$ rpki-client -vvf repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft File: D85F6D41E807D8825356A681A7518FA27664A965.mft (raw, json) Hash identifier: NbOF3yKRKfSU3Fq4UhS93s9uJ3Q+QbdM9SMmXJ9qM+0= Subject key identifier: 5A:4D:21:A6:51:32:EF:1A:35:45:2F:C0:14:43:F5:FA:7A:58:54:3B Authority key identifier: D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 Certificate issuer: /CN=D85F6D41E807D8825356A681A7518FA27664A965 Certificate serial: 371D935DF93DD6F2843B9E9F26970214A565BED3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft Manifest number: EB Signing time: Sun 24 Nov 2024 19:02:23 +0000 Manifest this update: Sun 24 Nov 2024 18:57:23 +0000 Manifest next update: Wed 27 Nov 2024 19:16:23 +0000 Files and hashes: 1: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: PE4d1Sx+WsN4vxilmC3MyByH3VGT69g5rGzqbcN4kf4=) 2: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: jdquvIdRpu3jRDtlUtAlf7M9qmyq8LXS+xBVkBGfDag=) 3: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: mZ6vyY+OcErKST+t+GHENxpGibSosO9+n5lwjCocgRo=) 4: D85F6D41E807D8825356A681A7518FA27664A965.crl (hash: F01wuUlAHRKK9dr/YrnueNYs0tSWfgYAbGNr8vw7ecA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1d:93:5d:f9:3d:d6:f2:84:3b:9e:9f:26:97:02:14:a5:65:be:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F6D41E807D8825356A681A7518FA27664A965 Validity Not Before: Nov 24 18:57:23 2024 GMT Not After : Nov 27 19:16:23 2024 GMT Subject: CN=5A4D21A65132EF1A35452FC01443F5FA7A58543B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:24:52:25:19:5d:63:ee:1e:f2:f7:7a:e7:02: 2b:a1:3a:03:cc:a4:87:15:07:fa:a9:4e:87:b8:f2: 2f:25:27:9f:79:18:53:24:a4:7f:ca:5d:2f:f3:af: f2:f1:d7:a7:84:5b:c5:8d:03:55:09:ee:12:32:00: e2:b8:59:6c:0a:38:ac:59:40:37:3a:97:10:f0:30: 22:3a:9d:92:dc:7d:8c:ea:34:aa:45:93:1a:2a:fa: cf:25:af:11:3b:1b:78:31:e5:69:ec:19:b1:88:7d: cf:bd:f4:ae:83:1b:33:ab:7e:f2:b2:7b:c0:bd:ff: de:6d:02:fe:58:6a:f4:e0:e0:d7:4e:c7:c6:8e:d9: 72:20:18:2f:91:88:e6:b0:25:5b:61:25:d5:41:0b: 33:94:af:0d:84:e8:90:79:d6:9e:26:38:79:d1:19: 59:20:91:0e:a7:31:ed:4f:69:24:9a:49:fd:b7:39: d1:40:39:83:06:bd:84:67:e2:74:d1:c3:e6:2b:d9: 73:79:e6:fb:cb:5e:4b:75:7c:e3:65:84:4b:b4:2d: f9:7e:26:5f:a1:f9:98:88:11:62:33:6b:c1:d6:74: 77:bd:aa:4d:d6:5b:f6:bc:87:38:a2:cd:03:7c:31: 83:9c:3b:7c:91:3e:35:be:bc:22:ce:ac:92:b8:9a: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4D:21:A6:51:32:EF:1A:35:45:2F:C0:14:43:F5:FA:7A:58:54:3B X509v3 Authority Key Identifier: keyid:D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:04:aa:f3:22:8d:0f:51:40:29:a4:97:a9:dc:31:c9:bc:28: cf:70:a3:d9:5e:9f:f2:d5:db:df:89:79:44:15:c4:ca:48:a7: dd:ca:5a:46:63:7f:dd:49:dd:e7:b6:b1:d9:97:5e:62:3a:e8: a7:b9:f4:dd:55:11:54:e0:7f:c8:4b:92:d9:26:29:ab:1f:55: fc:63:79:e7:3f:11:16:42:9d:e4:69:ff:68:8f:b9:72:5f:f2: 09:9b:eb:33:fc:69:13:ac:a8:4d:e2:27:23:c9:a0:57:7b:86: 48:87:f9:c9:6e:8e:1b:15:ec:ea:45:cb:db:96:1c:da:16:a0: ab:ef:1a:31:18:d5:a1:91:89:b1:2a:d0:75:dc:53:d8:60:58: d2:6b:22:a3:8b:c9:d3:3b:90:7f:ef:0c:b0:f2:54:1d:70:6a: 29:33:28:48:d1:c7:aa:3d:4d:1f:13:b4:bd:11:1f:f9:24:61: b9:06:2a:3e:be:ea:f6:1f:1f:2e:48:4b:4c:8c:16:9d:1c:ba: 21:b7:85:44:7c:d0:55:5b:f5:ef:6f:90:bd:8f:ea:2d:9b:6e: 48:fd:bd:62:82:19:e9:7f:db:ff:d0:eb:6d:f6:53:75:6a:ad: 9a:08:61:d4:38:66:7a:5c:2d:47:2f:7e:0a:99:73:df:68:df: f8:30:ae:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNx2TXfk91vKEO56fJpcCFKVlvtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3 NjY0QTk2NTAeFw0yNDExMjQxODU3MjNaFw0yNDExMjcxOTE2MjNaMDMxMTAvBgNV BAMTKDVBNEQyMUE2NTEzMkVGMUEzNTQ1MkZDMDE0NDNGNUZBN0E1ODU0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2JFIlGV1j7h7y93rnAiuhOgPM pIcVB/qpToe48i8lJ595GFMkpH/KXS/zr/Lx16eEW8WNA1UJ7hIyAOK4WWwKOKxZ QDc6lxDwMCI6nZLcfYzqNKpFkxoq+s8lrxE7G3gx5WnsGbGIfc+99K6DGzOrfvKy e8C9/95tAv5YavTg4NdOx8aO2XIgGC+RiOawJVthJdVBCzOUrw2E6JB51p4mOHnR GVkgkQ6nMe1PaSSaSf23OdFAOYMGvYRn4nTRw+Yr2XN55vvLXkt1fONlhEu0Lfl+ Jl+h+ZiIEWIza8HWdHe9qk3WW/a8hziizQN8MYOcO3yRPjW+vCLOrJK4mm5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWk0hplEy7xo1RS/AFEP1+npYVDswHwYDVR0j BBgwFoAU2F9tQegH2IJTVqaBp1GPonZkqWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmJlZGYzYS1kN2QxLTQ5YTYtOTNlZC1iMjc3ZjFmN2E2ZWIvMC9EODVGNkQ0MUU4 MDdEODgyNTM1NkE2ODFBNzUxOEZBMjc2NjRBOTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3NjY0 QTk2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThG QTI3NjY0QTk2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoEqvMijQ9RQCmkl6ncMcm8KM9wo9len/LV 29+JeUQVxMpIp93KWkZjf91J3ee2sdmXXmI66Ke59N1VEVTgf8hLktkmKasfVfxj eec/ERZCneRp/2iPuXJf8gmb6zP8aROsqE3iJyPJoFd7hkiH+clujhsV7OpFy9uW HNoWoKvvGjEY1aGRibEq0HXcU9hgWNJrIqOLydM7kH/vDLDyVB1waikzKEjRx6o9 TR8TtL0RH/kkYbkGKj6+6vYfHy5IS0yMFp0cuiG3hUR80FVb9e9vkL2P6i2bbkj9 vWKCGel/2//Q6232U3VqrZoIYdQ4ZnpcLUcvfgqZc99o3/gwrgE= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org