$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft File: 6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json) Hash identifier: HSYkDQ55U8bnBZbL5TdIr3DjE2h8pm59oK8D1/AqOx4= Subject key identifier: D2:9B:3B:60:F4:ED:96:6D:35:35:69:75:B3:72:F1:C8:02:C3:56:96 Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374 Certificate serial: 578588888B77C52BD1B02D071F4A96D5A7B2CAC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft Manifest number: 4A Signing time: Mon 25 Nov 2024 03:01:27 +0000 Manifest this update: Mon 25 Nov 2024 02:56:27 +0000 Manifest next update: Thu 28 Nov 2024 09:27:27 +0000 Files and hashes: 1: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: KWLU19AZaz4e6LTPJIxROZcUbirqm8JIOUzTkTJb174=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: uR53pbwW9P8hqVOeVN0hgPpqYO4PeD2g8LQ/VFiv7kA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 08:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:85:88:88:8b:77:c5:2b:d1:b0:2d:07:1f:4a:96:d5:a7:b2:ca:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374 Validity Not Before: Nov 25 02:56:27 2024 GMT Not After : Nov 28 09:27:27 2024 GMT Subject: CN=D29B3B60F4ED966D35356975B372F1C802C35696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9d:70:88:81:81:ab:57:11:bc:e6:f5:6f:01: a7:f4:b7:e2:79:df:75:74:13:0b:3e:02:6a:8d:bc: ae:9c:48:1a:69:22:4a:83:1a:81:11:87:1b:7f:f1: 44:f9:6e:3f:d9:e7:b8:16:f0:8b:21:13:78:3c:71: 10:8d:b2:71:4a:1d:d9:99:59:31:9a:ad:a2:47:fb: 9a:db:2d:27:d3:2c:56:a6:51:b3:6b:7c:b8:6b:09: 1a:32:00:f2:08:a3:7e:ae:e5:1e:1e:d5:de:4c:9f: 1b:e8:4e:ce:f9:63:2c:1d:fe:3e:44:ba:0d:a8:b0: f2:95:c9:2d:6a:f3:d8:f6:6e:37:ec:39:89:78:d3: 54:91:9b:04:71:cc:37:a5:14:0e:51:93:aa:a9:ca: 7a:d6:94:6a:16:ed:5a:cf:ae:f9:79:dd:d4:0b:f2: ab:b7:a7:b1:30:12:97:6f:18:df:f7:bf:24:e2:5c: ea:a6:84:d2:87:ac:40:cb:01:30:83:bf:3d:b1:20: 13:cb:b7:46:af:fd:b4:b9:ed:5a:d7:8c:7a:1b:03: 5c:9c:99:ef:55:ed:a5:33:3f:ef:76:fa:80:ea:71: 8e:b3:6b:50:41:b1:0e:48:2d:43:24:9c:96:cf:e8: 4d:81:b6:17:4d:32:98:13:cd:04:c1:3d:c0:97:1a: 5f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9B:3B:60:F4:ED:96:6D:35:35:69:75:B3:72:F1:C8:02:C3:56:96 X509v3 Authority Key Identifier: keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:33:46:eb:49:ae:53:83:35:5e:8b:f9:95:e4:62:cf:0e:03: 50:f3:57:3a:12:fb:90:22:21:3a:5a:7d:a0:24:8b:e3:92:cb: 39:d9:fb:e8:76:a6:fa:fa:9f:86:44:cc:c6:78:e6:83:7d:f4: 5f:67:d1:21:56:c2:a4:16:7a:bb:85:b1:1c:d7:a5:29:13:ec: 66:69:dc:df:00:41:21:60:6b:59:ad:10:83:2c:5a:ff:68:56: 3f:64:ac:20:6c:ea:87:0e:30:a0:6b:95:51:0a:a2:81:ed:f3: 2f:d9:fb:e0:c8:fb:c4:5f:db:f7:8e:74:5a:79:c4:1d:f8:06: 8a:6e:d7:83:e7:2c:0c:31:6c:6c:f4:b5:fe:70:3a:d0:43:53: fa:16:b5:33:b6:2b:df:fd:db:f8:42:ae:77:38:27:2a:58:65: 66:6c:01:f6:a5:bb:fb:1d:a3:63:85:06:c2:c2:60:b9:f3:ae: b6:b0:cc:00:60:da:19:e0:6e:ed:1e:b3:2d:d8:8e:ab:f3:ea: e1:50:2a:8a:65:c6:16:a8:ff:14:74:b0:5b:a5:1b:3c:66:1e: 5e:ff:8d:c4:bf:14:d3:ab:e5:6a:8f:26:33:a5:9e:93:63:fb: 4e:0b:60:c3:ad:82:ec:a4:09:f3:a3:6f:63:bf:6b:61:8f:91: d1:eb:fc:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV4WIiIt3xSvRsC0HH0qW1aeyyscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0 QTQzMTM3NDAeFw0yNDExMjUwMjU2MjdaFw0yNDExMjgwOTI3MjdaMDMxMTAvBgNV BAMTKEQyOUIzQjYwRjRFRDk2NkQzNTM1Njk3NUIzNzJGMUM4MDJDMzU2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrnXCIgYGrVxG85vVvAaf0t+J5 33V0Ews+AmqNvK6cSBppIkqDGoERhxt/8UT5bj/Z57gW8IshE3g8cRCNsnFKHdmZ WTGaraJH+5rbLSfTLFamUbNrfLhrCRoyAPIIo36u5R4e1d5MnxvoTs75Yywd/j5E ug2osPKVyS1q89j2bjfsOYl401SRmwRxzDelFA5Rk6qpynrWlGoW7VrPrvl53dQL 8qu3p7EwEpdvGN/3vyTiXOqmhNKHrEDLATCDvz2xIBPLt0av/bS57VrXjHobA1yc me9V7aUzP+92+oDqcY6za1BBsQ5ILUMknJbP6E2BthdNMpgTzQTBPcCXGl8DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ps7YPTtlm01NWl1s3LxyALDVpYwHwYDVR0j BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz MTM3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2 Qjc0QTQzMTM3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4zRutJrlODNV6L+ZXkYs8OA1DzVzoS+5Ai ITpafaAki+OSyznZ++h2pvr6n4ZEzMZ45oN99F9n0SFWwqQWeruFsRzXpSkT7GZp 3N8AQSFga1mtEIMsWv9oVj9krCBs6ocOMKBrlVEKooHt8y/Z++DI+8Rf2/eOdFp5 xB34Bopu14PnLAwxbGz0tf5wOtBDU/oWtTO2K9/92/hCrnc4JypYZWZsAfalu/sd o2OFBsLCYLnzrrawzABg2hngbu0esy3Yjqvz6uFQKoplxhao/xR0sFulGzxmHl7/ jcS/FNOr5WqPJjOlnpNj+04LYMOtguykCfOjb2O/a2GPkdHr/G0= -----END CERTIFICATE-----Generated at Mon Nov 25 04:52:35 2024 by rpki-client on console-fra.rpki-client.org