$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: zW0SRCnl9c2aAghhxqTUmWNpYIUYO1IFHPc0MKhi5co= Subject key identifier: 82:0C:C8:77:0E:F9:60:67:8C:23:A2:C6:DD:F1:72:4F:2B:47:B6:9C Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 5F28A5D1934A6AD5AA488BA67FB462A7DA11F5DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 01A8 Signing time: Thu 21 Nov 2024 22:30:02 +0000 Manifest this update: Thu 21 Nov 2024 22:25:02 +0000 Manifest next update: Mon 25 Nov 2024 01:06:02 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: BT7epVVkwJX2+64Jqs9oRaoenm6Dids+96U+NSc4Ktw=) 2: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: h8BR3peRjYyydo3ITDPQ3+PououFI5Al5Ql0Thh6BQE=) 3: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: 5kf5CGKJdZ00zwNNKAFo7QoadQBzyTrYO6+fwLSFx4w=) 4: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: H7KRFnoEOXv9DV+h1CVYHZKUpSc3Ussz3Tyc77zBQK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:28:a5:d1:93:4a:6a:d5:aa:48:8b:a6:7f:b4:62:a7:da:11:f5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Nov 21 22:25:02 2024 GMT Not After : Nov 25 01:06:02 2024 GMT Subject: CN=820CC8770EF960678C23A2C6DDF1724F2B47B69C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d4:60:0c:14:a1:c4:92:74:4f:05:42:36:93: 56:74:a7:6b:f1:2d:bb:f0:08:28:ca:92:54:22:a4: 5b:b6:ba:c6:94:b4:cb:b2:bd:55:a9:c9:a0:e5:53: ed:4b:33:cc:65:1e:24:6e:cc:0c:e9:e7:04:24:a5: 35:44:7b:fc:8e:3c:ec:99:c9:18:b3:54:34:47:9a: 78:2d:23:65:64:e2:ef:7b:98:18:94:03:ca:97:97: e2:89:00:01:ef:34:4a:f0:ab:ab:84:98:26:99:29: 25:3d:71:c7:26:3b:5f:37:08:d5:94:e5:ed:fb:2a: 7a:95:41:df:59:1f:9d:79:a1:87:e6:f1:18:a6:b2: 61:04:90:29:a7:d5:38:bd:d2:32:77:5d:d6:c8:f0: b9:58:c6:2f:f2:ca:de:6e:36:40:1f:14:eb:33:bc: a3:12:0d:49:a3:95:ee:9e:1b:06:05:ce:e6:08:53: 1c:a6:32:34:41:18:ff:dd:74:eb:9d:16:8c:9c:33: e3:2e:7f:d6:3b:45:f4:4b:91:9f:f6:af:6e:c4:e3: 25:fe:89:fc:e1:fb:e3:57:a8:14:49:d6:7c:52:f6: 36:e3:2c:de:ca:2f:cf:61:70:08:42:9e:13:34:ac: 7d:78:87:89:56:46:a8:e5:56:e9:76:4c:ab:aa:9f: ad:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0C:C8:77:0E:F9:60:67:8C:23:A2:C6:DD:F1:72:4F:2B:47:B6:9C X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:36:40:cd:9c:1b:09:13:00:6b:9b:1f:60:6f:e8:63:1c:26: ab:70:17:c7:29:54:60:66:1c:de:25:ed:a0:57:97:bd:75:41: 89:23:77:51:ae:11:21:d6:77:fa:e8:ad:65:12:2a:83:3a:b2: 51:d2:c2:bb:7f:1e:fb:51:ae:7d:fa:15:1a:13:3b:5f:bb:c7: 3f:d8:9f:04:59:1f:d2:97:91:97:88:af:64:31:1c:a7:db:5e: 67:4e:62:38:de:a8:81:fd:e3:a7:95:21:28:cb:be:fb:0a:a0: 9f:00:27:24:6a:17:84:53:40:9e:9d:a4:8f:31:22:35:ba:c5: 7d:0b:4e:8a:9f:af:2f:99:7e:aa:0a:58:62:78:19:61:00:76: 79:de:4b:6e:5b:58:d7:44:27:3c:ae:69:50:c5:3c:6e:ee:be: 4d:5b:d6:75:1c:f3:0a:79:42:db:e9:22:a9:de:2f:93:cd:ec: 4d:bf:52:07:94:47:f7:28:5b:49:a0:2d:e0:e5:02:0b:f4:5e: 87:26:0b:b2:9c:09:b1:e3:a2:86:cc:1f:35:9e:4f:3d:87:79: bf:57:7d:07:7f:10:b7:cb:c5:f8:81:63:92:f6:4a:b9:27:7e: bc:25:91:28:c9:95:1e:21:cb:c1:d4:aa:de:ff:f2:28:16:08: e9:0d:02:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyil0ZNKatWqSIumf7Rip9oR9dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNDExMjEyMjI1MDJaFw0yNDExMjUwMTA2MDJaMDMxMTAvBgNV BAMTKDgyMENDODc3MEVGOTYwNjc4QzIzQTJDNkRERjE3MjRGMkI0N0I2OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp1GAMFKHEknRPBUI2k1Z0p2vx LbvwCCjKklQipFu2usaUtMuyvVWpyaDlU+1LM8xlHiRuzAzp5wQkpTVEe/yOPOyZ yRizVDRHmngtI2Vk4u97mBiUA8qXl+KJAAHvNErwq6uEmCaZKSU9cccmO183CNWU 5e37KnqVQd9ZH515oYfm8RimsmEEkCmn1Ti90jJ3XdbI8LlYxi/yyt5uNkAfFOsz vKMSDUmjle6eGwYFzuYIUxymMjRBGP/ddOudFoycM+Muf9Y7RfRLkZ/2r27E4yX+ ifzh++NXqBRJ1nxS9jbjLN7KL89hcAhCnhM0rH14h4lWRqjlVul2TKuqn62ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUggzIdw75YGeMI6LG3fFyTytHtpwwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACk2QM2cGwkTAGubH2Bv6GMcJqtwF8cpVGBm HN4l7aBXl711QYkjd1GuESHWd/rorWUSKoM6slHSwrt/HvtRrn36FRoTO1+7xz/Y nwRZH9KXkZeIr2QxHKfbXmdOYjjeqIH946eVISjLvvsKoJ8AJyRqF4RTQJ6dpI8x IjW6xX0LToqfry+ZfqoKWGJ4GWEAdnneS25bWNdEJzyuaVDFPG7uvk1b1nUc8wp5 QtvpIqneL5PN7E2/UgeUR/coW0mgLeDlAgv0XocmC7KcCbHjoobMHzWeTz2Heb9X fQd/ELfLxfiBY5L2SrknfrwlkSjJlR4hy8HUqt7/8igWCOkNAvg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org