$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: fLLLpcVib6ZDvW0nNIrv3aYj2mk6dRlltIcei/+S1gs= Subject key identifier: 69:34:80:C6:E7:34:96:8D:1A:B0:F8:57:EE:FB:7D:0C:68:75:B1:D6 Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 42A3FDEA9489F61C7EF0E650BFDCA06F9A99BF4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 011A Signing time: Sun 24 Nov 2024 13:31:15 +0000 Manifest this update: Sun 24 Nov 2024 13:26:15 +0000 Manifest next update: Wed 27 Nov 2024 19:24:15 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: viF/2bihLkzo9qaSwKzYa3aNH5eaAWuCtz8yfjFKXc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a3:fd:ea:94:89:f6:1c:7e:f0:e6:50:bf:dc:a0:6f:9a:99:bf:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Nov 24 13:26:15 2024 GMT Not After : Nov 27 19:24:15 2024 GMT Subject: CN=693480C6E734968D1AB0F857EEFB7D0C6875B1D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:b6:09:6d:5b:7f:a1:d9:13:6a:6a:20:90: 1e:42:3b:1b:c0:30:f4:e1:3c:b4:ba:64:4b:ad:0b: 92:d4:5c:9a:20:71:43:15:b9:07:2e:ab:50:34:0d: 08:31:66:02:30:29:ac:9f:63:3f:53:53:cf:ee:70: f4:20:8a:58:64:9a:9a:4e:02:b5:c5:01:dd:d9:0c: e8:68:a1:5e:90:89:96:d6:97:ea:6d:ff:58:12:c7: 76:e6:e7:6f:2e:a1:13:1a:d4:65:b1:27:63:c7:0a: b1:2c:db:50:5b:eb:b7:7c:74:81:a7:8f:32:2c:bf: 93:10:75:39:71:a4:8c:00:03:4f:a5:6c:f4:dc:04: 57:de:82:e9:0b:8e:3c:91:fb:af:d7:be:44:0b:dd: cc:2e:47:27:df:d2:a5:18:b8:60:51:7b:a8:ad:85: c0:df:71:ff:d9:5b:c8:4c:70:38:df:7d:4c:8a:e4: cd:46:02:d7:a5:95:3e:ec:9d:19:ef:31:b3:d6:ba: 62:36:4b:31:dc:09:e8:ca:8d:76:1c:f5:58:3c:b0: 95:e1:a3:5d:ef:9e:57:fc:89:30:c7:66:c7:93:a2: 7f:b2:f0:d9:7e:18:ee:64:ae:14:c4:cf:8e:ee:8c: 44:e1:46:e0:2f:ec:45:f8:96:3e:35:88:0f:a5:aa: 1d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:34:80:C6:E7:34:96:8D:1A:B0:F8:57:EE:FB:7D:0C:68:75:B1:D6 X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:17:fd:4b:2b:a3:cd:a9:cd:af:d1:2f:67:ef:df:bf:d7:8e: f1:97:83:d7:69:79:a1:27:c2:f6:d9:0a:f2:fd:3b:69:d9:89: 8e:33:be:1e:d1:cd:a9:2a:2c:c5:ce:bd:15:19:04:c3:5a:96: e5:f5:71:42:c2:d6:7d:63:f4:e4:bf:17:27:75:03:aa:16:01: d8:87:13:c8:47:1e:1c:96:4e:c4:02:e3:68:95:df:8d:4e:13: be:87:4d:4c:43:97:d0:00:0e:dc:45:2b:20:df:7f:41:93:e4: a6:de:2b:18:65:5d:4b:e7:57:a1:32:bc:33:b9:e9:d1:fd:d3: 05:bc:b5:64:37:07:1a:92:4b:1c:00:23:1f:ae:db:fc:cf:53: ff:05:dd:7a:79:92:c4:21:c6:21:20:8f:8d:9b:35:22:3f:e2: 0c:7e:a4:69:4b:da:a1:bd:08:bd:ba:30:f1:db:75:b2:e1:5f: c7:c8:68:1b:02:f5:82:17:c6:1d:07:50:c0:b2:6e:9d:e0:5e: 61:4f:32:db:0a:18:14:c1:53:e4:2d:06:d3:e3:aa:2f:07:97: 47:4b:34:7a:28:f2:0e:3c:42:14:ec:1b:c4:bd:6e:69:15:7e: 73:85:79:5c:b5:cd:32:89:5a:ef:d4:dd:2a:41:bf:aa:f5:57: 66:d4:81:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqP96pSJ9hx+8OZQv9ygb5qZv0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNDExMjQxMzI2MTVaFw0yNDExMjcxOTI0MTVaMDMxMTAvBgNV BAMTKDY5MzQ4MEM2RTczNDk2OEQxQUIwRjg1N0VFRkI3RDBDNjg3NUIxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzc7YJbVt/odkTamogkB5COxvA MPThPLS6ZEutC5LUXJogcUMVuQcuq1A0DQgxZgIwKayfYz9TU8/ucPQgilhkmppO ArXFAd3ZDOhooV6QiZbWl+pt/1gSx3bm528uoRMa1GWxJ2PHCrEs21Bb67d8dIGn jzIsv5MQdTlxpIwAA0+lbPTcBFfegukLjjyR+6/XvkQL3cwuRyff0qUYuGBRe6it hcDfcf/ZW8hMcDjffUyK5M1GAtellT7snRnvMbPWumI2SzHcCejKjXYc9Vg8sJXh o13vnlf8iTDHZseTon+y8Nl+GO5krhTEz47ujEThRuAv7EX4lj41iA+lqh3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTSAxuc0lo0asPhX7vt9DGh1sdYwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4X/Usro82pza/RL2fv37/XjvGXg9dpeaEn wvbZCvL9O2nZiY4zvh7RzakqLMXOvRUZBMNaluX1cULC1n1j9OS/Fyd1A6oWAdiH E8hHHhyWTsQC42iV341OE76HTUxDl9AADtxFKyDff0GT5KbeKxhlXUvnV6EyvDO5 6dH90wW8tWQ3BxqSSxwAIx+u2/zPU/8F3Xp5ksQhxiEgj42bNSI/4gx+pGlL2qG9 CL26MPHbdbLhX8fIaBsC9YIXxh0HUMCybp3gXmFPMtsKGBTBU+QtBtPjqi8Hl0dL NHoo8g48QhTsG8S9bmkVfnOFeVy1zTKJWu/U3SpBv6r1V2bUgZ4= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org