$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft File: 07043FF6B66099F2CBFBBB64672822F3014937E8.mft (raw, json) Hash identifier: JqQpQGI1ie8gJBWAsHyf5qeMy7Qij7828+fwaBmogVY= Subject key identifier: 8C:E9:A6:D1:5F:6A:27:A9:28:0E:3E:6B:EF:01:2F:B2:FF:2B:E8:A9 Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 1D71FC525FA4CCBCDB7017DEB19D82618BDE6F91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft Manifest number: 0168 Signing time: Thu 21 Nov 2024 08:13:15 +0000 Manifest this update: Thu 21 Nov 2024 08:08:15 +0000 Manifest next update: Sun 24 Nov 2024 16:44:15 +0000 Files and hashes: 1: 07043FF6B66099F2CBFBBB64672822F3014937E8.crl (hash: HzqmY7zpl9EYfU4XOSRNXFIM2b4OOE9PyfW8S2HhnlM=) 2: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: OPox0ShPnVCTmOMCpg2HQPSGXyxH1qQvVZVC36ciYIU=) 3: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: sWTn4ds6n22rjjZUoFYJu9uuvQdH2KacVzp6+eM8Sks=) 4: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: h/JHGAZA+XMm5GRiDBuDE93tuKC3bgB9VcHqmJ9NiB8=) 5: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: 1xo0DjDSXvXZUNtwZdd+vDQQvBq4jlF/Yl9f8y0lmbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:71:fc:52:5f:a4:cc:bc:db:70:17:de:b1:9d:82:61:8b:de:6f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Nov 21 08:08:15 2024 GMT Not After : Nov 24 16:44:15 2024 GMT Subject: CN=8CE9A6D15F6A27A9280E3E6BEF012FB2FF2BE8A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:b4:78:62:2e:ed:5b:2d:30:44:31:52:94: 33:76:bd:71:bd:77:5e:ca:d6:e3:2a:41:74:f0:5b: dc:30:60:be:4a:92:0c:e9:4c:c9:d4:94:d7:ad:5d: 4a:3b:28:92:4f:51:60:14:f1:35:9c:00:d2:36:37: fd:d0:30:79:31:1f:c7:24:3a:3b:30:e3:eb:20:bf: 6f:e3:84:78:4a:9d:36:dd:b2:ae:f5:13:f9:51:63: cd:5a:1a:f5:7a:9b:be:43:23:15:76:1e:4e:56:a8: 6a:4e:f4:be:50:07:80:f5:e9:40:b0:94:22:ce:ff: 43:d4:ca:3e:27:c7:0d:31:38:80:f9:2d:7f:63:99: ae:67:d1:8d:e1:d8:3b:c7:36:5e:17:a7:32:23:88: 50:3f:c6:71:57:89:3f:a1:20:da:25:f8:ec:3f:e0: 61:e8:79:ec:6d:98:36:91:39:7a:1b:44:27:99:e3: 59:f8:3d:9d:86:da:19:75:7c:08:22:8e:e8:7c:f8: f2:1f:1d:aa:c1:cf:ab:f8:36:d0:6a:20:a8:86:c9: 86:31:67:77:d6:0b:b8:f6:c5:f5:c1:8c:29:c5:aa: f2:3e:ef:d1:db:d6:59:68:cf:df:7c:71:b9:40:4d: c9:d6:fb:cc:0c:b0:6b:7b:e9:d9:41:c7:4b:46:5d: 51:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E9:A6:D1:5F:6A:27:A9:28:0E:3E:6B:EF:01:2F:B2:FF:2B:E8:A9 X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:56:f3:9b:da:a5:29:34:1c:b4:37:6b:57:dc:e3:ad:2c:e0: 2d:2d:24:bc:f0:5f:b8:2b:36:37:6f:0e:b2:8e:07:30:30:2d: f5:80:05:93:69:d1:b5:9a:12:a9:64:73:4f:9d:8b:fa:d8:59: b6:df:15:5b:7a:69:94:1f:01:f9:19:b8:0e:8e:d4:7e:0c:f8: dd:6b:06:62:53:a0:98:82:3c:fc:a8:31:b1:95:d3:88:22:2d: 33:ca:b5:cf:71:4e:aa:05:20:48:61:fe:6f:84:fc:e2:b8:97: 53:46:11:8d:9f:68:b5:08:f1:cc:c9:9c:46:3d:fe:f8:31:64: d9:47:36:92:5d:32:a3:c3:37:fb:a3:06:40:cf:50:c3:0c:d3: 4c:6f:e2:21:24:d0:74:1b:84:6a:c1:45:25:7d:a0:c6:83:f6: 87:83:85:f7:3c:48:e3:ef:a2:8d:da:ef:38:9e:2a:d6:0f:96: dc:e0:ba:56:bc:66:88:39:46:26:e8:e0:2e:cc:18:86:c2:96: 4b:88:d7:37:fc:77:aa:55:33:4f:00:b6:71:11:1a:1e:29:6c: 9f:d0:7e:25:a7:5b:eb:65:7e:26:37:84:8e:30:b0:33:3c:8d: d8:e3:31:7d:c3:0c:19:39:3a:35:96:89:b2:23:f4:55:e7:0f: 0e:88:41:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXH8Ul+kzLzbcBfesZ2CYYveb5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNDExMjEwODA4MTVaFw0yNDExMjQxNjQ0MTVaMDMxMTAvBgNV BAMTKDhDRTlBNkQxNUY2QTI3QTkyODBFM0U2QkVGMDEyRkIyRkYyQkU4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/bR4Yi7tWy0wRDFSlDN2vXG9 d17K1uMqQXTwW9wwYL5KkgzpTMnUlNetXUo7KJJPUWAU8TWcANI2N/3QMHkxH8ck Ojsw4+sgv2/jhHhKnTbdsq71E/lRY81aGvV6m75DIxV2Hk5WqGpO9L5QB4D16UCw lCLO/0PUyj4nxw0xOID5LX9jma5n0Y3h2DvHNl4XpzIjiFA/xnFXiT+hINol+Ow/ 4GHoeextmDaROXobRCeZ41n4PZ2G2hl1fAgijuh8+PIfHarBz6v4NtBqIKiGyYYx Z3fWC7j2xfXBjCnFqvI+79Hb1lloz998cblATcnW+8wMsGt76dlBx0tGXVFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjOmm0V9qJ6koDj5r7wEvsv8r6KkwHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIy RjMwMTQ5MzdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpW85vapSk0HLQ3a1fc460s4C0tJLzwX7gr NjdvDrKOBzAwLfWABZNp0bWaEqlkc0+di/rYWbbfFVt6aZQfAfkZuA6O1H4M+N1r BmJToJiCPPyoMbGV04giLTPKtc9xTqoFIEhh/m+E/OK4l1NGEY2faLUI8czJnEY9 /vgxZNlHNpJdMqPDN/ujBkDPUMMM00xv4iEk0HQbhGrBRSV9oMaD9oeDhfc8SOPv oo3a7zieKtYPltzgula8Zog5Ribo4C7MGIbClkuI1zf8d6pVM08AtnERGh4pbJ/Q fiWnW+tlfiY3hI4wsDM8jdjjMX3DDBk5OjWWibIj9FXnDw6IQV0= -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org