$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: k8XYyzE1mwHBhF1Yo9QN28I3OFZGrc19GVPEmMLK3VM= Subject key identifier: 8D:5E:E3:6E:83:53:60:FA:0C:78:DD:B8:EA:B6:39:C5:79:CD:06:87 Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 504EAF7E53CD0914E7E26988AF9B16C1E9443AB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 011B Signing time: Sat 23 Nov 2024 19:22:14 +0000 Manifest this update: Sat 23 Nov 2024 19:17:14 +0000 Manifest next update: Wed 27 Nov 2024 03:04:14 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: 6wRGbKSjXAhAgxYKa0lGBIGkC8NluYBmmFfrV6Xalkk=) 2: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: ku+2XETgPzy4kqKq15SusZp6aZLIcsEuVeIyEjfPrNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4e:af:7e:53:cd:09:14:e7:e2:69:88:af:9b:16:c1:e9:44:3a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Nov 23 19:17:14 2024 GMT Not After : Nov 27 03:04:14 2024 GMT Subject: CN=8D5EE36E835360FA0C78DDB8EAB639C579CD0687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:1f:b9:1c:bc:5e:48:2f:9c:9a:83:86:5e: 86:5c:9e:21:84:a3:09:88:c8:c6:52:2f:47:5c:62: 4d:62:b1:13:e4:94:6f:62:21:d7:4e:34:99:53:51: 24:8c:20:2a:7a:b8:fd:86:9a:c7:78:59:77:91:0f: b7:e4:f9:bc:dc:ce:2e:56:cd:4e:4c:54:a1:f4:89: 70:3a:36:eb:ec:9f:d9:c2:b2:2e:6f:dd:aa:40:18: d1:13:10:c6:b1:fb:78:11:92:3a:58:67:df:20:d9: c4:db:ab:28:49:d6:a0:5d:72:2f:c2:18:fc:a0:c2: 9d:54:f6:45:9b:96:de:44:55:3f:99:de:a3:df:0d: fe:32:2e:be:39:01:a4:77:db:c0:e1:de:fb:3e:08: e5:a7:bb:13:3b:44:2a:52:a0:35:91:1b:a1:13:22: 5f:54:34:7f:65:25:2f:e8:db:c8:bc:d8:45:7d:54: 8f:b5:22:1f:b0:92:7f:f2:f6:31:f4:4c:5e:26:55: 73:44:86:bf:ee:0c:92:0e:8e:74:75:ca:64:99:5c: 52:c1:c7:0e:c8:92:db:61:10:f0:c6:a0:e1:7d:1b: fc:05:06:e6:47:bf:99:e8:80:50:8a:c3:16:97:14: bc:4f:5b:31:80:60:8d:8f:52:ea:fb:a9:c6:52:ca: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5E:E3:6E:83:53:60:FA:0C:78:DD:B8:EA:B6:39:C5:79:CD:06:87 X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:83:b7:04:1b:54:9e:f6:c9:70:46:49:63:af:2b:03:07:07: 41:94:6a:53:38:d9:eb:ab:67:3b:41:2c:e8:7b:f4:c4:50:17: 74:ab:74:d5:b3:65:de:92:9e:89:b0:18:63:59:88:46:7f:09: 96:82:7c:35:0e:82:71:eb:af:d3:ee:2a:b7:b7:a6:10:10:ce: 11:85:ab:18:ff:c2:92:8f:0f:ad:67:b5:c9:8e:05:db:89:bf: 7e:86:15:4a:01:f1:48:3e:73:ec:59:f6:dc:28:21:93:9f:64: c0:53:75:9f:9f:b8:87:2f:d7:bb:01:b9:d4:6e:9e:0c:51:dd: fd:50:f0:c8:8a:50:d4:1c:0d:d4:c4:a6:f0:0a:da:a0:fa:5b: 30:92:0d:5c:3c:8c:0f:f5:fd:af:6f:eb:e1:f1:3f:78:9a:30: d7:73:4d:a7:9c:34:ee:4e:cd:78:2e:4c:2a:39:08:00:6a:46: 62:26:d8:e7:b6:bc:40:58:2b:0c:81:ab:5b:be:26:55:ce:cd: fc:ff:17:d4:1d:2c:f5:49:e0:4d:f3:c6:49:a6:8f:40:4f:e3: 20:9a:fc:92:92:5d:56:8d:74:02:ef:05:28:b0:72:85:87:b5: 95:cc:b5:ee:5a:67:ef:b7:88:3b:8f:32:0e:4f:5a:78:19:77: 73:46:e7:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUE6vflPNCRTn4mmIr5sWwelEOrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNDExMjMxOTE3MTRaFw0yNDExMjcwMzA0MTRaMDMxMTAvBgNV BAMTKDhENUVFMzZFODM1MzYwRkEwQzc4RERCOEVBQjYzOUM1NzlDRDA2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnx+5HLxeSC+cmoOGXoZcniGE owmIyMZSL0dcYk1isRPklG9iIddONJlTUSSMICp6uP2Gmsd4WXeRD7fk+bzczi5W zU5MVKH0iXA6Nuvsn9nCsi5v3apAGNETEMax+3gRkjpYZ98g2cTbqyhJ1qBdci/C GPygwp1U9kWblt5EVT+Z3qPfDf4yLr45AaR328Dh3vs+COWnuxM7RCpSoDWRG6ET Il9UNH9lJS/o28i82EV9VI+1Ih+wkn/y9jH0TF4mVXNEhr/uDJIOjnR1ymSZXFLB xw7IktthEPDGoOF9G/wFBuZHv5nogFCKwxaXFLxPWzGAYI2PUur7qcZSyvE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjV7jboNTYPoMeN246rY5xXnNBocwHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6DtwQbVJ72yXBGSWOvKwMHB0GUalM42eur ZztBLOh79MRQF3SrdNWzZd6SnomwGGNZiEZ/CZaCfDUOgnHrr9PuKre3phAQzhGF qxj/wpKPD61ntcmOBduJv36GFUoB8Ug+c+xZ9twoIZOfZMBTdZ+fuIcv17sBudRu ngxR3f1Q8MiKUNQcDdTEpvAK2qD6WzCSDVw8jA/1/a9v6+HxP3iaMNdzTaecNO5O zXguTCo5CABqRmIm2Oe2vEBYKwyBq1u+JlXOzfz/F9QdLPVJ4E3zxkmmj0BP4yCa /JKSXVaNdALvBSiwcoWHtZXMte5aZ++3iDuPMg5PWngZd3NG54Q= -----END CERTIFICATE-----Generated at Sat Nov 23 20:17:06 2024 by rpki-client on console-ams.rpki-client.org