$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: Bikxq/gUiW6LLKcswfrHfS7Aps4ZUwBOUicWrhIHoYY= Subject key identifier: C9:B2:A3:17:57:4C:75:91:B2:F0:94:85:5D:D0:E9:36:95:08:7C:EF Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 13025FB784AC6CB6F41DFE8A0D43E1F25C7C3B2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: 47 Signing time: Thu 21 Nov 2024 19:52:26 +0000 Manifest this update: Thu 21 Nov 2024 19:47:26 +0000 Manifest next update: Mon 25 Nov 2024 03:27:26 +0000 Files and hashes: 1: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: BzB0xYRkmkpVdyi6fQJ5OxPEeMcyu/lKUmFuR1MRtFA=) 2: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: n+/1ZzwG4EgdsUBMybZxOh7Up3KgHvNTAiUa7eDfLu8=) 3: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: AZJYVUe7XZxjeTM1O9T3DRRPPtWKdkCmvauGjeZBUYs=) 4: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: ACNBkKr7zhAeXvXwZZLW9qIPFLxCT0Ploz7dXJTXEoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:02:5f:b7:84:ac:6c:b6:f4:1d:fe:8a:0d:43:e1:f2:5c:7c:3b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Nov 21 19:47:26 2024 GMT Not After : Nov 25 03:27:26 2024 GMT Subject: CN=C9B2A317574C7591B2F094855DD0E93695087CEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:d8:4e:58:38:26:d5:c7:f7:73:69:0a:cf: 2d:92:fe:54:af:69:7f:1f:7a:63:21:7c:26:7a:08: e4:01:a9:77:b2:db:0d:0e:0b:db:cc:1d:ec:f6:39: d5:e2:ce:34:c8:b3:14:9b:23:83:9c:0a:43:d2:b2: e4:62:d3:9b:b8:c9:51:af:54:56:f0:b5:8b:63:36: 89:52:50:e8:f6:7d:33:82:f5:b5:fa:4f:28:98:25: ad:d1:84:7a:ff:89:98:c0:f7:e5:03:69:d0:6c:35: d8:59:65:c2:fb:55:8e:b3:f0:84:c2:07:7e:9d:8c: 25:cc:db:5a:96:bc:8f:e3:33:87:3f:cd:5b:4e:b4: 02:9a:18:5c:cb:5c:fc:db:1a:e1:ca:08:fe:9d:d3: ce:ae:37:1b:f6:2f:84:e1:85:a7:60:5e:ba:52:9c: 02:4c:44:9e:85:e7:25:f5:6c:3b:0a:af:ee:64:e6: d8:86:36:4d:f1:00:00:a0:fd:38:e3:2d:24:b3:c7: d2:60:ff:32:95:57:ce:f3:8d:be:32:aa:ba:60:43: c9:48:0e:c9:f6:c0:4c:47:e9:a9:33:6d:da:9b:90: bd:48:26:04:5b:99:a9:7d:11:0f:42:ab:ec:ef:8e: 48:88:49:fc:d1:0b:12:bb:52:2c:18:b4:c9:67:79: 8c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:A3:17:57:4C:75:91:B2:F0:94:85:5D:D0:E9:36:95:08:7C:EF X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:df:87:e1:22:f4:05:af:62:cd:d6:1d:e5:af:8c:33:8e:37: d6:3f:df:66:c2:1c:0f:1c:18:30:7f:43:88:3d:44:9c:7b:f5: 48:b5:91:ab:23:49:b1:2d:30:9d:6c:8c:d6:5e:75:2c:ee:be: 8e:01:20:f7:c7:10:3f:01:4e:c0:a7:42:40:48:c9:d7:23:a7: 82:56:8c:c0:37:bc:59:3d:79:04:df:f4:d2:63:71:36:67:c8: 03:e8:15:92:8c:9a:a2:37:55:8d:c4:f6:cf:ba:9d:09:7e:59: 1f:1a:84:99:cb:7c:d8:6e:5f:0a:6b:bc:43:d5:17:c1:17:75: 6e:9e:76:c5:b7:0e:f8:76:61:fd:af:30:f0:14:8e:3b:03:45: e0:ae:4a:31:25:76:0a:e9:2e:19:a7:fa:1c:be:e5:d2:16:4c: 15:7d:46:30:1e:f8:b9:aa:9b:0c:ef:29:ca:d2:83:18:89:92: 9a:f0:4c:35:a9:45:41:37:90:64:e1:09:6b:8f:c7:92:26:46: 09:ec:ef:6a:58:87:28:9c:bf:42:44:27:b5:a0:87:7b:f2:35: 80:56:20:49:aa:c3:62:8c:ce:2a:8c:61:23:3e:9d:8f:fa:99: 93:b4:39:d5:30:e7:1b:bb:0c:6a:ef:d6:05:a5:25:d2:5a:8a: 45:ef:57:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwJft4SsbLb0Hf6KDUPh8lx8Oy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNDExMjExOTQ3MjZaFw0yNDExMjUwMzI3MjZaMDMxMTAvBgNV BAMTKEM5QjJBMzE3NTc0Qzc1OTFCMkYwOTQ4NTVERDBFOTM2OTUwODdDRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnthOWDgm1cf3c2kKzy2S/lSv aX8femMhfCZ6COQBqXey2w0OC9vMHez2OdXizjTIsxSbI4OcCkPSsuRi05u4yVGv VFbwtYtjNolSUOj2fTOC9bX6TyiYJa3RhHr/iZjA9+UDadBsNdhZZcL7VY6z8ITC B36djCXM21qWvI/jM4c/zVtOtAKaGFzLXPzbGuHKCP6d086uNxv2L4ThhadgXrpS nAJMRJ6F5yX1bDsKr+5k5tiGNk3xAACg/TjjLSSzx9Jg/zKVV87zjb4yqrpgQ8lI Dsn2wExH6akzbdqbkL1IJgRbmal9EQ9Cq+zvjkiISfzRCxK7UiwYtMlneYzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUybKjF1dMdZGy8JSFXdDpNpUIfO8wHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzfh+Ei9AWvYs3WHeWvjDOON9Y/32bCHA8c GDB/Q4g9RJx79Ui1kasjSbEtMJ1sjNZedSzuvo4BIPfHED8BTsCnQkBIydcjp4JW jMA3vFk9eQTf9NJjcTZnyAPoFZKMmqI3VY3E9s+6nQl+WR8ahJnLfNhuXwprvEPV F8EXdW6edsW3Dvh2Yf2vMPAUjjsDReCuSjEldgrpLhmn+hy+5dIWTBV9RjAe+Lmq mwzvKcrSgxiJkprwTDWpRUE3kGThCWuPx5ImRgns72pYhyicv0JEJ7Wgh3vyNYBW IEmqw2KMziqMYSM+nY/6mZO0OdUw5xu7DGrv1gWlJdJaikXvV78= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:40 2024 by rpki-client on console-ams.rpki-client.org