$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft File: 2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json) Hash identifier: ZHbjOiDxkjEigk5JQYKWMNs/wfSWs7pAqEeva6vAUPI= Subject key identifier: C3:10:12:C1:C3:E5:79:BC:AA:B5:B3:AC:67:DF:E4:F5:64:DB:5D:D0 Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 047A571EAE6290D8580914A3B27F3D7926919307 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft Manifest number: 0485 Signing time: Mon 25 Nov 2024 11:40:48 +0000 Manifest this update: Mon 25 Nov 2024 11:35:48 +0000 Manifest next update: Thu 28 Nov 2024 17:59:48 +0000 Files and hashes: 1: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: IwHwotddAWU2g9udtUXGTuKj467I/RXi9GwfJR1ItSs=) 2: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: pX7k3ZuG4xOOUuk1ngzA+y7GWKvpGHKk6TxYVimyz5o=) 3: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: 6z/aBJVjmnV5y30TyBAs1DIg7YaA2W+Hxhks9f6rrXI=) 4: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: CAz4EFFuV39K7Yj6bXuCbRxkDhyk69KXBlvgMI1myCM=) 5: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: MkJ2c6cY2xvOwpgLJTEyduXJ/t24fc11Sqxv6Wy8+gk=) 6: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: StKC3RjUEcb6GVhgx3SU+vMU9RD+LiURtnpuaNC5b5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 17:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7a:57:1e:ae:62:90:d8:58:09:14:a3:b2:7f:3d:79:26:91:93:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Nov 25 11:35:48 2024 GMT Not After : Nov 28 17:59:48 2024 GMT Subject: CN=C31012C1C3E579BCAAB5B3AC67DFE4F564DB5DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:01:18:cd:1e:84:94:b0:6c:8f:46:85:ed: ec:2e:6b:47:9b:9a:76:f2:29:15:4d:5f:da:a7:ff: f1:8b:e1:1b:d9:e8:c3:c8:84:b8:bd:65:47:eb:9a: 95:12:f7:23:f1:41:a5:fa:d4:74:68:f7:19:9e:e0: 10:85:85:67:a0:9a:a6:1b:fa:46:f7:df:a5:83:f4: 8c:3c:be:26:62:16:23:64:40:9a:66:59:ac:5f:bf: 2a:69:93:f7:b6:c3:e6:2c:ee:61:61:b8:17:dd:ff: 32:f7:9f:12:2d:f7:86:d3:b7:c7:5a:39:e6:3c:d2: 76:57:bb:2e:7e:e7:96:7b:81:dc:16:c3:64:e6:89: 7e:0a:f8:31:c9:9d:f5:3d:b7:f5:02:94:a2:90:44: fb:ff:75:3c:e5:bf:18:a3:dc:b0:e2:f0:6e:76:be: 3d:8f:65:ff:48:04:49:07:05:5d:a1:d0:13:f6:8a: da:1d:af:0e:74:58:ec:80:75:09:88:42:82:76:1b: 71:0e:d1:6d:63:ba:c5:2d:e5:87:7b:d6:c1:c5:ee: e6:38:21:30:63:d7:cd:f3:01:6a:1b:f5:8c:44:77: fe:28:f2:55:7f:89:f8:90:a6:ef:dc:b0:aa:6b:ed: f6:92:bb:bd:5e:ca:8f:9c:2b:52:34:b1:a9:3e:b2: 60:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:10:12:C1:C3:E5:79:BC:AA:B5:B3:AC:67:DF:E4:F5:64:DB:5D:D0 X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a7:20:19:29:ef:49:eb:70:87:e9:44:b1:0a:76:52:d8:d8: e8:1e:b0:fe:02:1f:6d:fa:01:3d:7a:b3:c2:0f:77:7b:f7:ef: 3a:99:97:27:8e:e4:aa:4c:4b:69:57:ef:43:00:21:c8:cc:5b: 0c:56:5c:87:0b:29:d4:cb:4f:15:c8:f1:ad:91:24:56:84:de: 6f:ed:22:e8:ff:26:49:24:44:0a:15:47:81:c2:74:e7:85:94: 30:b1:2e:bf:b6:71:b3:ae:7d:85:0f:8d:ac:fb:6c:75:e4:e9: 8a:08:2c:b7:16:b3:76:cf:c8:3b:49:4c:76:b2:03:be:80:a4: 5f:a1:24:58:64:4d:75:f7:b9:ed:0f:06:64:03:7a:59:6e:ca: b5:1e:71:d8:c9:b8:e2:6c:f7:5c:ab:7d:56:41:99:15:df:57: eb:6e:ba:2f:fb:d7:e5:a3:e2:4c:3c:be:73:52:90:4c:b7:fc: 53:0f:67:89:56:bc:4b:8d:f2:1c:87:2d:a1:9c:ec:a0:88:d7: ab:ee:2e:15:e7:0a:7c:59:9f:b6:36:7a:44:1c:d1:48:92:37: 63:b4:aa:42:e3:be:68:1b:00:39:74:01:ff:c7:a9:8b:08:1d: a3:97:fa:67:7e:9d:93:54:57:03:8f:51:47:54:f4:46:3a:09: 9f:7b:25:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHpXHq5ikNhYCRSjsn89eSaRkwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNDExMjUxMTM1NDhaFw0yNDExMjgxNzU5NDhaMDMxMTAvBgNV BAMTKEMzMTAxMkMxQzNFNTc5QkNBQUI1QjNBQzY3REZFNEY1NjREQjVERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDQEYzR6ElLBsj0aF7ewua0eb mnbyKRVNX9qn//GL4RvZ6MPIhLi9ZUfrmpUS9yPxQaX61HRo9xme4BCFhWegmqYb +kb336WD9Iw8viZiFiNkQJpmWaxfvyppk/e2w+Ys7mFhuBfd/zL3nxIt94bTt8da OeY80nZXuy5+55Z7gdwWw2TmiX4K+DHJnfU9t/UClKKQRPv/dTzlvxij3LDi8G52 vj2PZf9IBEkHBV2h0BP2itodrw50WOyAdQmIQoJ2G3EO0W1jusUt5Yd71sHF7uY4 ITBj183zAWob9YxEd/4o8lV/ifiQpu/csKpr7faSu71eyo+cK1I0sak+smBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwxASwcPlebyqtbOsZ9/k9WTbXdAwHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5 RTQ3MkY0OTk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+nIBkp70nrcIfpRLEKdlLY2OgesP4CH236 AT16s8IPd3v37zqZlyeO5KpMS2lX70MAIcjMWwxWXIcLKdTLTxXI8a2RJFaE3m/t Iuj/JkkkRAoVR4HCdOeFlDCxLr+2cbOufYUPjaz7bHXk6YoILLcWs3bPyDtJTHay A76ApF+hJFhkTXX3ue0PBmQDelluyrUecdjJuOJs91yrfVZBmRXfV+tuui/71+Wj 4kw8vnNSkEy3/FMPZ4lWvEuN8hyHLaGc7KCI16vuLhXnCnxZn7Y2ekQc0UiSN2O0 qkLjvmgbADl0Af/HqYsIHaOX+md+nZNUVwOPUUdU9EY6CZ97JU4= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org