$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: PJ88rIyNQxWEJDxVieaT9ss0zY36TLQMk9anvrJB0Z4= Subject key identifier: 8C:5F:6F:DB:9D:CC:DB:3E:FB:B3:60:E7:A5:74:5C:2D:5C:84:63:B5 Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 13532A998069EDACAAC28342D5399C3CF8277927 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: 70 Signing time: Thu 21 Nov 2024 06:10:36 +0000 Manifest this update: Thu 21 Nov 2024 06:05:36 +0000 Manifest next update: Sun 24 Nov 2024 08:40:36 +0000 Files and hashes: 1: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: WKbSsEFKUM6urV5y7RsRiFoe4FzUWljoOdLzRJqzQNM=) 2: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: QoYJnr0KN8t856J1o0rAEY9NgexUDyR+hGKX57tQ8L4=) 3: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: /YZ7UPzqRWOqNORMwAU0aktuCWK1Mc/z4bxWTdpgapg=) 4: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: AbFWue/BYgWIXd6P8SIneA+XLbDHRHLP3X5Z1w+V3a8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:53:2a:99:80:69:ed:ac:aa:c2:83:42:d5:39:9c:3c:f8:27:79:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Nov 21 06:05:36 2024 GMT Not After : Nov 24 08:40:36 2024 GMT Subject: CN=8C5F6FDB9DCCDB3EFBB360E7A5745C2D5C8463B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:07:67:bf:03:13:3b:b8:23:cc:0d:fa:86: a0:3e:ef:0c:85:2b:75:c4:a3:34:c9:ce:1c:81:b5: 8e:57:02:26:2e:08:c1:c7:29:50:e0:02:12:c5:58: c8:84:c5:3f:c3:5d:dd:a5:75:96:fb:9b:7f:21:fe: 3f:45:ed:35:96:1c:56:a6:b7:c6:e1:fd:d6:b6:2d: 8f:c4:87:dd:60:56:1b:0e:c5:5d:a7:bc:ac:85:d2: eb:af:ac:c1:7b:e1:0d:75:83:91:ad:e1:5d:87:7d: 18:b4:ef:80:71:24:ab:a6:f7:55:a2:e8:7f:24:a7: 2b:9c:14:65:fe:2f:cd:02:cc:e0:5a:bb:ef:70:ae: 16:fe:6b:62:77:21:d1:98:81:e9:95:37:18:ab:f4: ef:72:b1:05:22:ad:8e:4f:a5:63:33:9e:fc:9d:35: da:0c:0c:d3:45:21:02:d2:76:b2:21:eb:a8:e0:f6: 74:01:d5:21:ba:07:dc:7b:ea:5b:8d:3e:03:df:82: 23:41:35:cb:38:c3:cc:98:76:01:60:4a:90:ce:9b: 74:87:fb:6b:75:fd:40:6b:fe:7f:e7:7e:1f:f7:68: 04:49:7f:0f:85:31:04:d5:b4:11:a7:06:a5:8c:66: f1:8d:27:12:97:77:14:86:5d:c7:70:d4:2b:f7:24: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5F:6F:DB:9D:CC:DB:3E:FB:B3:60:E7:A5:74:5C:2D:5C:84:63:B5 X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0f:7f:a0:5e:79:ff:fc:e1:a0:29:4d:f2:51:49:ce:fb:64: 71:c0:2b:94:87:0a:de:e2:df:0b:25:3b:5c:fc:53:78:56:ff: 7c:db:b9:70:36:2e:82:f6:1b:4f:cc:ad:cd:91:f4:84:cc:4d: 64:1a:36:0a:0d:0e:53:8a:09:1b:90:0e:4a:43:db:da:44:ad: 53:90:94:e3:dd:f0:35:8d:ec:16:76:3b:cc:9c:dd:dc:c0:5c: 52:cd:44:4f:44:48:e5:2c:f3:a1:e2:3f:f7:61:e8:68:a4:0c: a4:69:08:e8:aa:f0:3e:4f:b0:60:66:e6:04:57:25:57:a6:97: 21:e7:d3:69:60:5a:74:88:a4:85:7f:d6:39:75:bc:89:63:4f: 86:39:7d:c7:e7:87:85:84:41:1f:fb:d8:50:e6:a3:c1:c1:42: d0:8c:f5:dc:9e:6c:24:ad:3c:15:18:65:04:da:c7:bf:1f:17: ea:a9:8f:c6:91:40:e3:d7:43:25:9c:f4:b5:6e:16:37:e1:b9: 3f:5b:8e:b3:e0:f7:2b:78:24:ac:70:7e:6b:8e:6c:33:d5:4c: c4:08:ae:9f:94:0c:a5:fe:b4:6d:4d:8b:11:64:c3:85:9e:ee: 33:8e:1d:47:cc:c0:d2:4f:41:82:97:ba:64:4a:4a:bf:55:02: 4f:0d:7c:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1MqmYBp7ayqwoNC1TmcPPgneScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNDExMjEwNjA1MzZaFw0yNDExMjQwODQwMzZaMDMxMTAvBgNV BAMTKDhDNUY2RkRCOURDQ0RCM0VGQkIzNjBFN0E1NzQ1QzJENUM4NDYzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLQdnvwMTO7gjzA36hqA+7wyF K3XEozTJzhyBtY5XAiYuCMHHKVDgAhLFWMiExT/DXd2ldZb7m38h/j9F7TWWHFam t8bh/da2LY/Eh91gVhsOxV2nvKyF0uuvrMF74Q11g5Gt4V2HfRi074BxJKum91Wi 6H8kpyucFGX+L80CzOBau+9wrhb+a2J3IdGYgemVNxir9O9ysQUirY5PpWMznvyd NdoMDNNFIQLSdrIh66jg9nQB1SG6B9x76luNPgPfgiNBNcs4w8yYdgFgSpDOm3SH +2t1/UBr/n/nfh/3aARJfw+FMQTVtBGnBqWMZvGNJxKXdxSGXcdw1Cv3JEr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjF9v253M2z77s2DnpXRcLVyEY7UwHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIPf6Beef/84aApTfJRSc77ZHHAK5SHCt7i 3wslO1z8U3hW/3zbuXA2LoL2G0/Mrc2R9ITMTWQaNgoNDlOKCRuQDkpD29pErVOQ lOPd8DWN7BZ2O8yc3dzAXFLNRE9ESOUs86HiP/dh6GikDKRpCOiq8D5PsGBm5gRX JVemlyHn02lgWnSIpIV/1jl1vIljT4Y5fcfnh4WEQR/72FDmo8HBQtCM9dyebCSt PBUYZQTax78fF+qpj8aRQOPXQyWc9LVuFjfhuT9bjrPg9yt4JKxwfmuObDPVTMQI rp+UDKX+tG1NixFkw4We7jOOHUfMwNJPQYKXumRKSr9VAk8NfK4= -----END CERTIFICATE-----Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org