$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json) Hash identifier: v+b51hZWBqv7BepTCeUAKnxfO+zrfnbBrnhqY1bWLQg= Subject key identifier: 14:24:4A:CE:49:7F:74:42:A0:FD:A3:7A:80:69:D4:D6:5B:FB:FB:80 Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Certificate serial: 1BF2CD2A6A0E984B5081E21BE5F65C816C6014A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft Manifest number: 2D Signing time: Mon 25 Nov 2024 16:01:00 +0000 Manifest this update: Mon 25 Nov 2024 15:56:00 +0000 Manifest next update: Thu 28 Nov 2024 20:15:00 +0000 Files and hashes: 1: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: dWQzPp8kdjPteDTMEdYSbvx41Reobr3VX+2J8fq9NVg=) 2: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: aVkWtYQeXbkRmk1yznzgBe7fvpPNXwFmp2M48sE9A+g=) 3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: 9AjR9tv/q/qBFX1qgM3Ou/29ijQlZf2Xh16VQ5oOJiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 20:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f2:cd:2a:6a:0e:98:4b:50:81:e2:1b:e5:f6:5c:81:6c:60:14:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Validity Not Before: Nov 25 15:56:00 2024 GMT Not After : Nov 28 20:15:00 2024 GMT Subject: CN=14244ACE497F7442A0FDA37A8069D4D65BFBFB80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:c2:69:ab:17:62:ab:23:49:dc:01:02:2c: 71:22:da:db:cc:4b:3c:24:4a:00:81:c2:60:65:1d: e9:a4:35:99:dc:7f:5b:d3:05:74:51:0f:50:e1:ab: 74:32:50:35:31:19:76:87:5c:6a:29:80:5f:a5:09: 26:fb:c7:81:1c:fa:90:f7:ef:22:c3:57:f2:69:ef: 38:b6:26:4b:06:55:7d:83:d3:1c:a0:5a:db:26:4c: 76:87:3f:8c:5d:e2:03:74:0b:d0:90:a8:ec:79:ce: ea:dc:4c:de:98:54:ae:68:c5:23:54:8d:c8:18:1f: 64:1e:9c:1d:7d:33:b0:31:06:e9:cf:85:51:00:61: 3e:82:6b:ac:c5:e5:e8:0f:d7:63:78:f6:6f:31:52: f3:c8:75:bd:81:3c:52:4e:35:ed:13:09:57:50:2c: 4b:72:cf:f4:ce:f3:93:69:e2:09:ef:77:3f:d1:a5: 84:be:97:59:13:fb:ff:90:93:e2:c0:55:e9:8f:07: a5:19:53:ec:bd:41:a3:eb:12:fd:88:bc:6a:39:78: 37:23:2b:47:93:ad:a7:cd:1a:bf:bf:0d:71:cf:27: 44:db:b2:76:9e:47:e6:ce:f9:67:2f:b4:99:53:40: c4:a9:56:f6:02:11:42:cd:4c:30:dd:cf:71:b3:a3: e9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:24:4A:CE:49:7F:74:42:A0:FD:A3:7A:80:69:D4:D6:5B:FB:FB:80 X509v3 Authority Key Identifier: keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6f:20:fa:4d:6f:27:ba:36:85:88:9b:73:33:6c:9a:0a:92: 73:7e:b9:ee:6e:a6:c2:7a:b5:91:15:1a:f5:fc:30:cf:f7:45: 5f:6d:8e:4a:3f:ee:e9:ec:84:85:38:f7:37:d5:0d:37:53:38: 3b:dd:80:89:04:fd:67:6c:4d:f9:5f:e6:83:fc:f4:34:23:06: cb:15:5b:fc:f8:1b:ad:a3:b1:cb:49:7e:1f:95:87:8a:32:64: 4b:a6:a6:31:ee:30:f7:c5:70:6f:7d:07:e6:01:15:82:de:8b: 3c:3c:06:0d:53:23:af:f7:ea:8e:c6:ca:f6:a8:7b:31:89:3d: af:ca:fd:67:2d:d5:47:f9:ec:9c:cb:0f:1a:de:c7:a8:9a:5c: 2c:51:ce:d6:03:9b:91:cd:92:d0:69:ff:0d:7d:2e:2d:88:59: 20:82:f6:a1:db:de:67:a2:2f:82:05:9e:00:87:e0:0d:4a:d2: 13:93:18:cd:be:60:b0:05:ea:d6:b8:f9:88:d9:eb:a7:43:f2: 27:ae:ce:d0:92:fe:77:23:4b:45:33:bc:03:41:e1:f4:47:9d: ca:52:bf:2b:39:47:f6:32:5e:84:66:65:ba:43:a6:87:b5:0c: 55:37:e6:63:70:22:e1:f5:9f:1b:58:5b:32:4e:7a:85:e9:ea: c4:8b:2d:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/LNKmoOmEtQgeIb5fZcgWxgFKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4 NDE5NEZFMjAeFw0yNDExMjUxNTU2MDBaFw0yNDExMjgyMDE1MDBaMDMxMTAvBgNV BAMTKDE0MjQ0QUNFNDk3Rjc0NDJBMEZEQTM3QTgwNjlENEQ2NUJGQkZCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2MJpqxdiqyNJ3AECLHEi2tvM SzwkSgCBwmBlHemkNZncf1vTBXRRD1Dhq3QyUDUxGXaHXGopgF+lCSb7x4Ec+pD3 7yLDV/Jp7zi2JksGVX2D0xygWtsmTHaHP4xd4gN0C9CQqOx5zurcTN6YVK5oxSNU jcgYH2QenB19M7AxBunPhVEAYT6Ca6zF5egP12N49m8xUvPIdb2BPFJONe0TCVdQ LEtyz/TO85Np4gnvdz/RpYS+l1kT+/+Qk+LAVemPB6UZU+y9QaPrEv2IvGo5eDcj K0eTrafNGr+/DXHPJ0TbsnaeR+bO+WcvtJlTQMSpVvYCEULNTDDdz3Gzo+k3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFCRKzkl/dEKg/aN6gGnU1lv7+4AwHwYDVR0j BBgwFoAUgrvzNk3dZGlC9MrgV58TLYQZT+IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzkzYzI1Yy1jZTU1LTQ4NzAtODE2OS01ZWFlOGQ5ZGZiYzEvMC84MkJCRjMzNjRE REQ2NDY5NDJGNENBRTA1NzlGMTMyRDg0MTk0RkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4NDE5 NEZFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEz MkQ4NDE5NEZFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdvIPpNbye6NoWIm3MzbJoKknN+ue5upsJ6 tZEVGvX8MM/3RV9tjko/7unshIU49zfVDTdTODvdgIkE/WdsTflf5oP89DQjBssV W/z4G62jsctJfh+Vh4oyZEumpjHuMPfFcG99B+YBFYLeizw8Bg1TI6/36o7Gyvao ezGJPa/K/Wct1Uf57JzLDxrex6iaXCxRztYDm5HNktBp/w19Li2IWSCC9qHb3mei L4IFngCH4A1K0hOTGM2+YLAF6ta4+YjZ66dD8ieuztCS/ncjS0UzvANB4fRHncpS vys5R/YyXoRmZbpDpoe1DFU35mNwIuH1nxtYWzJOeoXp6sSLLes= -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:01 2024 by rpki-client on console-ams.rpki-client.org