$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: r9NgGkZsFq+Pfdm/9NIUnZCFB5Eyi7heKtb9k92qnmo= Subject key identifier: 67:71:2B:CA:BE:BA:9D:42:D5:3B:54:D1:73:1D:80:CF:22:0A:FD:B5 Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 56FC70846926E1E81C776690AFBFD6BE17E91B76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 01B4 Signing time: Wed 20 Nov 2024 20:41:41 +0000 Manifest this update: Wed 20 Nov 2024 20:36:41 +0000 Manifest next update: Sun 24 Nov 2024 00:27:41 +0000 Files and hashes: 1: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: cqTyGMrVXV3krfj6ahd0XiybL7qMxOankc/x3Ztfrtk=) 2: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: ejjY61bhmlJl0lxMoyTYYJxk49QNB+St/BGfTNpwclI=) 3: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: JOk2hOEjt3VDU03LDOoQK88eKB9E+q6wdAJWayyHIwQ=) 4: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: h++ryEswh9E3lrrKcCJpDEzDw5QxN+b0YkeBg632Koo=) 5: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: 953/1OAjNWabw3EekLLAXwzV4CYrLdUWpl5qPGTJpaU=) 6: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: Jatff9pdbxHcTIoc61FwpQ4zDvedkS7YEGoxT4EFfu8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fc:70:84:69:26:e1:e8:1c:77:66:90:af:bf:d6:be:17:e9:1b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Nov 20 20:36:41 2024 GMT Not After : Nov 24 00:27:41 2024 GMT Subject: CN=67712BCABEBA9D42D53B54D1731D80CF220AFDB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:0d:5b:d1:86:69:62:93:da:dc:85:08:fa: 08:15:90:60:1e:27:e8:7e:44:9e:64:de:62:9c:f9: a3:55:ea:21:d1:74:04:4a:9f:08:b0:83:0f:73:6d: a9:76:9c:fb:8b:c1:9e:fb:5a:2d:4e:a5:a5:1e:b9: c5:e1:6c:99:6c:4c:f9:55:d2:f5:50:50:26:d8:21: 86:8e:16:3b:25:06:cf:1f:c6:e4:af:d4:38:24:11: 39:46:94:dd:cf:d6:35:c9:8c:e2:51:58:0d:3d:33: e7:f2:e7:5e:5a:a5:2a:a5:dc:6c:a7:fc:10:7b:d7: eb:b9:39:6c:2e:11:a1:c2:af:2b:d9:c1:70:16:cc: b0:e7:4d:dd:8c:6a:8f:1f:2d:47:b8:f8:b5:6d:8c: 8c:37:5a:8a:00:ba:fb:fd:8b:ac:01:bc:4b:71:f2: 4d:10:3e:ca:1a:91:b4:fb:fd:61:c4:2c:86:c2:e4: 82:ad:04:5f:67:e6:e6:b4:6f:9c:06:31:f2:0a:28: cc:c0:47:c7:b2:d3:d7:8d:81:76:21:5a:f1:e4:6a: b9:f5:cc:74:5c:fb:23:0b:9c:8d:2b:e8:d5:0e:12: 7f:bb:97:8d:76:aa:2c:f7:0d:7e:ea:17:ad:a5:8d: b6:47:dd:c5:45:c2:a9:c0:94:99:64:b1:31:63:2a: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:71:2B:CA:BE:BA:9D:42:D5:3B:54:D1:73:1D:80:CF:22:0A:FD:B5 X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:f6:a3:7a:93:66:52:13:71:4e:61:9d:9c:f9:4b:16:10:a4: ab:4b:f4:1f:c5:1b:3a:0f:1c:b6:21:78:28:23:29:01:3a:84: a9:00:39:46:92:b6:8f:ee:bd:5d:ea:f7:30:54:a0:e6:b6:58: 62:fa:62:14:90:8c:b1:6c:01:4f:6c:dc:a9:50:3b:33:25:c2: 80:07:1c:e6:82:7d:8e:89:d2:d4:bd:75:5e:b9:1d:a3:78:fd: 93:e4:73:e9:bf:ac:e5:19:fc:43:51:56:32:8e:dd:23:3c:0b: ea:0b:a6:7d:c6:cc:3b:a1:2b:53:f6:e0:08:25:51:1f:0d:28: 7d:1e:3b:08:79:3a:de:b8:f4:89:e2:86:d3:da:66:8b:a5:d5: 3c:77:9e:95:01:4d:f2:40:a3:d4:58:ba:09:c0:8e:29:ed:49: 35:9b:ad:f7:c6:13:f1:ad:78:34:5d:9c:da:a6:32:6f:7e:ab: 5d:c1:71:be:10:bd:86:44:fe:55:30:b4:12:fb:8e:74:98:5c: 64:46:32:b4:15:0e:4f:f1:16:5e:9a:2c:27:d1:63:c5:29:84: fc:e2:d1:0a:4e:ef:4d:bc:96:91:ee:8a:b3:48:9b:f0:c4:cf: 77:ac:6f:bf:5a:22:70:f7:58:71:26:9d:15:a6:2f:82:8e:9c: 30:a0:5e:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvxwhGkm4egcd2aQr7/WvhfpG3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNDExMjAyMDM2NDFaFw0yNDExMjQwMDI3NDFaMDMxMTAvBgNV BAMTKDY3NzEyQkNBQkVCQTlENDJENTNCNTREMTczMUQ4MENGMjIwQUZEQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Lg1b0YZpYpPa3IUI+ggVkGAe J+h+RJ5k3mKc+aNV6iHRdARKnwiwgw9zbal2nPuLwZ77Wi1OpaUeucXhbJlsTPlV 0vVQUCbYIYaOFjslBs8fxuSv1DgkETlGlN3P1jXJjOJRWA09M+fy515apSql3Gyn /BB71+u5OWwuEaHCryvZwXAWzLDnTd2Mao8fLUe4+LVtjIw3WooAuvv9i6wBvEtx 8k0QPsoakbT7/WHELIbC5IKtBF9n5ua0b5wGMfIKKMzAR8ey09eNgXYhWvHkarn1 zHRc+yMLnI0r6NUOEn+7l412qiz3DX7qF62ljbZH3cVFwqnAlJlksTFjKpy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ3Eryr66nULVO1TRcx2AzyIK/bUwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANP2o3qTZlITcU5hnZz5SxYQpKtL9B/FGzoP HLYheCgjKQE6hKkAOUaSto/uvV3q9zBUoOa2WGL6YhSQjLFsAU9s3KlQOzMlwoAH HOaCfY6J0tS9dV65HaN4/ZPkc+m/rOUZ/ENRVjKO3SM8C+oLpn3GzDuhK1P24Agl UR8NKH0eOwh5Ot649InihtPaZoul1Tx3npUBTfJAo9RYugnAjintSTWbrffGE/Gt eDRdnNqmMm9+q13Bcb4QvYZE/lUwtBL7jnSYXGRGMrQVDk/xFl6aLCfRY8UphPzi 0QpO7028lpHuirNIm/DEz3esb79aInD3WHEmnRWmL4KOnDCgXhE= -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org