$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: x9g0yAu6lFRgTZFwa4GG89Pij1YpDoIPVmG2uAVBwxw= Subject key identifier: 15:AE:DB:00:73:D4:4E:29:10:46:E6:97:72:3E:FB:C0:6B:E5:CC:26 Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 2AE3A25FBE105B3A07584F00564DB5FF1C767800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: 41 Signing time: Wed 20 Nov 2024 19:12:11 +0000 Manifest this update: Wed 20 Nov 2024 19:07:11 +0000 Manifest next update: Sun 24 Nov 2024 03:15:11 +0000 Files and hashes: 1: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: j6dgc3ruNxec67NtQTPzypJdOlM6suihHaG3ZbEwF2U=) 2: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: vbaHENLO3TUZNBJHFIDDowZBiE0uRkYVJ78oNA6FY/4=) 3: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: wgS20VWqKQyTdaQvBzivbNIKKJm8jb1jO3D0v/T/0gk=) 4: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: AZEmfCNTiV+FYg/yw9hFETkUfFbbK5ftbZE0ZS1n9Ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e3:a2:5f:be:10:5b:3a:07:58:4f:00:56:4d:b5:ff:1c:76:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Nov 20 19:07:11 2024 GMT Not After : Nov 24 03:15:11 2024 GMT Subject: CN=15AEDB0073D44E291046E697723EFBC06BE5CC26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:1b:e1:93:d8:95:f4:a8:6b:82:6c:b1:4a: bb:71:6f:c2:89:80:c7:3c:76:9f:5c:ba:da:66:28: 8a:49:15:d6:89:ec:15:23:99:eb:0d:27:5a:36:f7: c3:1c:db:3d:a1:d6:be:bf:ab:29:b6:f1:16:7a:c1: 19:a4:44:48:43:92:68:44:66:92:13:88:24:03:90: b7:3b:e3:6a:4d:7f:df:73:9e:c3:39:5f:2c:9b:7e: 07:7f:6b:69:85:d9:49:f1:dc:c9:00:b1:ef:5f:a9: 3b:64:88:76:e7:f9:20:fe:21:31:4e:1a:d7:36:63: f1:fc:8a:6c:6f:88:d7:e1:3c:0e:a7:9d:22:da:dc: 35:f0:8c:81:20:b5:4e:15:2b:8f:47:d8:65:c9:92: 5c:a2:c6:d9:b7:cb:9f:7c:69:ec:ca:88:a4:de:45: a3:8c:04:28:ee:3b:05:c2:37:53:df:d1:62:34:ca: dd:0b:ea:d0:69:85:2d:de:75:00:98:37:8a:3b:84: 36:55:11:e8:f6:65:c3:7e:23:df:f6:1b:5c:ed:b0: 4b:bc:51:d9:01:91:b4:69:5a:25:35:f9:02:ec:62: 42:a6:6e:cf:ac:a0:e3:b9:1d:15:2c:59:e1:70:fb: 2b:63:b9:0d:6b:90:c9:aa:6a:e6:89:55:5a:98:1f: 28:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AE:DB:00:73:D4:4E:29:10:46:E6:97:72:3E:FB:C0:6B:E5:CC:26 X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:45:d9:b1:60:f7:e8:77:7a:5d:02:d2:4f:ca:b4:7c:6d:23: bf:43:31:bf:e6:f5:a2:b3:13:6b:81:c4:7d:ba:66:08:52:95: 05:7b:1e:fb:c0:96:0b:98:fa:52:58:27:12:f3:c4:b7:22:cd: bb:5a:21:70:4f:23:84:30:8b:6c:1b:b0:90:a1:53:10:a4:37: ce:47:f9:9f:5f:b2:1e:99:ea:c5:c4:f8:0c:27:8e:c6:33:07: a5:c1:e2:1b:ef:c3:fb:60:ba:b2:43:ef:6f:a3:2a:a7:b3:ed: bb:bd:f6:08:24:cc:3f:a8:bc:63:8f:86:95:15:7c:95:6a:30: c1:21:5c:5b:0d:4e:99:17:8e:08:7a:f8:4f:3a:ec:fd:75:db: bc:87:1e:5d:12:39:27:15:00:2a:17:bc:ba:f8:25:4c:ba:9a: 4d:3e:4d:79:4a:83:c4:b3:7b:e0:26:86:b0:5b:e0:fc:85:96: e2:4f:fc:d1:33:6f:43:56:8e:8e:ca:6d:22:c9:76:76:a0:30: 1f:c9:3f:33:53:ff:96:d8:9d:ae:d8:52:8e:ca:3c:68:d1:2d: ea:ad:ba:e2:c2:5e:e0:40:12:2b:08:0c:74:16:14:01:e2:82: 0d:25:a4:25:b0:68:b9:da:d9:c0:f4:38:9b:20:82:60:9a:b8: 55:a8:43:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuOiX74QWzoHWE8AVk21/xx2eAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNDExMjAxOTA3MTFaFw0yNDExMjQwMzE1MTFaMDMxMTAvBgNV BAMTKDE1QUVEQjAwNzNENDRFMjkxMDQ2RTY5NzcyM0VGQkMwNkJFNUNDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg/Rvhk9iV9KhrgmyxSrtxb8KJ gMc8dp9cutpmKIpJFdaJ7BUjmesNJ1o298Mc2z2h1r6/qym28RZ6wRmkREhDkmhE ZpITiCQDkLc742pNf99znsM5Xyybfgd/a2mF2Unx3MkAse9fqTtkiHbn+SD+ITFO Gtc2Y/H8imxviNfhPA6nnSLa3DXwjIEgtU4VK49H2GXJklyixtm3y598aezKiKTe RaOMBCjuOwXCN1Pf0WI0yt0L6tBphS3edQCYN4o7hDZVEej2ZcN+I9/2G1ztsEu8 UdkBkbRpWiU1+QLsYkKmbs+soOO5HRUsWeFw+ytjuQ1rkMmqauaJVVqYHyjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFa7bAHPUTikQRuaXcj77wGvlzCYwHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClF2bFg9+h3el0C0k/KtHxtI79DMb/m9aKz E2uBxH26ZghSlQV7HvvAlguY+lJYJxLzxLcizbtaIXBPI4Qwi2wbsJChUxCkN85H +Z9fsh6Z6sXE+AwnjsYzB6XB4hvvw/tgurJD72+jKqez7bu99ggkzD+ovGOPhpUV fJVqMMEhXFsNTpkXjgh6+E867P1127yHHl0SOScVACoXvLr4JUy6mk0+TXlKg8Sz e+AmhrBb4PyFluJP/NEzb0NWjo7KbSLJdnagMB/JPzNT/5bYna7YUo7KPGjRLeqt uuLCXuBAEisIDHQWFAHigg0lpCWwaLna2cD0OJsggmCauFWoQz8= -----END CERTIFICATE-----Generated at Wed Nov 20 20:04:30 2024 by rpki-client on console-fra.rpki-client.org