$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: CkJ82UBIrqcwNveSp2zs3JzKeu9ATCWqKBCojWKlbss= Subject key identifier: 47:69:CB:88:C0:8C:DC:7F:04:18:B1:89:5E:0A:C4:1F:57:D5:E6:E5 Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 1A21C63B19E270A3AAAC4AFA1BC5C088F3744218 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 0483 Signing time: Fri 22 Nov 2024 06:40:46 +0000 Manifest this update: Fri 22 Nov 2024 06:35:46 +0000 Manifest next update: Mon 25 Nov 2024 09:51:46 +0000 Files and hashes: 1: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: Mb0v9h1dQ2fzKimG/dnv0t/MA1EgX4nopy7o63/fKic=) 2: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: sgnfbb+P4EYsxu8tapF6h6Srh3jvtCv16to44D4j9Q4=) 3: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: ii+HEOYSI26ONdCQzTSyl9DTOtWXGw12f4RUOO1wwl4=) 4: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: 3EM09fz5U4vIetkukDcNawwvtS4WV5nD8HmoRxw+WmQ=) 5: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: mIQL4Q5wnaduq+Smgc4E/2achiI+t5Z1BEbqpLX1tbs=) 6: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: GyQ3rTA4havMS5lidJTX5ZhWoHPWWQvhSKW+0x1lFv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:21:c6:3b:19:e2:70:a3:aa:ac:4a:fa:1b:c5:c0:88:f3:74:42:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Nov 22 06:35:46 2024 GMT Not After : Nov 25 09:51:46 2024 GMT Subject: CN=4769CB88C08CDC7F0418B1895E0AC41F57D5E6E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:10:69:42:88:34:b9:60:ba:95:51:e7:e6:f7: 0a:33:3a:40:ad:30:fe:13:13:7d:95:9e:16:ad:b3: ef:40:49:cf:d4:f3:e2:b0:c0:fc:2b:e3:04:cb:af: 5a:c5:99:2e:37:0e:d9:77:26:af:b9:11:0d:09:b7: 3c:32:b1:77:38:2f:d4:43:c1:0f:e0:0f:e9:e7:e2: 4a:b7:f6:89:1e:f3:46:af:44:c8:c7:bb:ff:0c:83: 52:12:df:c0:eb:c8:b4:1d:cc:5f:25:fe:ab:8d:a1: fc:ee:02:ed:fb:89:8d:ee:30:a2:63:55:e0:f8:bd: a3:0a:d9:5b:7b:e2:48:fd:ac:97:e8:db:9f:f8:08: 9b:fc:d8:f2:c7:58:25:6b:d1:6d:6c:ee:83:dc:60: 67:9d:b9:fb:43:25:8e:81:cc:c5:60:2b:99:c6:18: 5b:7d:3d:c0:ad:4d:b1:62:ed:f4:c7:b3:d2:f4:34: 14:11:72:7e:61:d2:6d:ad:cf:dd:d4:59:41:73:75: c1:e1:f9:50:6e:76:08:b4:42:b5:0f:a3:a9:6f:3e: 55:31:8a:6e:45:5a:72:17:79:3b:91:a5:85:0f:0b: c7:32:30:81:d4:54:7a:0a:04:36:14:60:1e:49:04: 57:0b:c1:ba:f6:6f:76:53:b1:43:be:78:f9:31:73: 5a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:69:CB:88:C0:8C:DC:7F:04:18:B1:89:5E:0A:C4:1F:57:D5:E6:E5 X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ee:ba:64:b1:42:af:4d:f9:a6:61:df:12:a4:97:54:d4:c3: 44:d7:9e:90:fd:76:ea:c7:b1:27:01:6d:c9:3a:dd:ec:10:20: 98:a5:ae:a5:7e:2c:7b:f9:fa:7d:9d:ce:47:4a:4d:ec:ee:c1: ae:13:92:be:2e:ce:8d:dc:4c:0d:e6:f2:a6:ff:4d:5a:11:1a: 49:88:04:3b:72:d2:8a:82:86:22:4d:7d:e3:75:3f:8d:5c:52: 14:bd:1d:7f:87:cc:68:27:4b:b1:8c:27:ce:86:d9:86:5c:51: dc:52:18:06:47:23:85:d4:aa:22:f7:38:cf:91:52:e6:b2:ad: d1:fe:a8:4d:f5:36:50:80:32:95:d6:b9:ca:5d:ba:7f:b3:d0: 37:80:5d:c2:34:0c:07:d5:60:5e:c0:fe:e4:07:c0:42:fc:b6: 4b:dc:03:21:b4:9f:ee:f4:cc:9b:c8:2b:8a:e4:98:5f:39:c1: c0:ac:1c:7f:39:65:3c:81:d1:c5:17:9e:6d:5e:78:bb:3c:3a: 4f:7a:72:aa:e3:fa:bf:4b:7d:8a:40:4e:14:4d:ad:f9:a8:31: c4:10:e5:82:eb:2f:cd:b2:11:c4:83:35:f6:c0:f4:7e:45:3c: 4e:f9:ff:b8:19:99:35:a2:02:c0:4b:4b:1e:13:14:fe:e0:07: 2e:03:a8:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGiHGOxnicKOqrEr6G8XAiPN0QhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNDExMjIwNjM1NDZaFw0yNDExMjUwOTUxNDZaMDMxMTAvBgNV BAMTKDQ3NjlDQjg4QzA4Q0RDN0YwNDE4QjE4OTVFMEFDNDFGNTdENUU2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0EGlCiDS5YLqVUefm9wozOkCt MP4TE32Vnhats+9ASc/U8+KwwPwr4wTLr1rFmS43Dtl3Jq+5EQ0JtzwysXc4L9RD wQ/gD+nn4kq39oke80avRMjHu/8Mg1IS38DryLQdzF8l/quNofzuAu37iY3uMKJj VeD4vaMK2Vt74kj9rJfo25/4CJv82PLHWCVr0W1s7oPcYGeduftDJY6BzMVgK5nG GFt9PcCtTbFi7fTHs9L0NBQRcn5h0m2tz93UWUFzdcHh+VBudgi0QrUPo6lvPlUx im5FWnIXeTuRpYUPC8cyMIHUVHoKBDYUYB5JBFcLwbr2b3ZTsUO+ePkxc1ojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2nLiMCM3H8EGLGJXgrEH1fV5uUwHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzuumSxQq9N+aZh3xKkl1TUw0TXnpD9durH sScBbck63ewQIJilrqV+LHv5+n2dzkdKTezuwa4Tkr4uzo3cTA3m8qb/TVoRGkmI BDty0oqChiJNfeN1P41cUhS9HX+HzGgnS7GMJ86G2YZcUdxSGAZHI4XUqiL3OM+R UuayrdH+qE31NlCAMpXWucpdun+z0DeAXcI0DAfVYF7A/uQHwEL8tkvcAyG0n+70 zJvIK4rkmF85wcCsHH85ZTyB0cUXnm1eeLs8Ok96cqrj+r9LfYpAThRNrfmoMcQQ 5YLrL82yEcSDNfbA9H5FPE75/7gZmTWiAsBLSx4TFP7gBy4DqJg= -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org