$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: qQBEjroObvEPQegfbcMf3AhGnHVq5qJCU4A2nEzyaO0= Subject key identifier: 86:2E:17:93:03:CE:CA:A6:A2:97:48:E9:A0:BC:87:EC:B8:D8:FB:8B Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 06B6B2A0F25174DFB9841BC86B1E17A49E756001 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 0403 Signing time: Thu 21 Nov 2024 16:10:53 +0000 Manifest this update: Thu 21 Nov 2024 16:05:53 +0000 Manifest next update: Mon 25 Nov 2024 03:46:53 +0000 Files and hashes: 1: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: gVZYyt4kZqdfnSXcrc8NaAqmXlIND8xXPuwVf79LFD8=) 2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: q3D0gokLtaoTWGXZ65FjjWiIlEBRw2BR2w0tZwoughw=) 3: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: ummcd32J2PfVvp+R69LzxbIEO8p+ckqksmqTcY62DdQ=) 4: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: cbpmkM6PwYV6RY6q2yehaxTDDfvHXmTxn5hBermc51M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b6:b2:a0:f2:51:74:df:b9:84:1b:c8:6b:1e:17:a4:9e:75:60:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Nov 21 16:05:53 2024 GMT Not After : Nov 25 03:46:53 2024 GMT Subject: CN=862E179303CECAA6A29748E9A0BC87ECB8D8FB8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:09:11:16:26:b9:f2:a0:45:79:0b:d7:ed: dd:f7:e8:7b:e6:5e:d0:11:7c:f7:45:0c:43:4c:f8: 4a:e0:3a:6f:7a:4c:1e:b4:f3:cd:99:92:29:37:f2: 98:27:ec:d8:13:a2:d3:9a:d7:6b:9c:36:51:f9:ef: 9a:3f:42:2f:30:4f:32:2f:45:de:ad:33:de:6f:07: c0:83:4e:86:27:96:7b:df:dd:21:1d:f8:8a:d1:c9: 1e:0f:93:37:1d:d6:19:e6:c3:07:21:f8:d1:31:59: 1d:6f:12:28:80:92:bc:54:1c:4c:34:04:c5:a3:5c: 26:7c:7b:b0:ae:c9:b2:8f:c9:6c:8a:a0:ce:a2:81: 5e:7b:a2:1c:53:a2:d8:89:76:85:c7:c1:f1:60:b8: 26:f0:3a:38:5d:ac:7d:5e:a5:74:38:cc:08:45:14: c6:b7:15:c6:1d:ef:a5:79:da:4f:39:f0:1a:81:5f: c7:d4:af:3f:3d:54:c5:df:a9:ea:e8:e4:3d:02:51: 07:06:02:29:77:47:b6:24:5c:1e:30:29:39:b3:36: 38:42:86:3f:9d:ba:1a:aa:5f:96:5e:ab:f7:8f:ad: 68:73:3b:4e:6d:fb:84:58:27:91:33:74:45:7c:35: 69:4c:80:3e:38:7f:4c:18:ff:de:60:9f:0b:04:3e: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2E:17:93:03:CE:CA:A6:A2:97:48:E9:A0:BC:87:EC:B8:D8:FB:8B X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d6:4f:7c:c2:2f:e8:50:fe:8d:25:53:8d:03:2c:56:23:e7: d8:05:8b:ac:b3:44:bf:f0:d8:4c:4c:6e:1f:35:60:fa:b5:f3: 36:9d:8d:8b:04:2b:c5:fe:31:d9:00:e5:36:c4:26:b4:f7:f0: 9c:58:be:d0:9a:a6:44:0a:72:c8:73:b7:dc:03:49:30:e8:e4: da:3f:90:b7:c7:27:96:4c:99:99:92:d4:e4:80:e7:ae:b6:a7: 5a:fe:19:55:a7:19:a7:aa:e5:7e:86:53:39:c7:a2:2a:6e:26: 2c:2e:dc:b1:85:7b:23:53:f6:6f:8c:0b:a2:ce:fb:36:cb:e3: cc:35:19:87:e9:a9:e3:52:0a:ba:7c:36:17:b4:6c:44:bc:1e: f2:d8:7d:ae:0c:6f:66:10:45:e3:1c:70:86:03:f2:71:90:4c: 75:6b:33:36:c4:93:aa:70:58:65:e6:2d:3f:0b:ec:4a:fb:e9: 7f:00:25:95:a3:f6:4b:00:5a:95:d4:63:52:3b:11:b6:ba:c3: 6f:d9:b7:05:60:dc:38:27:6f:ea:fb:b0:b3:5f:15:61:26:c0: 40:99:c5:cf:22:8f:a4:a8:22:ed:ab:97:79:0f:95:6d:29:cf: ec:f8:47:6b:00:a2:6b:ed:5d:71:d6:3a:51:2c:c2:a5:d7:b8: 77:31:6a:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrayoPJRdN+5hBvIax4XpJ51YAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNDExMjExNjA1NTNaFw0yNDExMjUwMzQ2NTNaMDMxMTAvBgNV BAMTKDg2MkUxNzkzMDNDRUNBQTZBMjk3NDhFOUEwQkM4N0VDQjhEOEZCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHQkRFia58qBFeQvX7d336Hvm XtARfPdFDENM+ErgOm96TB60882Zkik38pgn7NgTotOa12ucNlH575o/Qi8wTzIv Rd6tM95vB8CDToYnlnvf3SEd+IrRyR4Pkzcd1hnmwwch+NExWR1vEiiAkrxUHEw0 BMWjXCZ8e7CuybKPyWyKoM6igV57ohxTotiJdoXHwfFguCbwOjhdrH1epXQ4zAhF FMa3FcYd76V52k858BqBX8fUrz89VMXfqero5D0CUQcGAil3R7YkXB4wKTmzNjhC hj+duhqqX5Zeq/ePrWhzO05t+4RYJ5EzdEV8NWlMgD44f0wY/95gnwsEPizrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhi4XkwPOyqail0jpoLyH7LjY+4swHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTWT3zCL+hQ/o0lU40DLFYj59gFi6yzRL/w 2ExMbh81YPq18zadjYsEK8X+MdkA5TbEJrT38JxYvtCapkQKcshzt9wDSTDo5No/ kLfHJ5ZMmZmS1OSA5662p1r+GVWnGaeq5X6GUznHoipuJiwu3LGFeyNT9m+MC6LO +zbL48w1GYfpqeNSCrp8Nhe0bES8HvLYfa4Mb2YQReMccIYD8nGQTHVrMzbEk6pw WGXmLT8L7Er76X8AJZWj9ksAWpXUY1I7Eba6w2/ZtwVg3Dgnb+r7sLNfFWEmwECZ xc8ij6SoIu2rl3kPlW0pz+z4R2sAomvtXXHWOlEswqXXuHcxalQ= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:47 2024 by rpki-client on console-fra.rpki-client.org