$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: ooNQgLaDhTlbe+bjlzzXO0QqiRpY10FYlhgYxf0Qbvw= Subject key identifier: F2:A4:56:3F:4D:4D:48:02:D1:20:A9:57:73:1E:94:36:43:9B:DC:50 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 428D12490A3ED1B7A469389124C44E97186DCCE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 79 Signing time: Sat 23 Nov 2024 11:32:04 +0000 Manifest this update: Sat 23 Nov 2024 11:27:04 +0000 Manifest next update: Tue 26 Nov 2024 20:31:04 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: pMG+ZAw0cWb9oW6JXLAMB44cr+AtbRvCQ3Z+y/D0PjQ=) 2: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: shFXwIJz2cIJgjGJf6tevD/VjlYLUYMLMFlcTObG1jk=) 3: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: EuWDRw74O+k8JEJvK09P76kFiPDImOnN/O3rdBgN6mY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 20:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8d:12:49:0a:3e:d1:b7:a4:69:38:91:24:c4:4e:97:18:6d:cc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Nov 23 11:27:04 2024 GMT Not After : Nov 26 20:31:04 2024 GMT Subject: CN=F2A4563F4D4D4802D120A957731E9436439BDC50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e9:69:6d:44:b5:6d:63:5a:9b:bb:58:f4:83: bf:a5:de:b3:d6:68:fe:14:d2:98:07:e4:04:82:b9: 89:28:a7:2f:0a:6a:ab:2b:41:fe:71:01:4a:01:47: c5:6b:17:f7:5a:57:cc:88:86:90:51:dc:e5:3a:23: 85:cc:82:44:46:fb:13:2e:7e:2d:92:03:3b:c1:65: fd:aa:bf:13:5f:4d:07:77:68:44:be:6e:50:00:07: 8b:9e:71:90:7f:9c:1f:da:74:de:33:0b:97:5f:68: 2a:90:4b:eb:01:f0:e9:e3:4d:d5:9f:87:b8:8b:e6: 43:2f:5b:6d:5f:f5:14:95:11:49:9a:47:2f:56:cf: 49:c9:ab:33:82:b1:05:54:c5:9a:e1:14:1e:a3:ac: 6b:a5:7f:b9:7f:d7:62:11:c7:d7:2f:b6:c3:9b:4a: 03:96:68:af:d1:0f:d3:4c:3c:d2:41:b3:08:4a:c8: 85:a3:40:4e:d8:1a:e9:ee:b2:4f:a2:bf:1f:77:ee: 12:f3:cf:5d:ce:d4:fd:3c:aa:57:14:50:40:2f:d3: 4c:05:7f:bf:aa:1f:c8:7f:83:fc:b7:61:6b:31:c7: 45:13:09:43:2a:02:34:6b:d9:23:65:d1:79:45:9e: 5a:cf:b0:6c:33:ac:eb:ed:5d:ef:fe:55:b7:7f:4e: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A4:56:3F:4D:4D:48:02:D1:20:A9:57:73:1E:94:36:43:9B:DC:50 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a5:65:1c:1c:3c:fe:c3:c0:7e:54:75:3c:73:0c:fc:db:8f: 82:af:ec:2e:74:1b:92:89:6d:a8:f3:42:fb:f9:1c:b1:0e:51: 98:53:1e:ca:e0:c0:59:76:fb:2c:0e:b5:6f:eb:71:e5:67:e1: 74:ae:2e:70:35:ee:12:0f:6b:ad:3c:61:50:be:d8:51:a8:90: d4:94:38:0c:ef:25:cd:30:72:61:93:29:bd:08:0f:6c:00:2a: fe:9d:3a:1d:de:6a:36:c2:19:a3:b7:58:76:3a:b4:98:e3:37: e2:5d:e2:51:08:0c:6d:7e:68:56:a7:13:d1:2e:20:06:5d:7a: b5:82:f6:3f:8c:71:ea:97:e7:dd:1a:43:aa:7a:be:24:1b:c2: 8c:7a:1c:c8:54:7f:e2:f0:f6:37:5f:4e:98:4c:45:b1:42:d9: 05:15:f1:1c:82:8b:a1:94:65:84:fd:54:68:cb:13:56:82:ab: 20:91:25:89:b4:5b:a4:58:98:d7:be:2e:47:46:2e:8d:d8:b2: 11:3f:16:0d:cf:eb:41:82:e6:7d:74:8f:0f:55:2a:a5:66:f2: 46:db:c7:0d:29:14:34:b1:98:00:dd:07:67:b5:70:cc:4d:ca: 3c:e5:74:b1:93:64:42:d8:b1:4c:34:34:9c:cc:da:dd:7d:fe: 89:78:13:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQo0SSQo+0bekaTiRJMROlxhtzOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNDExMjMxMTI3MDRaFw0yNDExMjYyMDMxMDRaMDMxMTAvBgNV BAMTKEYyQTQ1NjNGNEQ0RDQ4MDJEMTIwQTk1NzczMUU5NDM2NDM5QkRDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6WltRLVtY1qbu1j0g7+l3rPW aP4U0pgH5ASCuYkopy8KaqsrQf5xAUoBR8VrF/daV8yIhpBR3OU6I4XMgkRG+xMu fi2SAzvBZf2qvxNfTQd3aES+blAAB4uecZB/nB/adN4zC5dfaCqQS+sB8OnjTdWf h7iL5kMvW21f9RSVEUmaRy9Wz0nJqzOCsQVUxZrhFB6jrGulf7l/12IRx9cvtsOb SgOWaK/RD9NMPNJBswhKyIWjQE7YGunusk+ivx937hLzz13O1P08qlcUUEAv00wF f7+qH8h/g/y3YWsxx0UTCUMqAjRr2SNl0XlFnlrPsGwzrOvtXe/+Vbd/TstrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qRWP01NSALRIKlXcx6UNkOb3FAwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6lZRwcPP7DwH5UdTxzDPzbj4Kv7C50G5KJ bajzQvv5HLEOUZhTHsrgwFl2+ywOtW/rceVn4XSuLnA17hIPa608YVC+2FGokNSU OAzvJc0wcmGTKb0ID2wAKv6dOh3eajbCGaO3WHY6tJjjN+Jd4lEIDG1+aFanE9Eu IAZderWC9j+MceqX590aQ6p6viQbwox6HMhUf+Lw9jdfTphMRbFC2QUV8RyCi6GU ZYT9VGjLE1aCqyCRJYm0W6RYmNe+LkdGLo3YshE/Fg3P60GC5n10jw9VKqVm8kbb xw0pFDSxmADdB2e1cMxNyjzldLGTZELYsUw0NJzM2t19/ol4E+I= -----END CERTIFICATE-----Generated at Sat Nov 23 12:36:09 2024 by rpki-client on console-ams.rpki-client.org