$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft File: 139934661CE07BEBBFA824F7225502B15AE8B653.mft (raw, json) Hash identifier: QdK7hMORYDrJuvvtfmnpMeeXTF2umobwSBSXi+3BnjQ= Subject key identifier: 87:21:CC:22:CA:60:36:30:38:AB:50:86:66:21:41:7A:E1:CA:7D:AC Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 Certificate issuer: /CN=139934661CE07BEBBFA824F7225502B15AE8B653 Certificate serial: 4D30277EE80BF3212184065425B5A0617F21819D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft Manifest number: 01F2 Signing time: Mon 25 Nov 2024 04:52:27 +0000 Manifest this update: Mon 25 Nov 2024 04:47:27 +0000 Manifest next update: Thu 28 Nov 2024 05:26:27 +0000 Files and hashes: 1: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: 5cGFOXICgLmaNpmZAogfW5ytKDPAYz1pnqRlwPOSxTo=) 2: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: eYrdqV2eJFnxCahDbApV4knHEj3k//y61qNLVNaT8KE=) 3: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: 3EvU4TBtv6BXZiyYaAbxIfh7U9gKO1iNAgsQ6ldwMyE=) 4: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: IGBAb35REu0LXD+uYT8xZZGBJm7m8pEdoEflMHvh5dA=) 5: 139934661CE07BEBBFA824F7225502B15AE8B653.crl (hash: IMMy+HWd9vk8NbdEzQfxRNkXos8UTo4rW4egvc7RDOg=) 6: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: P+IUE1LGD8ElXeQQSjrtgfcVyLtwl4130alY1sqZ59Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:30:27:7e:e8:0b:f3:21:21:84:06:54:25:b5:a0:61:7f:21:81:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653 Validity Not Before: Nov 25 04:47:27 2024 GMT Not After : Nov 28 05:26:27 2024 GMT Subject: CN=8721CC22CA60363038AB50866621417AE1CA7DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:57:b6:d7:11:6d:d3:cf:e1:cf:84:59:c2: e1:a3:31:5a:53:b0:22:ac:db:ae:2e:47:50:fc:59: bc:2d:3b:84:50:64:76:59:bc:b7:59:a5:48:0c:0b: 59:3c:95:69:0a:fd:c2:74:1f:98:6a:82:0a:4d:72: 56:e7:ff:2f:84:ca:19:68:a8:0b:4a:a5:2e:22:2a: d8:7c:c3:17:41:7e:1d:31:3f:9c:18:4d:a1:54:9f: f6:94:c3:c9:4f:7a:5e:1a:11:62:50:71:81:25:4e: 9e:18:c5:3c:18:aa:a7:65:db:8f:d6:de:4b:d7:f1: 3e:1b:8e:be:3c:2d:cf:26:c9:d4:88:96:4b:47:fb: 9c:3a:81:25:5b:e6:31:70:c3:e6:7f:a5:2d:ce:25: 8d:51:6a:89:8a:e9:24:e5:12:78:df:b1:8f:76:72: ef:69:2a:1a:f1:68:40:ee:5d:ac:5d:c9:64:ac:29: 9a:ce:56:7f:1f:d6:11:7f:fb:99:5d:7f:92:07:be: 76:5d:82:99:71:d2:e2:4b:ae:94:ee:c4:00:af:d0: d3:88:97:dd:b7:8c:0c:d6:50:7f:2b:89:ca:c9:60: 00:77:c3:d3:45:45:f5:c3:76:e1:0d:75:4e:81:17: b6:34:38:4d:4a:52:ab:f1:89:80:f3:71:f1:97:28: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:21:CC:22:CA:60:36:30:38:AB:50:86:66:21:41:7A:E1:CA:7D:AC X509v3 Authority Key Identifier: keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:92:18:cc:de:d3:26:4e:fc:9b:07:6d:de:40:eb:cc:80:57: 91:62:2e:7f:4b:8d:54:c4:8b:08:48:91:11:0b:7f:f0:c6:4c: 41:c4:b0:8f:9b:0c:4e:06:35:7c:30:c2:f3:42:f0:ad:91:55: f5:e3:92:b7:1d:62:cd:8a:b4:70:75:df:1a:a0:27:d2:b1:69: 6b:e2:e0:f7:d0:e1:0a:4a:6f:39:15:6b:e5:8d:2f:8b:69:c4: 8a:d3:f5:e3:36:96:93:a2:0d:34:6c:41:e0:75:52:61:8c:ce: bd:b3:6f:3a:28:2b:14:d8:63:9a:cb:e6:89:bb:a0:80:4c:bd: 53:a7:8a:de:ef:6d:91:d4:d8:ba:a7:87:cc:f7:64:38:53:af: c7:34:38:8d:47:74:b2:cd:98:7b:f2:73:a5:97:26:45:28:46: dd:f3:de:38:0d:fd:03:1b:82:16:7c:bc:d3:b7:4c:ec:78:57: f8:d4:e2:cf:a1:32:b2:c7:a5:d8:b6:c1:13:6e:c0:45:22:c3: d5:97:f8:9d:ad:14:5f:52:9d:c3:c8:01:06:78:ad:59:07:36: a5:3b:87:80:41:60:ae:87:9b:be:b7:ac:38:fc:e7:7d:c8:4d: ae:4a:a4:01:40:d4:3f:8f:c5:9d:d4:a6:33:7a:a0:93:9e:5b: 0c:44:7c:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTTAnfugL8yEhhAZUJbWgYX8hgZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1 QUU4QjY1MzAeFw0yNDExMjUwNDQ3MjdaFw0yNDExMjgwNTI2MjdaMDMxMTAvBgNV BAMTKDg3MjFDQzIyQ0E2MDM2MzAzOEFCNTA4NjY2MjE0MTdBRTFDQTdEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cVe21xFt08/hz4RZwuGjMVpT sCKs264uR1D8WbwtO4RQZHZZvLdZpUgMC1k8lWkK/cJ0H5hqggpNclbn/y+Eyhlo qAtKpS4iKth8wxdBfh0xP5wYTaFUn/aUw8lPel4aEWJQcYElTp4YxTwYqqdl24/W 3kvX8T4bjr48Lc8mydSIlktH+5w6gSVb5jFww+Z/pS3OJY1RaomK6STlEnjfsY92 cu9pKhrxaEDuXaxdyWSsKZrOVn8f1hF/+5ldf5IHvnZdgplx0uJLrpTuxACv0NOI l923jAzWUH8ricrJYAB3w9NFRfXDduENdU6BF7Y0OE1KUqvxiYDzcfGXKP3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhyHMIspgNjA4q1CGZiFBeuHKfawwHwYDVR0j BBgwFoAUE5k0Zhzge+u/qCT3IlUCsVrotlMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2EyOTJiMi00YWU0LTQxZGYtODg3YS1jMTcyYzNlMWFlNzMvMC8xMzk5MzQ2NjFD RTA3QkVCQkZBODI0RjcyMjU1MDJCMTVBRThCNjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1QUU4 QjY1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNhMjkyYjItNGFlNC00MWRmLTg4 N2EtYzE3MmMzZTFhZTczLzAvMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAy QjE1QUU4QjY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWSGMze0yZO/JsHbd5A68yAV5FiLn9LjVTE iwhIkRELf/DGTEHEsI+bDE4GNXwwwvNC8K2RVfXjkrcdYs2KtHB13xqgJ9KxaWvi 4PfQ4QpKbzkVa+WNL4tpxIrT9eM2lpOiDTRsQeB1UmGMzr2zbzooKxTYY5rL5om7 oIBMvVOnit7vbZHU2Lqnh8z3ZDhTr8c0OI1HdLLNmHvyc6WXJkUoRt3z3jgN/QMb ghZ8vNO3TOx4V/jU4s+hMrLHpdi2wRNuwEUiw9WX+J2tFF9SncPIAQZ4rVkHNqU7 h4BBYK6Hm763rDj8533ITa5KpAFA1D+PxZ3UpjN6oJOeWwxEfHs= -----END CERTIFICATE-----Generated at Mon Nov 25 06:03:03 2024 by rpki-client on console-fra.rpki-client.org