$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: oBW3GJlx/DBtJ7EmUxe3nDXXiJb7k0GJdKc59Jr29l8= Subject key identifier: 87:A9:66:63:C6:9A:53:B2:2F:B0:C9:68:CF:2C:18:F6:7D:66:D1:DE Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 368103975535DA30C50F0D6F6B521BBEA07417AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: 01 Signing time: Mon 25 Nov 2024 10:29:39 +0000 Manifest this update: Mon 25 Nov 2024 10:24:39 +0000 Manifest next update: Thu 28 Nov 2024 16:51:39 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: uemupdkXSEqxC73ZkGPBOPoXK8orDoEgHbjXDy18hrU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 16:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:81:03:97:55:35:da:30:c5:0f:0d:6f:6b:52:1b:be:a0:74:17:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Nov 25 10:24:39 2024 GMT Not After : Nov 28 16:51:39 2024 GMT Subject: CN=87A96663C69A53B22FB0C968CF2C18F67D66D1DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:5b:34:40:34:6c:1e:69:66:96:96:b0:b1: 1f:04:e5:a2:72:ab:43:c7:29:71:6c:27:5c:9d:a5: 11:62:49:8e:aa:c0:8c:1c:25:a5:41:f2:93:ac:d3: db:38:35:c0:c3:a3:c9:73:99:d5:2b:13:b2:56:09: 39:13:13:a7:71:3e:4b:b4:91:51:17:88:1e:5e:e8: 22:cc:72:8f:d0:69:3d:59:94:d9:7e:4f:3d:12:7d: 59:1a:3b:9e:94:19:55:c4:ca:68:3e:70:26:36:de: 15:85:06:35:cf:c0:2e:0c:06:a8:b6:ea:82:4b:82: fa:36:fe:8b:2d:00:8a:92:f1:40:40:32:95:9b:6e: db:6d:7d:2f:43:f6:cc:67:b0:29:51:54:43:62:9b: 6b:4e:38:df:51:ec:87:48:52:33:b9:a6:ec:37:96: 08:90:8e:5a:24:15:32:14:48:92:45:49:74:4e:c6: 26:cc:96:76:7a:e9:25:7a:46:0d:ab:4c:06:c1:a7: 9e:f2:eb:4c:7a:78:34:c8:cc:50:1c:3c:97:dc:ff: 85:ad:9c:f1:1d:f6:a9:70:b8:3c:e7:3e:02:66:eb: 7f:6d:6a:d4:71:a0:0c:6c:26:de:8e:e7:f3:0c:8c: 19:43:39:e5:27:d7:ad:5a:01:33:49:1c:07:d7:37: 82:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A9:66:63:C6:9A:53:B2:2F:B0:C9:68:CF:2C:18:F6:7D:66:D1:DE X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:84:92:f3:d3:9a:32:d5:81:f5:20:71:90:7d:e4:e3:75:7a: 8f:0d:07:c7:e0:34:4f:5f:99:91:51:4d:80:38:73:7c:2d:85: 86:ae:c5:05:78:c2:fd:a3:0e:44:56:04:4f:2b:5f:8d:29:13: 7e:99:cb:b4:61:d1:0a:e3:4e:e7:93:d2:3c:86:84:12:96:1d: 52:a3:96:1c:bd:6e:5b:93:b3:10:76:8c:84:59:17:35:14:f0: 7f:05:7a:ad:af:d2:18:52:2b:c5:9c:ba:91:eb:9b:42:ed:46: 4d:93:81:ea:7e:c1:cb:e9:13:0d:80:45:13:2b:a2:6b:47:76: b2:cb:23:f2:f0:31:83:f2:92:ad:2b:00:b9:30:fc:e6:d1:39: ea:41:aa:13:fa:48:e6:f0:98:84:b6:80:cb:67:b6:c8:bb:3f: 34:1d:2e:41:24:97:0f:df:22:83:fa:73:83:c2:54:ea:36:e1: 95:77:24:83:38:13:f0:57:6c:f1:6a:f1:4f:7e:c2:08:14:db: cd:7f:ac:95:e8:c3:fc:b5:72:78:90:b4:32:34:27:11:75:22: fb:a4:bb:11:66:24:c5:d8:2e:07:61:83:f8:79:0f:41:84:34: c3:37:e7:37:f4:f6:7e:b2:41:13:83:15:1a:25:91:dc:5d:6b: 01:e6:8d:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoEDl1U12jDFDw1va1IbvqB0F6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNDExMjUxMDI0MzlaFw0yNDExMjgxNjUxMzlaMDMxMTAvBgNV BAMTKDg3QTk2NjYzQzY5QTUzQjIyRkIwQzk2OENGMkMxOEY2N0Q2NkQxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwaVs0QDRsHmlmlpawsR8E5aJy q0PHKXFsJ1ydpRFiSY6qwIwcJaVB8pOs09s4NcDDo8lzmdUrE7JWCTkTE6dxPku0 kVEXiB5e6CLMco/QaT1ZlNl+Tz0SfVkaO56UGVXEymg+cCY23hWFBjXPwC4MBqi2 6oJLgvo2/ostAIqS8UBAMpWbbtttfS9D9sxnsClRVENim2tOON9R7IdIUjO5puw3 lgiQjlokFTIUSJJFSXROxibMlnZ66SV6Rg2rTAbBp57y60x6eDTIzFAcPJfc/4Wt nPEd9qlwuDznPgJm639tatRxoAxsJt6O5/MMjBlDOeUn161aATNJHAfXN4JJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6lmY8aaU7IvsMlozywY9n1m0d4wHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6EkvPTmjLVgfUgcZB95ON1eo8NB8fgNE9f mZFRTYA4c3wthYauxQV4wv2jDkRWBE8rX40pE36Zy7Rh0QrjTueT0jyGhBKWHVKj lhy9bluTsxB2jIRZFzUU8H8Feq2v0hhSK8WcupHrm0LtRk2Tgep+wcvpEw2ARRMr omtHdrLLI/LwMYPykq0rALkw/ObROepBqhP6SObwmIS2gMtntsi7PzQdLkEklw/f IoP6c4PCVOo24ZV3JIM4E/BXbPFq8U9+wggU281/rJXow/y1cniQtDI0JxF1Ivuk uxFmJMXYLgdhg/h5D0GENMM35zf09n6yQRODFRolkdxdawHmjfo= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:36 2024 by rpki-client on console-ams.rpki-client.org