$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: s8JRNH/E+W/PlMDy3KPBNqZeVx/q2AUzMyEGQid/zW8= Subject key identifier: 42:26:86:4A:44:D7:CD:86:4F:B0:F0:ED:B4:DD:73:4B:CF:C9:97:EF Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 0D40313B4709A91C7833C44F221D08641A64D23A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: F4 Signing time: Thu 21 Nov 2024 05:01:56 +0000 Manifest this update: Thu 21 Nov 2024 04:56:56 +0000 Manifest next update: Sun 24 Nov 2024 14:53:56 +0000 Files and hashes: 1: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: JK9K79TizKr0Mzpc6GsKln188Fhnc893fnWWFi5WKGk=) 2: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 5D15jDxwoTM16wzauOrUEtRL0kfiyMbHWtAJqnbWWIY=) 3: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: iq4zdyWuYQ9zfhh7R084abIYQNuWQgzRr+n2plfHB7I=) 4: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: Imqm+AjsZmyXiqEBMTfoYHa51xS/rq0zY4b5qjXyy0s=) 5: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: 7O+AvnULpeJy5aJ05kQrhljlfkV5ExWXqcP1gSPlqXU=) 6: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: jacU4c2UenPX8vzT/l1Osf9mSgEop22wfa5VW6r4QpQ=) 7: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: yqFry/4LxGJrVDuxbVY2RcAPDTNylJF/fe+W8ljuItE=) 8: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: 0hFlZ7fplBnjhpvQ2rtjlp/hS8tlJFaTBMFE7R6GDgM=) 9: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: KNuzEtjQXTPqbO4WNny2KjokoOmzzEFCKrvvjyUWvLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:40:31:3b:47:09:a9:1c:78:33:c4:4f:22:1d:08:64:1a:64:d2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Nov 21 04:56:56 2024 GMT Not After : Nov 24 14:53:56 2024 GMT Subject: CN=4226864A44D7CD864FB0F0EDB4DD734BCFC997EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:aa:3a:f8:44:38:76:92:13:ac:10:19:3e:36: c4:36:fb:b6:f1:be:5a:97:1d:a2:db:28:7c:75:d9: 3c:76:e4:c7:38:10:bf:30:1e:93:f2:c0:08:b0:94: 22:be:4b:c7:70:f3:11:96:28:a4:fd:ff:7e:d9:ef: 83:95:c3:0b:aa:a4:61:c5:7c:86:6e:0c:ea:16:9b: f0:7c:62:d9:21:a2:81:e4:89:cc:7d:fc:1e:4f:87: b0:73:26:3d:bb:33:dd:8b:6d:e2:4d:b6:40:9d:4e: 74:3c:3a:ff:12:9b:e0:1e:d6:46:6f:92:ef:3c:61: 0a:f0:e8:53:b0:f3:95:49:1a:56:81:d5:71:3b:ca: 84:ed:68:88:ff:0c:5a:83:9d:a5:05:32:ea:07:c7: fe:aa:d3:e8:b6:29:7c:c9:69:a0:8b:10:42:02:04: 36:e9:83:d1:0a:04:93:e1:90:0b:55:f9:b5:96:cc: 63:47:7d:fe:42:5e:d0:6f:a7:8e:18:9c:5a:90:20: 56:f1:99:c6:15:b4:74:db:1e:a8:ad:f0:9f:bb:de: 00:be:54:46:be:42:3f:99:6b:12:fd:7a:9f:c2:34: 33:b5:cc:60:4b:37:ec:81:d2:ee:2b:5b:fa:be:1b: 25:7b:42:89:c3:38:1d:fc:0a:e4:eb:b9:e5:0d:be: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:26:86:4A:44:D7:CD:86:4F:B0:F0:ED:B4:DD:73:4B:CF:C9:97:EF X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:53:17:76:c6:52:75:d4:50:b0:36:6e:dd:37:70:eb:df:30: 47:da:94:d7:c6:5b:3a:b7:c3:a3:ee:3f:a7:b5:f0:d6:60:3f: e6:f7:d3:04:dc:26:bf:ac:13:b4:29:2f:4a:49:4c:65:9d:16: d7:35:29:a3:57:da:93:d0:5c:c4:55:5a:f0:66:b9:6f:7e:75: cf:94:ea:96:b6:49:2a:7d:7b:2a:c2:c5:de:c4:8e:ec:04:9c: 69:a5:2b:02:9f:3d:22:13:84:75:01:c3:47:74:92:82:cb:af: 7d:6a:16:36:ea:72:56:2d:3b:15:97:a9:01:a9:1e:94:44:2a: ea:86:e2:d1:0d:d8:93:cc:8d:d6:1e:07:fc:bd:ae:47:c4:43: 1d:76:5c:c0:2a:c6:d3:03:33:5d:51:05:5b:57:bf:8f:a4:67: ad:67:10:a4:03:6e:b4:6e:b2:ea:57:6e:14:e0:fb:15:af:66: 5a:03:7d:88:db:92:63:4d:3a:6e:3b:41:f0:2a:f9:dc:cb:f8: ba:76:cc:3f:0a:b9:d0:f3:07:85:e7:8d:0d:05:e4:e7:01:33: 7b:e0:bf:2f:73:f1:15:06:ef:44:16:5e:e5:56:1d:ce:85:56: 79:af:d9:26:8f:12:63:f7:8e:32:3d:a7:d3:19:eb:82:83:e8: 99:d1:cd:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUAxO0cJqRx4M8RPIh0IZBpk0jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNDExMjEwNDU2NTZaFw0yNDExMjQxNDUzNTZaMDMxMTAvBgNV BAMTKDQyMjY4NjRBNDREN0NEODY0RkIwRjBFREI0REQ3MzRCQ0ZDOTk3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqjr4RDh2khOsEBk+NsQ2+7bx vlqXHaLbKHx12Tx25Mc4EL8wHpPywAiwlCK+S8dw8xGWKKT9/37Z74OVwwuqpGHF fIZuDOoWm/B8YtkhooHkicx9/B5Ph7BzJj27M92LbeJNtkCdTnQ8Ov8Sm+Ae1kZv ku88YQrw6FOw85VJGlaB1XE7yoTtaIj/DFqDnaUFMuoHx/6q0+i2KXzJaaCLEEIC BDbpg9EKBJPhkAtV+bWWzGNHff5CXtBvp44YnFqQIFbxmcYVtHTbHqit8J+73gC+ VEa+Qj+ZaxL9ep/CNDO1zGBLN+yB0u4rW/q+GyV7QonDOB38CuTrueUNvprFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQiaGSkTXzYZPsPDttN1zS8/Jl+8wHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtTF3bGUnXUULA2bt03cOvfMEfalNfGWzq3 w6PuP6e18NZgP+b30wTcJr+sE7QpL0pJTGWdFtc1KaNX2pPQXMRVWvBmuW9+dc+U 6pa2SSp9eyrCxd7EjuwEnGmlKwKfPSIThHUBw0d0koLLr31qFjbqclYtOxWXqQGp HpREKuqG4tEN2JPMjdYeB/y9rkfEQx12XMAqxtMDM11RBVtXv4+kZ61nEKQDbrRu supXbhTg+xWvZloDfYjbkmNNOm47QfAq+dzL+Lp2zD8KudDzB4XnjQ0F5OcBM3vg vy9z8RUG70QWXuVWHc6FVnmv2SaPEmP3jjI9p9MZ64KD6JnRzaU= -----END CERTIFICATE-----Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org