$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: yzeh3Pp5b2wycO7e5JqQBwbPfuTBS7rG81r0A1cG7as= Subject key identifier: C4:79:0C:53:78:B4:0E:18:49:F0:73:2C:0A:58:BB:1B:67:A9:31:88 Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 429DE88A25F7198619EFDB299A5AB0030CE0863D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 0486 Signing time: Fri 22 Nov 2024 13:01:24 +0000 Manifest this update: Fri 22 Nov 2024 12:56:24 +0000 Manifest next update: Mon 25 Nov 2024 13:35:24 +0000 Files and hashes: 1: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: LMahtEVFw1WQXjV2Jt5sgAVQZXkjGaxRYhPgCUjt0lU=) 2: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: 4ZQAqwv3D6xv0wZbi1M8yeP/AQMFxtqYLV8/krPMgXw=) 3: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: opntiTpD04xbmQO3nBm2c1hYD1sLtZFngNRWUEMIVqs=) 4: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: vzSMLWMHxbHbmKZs1ww72s93hpXFUe/64ZqkfEBoPE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 13:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9d:e8:8a:25:f7:19:86:19:ef:db:29:9a:5a:b0:03:0c:e0:86:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Nov 22 12:56:24 2024 GMT Not After : Nov 25 13:35:24 2024 GMT Subject: CN=C4790C5378B40E1849F0732C0A58BB1B67A93188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:ee:05:67:70:4d:59:84:0c:e3:0a:6a:3f: 58:81:4b:aa:cc:ab:66:e8:f3:15:60:40:51:cd:ea: 04:aa:cd:aa:2f:b6:94:13:36:b2:f3:bc:2e:61:08: 48:d5:c5:03:5b:7a:98:1b:9e:45:da:65:87:e6:c1: 5d:60:40:86:9f:e9:f4:8a:0c:fd:6c:d2:35:56:f7: 0b:89:b8:14:a2:a1:d0:5d:92:82:04:89:94:c8:8a: 84:36:8c:78:4c:92:0e:c1:39:2d:3c:85:0d:4a:99: 93:9a:ef:43:d4:80:15:fd:77:35:39:09:8a:a7:43: 0d:2d:86:3f:3b:46:74:f9:02:8c:ce:68:cb:47:17: 4c:ee:3b:9d:f5:49:cd:e7:d0:41:63:7e:7e:1a:83: 87:95:c1:7c:86:dd:2d:6c:a4:86:ce:71:3f:2b:a8: 07:2a:1f:a2:e8:ff:87:af:b4:b1:a2:46:31:fb:fc: 75:a0:96:44:7a:55:9a:83:9d:32:50:bd:fe:27:4e: d4:f9:a1:09:84:f8:41:30:60:cf:6d:d6:e5:8c:3d: 26:5e:6d:5f:8b:81:32:6f:74:b9:46:ba:a0:3b:ac: c1:5f:0b:ce:f7:6b:83:fe:76:25:6c:7c:d1:00:28: 24:fc:95:3d:a8:fc:21:73:a2:d7:1a:70:7e:e8:54: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:79:0C:53:78:B4:0E:18:49:F0:73:2C:0A:58:BB:1B:67:A9:31:88 X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:93:2b:90:11:d4:91:be:48:49:88:0e:55:17:5d:76:a7:b6: 9a:31:e4:32:e8:95:4b:fe:07:82:12:16:3a:40:a4:8c:64:bc: 6a:64:ea:a2:7c:5b:9f:56:29:d9:f1:4c:44:8d:41:78:e8:64: 13:cb:f2:5b:e6:40:c0:53:71:98:7a:29:88:1a:e0:05:33:0c: 59:db:87:bf:4d:8f:43:fa:5b:3b:2b:e8:12:77:c8:11:d7:30: 32:9f:c6:90:7e:88:7b:d7:03:5d:ee:80:9d:2a:0e:86:37:59: 19:d8:7a:98:85:7a:3e:79:72:20:db:d9:3b:10:e6:f6:f0:a4: e8:bd:f8:06:ed:ec:b2:21:e4:68:86:ed:47:7a:58:c2:3a:75: e4:87:2c:d6:03:6b:ab:f4:8d:37:60:41:63:4d:68:38:7c:16: 72:42:4e:4b:19:16:07:d6:3b:c1:ec:ed:82:32:04:69:7e:d8: 75:72:b1:a1:07:b0:26:5b:4e:47:d0:3f:ab:a3:2a:80:32:02: 4f:0a:a4:00:63:f5:d4:2f:e0:cf:cb:82:af:ad:a9:35:c7:10: b2:6b:d4:8e:91:28:cc:72:e1:07:1d:93:e0:88:49:32:96:92: 42:2d:d8:e0:85:05:68:16:b2:ad:e1:69:a7:37:0c:78:7f:77: f6:7a:64:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQp3oiiX3GYYZ79spmlqwAwzghj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNDExMjIxMjU2MjRaFw0yNDExMjUxMzM1MjRaMDMxMTAvBgNV BAMTKEM0NzkwQzUzNzhCNDBFMTg0OUYwNzMyQzBBNThCQjFCNjdBOTMxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3e4FZ3BNWYQM4wpqP1iBS6rM q2bo8xVgQFHN6gSqzaovtpQTNrLzvC5hCEjVxQNbepgbnkXaZYfmwV1gQIaf6fSK DP1s0jVW9wuJuBSiodBdkoIEiZTIioQ2jHhMkg7BOS08hQ1KmZOa70PUgBX9dzU5 CYqnQw0thj87RnT5AozOaMtHF0zuO531Sc3n0EFjfn4ag4eVwXyG3S1spIbOcT8r qAcqH6Lo/4evtLGiRjH7/HWglkR6VZqDnTJQvf4nTtT5oQmE+EEwYM9t1uWMPSZe bV+LgTJvdLlGuqA7rMFfC873a4P+diVsfNEAKCT8lT2o/CFzotcacH7oVI8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxHkMU3i0DhhJ8HMsCli7G2epMYgwHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImTK5AR1JG+SEmIDlUXXXantpox5DLolUv+ B4ISFjpApIxkvGpk6qJ8W59WKdnxTESNQXjoZBPL8lvmQMBTcZh6KYga4AUzDFnb h79Nj0P6Wzsr6BJ3yBHXMDKfxpB+iHvXA13ugJ0qDoY3WRnYepiFej55ciDb2TsQ 5vbwpOi9+Abt7LIh5GiG7Ud6WMI6deSHLNYDa6v0jTdgQWNNaDh8FnJCTksZFgfW O8Hs7YIyBGl+2HVysaEHsCZbTkfQP6ujKoAyAk8KpABj9dQv4M/Lgq+tqTXHELJr 1I6RKMxy4Qcdk+CISTKWkkIt2OCFBWgWsq3haac3DHh/d/Z6ZM0= -----END CERTIFICATE-----Generated at Fri Nov 22 15:22:18 2024 by rpki-client on console-fra.rpki-client.org