$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft File: 2985976A4B3081770748882703E16497964D05A6.mft (raw, json) Hash identifier: ONBH7qNQ/1M0c3ZsRhApHsNpVzwVki3M+6CsYJEo17g= Subject key identifier: BA:7E:63:74:63:7F:1F:99:47:C2:3A:C0:3E:80:C7:05:68:8D:58:9B Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6 Certificate serial: 7D97993E4CDEDF7127A6346482ED393244DF43EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft Manifest number: 0174 Signing time: Sun 24 Nov 2024 03:20:41 +0000 Manifest this update: Sun 24 Nov 2024 03:15:41 +0000 Manifest next update: Wed 27 Nov 2024 04:04:41 +0000 Files and hashes: 1: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: FPt98Jlb07JrGQGNjE2/vKY/2MGs525PrXsgLkmv66M=) 2: 2985976A4B3081770748882703E16497964D05A6.crl (hash: wL/cim1hk1s/6vu8V2+l7BWazQm6PnESBxqOvJ9lXLk=) 3: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: To2RtUGQFhlqilx+fqPMxzWWGUOkUvTK0ofRYTXx5FY=) 4: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: BerVZ23TVRI4dwt9lyBc2AUhwZ05yfxMPrju4y+LAeE=) 5: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: ERxIPVPynr8Zqyd/erBxd/JSZglWN0mqL6sn5XfEVLc=) 6: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: rqdaT3dhU4vRh0lUQmFU0b1pAjqoq7sorljrl78YDwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:97:99:3e:4c:de:df:71:27:a6:34:64:82:ed:39:32:44:df:43:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2985976A4B3081770748882703E16497964D05A6 Validity Not Before: Nov 24 03:15:41 2024 GMT Not After : Nov 27 04:04:41 2024 GMT Subject: CN=BA7E6374637F1F9947C23AC03E80C705688D589B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:c1:7a:02:f1:fb:30:68:0d:5c:d1:c3:70: bc:72:25:49:2d:e9:44:e9:4f:a5:ce:49:e4:3a:3c: 37:de:1c:6f:a2:55:cb:a6:fe:91:8f:ea:aa:4b:2d: 86:bd:cc:1d:31:36:9f:85:a0:09:9c:c4:07:f5:74: dc:28:46:c3:7d:58:8c:30:8c:fd:7e:ef:09:20:4d: 71:08:1c:2c:85:3f:9f:40:f5:47:4a:c7:09:6b:4d: b8:c7:41:d5:7e:1d:05:b2:2c:b1:a3:b6:75:db:e8: 45:27:90:54:6b:80:83:e8:23:0c:cf:ef:48:be:17: b6:43:c5:29:25:8f:88:a9:69:92:d2:b0:59:1c:f1: b4:4b:f2:d1:db:84:31:1d:37:16:34:ed:bb:d0:f1: a4:fa:1d:cd:4d:02:a2:e4:b4:d2:f8:99:d4:d6:39: a3:cb:76:97:5b:a8:5a:d7:8e:9f:97:68:d8:c6:07: 66:d0:8b:cb:09:3c:f5:cb:e3:7f:32:50:51:76:91: 52:46:f0:1d:c7:ca:57:60:c0:31:8a:bf:3c:45:8e: 8f:28:20:53:da:21:36:32:5f:c6:06:a2:bf:46:93: b0:96:49:c9:aa:96:92:22:7d:40:0d:86:06:7e:5e: 5d:9a:a3:5a:9e:63:78:8d:e2:bc:51:55:bb:f4:9e: 30:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7E:63:74:63:7F:1F:99:47:C2:3A:C0:3E:80:C7:05:68:8D:58:9B X509v3 Authority Key Identifier: keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f5:b5:15:6d:0b:bc:8a:e5:dc:56:e9:32:a2:2d:47:45:d6: 9d:b8:e4:c8:4d:62:b5:0d:a6:0c:2c:ed:50:45:30:43:66:fc: 05:c2:3a:14:3d:b3:7b:cd:0a:06:d3:d4:36:2e:ce:56:96:b4: 5b:24:f3:f9:e6:b6:32:0b:38:9d:ac:ab:b9:2f:57:0d:f0:15: aa:8c:bd:85:cc:7c:5c:e2:f0:16:b7:c9:b8:97:12:7a:3e:07: 82:78:69:93:81:9e:9d:23:f6:67:0a:1d:80:42:da:ad:34:2b: 75:dd:66:23:40:0e:2e:ed:e9:12:46:c0:80:1b:5d:b8:a9:a4: 28:a7:39:d4:17:ab:ea:eb:a4:59:93:52:45:18:56:80:6b:f9: ea:87:26:34:74:53:77:0b:f3:86:2d:5a:72:fc:92:45:0e:d6: 36:ff:01:3c:da:a4:e7:61:df:e4:40:f4:d6:49:b2:57:00:0b: 11:d1:41:05:93:c6:61:19:99:23:81:cf:4f:dd:68:f9:4b:58: db:83:39:5c:00:9b:07:fa:f1:f1:44:a4:44:c6:31:6b:3b:63: d2:84:55:ea:43:a1:ca:64:3a:28:5d:18:ee:51:80:27:f6:25: 7a:c0:7e:22:88:b7:f1:0c:b8:ec:49:46:76:3b:0d:86:a8:36: 5d:7a:87:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZeZPkze33EnpjRkgu05MkTfQ+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5 NjREMDVBNjAeFw0yNDExMjQwMzE1NDFaFw0yNDExMjcwNDA0NDFaMDMxMTAvBgNV BAMTKEJBN0U2Mzc0NjM3RjFGOTk0N0MyM0FDMDNFODBDNzA1Njg4RDU4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMcF6AvH7MGgNXNHDcLxyJUkt 6UTpT6XOSeQ6PDfeHG+iVcum/pGP6qpLLYa9zB0xNp+FoAmcxAf1dNwoRsN9WIww jP1+7wkgTXEIHCyFP59A9UdKxwlrTbjHQdV+HQWyLLGjtnXb6EUnkFRrgIPoIwzP 70i+F7ZDxSklj4ipaZLSsFkc8bRL8tHbhDEdNxY07bvQ8aT6Hc1NAqLktNL4mdTW OaPLdpdbqFrXjp+XaNjGB2bQi8sJPPXL438yUFF2kVJG8B3HyldgwDGKvzxFjo8o IFPaITYyX8YGor9Gk7CWScmqlpIifUANhgZ+Xl2ao1qeY3iN4rxRVbv0njAFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUun5jdGN/H5lHwjrAPoDHBWiNWJswHwYDVR0j BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0 OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA31tRVtC7yK5dxW6TKiLUdF1p245MhNYrUN pgws7VBFMENm/AXCOhQ9s3vNCgbT1DYuzlaWtFsk8/nmtjILOJ2sq7kvVw3wFaqM vYXMfFzi8Ba3ybiXEno+B4J4aZOBnp0j9mcKHYBC2q00K3XdZiNADi7t6RJGwIAb XbippCinOdQXq+rrpFmTUkUYVoBr+eqHJjR0U3cL84YtWnL8kkUO1jb/ATzapOdh 3+RA9NZJslcACxHRQQWTxmEZmSOBz0/daPlLWNuDOVwAmwf68fFEpETGMWs7Y9KE VepDocpkOihdGO5RgCf2JXrAfiKIt/EMuOxJRnY7DYaoNl16h6g= -----END CERTIFICATE-----Generated at Sun Nov 24 05:18:50 2024 by rpki-client on console-ams.rpki-client.org