$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: KdGL9t493xKrVD4ejJ2HHqIMu9JfWfJBjFhSxIJYY8c= Subject key identifier: B1:A9:68:91:C0:0B:86:65:BB:47:19:5C:AC:94:25:9C:18:A2:CD:56 Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 2F162275606C54E21E8D9508BAE46B04004D523E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 0487 Signing time: Mon 25 Nov 2024 00:01:15 +0000 Manifest this update: Sun 24 Nov 2024 23:56:15 +0000 Manifest next update: Thu 28 Nov 2024 09:56:15 +0000 Files and hashes: 1: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: Ydl3Ket/Eeuscy0B0YmxQqgt1TudedFNYlPQMUGcles=) 2: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: 6ce+LBa3GICr1Mgt/xtux05v3qPiXp2ZYS6ViLVoXMc=) 3: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: 4R2HzZtj9/6uez20NhS3IAthphSWTJUoM3Y5jBiRkVA=) 4: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: YKqncd0MGK9keSOjjaDcdWE6AgLtsTa/4D5MWz3HJUk=) 5: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IG7iZEXbFHO4xLgOmo6o/7KH2TIUqm7sDNEwcVuQSOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:16:22:75:60:6c:54:e2:1e:8d:95:08:ba:e4:6b:04:00:4d:52:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Nov 24 23:56:15 2024 GMT Not After : Nov 28 09:56:15 2024 GMT Subject: CN=B1A96891C00B8665BB47195CAC94259C18A2CD56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:e3:84:27:7d:b9:ff:9e:34:5d:81:fa:39: b8:2a:0d:6b:d2:99:f9:a7:21:7e:2a:86:1f:28:df: 71:0c:29:72:37:b5:3d:39:38:17:e0:73:7d:4e:a6: e8:b6:b4:94:35:da:9e:31:4f:8e:b8:11:dd:77:71: 94:a5:0c:3c:93:a7:69:f5:dd:f8:d7:38:61:f9:f3: 0a:51:86:e8:ce:bf:c2:dc:27:e5:4e:72:f0:89:62: 3f:a9:c2:59:7f:5e:09:28:1c:b5:db:35:55:3e:1c: 0e:20:01:96:ad:5a:9a:c3:41:b1:7c:af:a8:0c:b0: 11:bc:31:16:58:e4:68:de:04:f5:26:f1:b1:da:98: e7:cd:51:0c:e8:6e:d0:45:e3:68:63:03:b7:af:d4: 96:d7:0f:db:1a:72:23:04:28:4e:49:cc:9a:ae:07: 03:9e:af:b5:6f:c5:7c:13:4a:50:d2:64:49:3d:04: aa:e7:62:17:72:27:9a:df:a8:2a:f9:ce:54:5f:26: 3b:74:fe:36:57:69:66:e1:ff:9a:f6:00:4b:84:93: 50:20:a1:56:e9:be:36:d8:a8:f0:72:af:d1:77:e9: 9d:eb:a7:cf:90:a1:c3:34:53:17:b8:b5:c0:41:dd: 3e:29:e6:a5:a2:de:66:c7:87:a7:7d:27:05:61:83: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A9:68:91:C0:0B:86:65:BB:47:19:5C:AC:94:25:9C:18:A2:CD:56 X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a3:3d:96:b7:6e:ea:5f:2e:a3:e1:3d:fe:f9:f7:f7:eb:d4: df:00:ff:b5:55:ed:d4:8f:e7:3b:9c:05:05:ac:2a:19:72:8b: d2:a0:cd:d6:e9:bd:06:57:9d:77:0e:ca:0e:af:d0:73:b7:9c: d2:95:e2:c3:88:f7:da:8e:c2:04:89:92:52:71:c0:79:49:46: 74:fb:35:17:6c:08:14:3a:d0:12:5e:e5:18:e0:50:a6:69:ab: 58:87:c7:a1:6a:5a:d5:7d:46:39:50:c6:03:6e:88:50:43:02: 03:6a:17:5e:94:61:34:a2:76:c9:b7:33:ee:bd:81:22:33:9f: 2b:05:88:84:1b:82:f2:83:25:07:94:6f:63:06:28:11:17:39: a9:a4:62:5c:4c:42:11:83:8d:39:10:4c:ad:2d:72:2d:b0:31: 44:30:e8:39:0b:a3:1c:36:2d:b2:95:3f:d2:75:82:f5:95:6d: 8f:df:fe:1c:84:7e:d7:6a:11:a9:d2:cd:fd:7e:95:f9:6c:41: 9f:f9:d3:47:a3:e5:de:81:81:46:bb:84:1a:6a:b9:af:dd:35: 11:f1:fe:81:12:75:8d:13:b4:fe:85:e6:bb:e9:b0:db:74:ed: 04:0b:1e:50:61:d8:47:9f:78:41:e5:44:67:11:18:04:99:1b: ba:df:c5:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxYidWBsVOIejZUIuuRrBABNUj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNDExMjQyMzU2MTVaFw0yNDExMjgwOTU2MTVaMDMxMTAvBgNV BAMTKEIxQTk2ODkxQzAwQjg2NjVCQjQ3MTk1Q0FDOTQyNTlDMThBMkNENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp++OEJ325/540XYH6ObgqDWvS mfmnIX4qhh8o33EMKXI3tT05OBfgc31Opui2tJQ12p4xT464Ed13cZSlDDyTp2n1 3fjXOGH58wpRhujOv8LcJ+VOcvCJYj+pwll/XgkoHLXbNVU+HA4gAZatWprDQbF8 r6gMsBG8MRZY5GjeBPUm8bHamOfNUQzobtBF42hjA7ev1JbXD9saciMEKE5JzJqu BwOer7VvxXwTSlDSZEk9BKrnYhdyJ5rfqCr5zlRfJjt0/jZXaWbh/5r2AEuEk1Ag oVbpvjbYqPByr9F36Z3rp8+QocM0Uxe4tcBB3T4p5qWi3mbHh6d9JwVhg1unAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsalokcALhmW7RxlcrJQlnBiizVYwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+jPZa3bupfLqPhPf759/fr1N8A/7VV7dSP 5zucBQWsKhlyi9KgzdbpvQZXnXcOyg6v0HO3nNKV4sOI99qOwgSJklJxwHlJRnT7 NRdsCBQ60BJe5RjgUKZpq1iHx6FqWtV9RjlQxgNuiFBDAgNqF16UYTSidsm3M+69 gSIznysFiIQbgvKDJQeUb2MGKBEXOamkYlxMQhGDjTkQTK0tci2wMUQw6DkLoxw2 LbKVP9J1gvWVbY/f/hyEftdqEanSzf1+lflsQZ/500ej5d6BgUa7hBpqua/dNRHx /oESdY0TtP6F5rvpsNt07QQLHlBh2EefeEHlRGcRGASZG7rfxUQ= -----END CERTIFICATE-----Generated at Mon Nov 25 00:59:32 2024 by rpki-client on console-ams.rpki-client.org