$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: oG3X+fkfXpqBXCTf/Jeqopt73dUSWSvdty8AVqEWlJ4= Subject key identifier: C9:3B:5C:E2:5F:D1:FB:67:E8:C0:98:5C:E6:30:64:81:49:CD:8D:46 Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 757ACA83488B145EFF1F814D62654534E09E98F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 0484 Signing time: Wed 20 Nov 2024 22:01:31 +0000 Manifest this update: Wed 20 Nov 2024 21:56:31 +0000 Manifest next update: Sun 24 Nov 2024 02:21:31 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: tjdYt0lcYryCBYsYLiHg79fFH+OX5gjH/Bt4NYN924g=) 2: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: /QtTv6oCLxiVm5kwAj+Jq38r6SjObsIQMNvTLIAnlOo=) 3: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: g60Cnw+7HFy+aplkv5aDRsnWS9W4K9EVD/2Mrb2gWUM=) 4: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: 6kUaNwp9r4sEkle6RKV8E8bpYlhWboudXinjhbELlO8=) 5: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: JQpuzPpgMJxGLxhMuj0nJ0ZdOtgrc6n706ZmSjIL56Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7a:ca:83:48:8b:14:5e:ff:1f:81:4d:62:65:45:34:e0:9e:98:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Nov 20 21:56:31 2024 GMT Not After : Nov 24 02:21:31 2024 GMT Subject: CN=C93B5CE25FD1FB67E8C0985CE630648149CD8D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d9:57:da:e1:ed:40:a3:89:e6:de:d6:0c:08: b7:77:d1:cb:82:d6:0c:4f:a6:11:ef:10:f5:69:e6: e4:01:c2:52:32:65:1c:e8:e2:96:fb:a8:17:d9:2f: b8:33:50:39:30:f1:c4:49:d8:31:a3:0a:3d:d4:e9: 00:76:7d:7c:35:6e:de:69:18:88:e6:f7:c1:62:e4: 90:60:11:68:a8:d8:82:ba:eb:a3:8d:8e:71:2f:a8: 90:8d:f2:cc:f7:5e:fb:91:20:c7:db:7c:f0:53:a6: a8:b3:f9:64:1e:af:6c:2e:0a:81:a5:0c:b3:b8:b0: 39:c0:97:c7:d6:bd:45:ab:ac:bb:81:6b:63:63:0a: 4f:47:9f:e1:6c:14:1c:a2:77:51:02:9b:4c:c2:29: 30:ea:ed:27:42:dd:7e:e9:a7:ea:b1:4b:66:58:cc: 74:7b:7e:34:d9:8c:be:87:b8:f3:e4:bb:91:a9:15: fe:e5:e7:10:d7:ea:55:de:5e:7e:b9:b8:38:9a:31: 8e:69:41:f8:30:b0:d3:78:50:51:b1:10:0c:86:98: 11:73:08:8c:5d:cd:87:e5:24:f3:9c:f9:ed:a3:d3: 2c:a5:90:bd:bc:cb:12:bd:c6:76:3f:f0:88:24:53: ff:1f:1d:26:92:db:f0:89:e8:d1:58:24:ad:24:ac: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3B:5C:E2:5F:D1:FB:67:E8:C0:98:5C:E6:30:64:81:49:CD:8D:46 X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:13:cb:76:2f:11:8d:1a:36:4f:6c:70:ba:66:6a:fc:58:91: 1c:4e:7e:d6:ad:39:a1:15:e6:22:09:1f:7d:15:61:00:1d:49: ba:68:61:9f:6c:e2:89:f8:f6:53:46:c8:a6:78:1b:8b:ef:9a: fd:4d:2b:ab:0d:d5:42:6d:27:23:c5:95:82:94:5f:bf:67:ed: 24:bb:39:ec:69:5a:61:3b:34:0b:72:4d:c5:d3:ac:c0:98:76: af:78:80:f8:ad:c0:eb:17:93:c0:fe:33:1d:89:91:41:1f:33: 26:db:bc:b9:5a:06:78:e8:48:c0:4f:ff:7f:5c:0b:b6:a0:eb: f3:e7:e3:42:36:64:71:89:68:65:ed:45:f6:66:a9:82:7b:22: 41:76:86:f1:a5:78:ee:6f:a1:0f:d8:22:89:7e:64:02:6b:47: 52:1d:dd:3a:1b:f4:d8:bb:9a:b9:c8:63:40:e9:ed:41:a6:9c: b8:fa:13:5e:04:ee:15:e3:ad:ae:d5:0b:d5:77:3b:34:41:a6: bf:06:21:be:1a:d3:81:a8:bd:3b:16:c3:c7:91:00:17:54:c5: 71:ba:67:3c:8c:ec:d3:fe:73:53:71:84:62:db:43:5e:31:68: 82:06:0e:37:b0:d7:53:de:a7:59:28:c9:7c:f4:6c:c5:64:e8: af:d9:23:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXrKg0iLFF7/H4FNYmVFNOCemPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNDExMjAyMTU2MzFaFw0yNDExMjQwMjIxMzFaMDMxMTAvBgNV BAMTKEM5M0I1Q0UyNUZEMUZCNjdFOEMwOTg1Q0U2MzA2NDgxNDlDRDhENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy2Vfa4e1Ao4nm3tYMCLd30cuC 1gxPphHvEPVp5uQBwlIyZRzo4pb7qBfZL7gzUDkw8cRJ2DGjCj3U6QB2fXw1bt5p GIjm98Fi5JBgEWio2IK666ONjnEvqJCN8sz3XvuRIMfbfPBTpqiz+WQer2wuCoGl DLO4sDnAl8fWvUWrrLuBa2NjCk9Hn+FsFByid1ECm0zCKTDq7SdC3X7pp+qxS2ZY zHR7fjTZjL6HuPPku5GpFf7l5xDX6lXeXn65uDiaMY5pQfgwsNN4UFGxEAyGmBFz CIxdzYflJPOc+e2j0yylkL28yxK9xnY/8IgkU/8fHSaS2/CJ6NFYJK0krOZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyTtc4l/R+2fowJhc5jBkgUnNjUYwHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEETy3YvEY0aNk9scLpmavxYkRxOftatOaEV 5iIJH30VYQAdSbpoYZ9s4on49lNGyKZ4G4vvmv1NK6sN1UJtJyPFlYKUX79n7SS7 OexpWmE7NAtyTcXTrMCYdq94gPitwOsXk8D+Mx2JkUEfMybbvLlaBnjoSMBP/39c C7ag6/Pn40I2ZHGJaGXtRfZmqYJ7IkF2hvGleO5voQ/YIol+ZAJrR1Id3Tob9Ni7 mrnIY0Dp7UGmnLj6E14E7hXjra7VC9V3OzRBpr8GIb4a04GovTsWw8eRABdUxXG6 ZzyM7NP+c1NxhGLbQ14xaIIGDjew11Pep1koyXz0bMVk6K/ZI6U= -----END CERTIFICATE-----Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org