$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: iuPoO7etZpvC6HYtey9lxwNDOsMhv13zWdmIioL3YCw= Subject key identifier: 66:72:7F:B5:A9:C5:B3:DB:DC:55:E1:B3:3C:E6:CA:0E:6D:E1:4F:57 Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 1AAD87B6CB29075FF601854273187FA00E155B73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: 59 Signing time: Fri 22 Nov 2024 18:31:06 +0000 Manifest this update: Fri 22 Nov 2024 18:26:06 +0000 Manifest next update: Mon 25 Nov 2024 23:07:06 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: 9lUWJeHv26gn/bV6OpFvcFaa3kTqPysShw9oTrSWVrI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ad:87:b6:cb:29:07:5f:f6:01:85:42:73:18:7f:a0:0e:15:5b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Nov 22 18:26:06 2024 GMT Not After : Nov 25 23:07:06 2024 GMT Subject: CN=66727FB5A9C5B3DBDC55E1B33CE6CA0E6DE14F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:36:07:86:12:d5:5d:1d:a8:57:29:0f:d3: 78:a4:92:00:08:c7:27:27:71:91:15:02:c2:a7:57: 30:4f:da:db:88:9f:18:d0:d9:fb:2a:b5:13:24:37: a1:24:f2:6a:1a:f0:57:35:4b:8b:e2:36:6f:08:b3: 9e:ea:c6:46:5b:a4:4e:3d:71:7a:83:51:e0:02:80: 04:6d:0d:fa:b7:95:0d:46:c8:d6:8b:19:3d:b0:0b: 61:eb:85:f6:a9:8b:81:9c:33:35:bd:53:82:13:f4: d3:43:57:40:bc:0f:07:0f:60:85:18:8c:90:0b:4a: aa:f8:38:30:89:60:99:86:6e:5f:79:61:7f:fa:65: 6e:4b:e6:34:99:77:06:40:c6:e5:c2:ef:17:c6:86: 44:6f:68:f2:d3:ad:ae:30:ac:ba:6d:4c:88:e1:b4: 88:ae:89:e7:2f:29:17:70:9a:b4:4e:7f:ea:81:8b: 2c:38:a3:09:3d:18:3f:d0:7f:77:dc:d7:c9:41:22: c9:0c:d7:a6:6b:79:b9:dc:bf:aa:4e:40:a7:9e:2b: ce:c6:16:e1:88:cc:d3:51:94:9e:d3:5c:dc:a1:9d: 88:7f:0d:b1:42:a4:19:0f:33:4f:66:92:ab:b4:aa: 38:5c:37:d5:27:c9:fe:79:a0:73:fa:5a:67:72:0c: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:72:7F:B5:A9:C5:B3:DB:DC:55:E1:B3:3C:E6:CA:0E:6D:E1:4F:57 X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9b:f6:a5:f4:28:f3:6f:49:43:0e:27:4e:bb:ed:5b:aa:17: 11:ee:d4:79:db:dd:f7:87:93:b9:a6:66:33:29:fa:2f:6b:cb: c7:96:87:27:94:df:9b:58:93:2f:cb:a0:d9:51:97:94:0e:97: b4:8e:f8:35:c9:80:29:3e:93:96:47:60:71:b8:47:19:85:3c: e6:a5:00:bb:ab:93:0f:dd:16:c9:bc:21:f1:7e:71:83:47:5d: 1b:87:df:83:00:e2:54:53:b9:6a:62:a3:db:bd:94:0e:6a:69: ab:71:a6:bf:19:1c:39:2f:2c:cc:06:01:a7:89:07:9b:93:b5: 45:be:7d:96:a7:ce:bc:5a:6f:b3:c7:36:dc:d2:09:ea:3d:29: 4e:11:02:52:54:6e:07:40:e4:5c:a1:53:26:64:18:fe:0c:4c: a3:d2:6f:be:de:4a:a2:bf:d2:14:fe:36:aa:06:43:6f:d1:6c: 8a:fd:f0:a7:87:76:a0:77:44:4e:3c:df:e8:11:79:80:6b:e8: 53:49:5e:90:c0:67:fe:96:55:60:43:79:82:75:68:ca:bb:46: 2b:52:4e:b3:81:be:2d:7c:97:21:96:0a:60:9e:73:c1:48:6e: 34:29:6c:86:0a:9d:e9:cd:0a:58:b6:7a:82:8f:0a:65:ce:26: fb:39:06:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGq2HtsspB1/2AYVCcxh/oA4VW3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNDExMjIxODI2MDZaFw0yNDExMjUyMzA3MDZaMDMxMTAvBgNV BAMTKDY2NzI3RkI1QTlDNUIzREJEQzU1RTFCMzNDRTZDQTBFNkRFMTRGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJDYHhhLVXR2oVykP03ikkgAI xycncZEVAsKnVzBP2tuInxjQ2fsqtRMkN6Ek8moa8Fc1S4viNm8Is57qxkZbpE49 cXqDUeACgARtDfq3lQ1GyNaLGT2wC2Hrhfapi4GcMzW9U4IT9NNDV0C8DwcPYIUY jJALSqr4ODCJYJmGbl95YX/6ZW5L5jSZdwZAxuXC7xfGhkRvaPLTra4wrLptTIjh tIiuiecvKRdwmrROf+qBiyw4owk9GD/Qf3fc18lBIskM16Zrebncv6pOQKeeK87G FuGIzNNRlJ7TXNyhnYh/DbFCpBkPM09mkqu0qjhcN9Unyf55oHP6WmdyDNdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZnJ/tanFs9vcVeGzPObKDm3hT1cwHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeb9qX0KPNvSUMOJ0677VuqFxHu1Hnb3feH k7mmZjMp+i9ry8eWhyeU35tYky/LoNlRl5QOl7SO+DXJgCk+k5ZHYHG4RxmFPOal ALurkw/dFsm8IfF+cYNHXRuH34MA4lRTuWpio9u9lA5qaatxpr8ZHDkvLMwGAaeJ B5uTtUW+fZanzrxab7PHNtzSCeo9KU4RAlJUbgdA5FyhUyZkGP4MTKPSb77eSqK/ 0hT+NqoGQ2/RbIr98KeHdqB3RE483+gReYBr6FNJXpDAZ/6WVWBDeYJ1aMq7RitS TrOBvi18lyGWCmCec8FIbjQpbIYKnenNCli2eoKPCmXOJvs5Bic= -----END CERTIFICATE-----Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org