$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: ohfOlS27cIX9QwJmpTW/Ra6BiamSRs8oCh7S4JhSZd4= Subject key identifier: 36:37:20:99:BF:AD:BB:92:7D:1F:03:C9:4C:89:B3:16:F6:F2:26:18 Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 281C10C421C98A7B96E0DA3A00364672CE7DBA01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 0486 Signing time: Mon 25 Nov 2024 17:21:08 +0000 Manifest this update: Mon 25 Nov 2024 17:16:08 +0000 Manifest next update: Thu 28 Nov 2024 19:44:08 +0000 Files and hashes: 1: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: f00G0Ym1ByDy1/qaeBLTX62vBHyBJkGQ88rOwSYKEAQ=) 2: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: suwrafb9tqASxxDVH33nr5LVYCbJJmQzXeiotL7Kfnk=) 3: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: EofXMeQ3rQxAMPrxu14cOWyeKj+CAQJFfwVa/5Ug6IM=) 4: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: CmHXCIg51jQgUYkQZNb+SOoIIbpGIe8CdH4tZ/rg2js=) 5: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: W8X6r3JanpvGeoa+e5QvEzIjBLTO+VwBEX5tmADWxPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1c:10:c4:21:c9:8a:7b:96:e0:da:3a:00:36:46:72:ce:7d:ba:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: Nov 25 17:16:08 2024 GMT Not After : Nov 28 19:44:08 2024 GMT Subject: CN=36372099BFADBB927D1F03C94C89B316F6F22618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:14:e7:91:f3:ac:60:ce:f8:ee:5c:70:72:42: 38:77:f7:d8:ba:8f:71:48:59:2a:52:48:85:65:24: 3c:2f:0c:e0:39:07:50:d8:42:02:cb:ed:a8:56:ef: 57:12:64:b5:82:b8:35:de:5c:79:64:af:3f:a9:cf: 99:e4:18:52:bd:f4:00:f6:85:71:42:1a:f8:ef:7f: a8:f3:c6:36:87:2c:bd:0e:1a:3d:2a:7c:97:ff:2b: a6:f1:d8:99:51:05:1d:f2:05:68:2a:3c:15:30:fe: de:6c:01:89:4c:5f:59:62:34:26:ac:cf:3d:b5:c8: 5b:d2:a6:cc:4a:13:3d:24:69:b3:dc:75:31:e6:9b: 83:a1:5e:b2:f8:c0:9b:4d:d3:e8:e1:3a:3e:20:f8: 35:fb:8d:0d:26:ac:48:50:00:ae:f9:5c:a8:00:d3: 06:12:71:7a:00:b2:ab:c6:4a:29:fd:05:93:6c:37: 3c:c1:2a:cf:55:41:ef:3c:6c:7c:e0:4f:38:da:50: 53:b7:5b:9b:9e:2b:ef:ff:5e:c7:d9:51:24:60:ee: 15:d6:f0:7a:bc:e6:57:b0:77:1f:0b:f5:ce:32:2f: 82:d9:17:51:fe:1e:03:7f:39:47:cf:08:2b:cd:6d: 5c:66:5d:fe:a9:dc:46:d0:1e:49:c9:45:cb:e8:5f: 0f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:37:20:99:BF:AD:BB:92:7D:1F:03:C9:4C:89:B3:16:F6:F2:26:18 X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:7d:61:0a:75:f0:e0:3a:90:9b:f1:a8:cb:f7:94:e2:be:86: 2e:f9:6f:3d:64:52:fb:2d:01:7e:91:91:5f:2a:99:f8:e2:e2: 68:03:c7:39:fb:23:c2:6d:ad:56:93:bd:ea:dd:8c:76:d0:64: f4:eb:08:21:16:2d:f6:e6:80:50:41:cf:4b:c4:da:3a:38:79: 5f:9f:c6:c4:f1:b8:3a:3c:86:e6:22:e8:91:db:48:c2:d0:b0: f4:4b:88:a3:5f:13:ab:b2:3d:92:1b:06:e0:00:56:f6:f8:96: 9f:80:23:73:87:be:1c:b7:ee:16:cd:1a:c9:23:03:de:c8:16: b2:0b:8c:cd:5f:6b:47:54:15:8a:90:0f:37:64:08:88:7e:5a: 96:a8:30:2f:d9:43:92:5a:dd:7d:fa:ac:a1:04:fb:e2:d0:bd: e2:9b:99:b7:5e:3a:3a:06:fd:df:ca:98:d4:57:99:28:2a:9d: 15:01:50:97:68:7c:db:40:18:18:b7:9b:22:03:c2:d5:1c:09: 02:e8:08:30:15:6f:55:0f:77:f1:24:d1:02:1a:d6:e5:11:a5: 89:57:e1:93:60:0b:7b:6a:49:ab:9e:27:fd:ee:86:52:96:df: f5:a6:89:93:0d:e9:5f:c2:00:27:19:d8:b9:b5:07:b1:4e:c9: 66:71:00:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBwQxCHJinuW4No6ADZGcs59ugEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNDExMjUxNzE2MDhaFw0yNDExMjgxOTQ0MDhaMDMxMTAvBgNV BAMTKDM2MzcyMDk5QkZBREJCOTI3RDFGMDNDOTRDODlCMzE2RjZGMjI2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFOeR86xgzvjuXHByQjh399i6 j3FIWSpSSIVlJDwvDOA5B1DYQgLL7ahW71cSZLWCuDXeXHlkrz+pz5nkGFK99AD2 hXFCGvjvf6jzxjaHLL0OGj0qfJf/K6bx2JlRBR3yBWgqPBUw/t5sAYlMX1liNCas zz21yFvSpsxKEz0kabPcdTHmm4OhXrL4wJtN0+jhOj4g+DX7jQ0mrEhQAK75XKgA 0wYScXoAsqvGSin9BZNsNzzBKs9VQe88bHzgTzjaUFO3W5ueK+//XsfZUSRg7hXW 8Hq85lewdx8L9c4yL4LZF1H+HgN/OUfPCCvNbVxmXf6p3EbQHknJRcvoXw+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjcgmb+tu5J9HwPJTImzFvbyJhgwHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL59YQp18OA6kJvxqMv3lOK+hi75bz1kUvst AX6RkV8qmfji4mgDxzn7I8JtrVaTverdjHbQZPTrCCEWLfbmgFBBz0vE2jo4eV+f xsTxuDo8huYi6JHbSMLQsPRLiKNfE6uyPZIbBuAAVvb4lp+AI3OHvhy37hbNGskj A97IFrILjM1fa0dUFYqQDzdkCIh+WpaoMC/ZQ5Ja3X36rKEE++LQveKbmbdeOjoG /d/KmNRXmSgqnRUBUJdofNtAGBi3myIDwtUcCQLoCDAVb1UPd/Ek0QIa1uURpYlX 4ZNgC3tqSaueJ/3uhlKW3/WmiZMN6V/CACcZ2Lm1B7FOyWZxAHA= -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:01 2024 by rpki-client on console-ams.rpki-client.org