$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: zMFS6WgGOopjm05+HVCOwDZZmF9Npo/AurUHug27HkY= Subject key identifier: A8:44:18:1C:69:C8:07:2A:A3:29:5D:B8:91:04:C1:3C:27:D2:A8:92 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 492E30F1337D099CE8FB2AE3296E2462210CB096 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 0484 Signing time: Thu 21 Nov 2024 02:31:10 +0000 Manifest this update: Thu 21 Nov 2024 02:26:10 +0000 Manifest next update: Sun 24 Nov 2024 10:48:10 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: qN7vV3gf9Qe9/PJ9kUIe8/LfwTJoSqqVaheQyXiy9KA=) 2: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: n4nnv1/DHkPaP9ComxFfGIKMWPdwxrhqWA2R8R+Dr+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:2e:30:f1:33:7d:09:9c:e8:fb:2a:e3:29:6e:24:62:21:0c:b0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Nov 21 02:26:10 2024 GMT Not After : Nov 24 10:48:10 2024 GMT Subject: CN=A844181C69C8072AA3295DB89104C13C27D2A892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:2c:b7:49:0c:15:a7:9c:72:51:e0:2b:8a: de:c2:a3:d5:90:aa:36:7a:d5:5b:49:7c:98:11:21: 8f:98:86:49:be:6d:54:ba:bf:d8:41:31:a8:5c:c0: 4b:27:19:af:79:a4:00:45:93:b5:e5:9c:92:7d:c5: e9:1c:7b:87:c6:b2:db:82:8f:8b:90:7d:c3:93:93: cb:c8:93:d9:5d:86:09:3e:ff:85:9b:f2:0e:29:85: fd:55:5e:34:da:8e:69:43:93:82:0a:55:c6:f9:4c: 78:d8:5b:08:35:8c:b6:d3:9a:d1:ca:36:d7:4f:b6: 7b:3c:6f:3a:50:22:20:02:86:2c:e6:2a:ff:5c:da: 43:ac:c2:2a:1c:5a:ff:80:d8:26:d7:fd:cd:7f:62: 21:c6:3e:4d:bf:ff:1b:f6:96:b2:a6:a5:dd:c0:5b: 49:1a:3b:37:6d:9e:0e:f1:d4:d3:4f:ec:a5:2a:c3: d8:c8:c1:1f:53:14:04:d3:fb:9d:a7:c9:c7:07:36: 7f:43:c9:00:fa:14:a5:9f:3d:ce:0c:e9:70:25:1b: 83:b3:1f:88:e0:1d:9c:d7:d6:92:f3:3a:8d:2b:70: 5d:f3:91:13:b0:08:01:3f:62:3e:60:94:8b:90:3b: d9:ac:a9:0a:0c:e4:46:33:32:eb:9e:e3:0c:4b:51: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:44:18:1C:69:C8:07:2A:A3:29:5D:B8:91:04:C1:3C:27:D2:A8:92 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a2:a2:3d:ee:ee:89:38:8b:0f:7b:19:b2:6f:70:eb:7b:1e: 93:8e:d9:c4:e0:ae:df:cc:3e:c3:2f:5d:d8:58:dd:3b:44:81: 95:81:2b:0a:3d:dc:be:77:11:35:eb:f6:94:73:8a:a0:51:1c: 78:7c:da:84:0e:2b:7d:64:64:a7:81:ea:70:94:81:8b:0c:b9: 89:9d:40:4d:77:68:ac:91:0b:9d:dd:59:9c:f1:97:4b:1b:72: 1e:f8:30:58:95:77:70:27:0d:f0:1d:43:7d:ae:2b:0e:6b:15: d5:94:e6:cb:0f:a9:7a:5c:eb:76:3c:4c:2d:12:ec:df:5f:7f: 93:66:cf:c8:0d:1b:6e:b2:16:94:ba:ca:fc:c3:25:37:82:5f: 72:fd:64:f0:b4:46:cd:c8:32:be:65:9b:71:6a:b0:ca:fa:3d: 8f:c5:39:f0:42:a7:10:17:78:32:a6:1b:70:ab:94:b1:ea:5b: cd:50:fc:0e:35:9f:90:dc:34:2a:95:6f:d1:d0:62:3c:1a:d2: ca:91:92:df:9a:e3:c8:65:16:f6:c8:e4:2b:9f:a6:0a:3c:5e: ff:26:62:7e:d8:e2:bb:18:d8:ea:b9:05:3c:09:11:32:21:bc: 56:c8:0a:5d:71:a9:2d:2c:a3:e6:e3:05:96:3c:1c:01:3f:e5: 3b:87:9a:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSS4w8TN9CZzo+yrjKW4kYiEMsJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNDExMjEwMjI2MTBaFw0yNDExMjQxMDQ4MTBaMDMxMTAvBgNV BAMTKEE4NDQxODFDNjlDODA3MkFBMzI5NURCODkxMDRDMTNDMjdEMkE4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGiy3SQwVp5xyUeArit7Co9WQ qjZ61VtJfJgRIY+Yhkm+bVS6v9hBMahcwEsnGa95pABFk7XlnJJ9xekce4fGstuC j4uQfcOTk8vIk9ldhgk+/4Wb8g4phf1VXjTajmlDk4IKVcb5THjYWwg1jLbTmtHK NtdPtns8bzpQIiAChizmKv9c2kOswiocWv+A2CbX/c1/YiHGPk2//xv2lrKmpd3A W0kaOzdtng7x1NNP7KUqw9jIwR9TFATT+52nyccHNn9DyQD6FKWfPc4M6XAlG4Oz H4jgHZzX1pLzOo0rcF3zkROwCAE/Yj5glIuQO9msqQoM5EYzMuue4wxLUVTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqEQYHGnIByqjKV24kQTBPCfSqJIwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaioj3u7ok4iw97GbJvcOt7HpOO2cTgrt/M PsMvXdhY3TtEgZWBKwo93L53ETXr9pRziqBRHHh82oQOK31kZKeB6nCUgYsMuYmd QE13aKyRC53dWZzxl0sbch74MFiVd3AnDfAdQ32uKw5rFdWU5ssPqXpc63Y8TC0S 7N9ff5Nmz8gNG26yFpS6yvzDJTeCX3L9ZPC0Rs3IMr5lm3FqsMr6PY/FOfBCpxAX eDKmG3CrlLHqW81Q/A41n5DcNCqVb9HQYjwa0sqRkt+a48hlFvbI5Cufpgo8Xv8m Yn7Y4rsY2Oq5BTwJETIhvFbICl1xqS0so+bjBZY8HAE/5TuHmgs= -----END CERTIFICATE-----Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org