$ rpki-client -vvf repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft (raw, json) Hash identifier: CzwN8KMG0XuTyna0N7E8rHYlT/Qk3u1YfODgqNFOW1E= Subject key identifier: 2E:E6:B7:CD:36:47:53:53:87:EB:0F:FF:73:F5:43:4C:15:0B:36:CE Authority key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Certificate issuer: /CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Certificate serial: 0A61870DC773E783320C4D8DFDB0D24355945828 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft Manifest number: 010C Signing time: Mon 25 Nov 2024 11:41:30 +0000 Manifest this update: Mon 25 Nov 2024 11:36:30 +0000 Manifest next update: Thu 28 Nov 2024 14:35:30 +0000 Files and hashes: 1: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: ieZ8GfDTbTIGuPdRNiJz+TUiira8AeSJa0sr3BYv9d0=) 2: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl (hash: w6dJ49EaYUAlJKQIWnLU2DbqTqexQ/xLLVbb4o6uqQk=) 3: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: S8jwmxFNz6/dqqAIRdtopWAYHmDF2qg8uN2eVcvE1EM=) 4: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: c1gB6BKB05mfETS6Rw4QIkT1a+hkEFs7hHtdh5pU46M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:61:87:0d:c7:73:e7:83:32:0c:4d:8d:fd:b0:d2:43:55:94:58:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Validity Not Before: Nov 25 11:36:30 2024 GMT Not After : Nov 28 14:35:30 2024 GMT Subject: CN=2EE6B7CD3647535387EB0FFF73F5434C150B36CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:9a:40:7f:0e:27:30:81:00:06:9f:fc:fc: 68:e5:b4:83:9d:7b:19:94:d9:dd:cc:9c:a3:1f:6a: cc:27:90:51:c5:76:29:b5:f6:a2:3e:af:e8:99:de: 3c:88:3e:df:ff:8d:14:07:45:e4:d9:f2:83:10:c8: 55:89:6e:2d:99:8f:3b:cc:99:55:e7:c6:ca:1c:7c: 11:58:66:98:c8:e6:cd:95:77:2d:8d:cd:18:a3:c6: 34:a5:99:0c:40:0d:ca:fa:42:d4:fb:87:0f:d7:9e: 17:85:66:88:a7:84:62:6b:b3:13:7f:3d:6e:58:de: de:22:61:f4:64:ec:b1:74:e2:40:2c:66:34:f7:58: 14:a4:3d:4d:ac:b1:05:9c:07:31:2c:48:1b:34:6c: 70:ff:65:b5:f9:b4:a0:d1:df:c9:dc:a1:6b:b7:98: 31:2f:c6:5e:86:ef:ec:ed:a6:ac:03:85:5e:0f:be: 92:dc:58:fa:14:29:60:d5:fc:92:19:46:98:99:5f: 23:23:00:5a:75:c8:23:41:a3:15:f1:3e:9f:4c:48: f5:14:e4:37:af:9c:9e:59:96:63:2a:51:9f:58:22: 81:f6:32:7b:11:fd:bc:e9:4b:6b:5d:1d:61:fd:85: 2d:5b:97:bf:55:16:bc:3a:4d:49:78:fe:06:90:1a: 1b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E6:B7:CD:36:47:53:53:87:EB:0F:FF:73:F5:43:4C:15:0B:36:CE X509v3 Authority Key Identifier: keyid:89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:6a:35:d2:84:09:87:e0:b3:8c:13:91:de:08:c5:fb:70:a2: cd:92:58:6a:81:1d:c2:eb:59:b0:68:e0:23:47:e6:ff:c3:6b: 73:5f:47:32:56:53:03:6a:4c:72:12:e2:28:bb:54:27:ef:a1: 39:a4:2d:50:84:ab:cb:df:12:c6:bd:23:ba:86:6e:9f:ac:d6: 1e:ec:0c:be:3d:79:40:8d:f0:be:f7:25:2a:48:54:36:2f:56: 30:ce:ab:84:5e:1b:32:22:cc:fb:c4:62:6e:32:20:64:8a:08: 06:ea:5f:fd:27:61:f3:b7:9f:3c:0d:10:52:e0:08:43:ff:1d: 9d:aa:93:5f:4f:66:b7:7e:cb:49:64:df:7d:f2:22:a5:de:e1: 11:47:fd:2e:46:03:6e:f9:25:2c:71:28:fe:c5:60:38:45:98: ae:04:29:22:58:35:9a:1e:54:bf:6a:49:7f:19:c8:9d:00:8c: ce:14:ad:1b:ee:be:f9:c4:70:10:97:1d:fd:69:bc:2a:b8:19: 69:5c:94:0b:a5:0b:cf:64:74:d0:af:bc:18:d0:d7:f0:2c:bd: e7:7c:57:d2:79:24:c0:cd:7a:3b:fd:3f:76:fe:54:35:b5:c1: 86:3c:6b:db:8a:3a:e7:07:de:3a:3d:7a:b1:31:5e:33:cf:30: be:8c:a9:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmGHDcdz54MyDE2N/bDSQ1WUWCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0 RTRBMkMyNDAeFw0yNDExMjUxMTM2MzBaFw0yNDExMjgxNDM1MzBaMDMxMTAvBgNV BAMTKDJFRTZCN0NEMzY0NzUzNTM4N0VCMEZGRjczRjU0MzRDMTUwQjM2Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RZpAfw4nMIEABp/8/GjltIOd exmU2d3MnKMfaswnkFHFdim19qI+r+iZ3jyIPt//jRQHReTZ8oMQyFWJbi2ZjzvM mVXnxsocfBFYZpjI5s2Vdy2NzRijxjSlmQxADcr6QtT7hw/XnheFZoinhGJrsxN/ PW5Y3t4iYfRk7LF04kAsZjT3WBSkPU2ssQWcBzEsSBs0bHD/ZbX5tKDR38ncoWu3 mDEvxl6G7+ztpqwDhV4PvpLcWPoUKWDV/JIZRpiZXyMjAFp1yCNBoxXxPp9MSPUU 5DevnJ5ZlmMqUZ9YIoH2MnsR/bzpS2tdHWH9hS1bl79VFrw6TUl4/gaQGhu7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULua3zTZHU1OH6w//c/VDTBULNs4wHwYDVR0j BBgwFoAUiYnQQxRTVW8i2IKiGyu7n05KLCQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC84OTg5RDA0MzE0 NTM1NTZGMjJEODgyQTIxQjJCQkI5RjRFNEEyQzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0RTRB MkMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJC OUY0RTRBMkMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINqNdKECYfgs4wTkd4Ixftwos2SWGqBHcLr WbBo4CNH5v/Da3NfRzJWUwNqTHIS4ii7VCfvoTmkLVCEq8vfEsa9I7qGbp+s1h7s DL49eUCN8L73JSpIVDYvVjDOq4ReGzIizPvEYm4yIGSKCAbqX/0nYfO3nzwNEFLg CEP/HZ2qk19PZrd+y0lk333yIqXe4RFH/S5GA275JSxxKP7FYDhFmK4EKSJYNZoe VL9qSX8ZyJ0AjM4UrRvuvvnEcBCXHf1pvCq4GWlclAulC89kdNCvvBjQ1/Asved8 V9J5JMDNejv9P3b+VDW1wYY8a9uKOucH3jo9erExXjPPML6MqbA= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:43 2024 by rpki-client on console-fra.rpki-client.org