$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: O433HvJckMRZAFJvBZ++HhTCOyjkfo0kcY5Yak2qEl4= Subject key identifier: 41:D6:47:7D:82:6A:74:CF:F6:5D:70:FE:F1:A7:4F:A3:A4:9C:77:DB Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 524A8B1B017BB3C4B7758BAC20D72F9384BFAA0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: 87 Signing time: Sat 23 Nov 2024 17:01:44 +0000 Manifest this update: Sat 23 Nov 2024 16:56:44 +0000 Manifest next update: Wed 27 Nov 2024 04:28:44 +0000 Files and hashes: 1: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: qbSwMLWPQUDLEbTJbzspRj04NSRaPm2uHPnknyMNtc8=) 2: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: HmEcl2FQ9FVLKEP5R1RZhTMx57OPB2AKCZMB4IIlOO0=) 3: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: jl1arEgTbC6E5m8h1AaZ9O/d0jWs+0H65JiQtmk4oCY=) 4: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: qx1F9tw57HYwS2asxSd1HoaLv8OnLNsnEv8OCngMZZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4a:8b:1b:01:7b:b3:c4:b7:75:8b:ac:20:d7:2f:93:84:bf:aa:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Nov 23 16:56:44 2024 GMT Not After : Nov 27 04:28:44 2024 GMT Subject: CN=41D6477D826A74CFF65D70FEF1A74FA3A49C77DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:24:26:37:4f:6e:6c:2a:84:fe:8c:b8:d9: 86:a1:b0:64:ee:94:44:1b:68:13:c9:60:8f:c4:a6: be:c2:97:40:4b:ae:9a:72:20:7d:07:d6:73:5e:ce: 80:eb:93:6a:67:c1:f2:4b:14:6c:68:71:e7:67:3c: 16:76:c1:07:1b:a3:cc:5c:e4:08:75:00:c6:2f:d5: f7:bd:95:24:62:eb:fd:fe:ee:10:45:3d:62:e8:b8: 7e:38:7c:58:42:b7:d8:62:50:09:a7:52:cc:09:63: b8:f1:8c:73:70:f5:89:3d:6e:cf:d8:cc:f9:a5:19: 73:74:9c:54:a0:3e:40:50:12:75:98:71:8f:34:9f: c2:4f:78:51:86:24:d6:e6:e8:f2:ee:cf:06:94:0d: 3e:ef:7c:9a:fb:4f:0c:b0:99:a0:c0:c6:5f:53:b1: 11:8f:9d:1e:e7:4d:10:8f:0e:1d:85:b7:6c:03:5c: da:82:51:d4:87:4f:40:13:64:04:2d:84:b9:39:df: 1e:4c:7c:7f:49:f8:cb:c9:8f:9b:d3:4b:3f:5c:28: d8:c0:c8:16:60:0e:80:23:f1:7e:61:e2:bf:c1:cf: 50:34:00:8f:7c:05:5a:9e:3e:d2:1e:fd:fe:8d:2a: 42:d7:5f:85:d6:95:61:83:17:d1:b5:fc:23:1f:3c: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D6:47:7D:82:6A:74:CF:F6:5D:70:FE:F1:A7:4F:A3:A4:9C:77:DB X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:72:eb:3a:f9:3e:77:c9:08:4d:fc:bc:99:99:f9:7a:f7:20: 9e:92:09:96:64:22:08:fa:35:84:70:9b:93:e4:4b:c2:a3:e0: a8:ee:ab:e0:c6:e8:f1:fd:5f:fd:7b:0d:34:73:97:c5:1f:cb: d9:b4:a3:63:8b:10:cd:28:c4:00:d4:7e:01:a6:82:4d:ba:07: a0:18:8b:ef:fe:b9:9b:6d:a2:b4:f3:e1:73:9b:92:ac:61:9b: 2e:04:d8:3d:50:65:e2:e4:42:76:f3:73:8c:c1:d0:62:15:6b: 59:2a:2a:50:b5:f5:e1:a0:de:7a:cb:c3:ad:6d:97:34:85:d9: ac:a8:5e:1c:d8:bc:20:4b:cc:fa:58:b2:ff:6c:6a:28:00:25: fe:91:e4:06:87:cf:0f:50:87:f8:2a:1d:38:93:d9:03:a0:c0: ff:30:c0:fd:8b:b8:d1:3b:5e:f5:5d:1c:8b:a1:a2:af:4f:5e: 06:28:44:76:14:00:4f:3a:07:47:93:a1:39:7e:7f:30:e5:1a: 81:4c:ca:85:97:3b:84:f7:69:18:b9:a9:fe:5b:91:40:95:f1: 82:79:e6:c3:9b:3d:43:eb:ea:7e:d5:3a:6b:f4:ee:f2:88:e2: e1:6e:cc:9b:c2:cd:ed:aa:46:99:18:d7:95:77:cb:40:44:1e: 1a:ab:db:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkqLGwF7s8S3dYusINcvk4S/qgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNDExMjMxNjU2NDRaFw0yNDExMjcwNDI4NDRaMDMxMTAvBgNV BAMTKDQxRDY0NzdEODI2QTc0Q0ZGNjVENzBGRUYxQTc0RkEzQTQ5Qzc3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kiQmN09ubCqE/oy42YahsGTu lEQbaBPJYI/Epr7Cl0BLrppyIH0H1nNezoDrk2pnwfJLFGxocednPBZ2wQcbo8xc 5Ah1AMYv1fe9lSRi6/3+7hBFPWLouH44fFhCt9hiUAmnUswJY7jxjHNw9Yk9bs/Y zPmlGXN0nFSgPkBQEnWYcY80n8JPeFGGJNbm6PLuzwaUDT7vfJr7TwywmaDAxl9T sRGPnR7nTRCPDh2Ft2wDXNqCUdSHT0ATZAQthLk53x5MfH9J+MvJj5vTSz9cKNjA yBZgDoAj8X5h4r/Bz1A0AI98BVqePtIe/f6NKkLXX4XWlWGDF9G1/CMfPDnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQdZHfYJqdM/2XXD+8adPo6Scd9swHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxy6zr5PnfJCE38vJmZ+Xr3IJ6SCZZkIgj6 NYRwm5PkS8Kj4Kjuq+DG6PH9X/17DTRzl8Ufy9m0o2OLEM0oxADUfgGmgk26B6AY i+/+uZttorTz4XObkqxhmy4E2D1QZeLkQnbzc4zB0GIVa1kqKlC19eGg3nrLw61t lzSF2ayoXhzYvCBLzPpYsv9saigAJf6R5AaHzw9Qh/gqHTiT2QOgwP8wwP2LuNE7 XvVdHIuhoq9PXgYoRHYUAE86B0eToTl+fzDlGoFMyoWXO4T3aRi5qf5bkUCV8YJ5 5sObPUPr6n7VOmv07vKI4uFuzJvCze2qRpkY15V3y0BEHhqr22A= -----END CERTIFICATE-----Generated at Sat Nov 23 18:47:51 2024 by rpki-client on console-fra.rpki-client.org