$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: hLVj3JnYe29Y2AD+zCudff9HOj6x2/SEdoemnOZng/U= Subject key identifier: 15:DB:BD:A7:A3:3C:33:32:CB:15:1E:10:FC:2C:CF:D2:7E:60:D8:BF Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 3CB5786577BF6E12911FD8A59093853BFB61064E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: 4B Signing time: Sat 23 Nov 2024 20:02:09 +0000 Manifest this update: Sat 23 Nov 2024 19:57:09 +0000 Manifest next update: Wed 27 Nov 2024 03:33:09 +0000 Files and hashes: 1: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: GsFk+84OTmLlLNoGt8xoJU6ErSojzsvA0W0SLeUWaJw=) 2: 3136302e32322e36332e302f32342d3234203d3e20313430343233.roa (hash: Gqj0qctUNvP3Z2GsaHEPHJIPTkcTKosfW+L7Wnqa9nA=) 3: 3136302e32322e36322e302f32332d3233203d3e20313430343233.roa (hash: Bcr7Ymz6XLJUcuByrFOes7cK8UBTtLU1HYiy8KnthEo=) 4: 3136302e32322e36322e302f32342d3234203d3e20313532383231.roa (hash: aH6okphqxpRkcbzrmJ8UaY/Jz90Uk2iHjb4VbDgQR/I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b5:78:65:77:bf:6e:12:91:1f:d8:a5:90:93:85:3b:fb:61:06:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Nov 23 19:57:09 2024 GMT Not After : Nov 27 03:33:09 2024 GMT Subject: CN=15DBBDA7A33C3332CB151E10FC2CCFD27E60D8BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:8f:87:5c:1c:93:80:db:56:4a:4a:aa:a3: f3:1e:78:06:53:0c:96:c0:4d:5a:8f:bc:f3:4b:da: 91:8a:07:cf:75:20:37:71:76:d5:57:ae:2b:28:fe: 0e:70:40:52:66:40:4e:bd:fb:2a:41:85:5a:1e:da: 12:8b:d3:06:e2:bd:14:3f:3d:88:59:66:98:a7:8d: d6:fc:60:8f:51:7d:39:5a:01:03:61:ec:64:35:b0: 95:90:27:dc:73:fa:ef:70:33:f9:4e:e5:aa:01:6a: 51:d4:2e:71:12:f0:5a:ae:53:c7:19:33:63:63:63: b7:c6:09:ce:6d:95:4f:b4:3c:6c:f6:f1:bf:74:2e: ce:15:a0:ae:9d:a1:b5:18:56:71:ca:32:68:4c:1c: aa:64:79:60:ab:ac:6b:4c:72:b1:56:a6:11:74:20: 01:cb:af:4d:c6:59:4c:be:d3:20:38:7a:39:ea:20: ee:ab:9b:5f:dd:60:99:9e:30:f2:a4:d6:c7:9e:75: 6a:e1:49:1f:a8:95:5f:84:f7:80:11:58:c2:58:3d: a4:37:98:97:78:2a:09:4a:23:d8:4a:2b:a2:04:ce: 7c:22:80:83:ae:83:b3:97:d3:04:9f:b6:07:fc:cd: 7d:15:06:46:19:96:d5:ab:cc:8b:12:11:54:59:be: e4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DB:BD:A7:A3:3C:33:32:CB:15:1E:10:FC:2C:CF:D2:7E:60:D8:BF X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b3:55:85:fd:0e:1e:37:67:fa:ef:10:ec:f7:0b:a9:44:7f: 66:7e:95:20:ee:8a:7a:46:30:1f:10:43:69:99:18:85:fa:ba: aa:95:26:fe:f8:4d:d4:ab:ba:67:17:18:83:dd:1c:a0:3f:a3: c8:16:97:61:fa:ee:ff:9d:7c:fb:23:94:ee:67:5b:56:3e:7f: 4d:d8:a0:d1:b2:13:b3:29:29:8a:3c:5d:f2:08:69:e7:78:ae: 71:81:55:c4:cb:8f:36:99:32:d7:a7:37:dd:b8:8d:94:8b:05: a6:4a:ef:45:e3:a8:e9:0e:ea:5e:3a:e3:d7:e2:8a:93:2a:a9: 21:db:07:5f:82:28:7f:55:99:e0:c8:f2:89:46:cb:f1:fc:8d: be:6a:a6:5a:6b:26:e2:2d:51:06:3f:f5:01:6e:de:54:4b:b7: 42:2a:cc:2d:77:88:43:cd:6b:f3:6f:da:dd:d8:fe:c8:ba:a6: 29:ce:93:01:ac:e8:22:7c:92:22:a8:71:67:fd:26:3f:3d:d0: 66:d5:9a:a8:c6:72:fa:b1:fc:ce:f6:9d:a6:1e:41:90:c0:c7: 3f:c6:24:ca:37:cb:06:54:61:a6:10:51:e2:e4:8d:d9:20:ca: 97:e4:16:07:3f:e8:73:bc:a6:78:78:0c:e8:6d:85:c8:01:0e: 88:ed:71:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLV4ZXe/bhKRH9ilkJOFO/thBk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNDExMjMxOTU3MDlaFw0yNDExMjcwMzMzMDlaMDMxMTAvBgNV BAMTKDE1REJCREE3QTMzQzMzMzJDQjE1MUUxMEZDMkNDRkQyN0U2MEQ4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/o+HXByTgNtWSkqqo/MeeAZT DJbATVqPvPNL2pGKB891IDdxdtVXriso/g5wQFJmQE69+ypBhVoe2hKL0wbivRQ/ PYhZZpinjdb8YI9RfTlaAQNh7GQ1sJWQJ9xz+u9wM/lO5aoBalHULnES8FquU8cZ M2NjY7fGCc5tlU+0PGz28b90Ls4VoK6dobUYVnHKMmhMHKpkeWCrrGtMcrFWphF0 IAHLr03GWUy+0yA4ejnqIO6rm1/dYJmeMPKk1seedWrhSR+olV+E94ARWMJYPaQ3 mJd4KglKI9hKK6IEznwigIOug7OX0wSftgf8zX0VBkYZltWrzIsSEVRZvuQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFdu9p6M8MzLLFR4Q/CzP0n5g2L8wHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2zVYX9Dh43Z/rvEOz3C6lEf2Z+lSDuinpG MB8QQ2mZGIX6uqqVJv74TdSrumcXGIPdHKA/o8gWl2H67v+dfPsjlO5nW1Y+f03Y oNGyE7MpKYo8XfIIaed4rnGBVcTLjzaZMtenN924jZSLBaZK70XjqOkO6l4649fi ipMqqSHbB1+CKH9VmeDI8olGy/H8jb5qplprJuItUQY/9QFu3lRLt0IqzC13iEPN a/Nv2t3Y/si6pinOkwGs6CJ8kiKocWf9Jj890GbVmqjGcvqx/M72naYeQZDAxz/G JMo3ywZUYaYQUeLkjdkgypfkFgc/6HO8pnh4DOhthcgBDojtcWc= -----END CERTIFICATE-----Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org