$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: oBsqOhdmAu4U1+ZRWP1yZM1xgIKbQdl39YI/+ovdHJY= Subject key identifier: 2E:38:B4:D4:19:4D:DD:1C:67:0D:4C:E5:F6:A9:C1:F4:53:6D:AF:78 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 3DAAE33ED5B8C6C9C437E12025013EBA6DDF0322 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 048A Signing time: Wed 20 Nov 2024 21:41:53 +0000 Manifest this update: Wed 20 Nov 2024 21:36:53 +0000 Manifest next update: Sun 24 Nov 2024 04:24:53 +0000 Files and hashes: 1: 3130332e3132302e3230342e302f32342d3234203d3e2038313030.roa (hash: 6EhkXeE+t0/F1qZJMNgppu11iXtle+Lb18imNuIuhxw=) 2: 3130332e3132302e3230372e302f32342d3234203d3e2036393339.roa (hash: SOWGEkFY9bnPX+Ae5PlXM9qybBOs8zD006nU0iUd2qg=) 3: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: V1dSsc0CXkKN4OFXMxN7NPv6NWVPq81uefpWtuRT68o=) 4: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=) 5: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=) 6: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:aa:e3:3e:d5:b8:c6:c9:c4:37:e1:20:25:01:3e:ba:6d:df:03:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Nov 20 21:36:53 2024 GMT Not After : Nov 24 04:24:53 2024 GMT Subject: CN=2E38B4D4194DDD1C670D4CE5F6A9C1F4536DAF78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:6c:62:0c:68:6d:36:56:c1:76:af:55:3a: f7:77:a3:eb:cc:18:44:43:20:e9:c6:4d:e9:be:aa: 34:49:32:0d:f0:af:53:b2:45:05:8b:92:ef:6c:65: 95:34:80:65:5e:4d:49:4b:90:00:74:81:b1:7e:e7: f4:bb:d0:c3:50:8a:96:77:43:bc:ea:75:ed:c9:2e: b4:1d:9d:c9:91:22:f9:4f:6b:43:d1:87:2f:05:47: a8:10:10:d3:04:0a:97:4e:c5:f3:b8:48:5d:37:92: b9:b8:e4:71:7a:af:2b:81:47:8f:ca:93:5a:77:0d: 8b:df:b3:47:5b:99:3b:e9:93:9e:3c:f4:1e:ec:56: 9d:bf:a2:00:80:1a:e0:42:2e:5d:3e:fc:53:d9:20: f0:41:2b:f0:af:4c:29:e0:86:fe:5d:cd:b7:d5:be: 91:b7:fc:15:5f:50:cb:76:ea:3d:7c:b9:4d:7f:45: db:46:b1:fb:1a:d5:28:e4:43:c6:cc:7b:7c:5a:f5: 6d:db:12:20:b8:ec:78:8a:88:ba:5c:79:22:61:b6: eb:7e:1a:e6:0f:a9:e0:c1:35:98:2d:e2:97:ab:bf: 23:d4:c2:bc:f6:40:5d:da:2a:61:d6:2d:c3:b5:06: 27:74:d1:46:d3:ee:af:6c:b2:28:b2:de:a0:cc:a3: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:38:B4:D4:19:4D:DD:1C:67:0D:4C:E5:F6:A9:C1:F4:53:6D:AF:78 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:85:08:14:e4:7d:d1:45:fd:35:4d:ef:0c:b1:a1:11:96:6a: 42:6b:e2:31:a1:60:33:72:d5:c7:4c:eb:c1:a7:71:e9:fb:93: 0b:2e:93:1a:f5:69:b9:31:a0:47:fa:67:fe:4f:56:a3:f9:7d: 79:c1:01:43:f5:df:0f:6e:c7:d7:d0:a5:a6:ef:3d:de:87:67: 14:b4:0b:5e:6e:ac:48:3f:b1:a6:f2:e5:d7:54:80:75:1e:af: c1:24:a4:9a:cc:de:e3:93:b5:8d:b0:ad:55:2e:83:c8:0e:aa: 7f:2b:8f:b0:63:37:52:82:54:a4:0e:12:3d:55:d7:c2:1d:9e: 4f:a2:3e:d1:08:49:fe:1c:5d:c8:b2:b8:b7:1b:8a:a5:ed:e7: ea:93:49:8b:26:4b:15:5b:7a:44:87:7b:56:db:0f:e0:be:e0: 65:95:6c:76:34:55:60:06:2c:6b:4a:71:b0:29:49:94:7b:a9: 92:29:96:1a:41:f7:0b:91:ce:cb:88:6f:8c:8a:d0:e1:e6:fe: 26:49:53:ab:07:07:a5:1b:27:54:83:4c:92:ac:ad:9c:c7:19: 75:52:86:14:ce:55:0a:b4:de:ce:5a:ab:24:9c:c3:23:af:5e: 87:6a:cf:2f:08:8e:ae:f9:6a:e4:e1:68:92:de:80:d0:3c:59: 4d:22:f7:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUParjPtW4xsnEN+EgJQE+um3fAyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNDExMjAyMTM2NTNaFw0yNDExMjQwNDI0NTNaMDMxMTAvBgNV BAMTKDJFMzhCNEQ0MTk0REREMUM2NzBENENFNUY2QTlDMUY0NTM2REFGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJ2xiDGhtNlbBdq9VOvd3o+vM GERDIOnGTem+qjRJMg3wr1OyRQWLku9sZZU0gGVeTUlLkAB0gbF+5/S70MNQipZ3 Q7zqde3JLrQdncmRIvlPa0PRhy8FR6gQENMECpdOxfO4SF03krm45HF6ryuBR4/K k1p3DYvfs0dbmTvpk5489B7sVp2/ogCAGuBCLl0+/FPZIPBBK/CvTCnghv5dzbfV vpG3/BVfUMt26j18uU1/RdtGsfsa1SjkQ8bMe3xa9W3bEiC47HiKiLpceSJhtut+ GuYPqeDBNZgt4pervyPUwrz2QF3aKmHWLcO1Bid00UbT7q9ssiiy3qDMoymXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULji01BlN3RxnDUzl9qnB9FNtr3gwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSFCBTkfdFF/TVN7wyxoRGWakJr4jGhYDNy 1cdM68Gncen7kwsukxr1abkxoEf6Z/5PVqP5fXnBAUP13w9ux9fQpabvPd6HZxS0 C15urEg/saby5ddUgHUer8EkpJrM3uOTtY2wrVUug8gOqn8rj7BjN1KCVKQOEj1V 18Idnk+iPtEISf4cXciyuLcbiqXt5+qTSYsmSxVbekSHe1bbD+C+4GWVbHY0VWAG LGtKcbApSZR7qZIplhpB9wuRzsuIb4yK0OHm/iZJU6sHB6UbJ1SDTJKsrZzHGXVS hhTOVQq03s5aqyScwyOvXodqzy8Ijq75auThaJLegNA8WU0i90c= -----END CERTIFICATE-----Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org