$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: 2gyGRNzGa2DMDctwHNIpzIIozUt7sVxoBe/7fSVfwS0= Subject key identifier: 1F:6C:E7:56:31:F6:E3:B9:24:F6:9A:52:32:41:DD:58:FD:F9:C4:8D Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 721D9EF3419C3D27680A8442FCD608D31330898C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 0191 Signing time: Sun 24 Nov 2024 03:10:49 +0000 Manifest this update: Sun 24 Nov 2024 03:05:49 +0000 Manifest next update: Wed 27 Nov 2024 13:59:49 +0000 Files and hashes: 1: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: u8WfQ7ViwC8c62RjjiP6fTb34ki+LT2D/raqeIObUTI=) 2: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: 0BWjl5P155m35iG6z4d5ofVWD1KwIdM4uWlxy+LGQA0=) 3: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: XOk1beB0T2JUy6q9esb+HcTGDVyw/pPu1SuH1PrO6T4=) 4: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: dHpN7ub4KrmBCyTXelnoFJDCLhoYO0X3bUz4MMj77nQ=) 5: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: L2EmD81aMJH/5FIYqmAaBN4dVwGTSb3agMBVp5kZ0Sc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1d:9e:f3:41:9c:3d:27:68:0a:84:42:fc:d6:08:d3:13:30:89:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Nov 24 03:05:49 2024 GMT Not After : Nov 27 13:59:49 2024 GMT Subject: CN=1F6CE75631F6E3B924F69A523241DD58FDF9C48D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:8b:2c:74:13:df:23:6d:9d:a6:8d:02:19: f6:53:8c:6e:e5:cc:ed:5a:c4:5c:d1:8b:c5:b0:01: fa:49:11:86:7f:7e:bb:3e:26:1e:df:af:32:ed:f4: dc:95:00:36:3e:1c:6e:2a:c1:63:04:3b:82:5b:0e: 9e:30:17:ea:e8:da:ac:20:4e:99:27:d4:8b:c0:bf: 8f:b6:4c:6d:f9:e5:0f:74:7e:b7:4d:1b:e8:c5:a3: e5:03:0c:06:c3:da:a9:d9:ff:0e:7b:f6:f2:ab:63: 57:ac:28:2e:11:09:10:b1:49:1e:e3:7b:72:c0:f3: c1:72:90:a8:98:d1:46:f4:40:62:47:e4:2d:75:4a: 05:d1:f7:28:97:50:17:bd:8c:54:4c:8c:19:4b:09: 7c:89:88:70:4a:bb:37:bc:e2:ad:ba:11:4c:84:cd: 61:0e:0c:14:e5:3b:ba:88:63:0c:54:14:8e:91:16: 30:21:74:2d:6d:c2:7b:97:ee:b6:1a:26:85:49:14: 50:e5:a4:7e:11:8d:0d:74:fc:84:85:5a:ff:14:79: 79:9d:35:61:74:ed:50:29:8a:b5:cf:eb:62:e0:00: 7b:28:4e:14:44:86:b3:96:f5:9f:eb:72:ed:ca:f0: f7:01:f3:b8:a1:20:9f:14:0c:97:86:52:9a:ad:4f: d9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6C:E7:56:31:F6:E3:B9:24:F6:9A:52:32:41:DD:58:FD:F9:C4:8D X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ab:38:19:e1:8f:05:07:34:19:a8:1e:24:bf:61:15:11:a2: 3b:21:fb:1b:9e:25:ff:8d:30:03:0d:b3:04:76:26:70:e3:48: 53:23:ef:aa:16:cb:09:a9:03:be:01:f6:e1:a1:ed:18:a8:37: 5b:38:f0:da:c4:6b:b6:d7:b7:7f:a5:51:e7:53:30:20:78:63: c8:ad:40:86:94:5f:43:0e:ee:5c:e2:7a:70:9f:e9:38:21:0e: a4:6b:ad:79:7d:0a:fe:8d:a3:e0:57:af:be:d6:bc:f7:6a:cd: 21:ba:9e:64:58:71:00:43:29:54:e5:e1:7d:a6:5f:fe:72:b4: 82:cc:05:3c:61:f2:47:3c:0b:3d:75:1d:70:c1:85:11:82:a5: 84:5f:8e:ff:db:51:d7:8d:f8:5d:c4:17:30:22:28:e1:c2:e8: cc:ea:90:0b:93:07:b4:1f:c4:f0:f1:f2:92:8a:14:e3:3c:52: c3:ff:70:eb:72:93:ed:0f:f0:c8:2b:75:10:a2:f3:c9:bd:4b: cd:5c:c2:b8:ac:0f:fb:ac:65:a5:b8:d6:e3:6d:13:41:88:9a: ab:fe:0e:ed:f4:26:b0:cb:30:2f:91:cc:d3:ed:3f:db:08:9b: 78:04:00:86:85:76:65:56:0b:25:7f:30:0a:96:7d:3c:bb:76: ab:c7:b3:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUch2e80GcPSdoCoRC/NYI0xMwiYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNDExMjQwMzA1NDlaFw0yNDExMjcxMzU5NDlaMDMxMTAvBgNV BAMTKDFGNkNFNzU2MzFGNkUzQjkyNEY2OUE1MjMyNDFERDU4RkRGOUM0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOYssdBPfI22dpo0CGfZTjG7l zO1axFzRi8WwAfpJEYZ/frs+Jh7frzLt9NyVADY+HG4qwWMEO4JbDp4wF+ro2qwg Tpkn1IvAv4+2TG355Q90frdNG+jFo+UDDAbD2qnZ/w579vKrY1esKC4RCRCxSR7j e3LA88FykKiY0Ub0QGJH5C11SgXR9yiXUBe9jFRMjBlLCXyJiHBKuze84q26EUyE zWEODBTlO7qIYwxUFI6RFjAhdC1twnuX7rYaJoVJFFDlpH4RjQ10/ISFWv8UeXmd NWF07VApirXP62LgAHsoThREhrOW9Z/rcu3K8PcB87ihIJ8UDJeGUpqtT9n9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH2znVjH247kk9ppSMkHdWP35xI0wHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACarOBnhjwUHNBmoHiS/YRURojsh+xueJf+N MAMNswR2JnDjSFMj76oWywmpA74B9uGh7RioN1s48NrEa7bXt3+lUedTMCB4Y8it QIaUX0MO7lzienCf6TghDqRrrXl9Cv6No+BXr77WvPdqzSG6nmRYcQBDKVTl4X2m X/5ytILMBTxh8kc8Cz11HXDBhRGCpYRfjv/bUdeN+F3EFzAiKOHC6MzqkAuTB7Qf xPDx8pKKFOM8UsP/cOtyk+0P8MgrdRCi88m9S81cwrisD/usZaW41uNtE0GImqv+ Du30JrDLMC+RzNPtP9sIm3gEAIaFdmVWCyV/MAqWfTy7dqvHsyk= -----END CERTIFICATE-----Generated at Sun Nov 24 04:28:51 2024 by rpki-client on console-fra.rpki-client.org