$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: KVXbX3Kvq6ANm8fUb5Ng78LDelBup5lK2u7qV29zkbw= Subject key identifier: 50:EB:47:97:58:47:C5:C5:24:DA:6A:02:DF:2D:ED:DA:B1:15:F0:4A Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 244BF5606631081473B867D3CC4917737CE54D33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0198 Signing time: Sat 23 Nov 2024 16:41:50 +0000 Manifest this update: Sat 23 Nov 2024 16:36:50 +0000 Manifest next update: Tue 26 Nov 2024 21:43:50 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: a4La5KIk+IEM0QPVM3enKd+GKx6nOsh2r5/M8neklko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4b:f5:60:66:31:08:14:73:b8:67:d3:cc:49:17:73:7c:e5:4d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Nov 23 16:36:50 2024 GMT Not After : Nov 26 21:43:50 2024 GMT Subject: CN=50EB47975847C5C524DA6A02DF2DEDDAB115F04A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4e:19:40:c4:f0:0c:1c:b9:0e:0e:a2:1f:40: 86:b1:4b:b5:1d:f4:48:24:d2:00:da:4c:09:88:ba: fa:bb:1c:72:5a:81:d2:9a:e7:02:54:c0:7a:4e:c1: a6:8a:06:da:ff:66:ac:50:7b:0f:16:1c:e3:e0:24: d4:08:5e:f0:a8:9d:db:18:2d:3b:e8:7b:6a:d9:6f: d6:b4:04:e9:45:d0:fb:5b:86:81:e1:04:62:8d:4d: ca:ac:be:0c:cd:5f:c2:9b:77:77:98:db:a8:7a:6a: 3f:35:24:62:5e:bf:14:36:f5:43:5c:f6:8f:e5:a8: 53:65:db:32:92:16:d1:65:01:16:dc:2f:f5:16:92: 81:43:21:db:f5:2b:37:6b:46:13:c7:fb:14:fc:16: 93:45:7d:0f:67:cf:a5:7e:71:fe:45:b4:fa:c5:cf: 82:c1:b3:18:51:29:d3:ed:17:e1:e5:f6:ad:1e:47: ad:9d:56:7d:fd:06:dc:fa:37:ad:aa:8f:40:44:df: d6:8e:31:78:01:4d:2b:22:9f:32:d6:67:c2:de:cc: d0:cd:e7:11:0f:6c:cd:ef:74:13:59:24:4d:10:64: 48:3d:fd:20:c3:6e:5f:22:6e:ad:bb:c9:7a:45:79: 2a:a6:c0:e0:40:54:97:b0:97:80:08:35:62:f9:1b: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EB:47:97:58:47:C5:C5:24:DA:6A:02:DF:2D:ED:DA:B1:15:F0:4A X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f8:32:12:e0:35:3a:52:4f:08:45:78:06:06:3c:43:b7:91: ff:10:2e:db:52:b8:59:65:87:48:ba:20:44:8e:b7:cc:44:63: a8:e5:e8:71:c8:40:c3:b0:e8:58:76:2f:a7:99:8c:80:7a:08: f1:86:3f:bf:30:09:37:89:35:6c:fa:cc:c2:50:08:fa:a8:25: c3:f7:3e:6f:d1:7b:de:1e:97:ca:92:2d:ef:1b:93:bc:b0:ef: 90:23:80:d8:b6:81:f0:e5:13:6d:b6:3a:fb:97:ed:7f:e6:53: 3a:1b:3a:1d:7d:6e:0c:72:56:a6:41:19:4d:7c:6a:ba:87:63: 03:6c:7e:93:06:d1:70:27:f5:e7:e8:51:5a:bb:87:1f:fe:9c: f0:85:df:92:75:57:7b:29:d4:ba:3f:ca:73:b7:69:cc:25:23: af:24:f7:f8:39:dc:41:64:98:d3:bf:7e:08:3a:44:6d:7a:76: 1d:fe:b0:19:ae:cf:b6:54:01:7f:66:24:e2:45:b4:40:af:f1: b3:7e:41:78:97:73:15:4a:27:00:ed:f9:66:0c:f6:e2:7e:4c: eb:fc:8a:09:7f:2f:26:60:71:e1:f8:f9:52:ce:4e:b1:41:f1: b5:91:8c:62:94:3b:45:32:ad:9f:dd:12:2a:4e:ca:a5:d8:57: 7d:a5:47:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEv1YGYxCBRzuGfTzEkXc3zlTTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNDExMjMxNjM2NTBaFw0yNDExMjYyMTQzNTBaMDMxMTAvBgNV BAMTKDUwRUI0Nzk3NTg0N0M1QzUyNERBNkEwMkRGMkRFRERBQjExNUYwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYThlAxPAMHLkODqIfQIaxS7Ud 9Egk0gDaTAmIuvq7HHJagdKa5wJUwHpOwaaKBtr/ZqxQew8WHOPgJNQIXvCondsY LTvoe2rZb9a0BOlF0PtbhoHhBGKNTcqsvgzNX8Kbd3eY26h6aj81JGJevxQ29UNc 9o/lqFNl2zKSFtFlARbcL/UWkoFDIdv1KzdrRhPH+xT8FpNFfQ9nz6V+cf5FtPrF z4LBsxhRKdPtF+Hl9q0eR62dVn39Btz6N62qj0BE39aOMXgBTSsinzLWZ8LezNDN 5xEPbM3vdBNZJE0QZEg9/SDDbl8ibq27yXpFeSqmwOBAVJewl4AINWL5G5KBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUOtHl1hHxcUk2moC3y3t2rEV8EowHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE34MhLgNTpSTwhFeAYGPEO3kf8QLttSuFll h0i6IESOt8xEY6jl6HHIQMOw6Fh2L6eZjIB6CPGGP78wCTeJNWz6zMJQCPqoJcP3 Pm/Re94el8qSLe8bk7yw75AjgNi2gfDlE222OvuX7X/mUzobOh19bgxyVqZBGU18 arqHYwNsfpMG0XAn9efoUVq7hx/+nPCF35J1V3sp1Lo/ynO3acwlI68k9/g53EFk mNO/fgg6RG16dh3+sBmuz7ZUAX9mJOJFtECv8bN+QXiXcxVKJwDt+WYM9uJ+TOv8 igl/LyZgceH4+VLOTrFB8bWRjGKUO0UyrZ/dEipOyqXYV32lR+g= -----END CERTIFICATE-----Generated at Sat Nov 23 18:35:34 2024 by rpki-client on console-ams.rpki-client.org