$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: VjmmMn/ae4CIi5EhWgg8v2TVXmB6khdpHpY+Eg18G4k= Subject key identifier: 36:4C:00:3C:20:6D:ED:60:BD:0B:05:F9:DA:FC:4C:32:E0:D2:4C:E9 Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 2C057F67F084AFD20860201879BF154DE52884C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 0177 Signing time: Thu 21 Nov 2024 13:01:33 +0000 Manifest this update: Thu 21 Nov 2024 12:56:33 +0000 Manifest next update: Sun 24 Nov 2024 23:08:33 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: JRrUHCeX+KKC6MQwghfxih0XaX+vtq6wHDaXPvXnDQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:05:7f:67:f0:84:af:d2:08:60:20:18:79:bf:15:4d:e5:28:84:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: Nov 21 12:56:33 2024 GMT Not After : Nov 24 23:08:33 2024 GMT Subject: CN=364C003C206DED60BD0B05F9DAFC4C32E0D24CE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a2:0a:4e:c2:b2:7d:a9:1f:16:ab:77:92:64: c8:e7:26:3d:a0:a9:03:92:e5:ac:e4:7c:56:b5:1b: 1c:d5:f7:05:e8:a5:58:20:64:62:0b:5e:4e:27:4e: b5:33:2c:cb:57:f3:1c:e2:36:b4:43:18:e8:04:38: 30:97:42:9b:0d:27:21:86:76:7c:23:76:54:5f:6f: 40:cd:e2:f3:82:b5:5d:5e:39:36:19:5d:5c:3a:2e: ae:47:9d:2e:39:5f:d0:70:f5:00:89:17:7f:16:8f: 90:a5:52:5a:a7:52:60:ed:cf:6e:ff:7f:3d:7d:a9: 9c:e9:32:99:ed:03:f0:b0:88:c7:83:71:e6:44:5e: 82:da:4c:d0:41:0c:c7:cc:c6:49:08:0b:c7:01:5c: 89:e6:5a:fa:d2:56:b9:bd:52:36:8d:07:46:b3:b6: ec:2f:a2:74:97:ae:90:4e:6a:3e:42:87:10:f3:fd: e5:11:ea:ec:55:bc:ca:50:ab:76:a9:1f:e9:b7:fd: f9:9f:ab:24:81:85:9d:24:bc:1f:aa:5e:30:32:f8: 70:7d:1f:ce:fc:8f:6c:5d:21:44:9c:2d:f2:89:50: b5:e4:f6:52:d7:50:2e:05:61:7a:62:45:b9:5d:f4: a3:c0:28:4a:af:e5:7e:84:26:d1:6c:e2:9a:03:d9: 3f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4C:00:3C:20:6D:ED:60:BD:0B:05:F9:DA:FC:4C:32:E0:D2:4C:E9 X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d1:58:c8:52:17:a7:b9:52:7b:57:ca:97:94:fb:2a:ae:3e: 6d:ae:37:25:6d:1c:d1:a5:08:9e:88:aa:51:a7:7a:b4:11:3b: 15:89:b2:70:bc:ef:9f:30:01:0e:05:ae:7a:33:f7:0d:a1:dd: 13:ee:52:93:6b:93:28:26:7f:a6:0f:86:8a:a1:07:57:92:bb: 97:b2:6f:c3:5c:f2:67:74:43:f9:b2:79:0e:6e:9f:aa:ae:7b: 94:bf:55:e3:ed:6b:b4:42:2e:07:d9:ce:16:ea:49:57:cd:74: 50:fa:a2:14:47:95:b1:c9:d0:03:b0:ee:bf:c2:fd:65:98:5e: 81:c2:d4:d5:c1:d7:94:32:27:5a:b8:4a:e8:46:ba:5e:b5:cd: fd:37:95:00:8b:aa:c1:4b:ef:35:98:5e:af:58:83:56:5f:a0: 34:01:6f:41:f9:1a:2e:98:ed:37:e0:c2:ec:e9:e1:2d:24:f4: 55:23:9e:0d:fb:ba:56:16:02:01:c3:22:d3:d3:9b:22:bb:76: 13:ba:71:b5:2d:fd:4b:ed:34:d6:dd:27:98:83:09:d0:00:a6: ac:b0:86:dc:1c:04:ed:f6:c6:a3:d0:51:44:2f:95:4a:65:12: 17:0d:ad:ee:1c:58:b7:80:18:2e:29:a5:58:17:30:ae:90:9e: e7:09:ac:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAV/Z/CEr9IIYCAYeb8VTeUohMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNDExMjExMjU2MzNaFw0yNDExMjQyMzA4MzNaMDMxMTAvBgNV BAMTKDM2NEMwMDNDMjA2REVENjBCRDBCMDVGOURBRkM0QzMyRTBEMjRDRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIogpOwrJ9qR8Wq3eSZMjnJj2g qQOS5azkfFa1GxzV9wXopVggZGILXk4nTrUzLMtX8xziNrRDGOgEODCXQpsNJyGG dnwjdlRfb0DN4vOCtV1eOTYZXVw6Lq5HnS45X9Bw9QCJF38Wj5ClUlqnUmDtz27/ fz19qZzpMpntA/CwiMeDceZEXoLaTNBBDMfMxkkIC8cBXInmWvrSVrm9UjaNB0az tuwvonSXrpBOaj5ChxDz/eUR6uxVvMpQq3apH+m3/fmfqySBhZ0kvB+qXjAy+HB9 H878j2xdIUScLfKJULXk9lLXUC4FYXpiRbld9KPAKEqv5X6EJtFs4poD2T8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNkwAPCBt7WC9CwX52vxMMuDSTOkwHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7RWMhSF6e5UntXypeU+yquPm2uNyVtHNGl CJ6IqlGnerQROxWJsnC8758wAQ4Frnoz9w2h3RPuUpNrkygmf6YPhoqhB1eSu5ey b8Nc8md0Q/myeQ5un6que5S/VePta7RCLgfZzhbqSVfNdFD6ohRHlbHJ0AOw7r/C /WWYXoHC1NXB15QyJ1q4SuhGul61zf03lQCLqsFL7zWYXq9Yg1ZfoDQBb0H5Gi6Y 7Tfgwuzp4S0k9FUjng37ulYWAgHDItPTmyK7dhO6cbUt/UvtNNbdJ5iDCdAApqyw htwcBO32xqPQUUQvlUplEhcNre4cWLeAGC4ppVgXMK6QnucJrM8= -----END CERTIFICATE-----Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org