$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft File: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft (raw, json) Hash identifier: vhvJQUqgtn9G5v0Zjg0njJMga0mcZrUxB3luZCcHBSg= Subject key identifier: 8C:4C:F5:78:84:AF:85:9F:79:64:02:90:0A:39:83:7A:7C:E6:61:8C Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 Certificate issuer: /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Certificate serial: 3A1439C514AF80A320031CE68394D6A5A478E473 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft Manifest number: 0160 Signing time: Mon 25 Nov 2024 12:01:26 +0000 Manifest this update: Mon 25 Nov 2024 11:56:26 +0000 Manifest next update: Thu 28 Nov 2024 12:20:26 +0000 Files and hashes: 1: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: Ptr+JvySIfz8ycST/SMYabIssLMqgPRW1YZ6dUpcr0c=) 2: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl (hash: /3afBQC+gPo16YY0NnJJWBoYExJOj6fq7KyMUN9uC70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 12:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:14:39:c5:14:af:80:a3:20:03:1c:e6:83:94:d6:a5:a4:78:e4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Validity Not Before: Nov 25 11:56:26 2024 GMT Not After : Nov 28 12:20:26 2024 GMT Subject: CN=8C4CF57884AF859F796402900A39837A7CE6618C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:68:42:c9:12:8a:6f:e7:e5:03:a0:19:2a: 8d:f3:b5:9d:23:5b:c2:25:fa:04:b0:d7:b7:5d:f7: 08:72:a2:20:25:ee:96:e1:75:72:f0:f2:94:b6:8e: 6d:21:2b:86:30:1f:71:bb:6a:7a:87:fe:3e:ad:85: 0e:8d:d7:cd:51:8f:30:d1:76:21:08:75:96:ce:aa: 38:e6:60:60:78:b2:21:79:e0:61:d9:3c:c3:6b:70: f5:0f:60:28:65:a1:62:6e:4d:71:20:69:9f:4e:0b: 4f:05:05:79:e7:b0:cf:4e:c8:bf:cd:22:9d:77:90: c9:31:5f:fe:b0:e4:e4:66:66:1a:f8:f9:25:cf:a0: 9c:c3:20:05:2a:43:f1:6c:92:6e:14:21:68:e0:8d: 60:d9:03:27:7c:c7:b9:ee:54:89:43:98:83:13:c7: 47:64:40:e3:88:25:0a:71:15:3f:c5:e9:3e:6a:5b: 22:06:d8:23:15:aa:b1:7b:32:9e:b4:0e:68:71:48: f6:4d:26:bc:10:24:60:b3:13:ec:26:10:51:4f:c1: 23:d2:58:ba:50:be:74:88:2f:1c:22:2a:bf:f1:f2: ed:8b:20:1b:16:56:86:c6:b9:d3:3b:b9:3a:b9:02: f3:39:50:ce:f0:fc:8e:cc:80:89:c0:1b:1b:ee:b4: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4C:F5:78:84:AF:85:9F:79:64:02:90:0A:39:83:7A:7C:E6:61:8C X509v3 Authority Key Identifier: keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:93:b2:fe:94:e2:20:f6:df:57:f3:3e:9c:e2:e0:51:18:23: 06:0d:c7:69:31:19:e6:63:01:f7:e7:2f:9f:97:b0:6c:3d:a1: 2b:5b:d3:41:41:ed:0f:34:d3:f9:83:2c:a1:08:07:dd:43:cc: 14:ff:d5:dd:b9:42:c9:5d:9f:35:e1:84:da:53:e7:67:76:fd: 8e:78:4b:70:e5:9d:df:1b:f7:32:32:7e:4f:0d:58:15:de:54: 71:32:07:2f:dc:0a:04:a0:e6:6d:cf:37:26:e1:d1:63:36:83: 72:fa:be:ba:68:ba:ca:fd:20:ef:e0:80:7e:28:86:b4:d2:7c: 69:30:f0:84:9a:70:ab:89:8b:ad:02:d6:33:3f:b4:e0:aa:87: ad:a6:2f:c6:90:7c:02:9e:bd:d3:b4:75:23:e5:a3:5c:f9:5b: 91:2a:63:15:f3:0b:e6:25:56:6d:3f:8d:c0:c6:5f:cb:09:6e: 0e:ac:4f:14:11:bf:8e:5c:50:44:84:2e:63:37:bf:b0:05:ab: af:5c:22:8a:bb:2c:48:85:77:e7:64:a9:22:bd:c0:e7:7e:ce: a5:35:c0:38:cf:2e:6d:20:16:1e:4e:ba:44:9e:7e:2c:c1:43: e4:b6:77:74:bc:66:11:bb:1a:ea:a0:c2:13:1d:fb:36:14:dc: ff:f8:56:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhQ5xRSvgKMgAxzmg5TWpaR45HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZC NTc0NDgxNTAeFw0yNDExMjUxMTU2MjZaFw0yNDExMjgxMjIwMjZaMDMxMTAvBgNV BAMTKDhDNENGNTc4ODRBRjg1OUY3OTY0MDI5MDBBMzk4MzdBN0NFNjYxOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RmhCyRKKb+flA6AZKo3ztZ0j W8Il+gSw17dd9whyoiAl7pbhdXLw8pS2jm0hK4YwH3G7anqH/j6thQ6N181RjzDR diEIdZbOqjjmYGB4siF54GHZPMNrcPUPYChloWJuTXEgaZ9OC08FBXnnsM9OyL/N Ip13kMkxX/6w5ORmZhr4+SXPoJzDIAUqQ/Fskm4UIWjgjWDZAyd8x7nuVIlDmIMT x0dkQOOIJQpxFT/F6T5qWyIG2CMVqrF7Mp60DmhxSPZNJrwQJGCzE+wmEFFPwSPS WLpQvnSILxwiKr/x8u2LIBsWVobGudM7uTq5AvM5UM7w/I7MgInAGxvutEd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjEz1eISvhZ95ZAKQCjmDenzmYYwwHwYDVR0j BBgwFoAUIIpa83Ob/XmF13k8wnybX7V0SBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWQ1MWQ0MS1iNmNjLTQyMGEtYjVhOC02N2M4YmQ2YjAyYWYvMC8yMDhBNUFGMzcz OUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1NzQ0ODE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZCNTc0 NDgxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlC NUZCNTc0NDgxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2Tsv6U4iD231fzPpzi4FEYIwYNx2kxGeZj AffnL5+XsGw9oStb00FB7Q800/mDLKEIB91DzBT/1d25QsldnzXhhNpT52d2/Y54 S3Dlnd8b9zIyfk8NWBXeVHEyBy/cCgSg5m3PNybh0WM2g3L6vrpousr9IO/ggH4o hrTSfGkw8ISacKuJi60C1jM/tOCqh62mL8aQfAKevdO0dSPlo1z5W5EqYxXzC+Yl Vm0/jcDGX8sJbg6sTxQRv45cUESELmM3v7AFq69cIoq7LEiFd+dkqSK9wOd+zqU1 wDjPLm0gFh5OukSefizBQ+S2d3S8ZhG7GuqgwhMd+zYU3P/4Vt4= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org