$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: ZAAlG3bKGOw9dnXaFFtvhI+hZGkHrq4mHtnzGcdp+ok= Subject key identifier: 08:59:40:6E:5E:81:A7:A2:BA:76:1C:8F:BA:25:67:D0:7A:48:79:EF Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 6FEFBAC2B8F4178C64216CDC87FB6C5148D7F09D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: E6 Signing time: Fri 22 Nov 2024 09:20:54 +0000 Manifest this update: Fri 22 Nov 2024 09:15:54 +0000 Manifest next update: Mon 25 Nov 2024 14:00:54 +0000 Files and hashes: 1: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 5eQlD68HaKHERHfII59DwwAA8bgfmp1d8Ez+zw7QzCU=) 2: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7cXszIEC7Z7nD1ldnqKl+8siMGel8w55J7g/+p+W100=) 3: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: 5pzhC7tPUFwYeEFDnSLRxTI2Du6OvV1i7hYAufnMp6Q=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: XFsIo6zuwz17xqiKOSEFnvK2Jc1wZXg/6Dw1KB4MNIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ef:ba:c2:b8:f4:17:8c:64:21:6c:dc:87:fb:6c:51:48:d7:f0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Nov 22 09:15:54 2024 GMT Not After : Nov 25 14:00:54 2024 GMT Subject: CN=0859406E5E81A7A2BA761C8FBA2567D07A4879EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:d9:98:6d:e2:37:ef:e2:4d:2f:e8:f2:10: a1:f5:70:cd:45:8c:1b:a4:35:4d:df:94:10:80:ba: e8:8f:1f:4d:7f:9d:1b:59:2d:35:22:51:65:ff:92: b5:de:33:f9:9e:65:38:ea:3a:50:91:12:a5:09:88: c1:c1:72:31:ab:40:fb:57:f9:4f:b2:cb:16:3b:ff: c5:11:0f:f7:a0:e1:b3:9f:63:e6:9d:43:38:6b:80: a4:f4:e0:77:4c:d7:92:72:cd:d8:9d:54:34:ea:7b: 0a:c2:81:7a:a7:21:8c:03:c7:b5:eb:22:ff:c5:e4: bc:c4:ab:9f:26:e2:89:40:d7:cc:ee:7f:15:4d:da: f4:77:2f:1d:29:15:ad:69:6d:c0:98:78:61:5d:07: 4d:bf:ed:a3:8e:1f:42:b3:49:8d:69:2c:b2:af:2c: 5e:7d:46:2e:0c:ec:97:08:73:8e:4c:ba:11:0d:0c: 21:80:89:8d:a6:b6:13:28:8b:22:e2:13:30:9d:f3: 9f:94:cc:72:6f:a4:c4:b3:b0:6e:bd:20:38:8c:e0: e1:d3:ef:2d:a6:dc:00:d1:c9:92:c1:b3:cb:3f:53: 3c:65:b4:f1:92:b5:c3:98:68:19:2d:37:41:91:1b: 02:0e:ea:69:30:30:ed:c1:57:72:01:ae:65:91:1f: fc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:59:40:6E:5E:81:A7:A2:BA:76:1C:8F:BA:25:67:D0:7A:48:79:EF X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ad:dd:26:c2:9f:62:88:fe:85:20:63:b6:a7:ac:84:02:5e: ab:bf:3f:af:17:7b:40:ca:15:a0:96:8b:57:5a:7f:25:4e:51: 60:69:78:a4:31:7b:00:1c:67:9e:f2:dc:30:40:da:29:d6:50: fc:e0:75:4c:26:82:bd:b9:1b:2b:3f:0b:40:67:5c:1b:63:67: c2:df:9d:b0:8f:1e:b6:c3:99:18:f3:79:cb:17:d8:38:b9:b9: 99:d9:e6:e7:00:42:c0:e3:ee:5e:5e:b4:d7:31:eb:d4:2c:4e: b7:79:0e:95:50:01:6d:f1:3a:1a:6b:86:2c:92:46:60:4c:35: 29:f3:5e:cc:a5:ca:64:5d:fb:6a:a3:6b:d0:d3:c7:9d:37:16: 8f:71:0b:9f:44:67:08:1f:86:d7:e3:91:88:51:ea:cd:72:d4: 4b:fb:96:6c:ff:39:b9:1e:3f:5b:fd:c1:58:7a:71:38:2e:fc: c0:09:0a:b9:d2:fd:ae:d2:a4:51:cc:89:77:73:75:65:58:31: 9c:85:f7:47:e9:3c:0f:ca:2f:59:f3:b5:2c:98:23:41:a8:88: c6:04:9b:43:47:b0:7f:ab:56:aa:b6:57:c9:b5:9e:55:af:39: a6:b6:10:05:f8:e5:1d:b3:28:35:14:80:45:27:18:e1:e0:0d: e3:7b:46:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb++6wrj0F4xkIWzch/tsUUjX8J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNDExMjIwOTE1NTRaFw0yNDExMjUxNDAwNTRaMDMxMTAvBgNV BAMTKDA4NTk0MDZFNUU4MUE3QTJCQTc2MUM4RkJBMjU2N0QwN0E0ODc5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzatmYbeI37+JNL+jyEKH1cM1F jBukNU3flBCAuuiPH01/nRtZLTUiUWX/krXeM/meZTjqOlCREqUJiMHBcjGrQPtX +U+yyxY7/8URD/eg4bOfY+adQzhrgKT04HdM15JyzdidVDTqewrCgXqnIYwDx7Xr Iv/F5LzEq58m4olA18zufxVN2vR3Lx0pFa1pbcCYeGFdB02/7aOOH0KzSY1pLLKv LF59Ri4M7JcIc45MuhENDCGAiY2mthMoiyLiEzCd85+UzHJvpMSzsG69IDiM4OHT 7y2m3ADRyZLBs8s/UzxltPGStcOYaBktN0GRGwIO6mkwMO3BV3IBrmWRH/wfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCFlAbl6Bp6K6dhyPuiVn0HpIee8wHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2t3SbCn2KI/oUgY7anrIQCXqu/P68Xe0DK FaCWi1dafyVOUWBpeKQxewAcZ57y3DBA2inWUPzgdUwmgr25Gys/C0BnXBtjZ8Lf nbCPHrbDmRjzecsX2Di5uZnZ5ucAQsDj7l5etNcx69QsTrd5DpVQAW3xOhprhiyS RmBMNSnzXsylymRd+2qja9DTx503Fo9xC59EZwgfhtfjkYhR6s1y1Ev7lmz/Obke P1v9wVh6cTgu/MAJCrnS/a7SpFHMiXdzdWVYMZyF90fpPA/KL1nztSyYI0GoiMYE m0NHsH+rVqq2V8m1nlWvOaa2EAX45R2zKDUUgEUnGOHgDeN7Rvc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org