$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: JFLFes7YLYcdfFJXyCwVtxf59MSvgycy+uERmDzdCVg= Subject key identifier: 1D:07:31:88:F1:B9:35:79:46:E4:8B:A4:33:6F:66:E2:46:8B:E7:F0 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 468154B5F5DB9E5050573B396BF8A5227AA5B68E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 88 Signing time: Sun 24 Nov 2024 23:20:04 +0000 Manifest this update: Sun 24 Nov 2024 23:15:04 +0000 Manifest next update: Thu 28 Nov 2024 06:28:04 +0000 Files and hashes: 1: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: uH8ZphT5IvnOqr91tZUOzbS/XixMQu7sij1VuWjdR/U=) 2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: ky0cwaacdjxAfBemDGWOOQ8BXeD64I0w4QycfiwYM2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:81:54:b5:f5:db:9e:50:50:57:3b:39:6b:f8:a5:22:7a:a5:b6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Nov 24 23:15:04 2024 GMT Not After : Nov 28 06:28:04 2024 GMT Subject: CN=1D073188F1B9357946E48BA4336F66E2468BE7F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:17:f6:c7:26:d2:99:af:f6:93:bf:68:4c: 0b:2c:65:51:c8:29:2f:19:46:aa:89:15:e9:b6:a7: 44:94:8a:09:02:91:b2:b4:ed:e8:24:ce:73:52:cb: 96:96:33:86:e3:a6:28:7b:9c:12:48:32:56:0e:28: d9:48:7a:05:ea:bf:a1:40:f2:26:f4:0a:4d:cd:8f: ca:2d:ef:53:46:12:8d:5a:60:55:2a:cb:79:74:ae: ab:89:c6:80:a5:c4:9e:0b:3c:e0:6c:c0:4b:39:2b: 81:9e:0e:f7:4e:3c:1b:4d:41:35:93:38:4a:4e:aa: dc:a4:ba:21:93:0e:bb:22:f8:36:4a:6e:4e:d2:ab: 82:05:6c:f7:b0:6c:c7:65:28:a0:4e:4c:49:1b:28: 22:5f:86:6e:be:5a:3f:03:61:57:8c:02:0f:5e:88: 46:2f:b5:9c:be:c3:e3:9c:be:da:6e:7c:e5:02:4e: c1:61:a9:d2:59:12:d3:37:21:c4:b8:3b:78:5f:18: 65:01:53:90:4d:44:dd:0c:de:a8:3b:55:c9:4f:04: e7:18:47:03:f8:93:ca:dd:ab:d0:f2:10:3d:60:0b: 4b:06:1b:32:bc:66:a3:de:48:99:38:c4:dd:c2:6f: 55:61:48:73:09:25:3b:a1:7e:b1:35:ba:e5:b8:0e: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:07:31:88:F1:B9:35:79:46:E4:8B:A4:33:6F:66:E2:46:8B:E7:F0 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d7:4b:69:c6:f0:fb:b7:9c:e9:0b:d6:74:fe:e3:06:b3:cd: 2d:25:1d:7d:dc:0e:b8:e5:98:07:67:c1:b5:06:1d:c6:8c:4f: 5e:ee:ef:87:07:f7:a4:be:d5:0f:93:07:f4:80:66:dc:19:a0: ab:a5:29:c5:ea:90:f8:91:ad:60:a9:ca:61:9a:67:10:df:99: e3:5d:97:fe:ac:c6:6d:1b:71:90:9e:31:fb:9c:96:78:83:19: 20:24:fc:71:f5:37:08:fb:d7:08:49:d2:32:cf:c8:01:c6:d9: 3b:74:43:0a:17:2e:76:08:d4:b5:e9:a2:b5:3d:43:3f:47:5b: 2a:d4:c6:1b:7c:21:4b:37:56:f8:1a:f2:29:d5:05:1e:66:ed: a3:a2:18:7f:02:33:13:21:7c:3b:47:af:26:61:e1:4d:63:21: 25:04:ba:6f:bb:17:39:c3:8d:c0:c8:eb:6b:af:77:e5:17:2a: 53:61:1f:64:82:74:a4:ab:35:e1:3c:fc:2d:40:a2:b4:9c:70: 05:9f:f8:f5:38:bd:1d:05:ff:d4:fd:e4:98:cf:36:3d:26:83: 22:ca:2d:93:a3:8c:02:19:6f:71:dd:fe:de:40:da:c2:12:b1: b1:1c:d6:35:65:52:12:aa:da:5f:61:b8:95:4a:b5:50:49:ba: fd:e9:fc:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURoFUtfXbnlBQVzs5a/ilInqlto4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNDExMjQyMzE1MDRaFw0yNDExMjgwNjI4MDRaMDMxMTAvBgNV BAMTKDFEMDczMTg4RjFCOTM1Nzk0NkU0OEJBNDMzNkY2NkUyNDY4QkU3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwRf2xybSma/2k79oTAssZVHI KS8ZRqqJFem2p0SUigkCkbK07egkznNSy5aWM4bjpih7nBJIMlYOKNlIegXqv6FA 8ib0Ck3Nj8ot71NGEo1aYFUqy3l0rquJxoClxJ4LPOBswEs5K4GeDvdOPBtNQTWT OEpOqtykuiGTDrsi+DZKbk7Sq4IFbPewbMdlKKBOTEkbKCJfhm6+Wj8DYVeMAg9e iEYvtZy+w+OcvtpufOUCTsFhqdJZEtM3IcS4O3hfGGUBU5BNRN0M3qg7VclPBOcY RwP4k8rdq9DyED1gC0sGGzK8ZqPeSJk4xN3Cb1VhSHMJJTuhfrE1uuW4DnWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHQcxiPG5NXlG5IukM29m4kaL5/AwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnXS2nG8Pu3nOkL1nT+4wazzS0lHX3cDrjl mAdnwbUGHcaMT17u74cH96S+1Q+TB/SAZtwZoKulKcXqkPiRrWCpymGaZxDfmeNd l/6sxm0bcZCeMfuclniDGSAk/HH1Nwj71whJ0jLPyAHG2Tt0QwoXLnYI1LXporU9 Qz9HWyrUxht8IUs3Vvga8inVBR5m7aOiGH8CMxMhfDtHryZh4U1jISUEum+7FznD jcDI62uvd+UXKlNhH2SCdKSrNeE8/C1AorSccAWf+PU4vR0F/9T95JjPNj0mgyLK LZOjjAIZb3Hd/t5A2sISsbEc1jVlUhKq2l9huJVKtVBJuv3p/F4= -----END CERTIFICATE-----Generated at Mon Nov 25 00:59:32 2024 by rpki-client on console-ams.rpki-client.org