$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: FVI8abJs0JT635UrT99bXDE4QLA5tmzIP2lRW1JYdms= Subject key identifier: D2:76:DF:04:70:08:0F:7C:71:EA:63:71:44:50:5C:B8:1B:C9:02:32 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 20C4DAA21901B6D7137D199F492F6907539FBCFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 010F Signing time: Fri 22 Nov 2024 11:31:46 +0000 Manifest this update: Fri 22 Nov 2024 11:26:46 +0000 Manifest next update: Mon 25 Nov 2024 22:15:46 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: ED/6+BwM8sod94k9wXfselYq/3g3ss3r+glcWXmOBlI=) 2: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: Fb4tLrqJoZos25kCGNCZOgpy0++sIR5jzr5AGe3rv9s=) 3: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: YsfwQ5duTcBU7qqZMpT3rOSGVvuUPPYdsJjDBzsNdOA=) 4: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: fXUgq36ejSe6Mt9Z8iAmIYvwwQjs0rTb2Jv+srY4OWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c4:da:a2:19:01:b6:d7:13:7d:19:9f:49:2f:69:07:53:9f:bc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Nov 22 11:26:46 2024 GMT Not After : Nov 25 22:15:46 2024 GMT Subject: CN=D276DF0470080F7C71EA637144505CB81BC90232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:5c:ee:46:ff:ec:c8:3b:22:7a:19:1f:9d: bb:18:36:ba:8b:25:20:54:01:50:98:57:a9:03:5b: 33:26:de:7e:a8:03:47:2b:4a:63:e3:af:23:9d:a6: 05:38:55:31:6b:c6:9b:e8:1a:66:e5:57:85:ba:a8: 80:5f:1d:0c:a8:84:b4:43:af:8a:ee:c4:32:b8:83: 62:b7:1f:bf:be:a6:03:36:6a:8e:65:44:a6:3d:38: 2e:f9:d1:7e:1a:9d:d6:ad:85:18:d8:32:2d:05:2d: 95:6e:5a:49:89:9c:6f:2f:c6:10:df:7a:e4:83:61: 1c:93:bb:a7:c7:4e:3d:7d:e4:73:fb:4c:3e:2a:51: 11:c3:37:41:52:0c:b2:b7:cc:1f:58:57:cf:6d:d9: 98:c8:e9:46:ff:3e:da:7a:68:56:84:f1:b2:08:5b: 42:ab:9e:19:6f:d7:79:30:d7:69:41:ea:5a:af:94: ec:96:99:74:97:91:81:f1:e0:28:35:cf:e6:95:b5: 1b:a5:11:cd:68:f8:3e:40:30:d4:57:3f:ce:d9:b3: 49:b4:4e:0e:cb:88:0d:38:5c:e7:d2:8c:37:99:2b: 14:0f:fd:7a:fa:c0:0e:2f:6f:a2:b8:b8:fc:fa:20: 33:cf:56:26:ff:a3:0f:0a:20:d8:47:81:1d:00:25: a3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:76:DF:04:70:08:0F:7C:71:EA:63:71:44:50:5C:B8:1B:C9:02:32 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:99:70:d4:33:18:ef:e3:fb:80:e5:1d:1f:55:fc:81:d0:a3: 91:75:cb:20:96:03:6b:9a:57:9a:b4:b8:79:62:46:fa:9d:4d: 65:a5:5f:1c:23:62:27:e9:73:22:30:29:8a:34:ed:76:ee:25: 13:db:73:fd:e3:21:11:20:44:30:4b:d0:1e:9b:60:8c:c7:76: aa:4f:54:fa:26:78:d4:93:bf:ff:d8:c1:94:64:92:04:0c:39: 16:35:97:0a:42:95:8e:cd:fd:f6:f2:8d:a8:e5:c9:7e:d7:7b: 7d:36:56:24:7d:80:b8:71:d4:db:94:6c:60:69:be:a9:0d:01: 95:cd:a2:6f:00:5e:ce:c9:9b:e4:13:b7:a1:af:07:77:60:dc: 95:4e:de:be:d5:6b:9b:44:8d:77:f6:ad:b1:90:42:0d:fb:2f: 1f:bf:05:40:f3:23:28:2c:97:c9:3b:fe:3d:d5:10:a8:c2:11: 05:9f:72:f1:a3:95:f1:50:32:80:e6:bb:0a:e1:33:d2:54:88: 1f:83:79:6f:7d:a0:dd:68:b4:77:ed:de:c4:8e:bb:4a:42:76: 02:52:73:7e:39:ea:c0:5d:39:fc:7d:28:82:7e:74:2b:d1:85: f2:83:a6:b2:89:19:e0:e5:c1:07:84:f5:d8:60:b0:ab:c0:e4: ab:78:20:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMTaohkBttcTfRmfSS9pB1OfvP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNDExMjIxMTI2NDZaFw0yNDExMjUyMjE1NDZaMDMxMTAvBgNV BAMTKEQyNzZERjA0NzAwODBGN0M3MUVBNjM3MTQ0NTA1Q0I4MUJDOTAyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyVzuRv/syDsiehkfnbsYNrqL JSBUAVCYV6kDWzMm3n6oA0crSmPjryOdpgU4VTFrxpvoGmblV4W6qIBfHQyohLRD r4ruxDK4g2K3H7++pgM2ao5lRKY9OC750X4andathRjYMi0FLZVuWkmJnG8vxhDf euSDYRyTu6fHTj195HP7TD4qURHDN0FSDLK3zB9YV89t2ZjI6Ub/Ptp6aFaE8bII W0Krnhlv13kw12lB6lqvlOyWmXSXkYHx4Cg1z+aVtRulEc1o+D5AMNRXP87Zs0m0 Tg7LiA04XOfSjDeZKxQP/Xr6wA4vb6K4uPz6IDPPVib/ow8KINhHgR0AJaPRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0nbfBHAID3xx6mNxRFBcuBvJAjIwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGZcNQzGO/j+4DlHR9V/IHQo5F1yyCWA2ua V5q0uHliRvqdTWWlXxwjYifpcyIwKYo07XbuJRPbc/3jIREgRDBL0B6bYIzHdqpP VPomeNSTv//YwZRkkgQMORY1lwpClY7N/fbyjajlyX7Xe302ViR9gLhx1NuUbGBp vqkNAZXNom8AXs7Jm+QTt6GvB3dg3JVO3r7Va5tEjXf2rbGQQg37Lx+/BUDzIygs l8k7/j3VEKjCEQWfcvGjlfFQMoDmuwrhM9JUiB+DeW99oN1otHft3sSOu0pCdgJS c3456sBdOfx9KIJ+dCvRhfKDprKJGeDlwQeE9dhgsKvA5Kt4II8= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org