$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: 52PJzjs6/3HnTzd3B5jcFI5aVs/B0sgMSESWHBBIvm4= Subject key identifier: F6:20:54:71:3E:9F:28:D8:3D:34:2D:0B:7F:AE:C5:29:FE:DF:1C:47 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 7828AB7F15DBB708AE9F2AADCAB2DD37FD567A54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 0161 Signing time: Mon 25 Nov 2024 14:50:37 +0000 Manifest this update: Mon 25 Nov 2024 14:45:37 +0000 Manifest next update: Fri 29 Nov 2024 02:42:37 +0000 Files and hashes: 1: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: f09hvG9TTasphfr1CbKnxj61NICFd4M2ts+7qxWitYI=) 2: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: 0nr9gPQw5gg7weyVjVjmP4Ms0ouXxZyEGyyMhhjUA3E=) 3: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: uTvbyRMa3JtSusZO5ZSoZ1ULN8brLrTNIGs82j6nGCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:28:ab:7f:15:db:b7:08:ae:9f:2a:ad:ca:b2:dd:37:fd:56:7a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Nov 25 14:45:37 2024 GMT Not After : Nov 29 02:42:37 2024 GMT Subject: CN=F62054713E9F28D83D342D0B7FAEC529FEDF1C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:31:57:6a:6b:cd:6c:20:52:9c:22:38:77: 1b:c3:30:24:02:e5:ab:4e:b8:d9:e6:60:31:21:39: 27:86:ea:12:43:49:ef:4b:2b:b6:9f:cb:dc:7a:86: c8:3b:f1:1f:1a:54:2f:94:bd:98:98:b8:0b:83:e7: e1:89:a5:60:57:0a:6e:10:ca:50:c0:ee:76:57:bf: 9c:70:4a:0b:e0:96:81:5d:c3:68:4c:da:c4:d9:14: 5e:72:e4:5e:e9:3f:03:24:55:21:88:fb:99:76:fc: e0:b6:9d:22:77:d6:00:32:05:d4:24:e6:29:35:ef: 11:bf:d7:d2:78:0e:1d:f4:90:c2:fe:92:1d:8a:ef: 2f:b7:8a:24:db:69:d4:6e:88:b7:ed:55:6f:fb:c0: 13:90:6d:b7:52:e9:e8:cf:0b:2b:2b:f6:1f:c5:c4: 7d:22:d3:5b:45:db:b0:26:1f:6e:33:30:34:31:65: ac:1e:47:66:06:28:c5:ab:0b:53:87:00:dd:06:1b: e3:fc:5a:87:fe:0c:60:40:ad:6b:3e:81:27:13:fb: 51:24:1f:b0:9b:39:94:d3:4a:62:a6:16:bf:fc:f6: e1:61:03:2c:d8:df:b3:9a:dc:be:eb:02:5c:27:a4: 33:0b:51:5e:5c:3c:e8:57:c6:26:3c:df:36:53:89: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:20:54:71:3E:9F:28:D8:3D:34:2D:0B:7F:AE:C5:29:FE:DF:1C:47 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:85:73:d2:2f:53:72:4f:b0:58:9b:2c:a9:c0:46:9e:93:3a: 6d:97:77:aa:9d:46:80:b1:5f:f7:fc:b1:37:8e:13:c1:08:7d: f6:03:90:aa:3b:37:3d:14:0f:7d:2a:01:44:8e:7a:70:ea:63: 0f:6c:dc:97:00:bd:9f:73:44:e8:43:b2:15:bf:15:20:bf:c5: 3c:f3:b2:78:3f:26:44:c9:50:9b:64:7e:cc:35:3c:c5:78:29: 53:ab:9b:4c:ef:60:0a:34:79:04:7c:fe:76:a2:6a:ed:a0:19: ad:0c:dd:6c:6d:6d:34:d4:3b:41:a1:60:bc:53:c3:da:a0:01: 2e:e0:ca:22:52:b0:eb:fa:a6:26:69:b8:6e:c1:9c:d7:24:8e: fe:98:ec:c4:17:6e:b4:57:4c:f0:6a:de:ed:54:77:b9:87:ec: ee:8c:a2:24:25:fa:f9:8f:fc:1f:dc:b1:ba:4e:41:49:fc:4a: 93:f7:56:1c:5d:de:e8:b7:e3:ca:81:24:b8:82:76:6e:44:be: d8:7e:61:a0:a8:32:f5:86:59:fc:cd:42:27:70:07:5b:35:f3: 10:0f:94:fd:09:cb:cc:91:f4:79:5a:63:b2:cd:cc:ff:b7:17: 75:46:e5:df:a6:af:15:01:d0:9c:12:44:93:f2:02:d8:09:ed: ae:cf:78:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCirfxXbtwiunyqtyrLdN/1WelQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNDExMjUxNDQ1MzdaFw0yNDExMjkwMjQyMzdaMDMxMTAvBgNV BAMTKEY2MjA1NDcxM0U5RjI4RDgzRDM0MkQwQjdGQUVDNTI5RkVERjFDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOzFXamvNbCBSnCI4dxvDMCQC 5atOuNnmYDEhOSeG6hJDSe9LK7afy9x6hsg78R8aVC+UvZiYuAuD5+GJpWBXCm4Q ylDA7nZXv5xwSgvgloFdw2hM2sTZFF5y5F7pPwMkVSGI+5l2/OC2nSJ31gAyBdQk 5ik17xG/19J4Dh30kML+kh2K7y+3iiTbadRuiLftVW/7wBOQbbdS6ejPCysr9h/F xH0i01tF27AmH24zMDQxZaweR2YGKMWrC1OHAN0GG+P8Wof+DGBArWs+gScT+1Ek H7CbOZTTSmKmFr/89uFhAyzY37Oa3L7rAlwnpDMLUV5cPOhXxiY83zZTiVWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9iBUcT6fKNg9NC0Lf67FKf7fHEcwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+Fc9IvU3JPsFibLKnARp6TOm2Xd6qdRoCx X/f8sTeOE8EIffYDkKo7Nz0UD30qAUSOenDqYw9s3JcAvZ9zROhDshW/FSC/xTzz sng/JkTJUJtkfsw1PMV4KVOrm0zvYAo0eQR8/naiau2gGa0M3WxtbTTUO0GhYLxT w9qgAS7gyiJSsOv6piZpuG7BnNckjv6Y7MQXbrRXTPBq3u1Ud7mH7O6MoiQl+vmP /B/csbpOQUn8SpP3Vhxd3ui348qBJLiCdm5Evth+YaCoMvWGWfzNQidwB1s18xAP lP0Jy8yR9HlaY7LNzP+3F3VG5d+mrxUB0JwSRJPyAtgJ7a7PeLk= -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:44 2024 by rpki-client on console-fra.rpki-client.org