$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: rHVHaCjXTu5HuFToWQoYNudLMCj+GfYO+kvR8f4UVHo= Subject key identifier: 2E:44:1A:C1:B4:3C:AA:C5:D8:DE:33:A3:D6:74:96:B4:8B:ED:1A:65 Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 4D550B971F832CF6F60E78BD883112299F4C3F68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 0483 Signing time: Wed 20 Nov 2024 17:50:01 +0000 Manifest this update: Wed 20 Nov 2024 17:45:01 +0000 Manifest next update: Sat 23 Nov 2024 21:43:01 +0000 Files and hashes: 1: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: yBQ28wy2sI9EQHimCL/SgXP2PgrWCwvfpMcEad18yTs=) 2: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 5Gu2z13wsV8/WfeUY7V0KVxrIwfV0qSkIlTIHlKZ5/A=) 3: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: xgQd/rPuf45cpwMdqKxEdoY8KAZbjEHoNo5iZUmNsDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:55:0b:97:1f:83:2c:f6:f6:0e:78:bd:88:31:12:29:9f:4c:3f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Nov 20 17:45:01 2024 GMT Not After : Nov 23 21:43:01 2024 GMT Subject: CN=2E441AC1B43CAAC5D8DE33A3D67496B48BED1A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:5d:d8:c3:30:27:37:07:f8:57:1b:1f:60: 62:54:a6:9f:6c:0a:1b:45:1c:2d:89:22:74:50:c2: 99:3f:9f:41:f8:ae:00:d0:ab:83:da:c4:63:52:27: 0e:15:d8:34:7f:56:df:58:7e:33:a2:38:97:d5:d0: d1:66:b4:df:c9:4b:90:18:ce:41:2e:ad:d5:5a:ec: 73:e2:02:8f:e8:6b:6a:14:6f:0e:db:d3:48:4a:be: 0b:0d:46:a5:c5:0c:e9:c3:a3:91:f3:70:4e:da:8a: 2f:2b:44:78:67:fa:a4:65:b5:25:48:62:47:27:97: e1:0c:e6:b6:f1:f6:e2:1b:c0:85:5e:d3:e1:cb:31: 19:ea:47:40:b6:6d:f5:81:0a:96:cc:bc:79:c7:ec: c7:44:49:bf:ca:aa:67:7f:ee:eb:de:53:08:c0:56: 23:e0:ad:b8:6d:19:0e:54:c2:d6:bf:87:e6:31:66: c7:64:2e:c3:c2:66:16:aa:34:ca:b5:a4:a4:94:93: 63:19:ab:f0:7f:39:3e:fc:0d:33:4d:3c:a5:8f:5b: 7d:da:b7:fb:8d:4a:45:e7:65:23:e3:78:23:50:9d: b9:68:45:d4:11:9e:7a:b0:5a:58:6f:d5:1f:98:35: 4e:c4:58:ea:3b:ea:f5:4e:ad:3e:3f:08:ed:44:75: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:1A:C1:B4:3C:AA:C5:D8:DE:33:A3:D6:74:96:B4:8B:ED:1A:65 X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:16:7a:07:ea:b0:6a:f3:d7:d8:25:36:7d:51:3c:fa:c8:14: 92:d0:af:19:f8:52:4e:ed:b2:2e:a1:85:14:b7:57:ed:5c:a4: 21:23:8b:35:93:ca:15:fc:6f:13:83:a4:40:18:c2:db:db:6e: 38:22:12:ad:8b:79:23:8e:0b:6f:dd:b7:a1:ef:0e:38:bc:cc: 33:60:17:df:5e:06:16:a5:6d:2a:8a:10:9c:d3:d4:03:3f:96: 68:0f:1b:53:13:7e:68:64:54:d0:7a:67:95:0c:c6:c7:77:16: 8f:07:a8:22:3d:1c:b1:0b:91:16:2d:6a:96:9a:4a:c7:be:46: 4c:8e:f3:bd:67:88:76:15:19:8d:94:2c:6a:46:66:16:53:f8: 99:af:e6:f5:a0:1c:96:3b:83:fd:48:e6:33:50:43:87:73:81: 71:0f:43:d7:9b:55:52:53:b1:13:68:d2:c9:7d:c9:b9:94:03: 27:7e:1c:e7:3a:ac:96:83:fa:8c:7f:ee:3a:c3:8c:70:78:47: c6:27:b0:59:9c:b7:5b:05:a8:a9:a0:84:00:5d:0a:09:9c:39: 78:1f:69:af:3d:a2:81:91:8b:07:d2:a4:35:f6:91:7e:13:dc: 72:2a:05:53:66:e2:56:cf:8b:80:80:98:c6:49:79:78:be:d2: f2:f5:00:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVULlx+DLPb2Dni9iDESKZ9MP2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNDExMjAxNzQ1MDFaFw0yNDExMjMyMTQzMDFaMDMxMTAvBgNV BAMTKDJFNDQxQUMxQjQzQ0FBQzVEOERFMzNBM0Q2NzQ5NkI0OEJFRDFBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGql3YwzAnNwf4VxsfYGJUpp9s ChtFHC2JInRQwpk/n0H4rgDQq4PaxGNSJw4V2DR/Vt9YfjOiOJfV0NFmtN/JS5AY zkEurdVa7HPiAo/oa2oUbw7b00hKvgsNRqXFDOnDo5HzcE7aii8rRHhn+qRltSVI Ykcnl+EM5rbx9uIbwIVe0+HLMRnqR0C2bfWBCpbMvHnH7MdESb/Kqmd/7uveUwjA ViPgrbhtGQ5Uwta/h+YxZsdkLsPCZhaqNMq1pKSUk2MZq/B/OT78DTNNPKWPW33a t/uNSkXnZSPjeCNQnbloRdQRnnqwWlhv1R+YNU7EWOo76vVOrT4/CO1EdW8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkQawbQ8qsXY3jOj1nSWtIvtGmUwHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEWegfqsGrz19glNn1RPPrIFJLQrxn4Uk7t si6hhRS3V+1cpCEjizWTyhX8bxODpEAYwtvbbjgiEq2LeSOOC2/dt6HvDji8zDNg F99eBhalbSqKEJzT1AM/lmgPG1MTfmhkVNB6Z5UMxsd3Fo8HqCI9HLELkRYtapaa Sse+RkyO871niHYVGY2ULGpGZhZT+Jmv5vWgHJY7g/1I5jNQQ4dzgXEPQ9ebVVJT sRNo0sl9ybmUAyd+HOc6rJaD+ox/7jrDjHB4R8YnsFmct1sFqKmghABdCgmcOXgf aa89ooGRiwfSpDX2kX4T3HIqBVNm4lbPi4CAmMZJeXi+0vL1AP8= -----END CERTIFICATE-----Generated at Wed Nov 20 18:41:50 2024 by rpki-client on console-fra.rpki-client.org