$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: coW9ohXnP+9e19oNmHdleVqrGbe0353YZFzCRqfKZ7Y= Subject key identifier: F2:A3:AC:E8:D8:7B:30:2F:AD:FD:C5:67:F6:12:18:05:B3:C3:4F:96 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 0375097DCEFEEE5EF11A5CC28C7B431518EADAB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 0486 Signing time: Thu 21 Nov 2024 02:02:08 +0000 Manifest this update: Thu 21 Nov 2024 01:57:08 +0000 Manifest next update: Sun 24 Nov 2024 11:19:08 +0000 Files and hashes: 1: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: Yd01J5hPcZQ8iNNroa+Nv/YFeQyu4ZExz0qlMlvbB+U=) 2: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: pjZ73IyjdAgzpegl8nI+lq54xebCl7cbjN5x4DNzNPA=) 3: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: C9S93KSRFkwttxm+dA73MfUYSpF8WqYsMyjSI8YO+Ws=) 4: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: Ly2WcAdl8FCGes0ivRK2PwJB6QG05Bueh0UeU8Ux16A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:75:09:7d:ce:fe:ee:5e:f1:1a:5c:c2:8c:7b:43:15:18:ea:da:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Nov 21 01:57:08 2024 GMT Not After : Nov 24 11:19:08 2024 GMT Subject: CN=F2A3ACE8D87B302FADFDC567F6121805B3C34F96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:00:9e:c6:bd:db:79:3d:51:6c:c0:f8:66: 09:bd:47:d8:71:d2:8b:c1:c6:d9:98:0c:1b:2a:e3: 80:ea:b0:27:e4:38:5e:2b:8b:33:f0:24:f5:cb:6c: 7c:71:a3:43:08:59:a6:52:0f:a8:87:42:3f:d1:fa: 2c:d3:1c:f9:30:44:58:ad:ff:39:d1:d1:7e:6f:0b: bc:98:c2:f6:e8:5b:04:50:34:9e:f9:09:76:d1:a8: e6:93:f6:02:5a:5c:47:e9:05:1b:c1:28:d5:12:d9: 61:b0:5f:55:c7:7d:dd:00:47:0c:3c:f4:d3:0b:d1: 88:64:24:53:65:4e:a1:17:ef:0d:8e:8f:14:72:16: 3e:7e:a8:1a:94:13:e5:0d:00:0c:49:df:dd:5a:e8: b7:49:59:84:61:fb:09:6a:40:da:a1:23:c8:51:79: 0e:1d:af:4b:7d:5a:8c:11:ea:d3:00:f7:f7:2b:32: 23:1d:9f:f8:54:47:ae:c9:ec:fc:3b:b8:18:b9:fa: 97:c7:94:50:c4:b1:27:2f:a1:bd:66:77:88:86:bc: 6a:ed:87:57:90:71:a6:1f:6e:13:cc:d6:52:7a:20: d7:c8:d0:82:20:b2:71:7f:b9:bb:82:40:3d:e7:cb: a9:93:b6:19:62:75:1f:1c:be:04:8f:de:bb:18:b6: 1a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A3:AC:E8:D8:7B:30:2F:AD:FD:C5:67:F6:12:18:05:B3:C3:4F:96 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:fe:9a:12:39:8c:c0:4e:c1:44:51:cd:4e:fa:0f:f4:e4:da: 02:4c:16:fa:62:aa:d8:ba:14:cd:71:4e:36:96:7b:3e:2d:58: a1:af:e2:c8:4d:81:82:34:01:a9:50:19:9c:e8:85:95:c1:29: 74:ba:5e:f3:a5:12:78:f6:f4:aa:0a:cc:25:90:f8:51:41:cd: f6:e5:50:6a:f2:24:05:9d:ae:e3:81:01:f5:8a:d2:d3:c1:d0: a3:67:c9:ae:16:f9:26:47:ea:5a:da:d7:3a:4a:1b:fa:24:92: 15:66:41:aa:fc:76:36:d3:e0:a9:49:1d:14:54:20:3f:a5:26: 26:7d:89:67:c5:4b:f2:38:a9:d2:4e:53:a9:b4:58:a2:46:62: aa:5a:ab:4f:be:6e:ee:b6:e8:8c:87:60:48:c9:a9:e4:bd:19: 3f:66:40:ec:1e:b4:31:5e:c5:ff:15:42:b2:1f:dc:8c:a8:3e: 2d:47:07:db:4f:e9:37:5f:db:93:d1:95:f5:86:64:13:bc:5a: 8e:4d:6e:b7:02:de:38:de:da:1a:a2:2b:15:c5:a8:a0:ca:bf: fc:ae:6c:bb:00:05:5f:b3:77:9d:a1:da:c3:fb:32:23:16:75: 87:39:cb:54:c3:77:19:86:1b:1e:83:cb:4a:5d:d1:64:db:b7: 54:91:b9:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3UJfc7+7l7xGlzCjHtDFRjq2rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNDExMjEwMTU3MDhaFw0yNDExMjQxMTE5MDhaMDMxMTAvBgNV BAMTKEYyQTNBQ0U4RDg3QjMwMkZBREZEQzU2N0Y2MTIxODA1QjNDMzRGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9wCexr3beT1RbMD4Zgm9R9hx 0ovBxtmYDBsq44DqsCfkOF4rizPwJPXLbHxxo0MIWaZSD6iHQj/R+izTHPkwRFit /znR0X5vC7yYwvboWwRQNJ75CXbRqOaT9gJaXEfpBRvBKNUS2WGwX1XHfd0ARww8 9NML0YhkJFNlTqEX7w2OjxRyFj5+qBqUE+UNAAxJ391a6LdJWYRh+wlqQNqhI8hR eQ4dr0t9WowR6tMA9/crMiMdn/hUR67J7Pw7uBi5+pfHlFDEsScvob1md4iGvGrt h1eQcaYfbhPM1lJ6INfI0IIgsnF/ubuCQD3ny6mTthlidR8cvgSP3rsYthq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qOs6Nh7MC+t/cVn9hIYBbPDT5YwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOv+mhI5jMBOwURRzU76D/Tk2gJMFvpiqti6 FM1xTjaWez4tWKGv4shNgYI0AalQGZzohZXBKXS6XvOlEnj29KoKzCWQ+FFBzfbl UGryJAWdruOBAfWK0tPB0KNnya4W+SZH6lra1zpKG/okkhVmQar8djbT4KlJHRRU ID+lJiZ9iWfFS/I4qdJOU6m0WKJGYqpaq0++bu626IyHYEjJqeS9GT9mQOwetDFe xf8VQrIf3IyoPi1HB9tP6Tdf25PRlfWGZBO8Wo5NbrcC3jje2hqiKxXFqKDKv/yu bLsABV+zd52h2sP7MiMWdYc5y1TDdxmGGx6Dy0pd0WTbt1SRuXM= -----END CERTIFICATE-----Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org