$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: XYHU2eettUslNSEy5zJmQSqBkcY7b7nI3CJrJV+nSk4= Subject key identifier: B7:46:14:73:09:2C:92:D3:8D:DA:C0:C5:BB:3E:D3:67:6E:38:F6:B1 Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 1776DC621FB71E5B385981FCB98BAC4B30D27AA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 02B2 Signing time: Fri 22 Nov 2024 18:51:25 +0000 Manifest this update: Fri 22 Nov 2024 18:46:25 +0000 Manifest next update: Tue 26 Nov 2024 06:14:25 +0000 Files and hashes: 1: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: KYFAAwz+oqcltJC10vz6Re+aaqkL0HFIj+hiigiOQVg=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: QXvwGOBfYEQTcDFmrG/qGhY3VpPMLXASegbsfXk0/ZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:76:dc:62:1f:b7:1e:5b:38:59:81:fc:b9:8b:ac:4b:30:d2:7a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Nov 22 18:46:25 2024 GMT Not After : Nov 26 06:14:25 2024 GMT Subject: CN=B7461473092C92D38DDAC0C5BB3ED3676E38F6B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:7c:62:29:d7:d3:41:01:07:3c:f3:68:6e: 11:32:6a:e1:1d:ef:f0:bd:fc:07:54:cb:c9:79:9a: 37:31:80:5a:c7:ec:54:b8:d5:2e:c6:ac:e7:d0:f7: 7a:63:04:45:56:c9:5d:5c:89:53:9e:2e:6c:b7:c3: 18:82:e5:aa:97:cd:dc:6f:2b:2e:34:cc:52:9f:4e: 34:32:25:00:bd:6f:b4:89:3e:6f:bd:f4:17:8b:f0: 6b:61:1c:86:7b:3c:58:2e:74:b0:9e:9d:56:80:c3: 86:16:93:1c:d4:e1:76:c3:c2:21:24:ff:ae:d8:a7: 78:d2:d2:9e:fe:3f:ed:1f:e5:7e:ae:e6:e1:fa:3d: 25:03:b7:bd:33:94:ef:f4:3d:b4:de:53:6a:fe:49: e0:c8:f2:64:db:3d:20:84:02:12:8b:3c:84:e7:7e: 61:9a:f4:46:e7:30:72:0b:c5:53:8b:4c:d9:aa:e6: c8:4c:09:c8:1a:b8:c0:bf:8e:9b:7e:4c:f8:f6:62: 6f:a9:03:c4:a1:49:3a:8c:d0:5a:16:50:ab:f4:de: d2:85:a7:ba:39:d9:bd:23:4f:2c:e3:ca:cd:12:fb: 6a:f8:14:8d:db:f2:35:90:be:f7:8e:d2:2e:7f:30: 6d:a1:7a:e5:6f:43:98:38:44:5c:ea:4d:0e:f4:3d: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:46:14:73:09:2C:92:D3:8D:DA:C0:C5:BB:3E:D3:67:6E:38:F6:B1 X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:18:a6:68:86:cd:e7:aa:be:8c:30:84:9c:db:dc:99:7f:a2: 89:42:81:f9:80:34:d5:dd:86:f6:99:de:6b:03:3e:ac:71:94: 07:a6:6c:58:5c:e3:b4:db:eb:e8:0d:e8:44:f1:cd:54:b3:ff: f9:92:e3:a1:06:15:d6:36:b9:c6:2d:31:c5:d2:03:b0:cb:54: ee:11:e5:63:55:4c:7d:78:54:7d:1a:81:7c:e8:0a:62:57:8a: 1f:4a:e1:e3:cd:88:84:6c:9b:eb:68:eb:8f:0a:44:34:41:a5: fd:b4:7e:d1:56:6e:eb:03:b3:e0:49:3e:a3:7b:d4:b3:be:22: 46:47:c5:7f:97:75:10:38:2e:cd:6f:c8:b4:03:7c:a3:ac:fe: 57:66:be:1e:1e:19:53:cb:c8:cd:64:b4:09:1e:6d:84:0d:98: 83:30:4f:5a:90:3c:95:48:0c:d4:9b:77:f1:12:92:15:56:6f: fa:31:ee:41:58:df:2d:dc:da:2c:15:37:77:81:c2:05:84:c8: 23:6f:0f:d4:4c:aa:2e:c8:82:3d:a5:22:51:a4:d2:49:61:6b: 72:2f:3f:26:e7:e5:f1:d8:f3:f1:68:1a:62:e3:bf:14:88:5b: 1e:e8:0a:30:c7:e5:4a:d8:75:b1:7e:8d:09:29:39:cb:4d:b4: cc:8b:e5:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3bcYh+3Hls4WYH8uYusSzDSeqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNDExMjIxODQ2MjVaFw0yNDExMjYwNjE0MjVaMDMxMTAvBgNV BAMTKEI3NDYxNDczMDkyQzkyRDM4RERBQzBDNUJCM0VEMzY3NkUzOEY2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYWXxiKdfTQQEHPPNobhEyauEd 7/C9/AdUy8l5mjcxgFrH7FS41S7GrOfQ93pjBEVWyV1ciVOeLmy3wxiC5aqXzdxv Ky40zFKfTjQyJQC9b7SJPm+99BeL8GthHIZ7PFgudLCenVaAw4YWkxzU4XbDwiEk /67Yp3jS0p7+P+0f5X6u5uH6PSUDt70zlO/0PbTeU2r+SeDI8mTbPSCEAhKLPITn fmGa9EbnMHILxVOLTNmq5shMCcgauMC/jpt+TPj2Ym+pA8ShSTqM0FoWUKv03tKF p7o52b0jTyzjys0S+2r4FI3b8jWQvveO0i5/MG2heuVvQ5g4RFzqTQ70PfkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0YUcwksktON2sDFuz7TZ2449rEwHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsYpmiGzeeqvowwhJzb3Jl/oolCgfmANNXd hvaZ3msDPqxxlAembFhc47Tb6+gN6ETxzVSz//mS46EGFdY2ucYtMcXSA7DLVO4R 5WNVTH14VH0agXzoCmJXih9K4ePNiIRsm+to648KRDRBpf20ftFWbusDs+BJPqN7 1LO+IkZHxX+XdRA4Ls1vyLQDfKOs/ldmvh4eGVPLyM1ktAkebYQNmIMwT1qQPJVI DNSbd/ESkhVWb/ox7kFY3y3c2iwVN3eBwgWEyCNvD9RMqi7Igj2lIlGk0klha3Iv Pybn5fHY8/FoGmLjvxSIWx7oCjDH5UrYdbF+jQkpOctNtMyL5YY= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:55 2024 by rpki-client on console-ams.rpki-client.org