$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: GMS5469LWdzknI0w1abAcFAQE3fLBbMMCSmM7FvK7x4= Subject key identifier: 22:F7:0B:07:88:53:FD:FF:8D:2E:ED:CB:CB:1F:C5:AF:E9:BC:9A:D9 Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 29102036BB6659ACB2831F82F0E4F5C76372133E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 0167 Signing time: Thu 21 Nov 2024 14:52:05 +0000 Manifest this update: Thu 21 Nov 2024 14:47:05 +0000 Manifest next update: Sun 24 Nov 2024 16:20:05 +0000 Files and hashes: 1: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: tK7ByXug92maySVvAW7cy/eRGTyJOfzTbIcnjRV25SE=) 2: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: VHj+BrkZ6iMwd6Ih4uLfhywh2RJ8HhOVFUyFHjtmvfI=) 3: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: dJLGbPNETK4Ljwpxmc7fr7zDeLYDSeJTvSKzUm9sVu4=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: JQ2sbHxQyDFZhgbZypy5jZxgy9AwBRkpTank5bXdFdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:10:20:36:bb:66:59:ac:b2:83:1f:82:f0:e4:f5:c7:63:72:13:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Nov 21 14:47:05 2024 GMT Not After : Nov 24 16:20:05 2024 GMT Subject: CN=22F70B078853FDFF8D2EEDCBCB1FC5AFE9BC9AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:a9:36:ea:b0:3e:c4:f9:3c:d6:ca:66:a7: 05:d9:38:ca:f7:6b:71:99:ad:bc:21:f4:d8:74:52: 2d:85:5d:01:7e:b3:65:35:57:d9:4f:98:d0:10:1f: 15:6b:c5:33:96:8d:a8:9e:4c:0b:b7:c5:74:69:d1: a8:8a:80:4b:b2:80:ed:e0:61:36:46:4c:fe:43:92: a4:c6:65:1f:7d:d2:94:c2:68:d0:40:7b:0c:0a:84: a7:9c:cc:23:e1:37:88:9c:53:e6:37:12:95:e9:c2: fd:c0:8a:7a:94:a9:85:c7:76:a8:1c:85:98:aa:4e: 92:76:c6:90:76:de:07:e9:53:49:d9:95:4a:8b:87: b8:6a:65:36:20:9e:78:58:04:77:43:18:31:0e:62: 9d:35:56:ba:df:ae:30:32:58:02:9b:c9:87:36:51: d4:38:c7:89:4d:4c:1f:b8:e3:ae:13:0e:79:85:c6: a7:de:5d:ee:34:62:cf:d8:55:b4:49:bc:f8:10:f9: d7:b6:7f:42:1d:c1:2e:5f:c0:74:a8:c5:3d:10:a4: eb:24:27:59:12:e7:40:64:a1:a8:6b:97:1d:3f:16: b6:e4:f2:ae:90:3e:db:a8:57:ac:35:4f:4a:da:06: 7a:1d:4d:fa:4b:1c:2e:8e:c7:b5:09:5d:28:95:35: 35:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F7:0B:07:88:53:FD:FF:8D:2E:ED:CB:CB:1F:C5:AF:E9:BC:9A:D9 X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fb:35:61:b7:e4:ed:7f:f6:0d:81:16:a4:59:f6:69:dc:84: e9:8d:54:a1:e0:8d:88:d5:20:87:d2:41:66:86:16:22:9b:5e: e1:71:3c:d0:0c:5d:6e:8d:c6:65:37:a6:ca:08:23:61:69:c4: be:87:3b:a1:5e:b9:0f:ed:80:b4:9b:a0:38:13:cd:07:8b:71: 78:35:c9:18:f0:5e:42:46:b5:2a:59:bf:bb:97:84:87:41:55: b5:ba:29:1c:98:d7:bd:18:6b:e7:e6:03:4e:9a:df:38:79:a5: 18:40:c9:27:06:04:b2:08:89:6f:a7:85:11:05:5b:cb:66:d5: df:59:1a:31:08:28:cb:e0:55:cf:ae:9a:cd:63:db:05:c2:ce: 38:6c:b5:31:48:54:04:b4:31:dd:a9:c5:44:ac:c0:6d:75:14: 94:99:5f:9f:3e:41:b3:11:f8:21:77:24:78:0c:fa:fe:fa:7a: 86:ca:29:aa:e7:b6:6e:f3:6c:9a:b6:c8:7d:ea:b9:c2:70:95: cb:87:12:83:67:c1:14:91:d0:52:37:46:fb:13:39:ae:b0:0d: 7c:35:c0:13:0c:a6:c3:25:fe:86:d5:5f:9a:0f:cc:3b:95:52: 33:fb:f9:8f:dc:c0:a8:66:ed:7b:e1:b6:ff:58:5b:92:89:ac: 85:7c:45:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRAgNrtmWayygx+C8OT1x2NyEz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNDExMjExNDQ3MDVaFw0yNDExMjQxNjIwMDVaMDMxMTAvBgNV BAMTKDIyRjcwQjA3ODg1M0ZERkY4RDJFRURDQkNCMUZDNUFGRTlCQzlBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrm6k26rA+xPk81spmpwXZOMr3 a3GZrbwh9Nh0Ui2FXQF+s2U1V9lPmNAQHxVrxTOWjaieTAu3xXRp0aiKgEuygO3g YTZGTP5DkqTGZR990pTCaNBAewwKhKeczCPhN4icU+Y3EpXpwv3AinqUqYXHdqgc hZiqTpJ2xpB23gfpU0nZlUqLh7hqZTYgnnhYBHdDGDEOYp01VrrfrjAyWAKbyYc2 UdQ4x4lNTB+4464TDnmFxqfeXe40Ys/YVbRJvPgQ+de2f0IdwS5fwHSoxT0QpOsk J1kS50Bkoahrlx0/Frbk8q6QPtuoV6w1T0raBnodTfpLHC6Ox7UJXSiVNTWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIvcLB4hT/f+NLu3Lyx/Fr+m8mtkwHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT7NWG35O1/9g2BFqRZ9mnchOmNVKHgjYjV IIfSQWaGFiKbXuFxPNAMXW6NxmU3psoII2FpxL6HO6FeuQ/tgLSboDgTzQeLcXg1 yRjwXkJGtSpZv7uXhIdBVbW6KRyY170Ya+fmA06a3zh5pRhAyScGBLIIiW+nhREF W8tm1d9ZGjEIKMvgVc+ums1j2wXCzjhstTFIVAS0Md2pxUSswG11FJSZX58+QbMR +CF3JHgM+v76eobKKarntm7zbJq2yH3qucJwlcuHEoNnwRSR0FI3RvsTOa6wDXw1 wBMMpsMl/obVX5oPzDuVUjP7+Y/cwKhm7Xvhtv9YW5KJrIV8RRc= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org