$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: FXAYiOXTZt5ENpAzpwBWOKxs/q9fMfznBO4MBIr3cmY= Subject key identifier: 40:E7:A5:C6:EC:A7:89:60:0B:0F:03:1C:20:7C:E3:40:8D:D6:B3:B3 Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 698E20B753950455C061421FA43977DCE9D65FDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 01A2 Signing time: Fri 22 Nov 2024 15:41:10 +0000 Manifest this update: Fri 22 Nov 2024 15:36:10 +0000 Manifest next update: Tue 26 Nov 2024 01:06:10 +0000 Files and hashes: 1: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: K1COMF0liPB2aPGj6+Ym7X5IHC5iQPUXiCtpqVbwn3s=) 2: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: jzy1GxSXpYLUufAgZH2zrSTmlNZd4F6Q4dTSAXnqmVA=) 3: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: gz67Kx7+sZjJmb0oO9yWkCJ9MsjPuGh0w6izfHnQwkA=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: rl8wH4GDT9EDg7ItMS1Jtz4yfXCXhkyR1v7BBmr0UHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8e:20:b7:53:95:04:55:c0:61:42:1f:a4:39:77:dc:e9:d6:5f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Nov 22 15:36:10 2024 GMT Not After : Nov 26 01:06:10 2024 GMT Subject: CN=40E7A5C6ECA789600B0F031C207CE3408DD6B3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:01:50:52:d8:ff:55:a1:bf:4a:89:df:e0: 29:9e:09:84:7f:18:17:ad:76:3d:38:21:fb:ca:19: 55:24:2d:9b:34:34:4a:63:86:dc:77:b7:25:c7:1f: a8:96:d3:fc:bf:50:4c:7a:42:2c:e2:80:00:45:a2: 52:51:52:ad:6d:54:4e:40:6c:6e:fa:19:2d:19:1a: 3a:c3:af:1f:11:95:07:f3:6e:6f:7d:8e:b0:06:b9: 7b:9b:ef:c0:77:33:5b:ad:d3:c4:6e:8e:f0:14:05: 9e:db:f0:43:a0:78:a7:ec:22:82:67:70:4a:44:8c: 04:fc:8b:e3:90:e1:a6:6e:73:aa:87:c8:72:1e:d4: 85:00:d7:86:f5:68:6d:5b:d7:94:00:cd:09:77:f4: 4a:ea:55:b3:30:f2:f4:85:b5:31:f3:d5:a9:1e:60: 2d:c3:77:54:79:c3:9e:2a:4d:8f:86:d2:13:f7:8b: 73:16:d5:15:cd:75:f7:a9:6d:38:a3:a9:c3:c5:6a: 8f:9a:00:12:4d:9a:0d:95:11:00:62:e7:54:65:9e: 3b:dd:1a:3c:8f:e7:94:09:8a:52:a7:f9:60:5c:59: 2a:b2:21:28:d4:36:b0:24:be:86:b7:56:c9:00:3b: 2f:bc:61:29:61:43:e4:69:6a:55:28:50:67:1d:4f: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E7:A5:C6:EC:A7:89:60:0B:0F:03:1C:20:7C:E3:40:8D:D6:B3:B3 X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e6:a4:0e:e8:35:77:4c:6b:47:06:fd:ef:f7:96:66:8b:12: c2:52:11:e5:ad:9a:3e:0e:62:8a:24:99:b1:02:56:1d:c4:ed: 7f:c1:23:fc:2f:07:ac:30:22:ce:51:f9:d6:df:89:5a:9d:83: 53:d5:57:59:b7:18:d2:8b:14:2a:4d:a4:43:54:06:fa:41:5c: f6:16:90:90:e0:00:b8:42:95:23:c8:f2:c8:91:b2:24:c6:ee: 52:77:57:54:91:d0:72:98:0b:36:9e:d2:22:59:c2:fa:12:bd: 8e:a6:59:87:b4:fa:87:f9:31:db:3a:22:99:dd:7e:3f:0a:7b: 91:a2:44:d3:35:33:b4:58:bc:5b:99:f3:f9:80:5e:e4:8a:f2: bc:8b:af:2d:8b:13:80:b2:58:6f:7c:68:10:0f:ad:65:66:fc: cc:e6:29:de:55:40:5f:d4:59:bc:0d:08:13:59:57:05:67:18: dc:75:cc:48:7a:4c:38:d3:53:09:7c:da:71:ec:eb:6e:e1:82: b7:b9:65:b9:dd:2b:27:36:43:7e:d9:be:28:46:81:aa:3f:8b: 8c:58:be:16:57:0a:a7:32:0f:c8:39:28:0e:f9:54:3b:e7:59: dd:df:43:f9:21:b1:d6:10:68:d2:80:95:56:28:45:3a:03:68: e2:f2:ff:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaY4gt1OVBFXAYUIfpDl33OnWX90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNDExMjIxNTM2MTBaFw0yNDExMjYwMTA2MTBaMDMxMTAvBgNV BAMTKDQwRTdBNUM2RUNBNzg5NjAwQjBGMDMxQzIwN0NFMzQwOERENkIzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2wFQUtj/VaG/Sonf4CmeCYR/ GBetdj04IfvKGVUkLZs0NEpjhtx3tyXHH6iW0/y/UEx6QizigABFolJRUq1tVE5A bG76GS0ZGjrDrx8RlQfzbm99jrAGuXub78B3M1ut08RujvAUBZ7b8EOgeKfsIoJn cEpEjAT8i+OQ4aZuc6qHyHIe1IUA14b1aG1b15QAzQl39ErqVbMw8vSFtTHz1ake YC3Dd1R5w54qTY+G0hP3i3MW1RXNdfepbTijqcPFao+aABJNmg2VEQBi51Rlnjvd GjyP55QJilKn+WBcWSqyISjUNrAkvoa3VskAOy+8YSlhQ+RpalUoUGcdT4+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQOelxuyniWALDwMcIHzjQI3Ws7MwHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELmpA7oNXdMa0cG/e/3lmaLEsJSEeWtmj4O YookmbECVh3E7X/BI/wvB6wwIs5R+dbfiVqdg1PVV1m3GNKLFCpNpENUBvpBXPYW kJDgALhClSPI8siRsiTG7lJ3V1SR0HKYCzae0iJZwvoSvY6mWYe0+of5Mds6Ipnd fj8Ke5GiRNM1M7RYvFuZ8/mAXuSK8ryLry2LE4CyWG98aBAPrWVm/MzmKd5VQF/U WbwNCBNZVwVnGNx1zEh6TDjTUwl82nHs627hgre5ZbndKyc2Q37ZvihGgao/i4xY vhZXCqcyD8g5KA75VDvnWd3fQ/khsdYQaNKAlVYoRToDaOLy/6Y= -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org