$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json) Hash identifier: h4F8pXRQfo35Z4KYqr/DM0VYUt40A7G6SJBILfAQUUw= Subject key identifier: 53:99:4E:A8:AB:8F:ED:79:B6:37:51:E9:75:B0:1E:BC:62:A6:9F:E0 Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Certificate serial: 2C5F79FF6CF318CD7355D8855BEA2E7867C56321 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft Manifest number: 0249 Signing time: Thu 21 Nov 2024 09:52:58 +0000 Manifest this update: Thu 21 Nov 2024 09:47:58 +0000 Manifest next update: Sun 24 Nov 2024 14:26:58 +0000 Files and hashes: 1: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: snup9E0JcmBDDFQXO29kpKaPJBnM7JWFMr9bOF3Zc+c=) 2: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: LX1akCK1RumCTw48vx3vGALGY+ae+t+bkrwj6Dc+RMk=) 3: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: +CX9YfQd472mx4XL0TM8SEdeQPA9oercNyT++AhL7GA=) 4: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: FoLDrQVuOiTB01Q4iJpDzeQUT3QZub38J9e/RpqxUr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5f:79:ff:6c:f3:18:cd:73:55:d8:85:5b:ea:2e:78:67:c5:63:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Validity Not Before: Nov 21 09:47:58 2024 GMT Not After : Nov 24 14:26:58 2024 GMT Subject: CN=53994EA8AB8FED79B63751E975B01EBC62A69FE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:03:6a:41:a0:07:c3:a5:22:9c:f4:5c:f2:fb: c3:3c:3e:ea:f6:64:0b:a3:f4:49:9e:4f:22:ab:3e: a0:05:39:ce:88:a2:31:76:f2:7e:d8:03:cf:2f:5d: ef:cd:5f:7b:62:4d:1f:25:d8:76:43:28:e0:66:49: f5:6d:eb:dc:c2:e2:85:54:a5:08:ef:5f:ec:17:41: 53:69:2c:36:e5:a2:ab:c2:6d:1f:ac:d7:c2:15:20: ef:bf:31:a9:3c:70:40:ec:71:70:59:34:28:be:fd: 2a:b5:0a:6e:15:9a:51:e4:3f:0a:4f:e4:46:7e:5c: 30:81:b5:f8:7b:5c:58:b9:34:7b:d2:24:a7:0c:df: 1f:11:7e:b5:4a:a3:8d:20:20:a0:0e:5d:aa:d3:d4: 27:5e:96:49:5a:03:35:84:4d:4b:95:d1:f2:57:c2: db:c8:34:1e:46:c4:ad:a0:26:9f:4e:92:79:60:04: f6:5a:53:ec:b2:79:3f:10:dd:c8:52:96:9c:51:89: d0:36:27:c6:9a:51:0f:14:34:8c:21:48:52:32:ff: a2:7f:b6:45:7b:26:48:d8:87:48:98:42:db:4a:22: 33:43:94:4b:69:b8:ce:bc:c8:de:91:ea:ab:36:05: 2e:c7:fe:9a:6a:e7:1e:f7:6c:d5:c4:61:2b:54:00: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:99:4E:A8:AB:8F:ED:79:B6:37:51:E9:75:B0:1E:BC:62:A6:9F:E0 X509v3 Authority Key Identifier: keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d4:0b:be:04:0c:30:30:66:4c:d1:a3:b1:fb:b6:62:e1:b1: 7e:ad:c7:92:92:93:fd:ba:a0:11:47:53:41:2d:12:42:5f:24: c6:3b:a2:34:8e:2e:28:fc:34:19:9f:21:4e:33:49:f6:66:42: 59:60:78:73:24:fb:d7:e5:d2:22:1e:50:80:58:6c:0e:9b:51: 2d:8f:4a:94:2a:41:1f:cd:6e:6c:c7:b9:d2:f3:e2:11:a0:65: ea:b1:c9:e2:53:fa:b1:f8:06:56:c4:7f:45:d7:2d:d4:6d:f8: 19:3b:a9:b4:68:3f:23:77:6e:de:73:1a:77:04:7f:61:eb:52: 82:8b:c9:3e:92:01:9a:7e:0b:39:74:2c:c4:dc:af:16:96:6c: 04:fc:7f:4a:e7:3a:d6:61:13:cc:e3:b4:f8:08:89:89:a6:53: 76:49:ce:04:24:8f:29:02:b8:1f:88:4a:a1:cf:38:e5:be:7a: 90:66:3d:ec:13:63:7d:3a:71:b7:a7:c0:5d:1d:c5:6f:9f:c4: 6b:42:ce:3b:4c:77:b9:f5:fd:61:86:64:45:c3:63:ec:de:a8: 6e:df:9a:45:b3:22:2d:f8:90:69:ea:23:d2:78:ba:ae:65:1b: 8c:25:64:0d:ed:3c:8d:2d:65:93:3d:c8:f8:a4:3e:e2:dc:e1: 58:27:ff:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULF95/2zzGM1zVdiFW+oueGfFYyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3 NEMwQTY1MjAeFw0yNDExMjEwOTQ3NThaFw0yNDExMjQxNDI2NThaMDMxMTAvBgNV BAMTKDUzOTk0RUE4QUI4RkVENzlCNjM3NTFFOTc1QjAxRUJDNjJBNjlGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQA2pBoAfDpSKc9Fzy+8M8Pur2 ZAuj9EmeTyKrPqAFOc6IojF28n7YA88vXe/NX3tiTR8l2HZDKOBmSfVt69zC4oVU pQjvX+wXQVNpLDbloqvCbR+s18IVIO+/Mak8cEDscXBZNCi+/Sq1Cm4VmlHkPwpP 5EZ+XDCBtfh7XFi5NHvSJKcM3x8RfrVKo40gIKAOXarT1CdelklaAzWETUuV0fJX wtvINB5GxK2gJp9OknlgBPZaU+yyeT8Q3chSlpxRidA2J8aaUQ8UNIwhSFIy/6J/ tkV7JkjYh0iYQttKIjNDlEtpuM68yN6R6qs2BS7H/ppq5x73bNXEYStUAF0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU5lOqKuP7Xm2N1HpdbAevGKmn+AwHwYDVR0j BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4 RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfUC74EDDAwZkzRo7H7tmLhsX6tx5KSk/26 oBFHU0EtEkJfJMY7ojSOLij8NBmfIU4zSfZmQllgeHMk+9fl0iIeUIBYbA6bUS2P SpQqQR/NbmzHudLz4hGgZeqxyeJT+rH4BlbEf0XXLdRt+Bk7qbRoPyN3bt5zGncE f2HrUoKLyT6SAZp+Czl0LMTcrxaWbAT8f0rnOtZhE8zjtPgIiYmmU3ZJzgQkjykC uB+ISqHPOOW+epBmPewTY306cbenwF0dxW+fxGtCzjtMd7n1/WGGZEXDY+zeqG7f mkWzIi34kGnqI9J4uq5lG4wlZA3tPI0tZZM9yPikPuLc4Vgn/yw= -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:50 2024 by rpki-client on console-ams.rpki-client.org