$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: aaI5OUFdAG7ytUkMk1jN5D1ksqlNS565mQ3iWAi0A/I= Subject key identifier: 9E:AC:50:F1:7C:59:7D:CB:3D:91:38:00:CA:11:68:EF:F2:07:94:9D Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 459594190A39CBB5E5EAAC6AA2F25A29D6F54018 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0485 Signing time: Wed 20 Nov 2024 23:31:11 +0000 Manifest this update: Wed 20 Nov 2024 23:26:11 +0000 Manifest next update: Sun 24 Nov 2024 11:19:11 +0000 Files and hashes: 1: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: l/5HgKnT7J8DLMc5KXCSqh4O/akFH+dhFOMVMx/cS/M=) 2: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: 1v2P5f4T3Qg5EqKb9BrklOXT/SoN867INP6w3hrcsF8=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: aiqggAzdcdtm0B30Fkn6BPjIRWihb5Wkvu7iMkpkz24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:95:94:19:0a:39:cb:b5:e5:ea:ac:6a:a2:f2:5a:29:d6:f5:40:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Nov 20 23:26:11 2024 GMT Not After : Nov 24 11:19:11 2024 GMT Subject: CN=9EAC50F17C597DCB3D913800CA1168EFF207949D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ff:89:4e:eb:93:88:c9:6b:1d:18:fb:57:6e: 88:2f:44:4c:37:79:bf:a5:b2:02:d2:16:16:2d:f2: 3e:31:ed:2d:d9:db:2b:72:d8:6a:91:bd:98:b3:2c: 3a:19:1b:ec:cc:37:2e:37:1d:6a:76:b6:a7:33:2b: 53:4b:0f:86:53:89:37:bc:5d:e6:8e:b2:06:95:b1: 04:f6:6c:13:b3:65:e6:17:a4:70:e8:d9:e8:26:7d: 70:6b:ea:07:e6:4b:e9:81:ff:1f:77:b1:8b:78:1b: 74:7d:3f:34:2e:bb:0b:1b:00:43:bd:a6:a5:f5:a8: e8:b7:ba:d6:8d:e8:0a:7c:db:9f:d1:ac:15:bb:28: 76:2b:69:c5:b6:65:22:7b:dc:90:62:1d:1e:3b:61: f6:22:42:33:49:eb:38:5d:05:97:79:b7:ba:30:fc: 2b:2e:58:28:07:39:a1:c5:be:0e:b1:13:cd:46:37: 77:17:fd:9f:6c:91:2d:13:05:9d:00:84:df:68:11: 92:73:62:02:e3:4a:46:04:d6:0b:f6:2e:be:26:4f: 04:b2:e1:37:02:f2:84:ab:66:82:02:6b:5a:ea:c3: e7:54:1c:c2:27:ac:61:b4:9d:da:08:57:87:43:68: d6:47:6c:93:96:7b:5b:3f:8b:0a:31:c4:a9:dc:34: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AC:50:F1:7C:59:7D:CB:3D:91:38:00:CA:11:68:EF:F2:07:94:9D X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d6:ce:16:44:cb:36:ba:d3:f9:a5:6a:b9:aa:3b:47:cf:8e: 00:ed:ed:7d:89:3a:4b:9e:02:3c:08:9a:37:18:d8:5e:ff:3b: d5:8f:d3:18:56:04:dd:86:76:bd:2d:ac:83:12:35:e2:a5:61: 01:60:ad:2e:67:4c:3a:7a:35:e4:51:ae:83:e0:6c:c8:0e:68: de:ce:7c:8d:27:c4:3d:84:57:28:b1:f1:99:8f:c8:46:09:8f: b7:a1:ab:84:a0:44:ed:51:1c:89:ff:7a:28:af:81:94:78:b2: 19:a7:50:fc:01:e0:6a:30:a8:d6:37:d8:7f:1e:b4:c6:ea:43: 22:80:09:dc:a3:65:20:07:75:4b:e3:4c:0b:28:63:4e:76:82: 5a:30:2b:ee:5e:c0:f6:e1:2f:a8:cd:9b:4f:5d:7b:50:7a:33: b5:69:92:a8:1a:01:a5:22:53:c5:3a:36:34:ae:b5:94:a3:65: da:f6:6d:2a:e0:2d:37:e9:fd:43:6e:69:f0:2d:42:c5:63:06: 13:76:9b:78:2e:1a:a2:be:24:80:eb:df:47:70:81:fd:2a:40: 40:37:37:fc:22:16:24:63:04:5b:dd:b3:57:d9:d8:3a:43:0c: ab:cd:8d:ba:22:65:68:64:4c:81:2b:57:2e:04:0f:74:31:50: 91:7c:e1:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZWUGQo5y7Xl6qxqovJaKdb1QBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNDExMjAyMzI2MTFaFw0yNDExMjQxMTE5MTFaMDMxMTAvBgNV BAMTKDlFQUM1MEYxN0M1OTdEQ0IzRDkxMzgwMENBMTE2OEVGRjIwNzk0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1/4lO65OIyWsdGPtXbogvREw3 eb+lsgLSFhYt8j4x7S3Z2yty2GqRvZizLDoZG+zMNy43HWp2tqczK1NLD4ZTiTe8 XeaOsgaVsQT2bBOzZeYXpHDo2egmfXBr6gfmS+mB/x93sYt4G3R9PzQuuwsbAEO9 pqX1qOi3utaN6Ap825/RrBW7KHYracW2ZSJ73JBiHR47YfYiQjNJ6zhdBZd5t7ow /CsuWCgHOaHFvg6xE81GN3cX/Z9skS0TBZ0AhN9oEZJzYgLjSkYE1gv2Lr4mTwSy 4TcC8oSrZoICa1rqw+dUHMInrGG0ndoIV4dDaNZHbJOWe1s/iwoxxKncNOR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnqxQ8XxZfcs9kTgAyhFo7/IHlJ0wHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/WzhZEyza60/mlarmqO0fPjgDt7X2JOkue AjwImjcY2F7/O9WP0xhWBN2Gdr0trIMSNeKlYQFgrS5nTDp6NeRRroPgbMgOaN7O fI0nxD2EVyix8ZmPyEYJj7ehq4SgRO1RHIn/eiivgZR4shmnUPwB4GowqNY32H8e tMbqQyKACdyjZSAHdUvjTAsoY052glowK+5ewPbhL6jNm09de1B6M7VpkqgaAaUi U8U6NjSutZSjZdr2bSrgLTfp/UNuafAtQsVjBhN2m3guGqK+JIDr30dwgf0qQEA3 N/wiFiRjBFvds1fZ2DpDDKvNjboiZWhkTIErVy4ED3QxUJF84X0= -----END CERTIFICATE-----Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org