZFRkE4NTExRDczQzc0MkYzMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aLkyEfxcXppR0G8GBhLcneM3 PbzHl5Bpa3b8HMmvJIJjzPJkjOqugu0Vef1HauRWvm9IzqDU1GfOSDW+Ejhi+o1e C7JzkisD/6DYBoqjes56V9HlkJZGQvjyrG2//2uNfd+dwvGkxfelcysJ1FPb4CMK Oh7Axp1JEmzd9U4BoPG7a3c10DfIQxoQzwKBSNrLWU2LZxzEZW0WS76UVNJ1YOKI ueho3rp/gQ/Q87irFEVnmf04FD/AhamSiPG/cv3VK2Ob/+60iBaEjIPBrKhNNIpk xmM2Vg2w7zUB4RYPAykq5PB/ZFQgETVZgnu0QZmTdMwEJXnd0i6qjfV2flTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUdqAYZmhjQFVCp/vqFEdc8dC8ywwHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/9CbdAbt6Lt1Pp4cQ+Qsraw5ny5a4BAyXe IjHHJfs8IDc90+VHEaHH1OlhKcc+OlefMczvEE5jb0Zx59vBjMk8Rxm5b7KZegLr vT2Nt9EMjcgUWaYEShn66t2eyRu+nUzwOuVAvS3e7hYofT94oV96DeLUjhXQpDgm HlhXMQgyXREj4vuzGdMcagG+Rd5gIPKYmCHSkIc1HDx1q4uGoHRXcSqKUi/n29rN G65AUmMI9NG/zYYP9eV7n4gSgX8d19yC2VxqvPR/fQHACdLoPaiLUgQWRUOcJtTp aUCerQ2szRoeJmazR4l4Kv5glXL8hjVyxbdYzBODAUjOx7KPuOM= -----END CERTIFICATE-----Generated at Sun Nov 24 09:08:48 2024 by rpki-client on console-fra.rpki-client.org