$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json) Hash identifier: 516TseYWsztG4dR2/DOVWhE3QvoLb8xGwCgXtkIMQdc= Subject key identifier: 49:1C:33:13:2C:BD:42:33:3D:70:63:C1:8E:B6:00:38:24:F8:49:E0 Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 1589ECA6D79B4EA164EBB6D3265902AF34F5C8FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft Manifest number: 020C Signing time: Thu 21 Nov 2024 15:52:16 +0000 Manifest this update: Thu 21 Nov 2024 15:47:16 +0000 Manifest next update: Sun 24 Nov 2024 20:47:16 +0000 Files and hashes: 1: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: 0TJgcQAivJXYlFS5btZQjD+r2VLNSv4Y3z5i79LSM+U=) 2: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: rY4tz9/kQego7cZpv2afdmhIw5rIucEsOqMDCxyUCMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:89:ec:a6:d7:9b:4e:a1:64:eb:b6:d3:26:59:02:af:34:f5:c8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: Nov 21 15:47:16 2024 GMT Not After : Nov 24 20:47:16 2024 GMT Subject: CN=491C33132CBD42333D7063C18EB6003824F849E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:72:56:59:b5:9d:3f:67:8c:48:24:f2:7a: 9c:07:89:cb:cb:69:f1:54:e9:89:23:84:38:a7:ce: 22:29:4c:f9:7c:22:c3:16:44:e7:dd:f4:e5:a9:66: b4:d3:8a:9d:22:d1:04:20:f0:4a:eb:b0:70:ae:50: 87:1e:02:38:3d:e6:ce:0b:04:9d:e4:04:95:69:1c: 9b:5b:e0:9f:a6:e7:05:2b:58:16:7d:16:7b:7a:f8: 6b:26:dc:71:5c:66:54:46:51:21:11:d9:f8:db:38: 2d:10:09:6b:d5:73:11:5b:83:ec:64:a5:42:80:bf: e8:11:29:e2:dd:10:26:9a:18:43:2d:98:f0:9a:df: 4d:dc:86:eb:8d:b0:55:45:c4:60:8c:26:a5:20:8a: 0b:1d:6a:85:9a:03:71:f5:a4:76:e7:9c:ea:d1:18: 07:9a:10:62:d5:fa:7a:88:63:f5:c9:e4:ac:bb:be: f9:3d:13:d3:2f:21:1d:48:52:73:a6:24:5e:69:c9: c7:e7:0b:64:97:e4:e3:14:1e:b3:0d:dc:cc:66:51: c2:8d:8d:f6:46:80:2a:67:4d:97:5d:a4:c7:9c:db: f7:49:cf:bc:3a:6f:8e:38:20:f9:15:fa:df:77:12: bb:8a:85:73:2d:03:86:c1:de:d3:f6:67:b3:96:52: 86:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1C:33:13:2C:BD:42:33:3D:70:63:C1:8E:B6:00:38:24:F8:49:E0 X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:88:67:e1:f7:bf:f0:d6:d1:42:21:0c:13:ce:52:7f:45:1d: 05:b7:eb:fe:4d:16:dd:42:ad:b9:df:c8:99:59:4b:fe:78:8a: 42:4e:0f:b8:8d:5c:7d:ea:18:d5:46:ab:d2:34:4e:0f:57:08: 97:0f:29:0c:76:d3:42:04:3b:e7:f4:17:8b:a7:66:cd:d0:23: 9d:fe:65:51:33:49:1e:a6:11:25:eb:1e:3c:b0:99:e1:c1:83: c1:c8:15:a3:48:50:da:0c:93:72:36:7b:ee:ca:a7:8f:e1:0a: db:84:a3:38:f4:29:d5:1a:e9:5d:9a:86:5c:3c:d8:db:0e:43: f0:11:55:05:9c:74:6e:b6:b1:33:79:1c:f2:a4:20:8d:7c:2e: ac:8d:b1:e0:95:dd:9f:5b:09:e0:45:cd:01:21:26:ac:4b:ff: 0c:6e:39:60:71:f3:5c:19:69:eb:de:16:cc:41:0c:43:47:1d: d7:7d:20:4d:d2:93:00:f9:d4:56:ae:33:76:08:60:98:af:64: e1:3b:c0:35:1f:91:3f:08:ea:e3:fb:11:e9:01:a5:6b:27:0d: 83:67:3f:a1:16:6a:71:a6:59:05:73:f2:d4:b2:5e:14:4c:5b: 3a:2f:86:13:b3:70:26:81:a9:f0:4e:dd:54:e4:66:4b:a9:28: de:74:b3:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFYnsptebTqFk67bTJlkCrzT1yPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNDExMjExNTQ3MTZaFw0yNDExMjQyMDQ3MTZaMDMxMTAvBgNV BAMTKDQ5MUMzMzEzMkNCRDQyMzMzRDcwNjNDMThFQjYwMDM4MjRGODQ5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaSXJWWbWdP2eMSCTyepwHicvL afFU6YkjhDinziIpTPl8IsMWROfd9OWpZrTTip0i0QQg8ErrsHCuUIceAjg95s4L BJ3kBJVpHJtb4J+m5wUrWBZ9Fnt6+Gsm3HFcZlRGUSER2fjbOC0QCWvVcxFbg+xk pUKAv+gRKeLdECaaGEMtmPCa303chuuNsFVFxGCMJqUgigsdaoWaA3H1pHbnnOrR GAeaEGLV+nqIY/XJ5Ky7vvk9E9MvIR1IUnOmJF5pycfnC2SX5OMUHrMN3MxmUcKN jfZGgCpnTZddpMec2/dJz7w6b444IPkV+t93EruKhXMtA4bB3tP2Z7OWUobjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSRwzEyy9QjM9cGPBjrYAOCT4SeAwHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3 NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqIZ+H3v/DW0UIhDBPOUn9FHQW36/5NFt1C rbnfyJlZS/54ikJOD7iNXH3qGNVGq9I0Tg9XCJcPKQx200IEO+f0F4unZs3QI53+ ZVEzSR6mESXrHjywmeHBg8HIFaNIUNoMk3I2e+7Kp4/hCtuEozj0KdUa6V2ahlw8 2NsOQ/ARVQWcdG62sTN5HPKkII18LqyNseCV3Z9bCeBFzQEhJqxL/wxuOWBx81wZ aeveFsxBDENHHdd9IE3SkwD51FauM3YIYJivZOE7wDUfkT8I6uP7EekBpWsnDYNn P6EWanGmWQVz8tSyXhRMWzovhhOzcCaBqfBO3VTkZkupKN50s2M= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org