$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: DL4+NJy/BwJ6qjNFLI91qZ0BBEgrUpZ4i31aGjDwCJY= Subject key identifier: BE:35:18:1A:AF:20:57:A0:3B:11:D0:6B:7D:18:3B:9F:4A:5A:89:C8 Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 321E18A4171E77DACD13BB25299E46F520E9CF3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 0170 Signing time: Thu 21 Nov 2024 18:41:38 +0000 Manifest this update: Thu 21 Nov 2024 18:36:38 +0000 Manifest next update: Sun 24 Nov 2024 22:57:38 +0000 Files and hashes: 1: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: lnxOKEd+PewMsG44qj3HVvV3WG1qaRgIi/Wp6zXG+ZE=) 2: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: MQLOXLE7kItbI3VqEvN4se62a6lNzHSlzAIOByXQI/0=) 3: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: +sntiBvGfvdHsV3Cgry4S9oXg8PKVYuh3stAQlWYh5Y=) 4: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: fcf0jbm+HiTLpxvLBZNvyWHDVsx0os5wA9bQgitMn5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 22:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1e:18:a4:17:1e:77:da:cd:13:bb:25:29:9e:46:f5:20:e9:cf:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Nov 21 18:36:38 2024 GMT Not After : Nov 24 22:57:38 2024 GMT Subject: CN=BE35181AAF2057A03B11D06B7D183B9F4A5A89C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:1d:18:22:81:f7:d8:69:b4:20:b3:37:37: b7:67:f4:11:c0:4a:ac:9f:2b:21:c6:eb:5f:ab:8f: f3:35:2c:1c:1a:0f:90:96:d1:49:a2:f3:2a:38:41: cf:79:86:bd:af:36:75:e4:10:e5:e5:2d:18:d3:09: 71:89:a1:4e:37:a4:c4:1e:d1:dd:c0:fd:34:4d:d3: 30:b3:23:96:26:0b:99:d5:4f:34:af:71:c7:0a:a3: a4:6a:2f:db:41:cf:cc:05:8d:af:f2:3c:8d:2b:38: 27:d6:d6:38:e9:5f:c1:26:07:89:a3:2c:06:d8:e2: 73:02:88:6e:55:e0:8b:6c:99:a1:2c:f5:cf:f6:dc: 5f:5f:06:85:37:94:1b:dc:af:37:cc:bc:06:93:46: 32:31:4a:2b:d5:71:05:24:ed:3f:1d:95:6a:2d:38: fb:28:27:32:1b:6b:73:bb:7e:8d:04:44:60:86:2d: 9d:c2:18:73:35:4a:7a:10:67:d5:11:61:96:59:a8: 18:b4:f9:4b:7c:2a:7d:50:83:2f:77:a0:3b:16:8c: 81:da:ce:b2:53:80:2d:10:cc:7b:bd:ad:83:8e:72: 79:22:69:ee:e0:85:99:81:fa:d3:63:d3:b9:ad:c9: d9:00:c6:5c:57:07:cf:44:25:a4:67:83:58:db:31: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:35:18:1A:AF:20:57:A0:3B:11:D0:6B:7D:18:3B:9F:4A:5A:89:C8 X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:83:03:7e:9e:f1:bb:64:bb:9c:b2:0b:23:a2:30:60:ee:00: d5:da:b5:e1:f4:f8:78:00:ed:9f:99:17:5a:9a:c8:16:8c:c3: ba:a0:e6:6c:7d:4e:3c:93:d2:65:45:1a:3b:6f:fd:ec:d9:eb: ed:3e:30:1a:9b:39:9f:a5:b6:19:92:31:85:3f:2c:84:e1:1b: d5:fc:6b:50:8b:44:7c:71:5a:75:77:30:f4:5c:5f:b2:fc:d4: 96:7a:a6:d8:71:d9:43:de:a1:2a:ad:54:3e:9e:83:0a:c8:4f: 0d:cb:a1:de:16:db:9e:32:d5:8b:16:5c:bb:cb:c7:c0:a6:53: bf:2a:1c:6f:61:46:8b:5d:da:8f:8b:7b:00:6e:b2:83:77:b4: ba:00:d7:7f:1d:23:b8:39:29:e3:43:42:a9:fa:c7:09:ae:51: c3:1b:66:9f:27:8a:4b:c5:be:bc:16:0f:22:02:d7:f7:e6:dc: f5:35:d2:6d:d0:ac:84:f2:5b:f7:49:4e:e4:6b:e0:5b:03:cc: 68:e5:f5:78:3b:4f:d7:dc:a0:e5:08:c5:50:27:d6:46:0f:6f: 62:37:1b:81:26:06:ff:15:88:ef:d4:c9:c2:5c:fb:67:ff:ba: b0:2d:54:4b:b3:2a:1e:26:54:37:ab:29:a1:34:87:f8:16:68: d8:01:d3:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMh4YpBced9rNE7slKZ5G9SDpzzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNDExMjExODM2MzhaFw0yNDExMjQyMjU3MzhaMDMxMTAvBgNV BAMTKEJFMzUxODFBQUYyMDU3QTAzQjExRDA2QjdEMTgzQjlGNEE1QTg5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHx0YIoH32Gm0ILM3N7dn9BHA SqyfKyHG61+rj/M1LBwaD5CW0Umi8yo4Qc95hr2vNnXkEOXlLRjTCXGJoU43pMQe 0d3A/TRN0zCzI5YmC5nVTzSvcccKo6RqL9tBz8wFja/yPI0rOCfW1jjpX8EmB4mj LAbY4nMCiG5V4ItsmaEs9c/23F9fBoU3lBvcrzfMvAaTRjIxSivVcQUk7T8dlWot OPsoJzIba3O7fo0ERGCGLZ3CGHM1SnoQZ9URYZZZqBi0+Ut8Kn1Qgy93oDsWjIHa zrJTgC0QzHu9rYOOcnkiae7ghZmB+tNj07mtydkAxlxXB89EJaRng1jbMeEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvjUYGq8gV6A7EdBrfRg7n0paicgwHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6DA36e8btku5yyCyOiMGDuANXateH0+HgA 7Z+ZF1qayBaMw7qg5mx9TjyT0mVFGjtv/ezZ6+0+MBqbOZ+lthmSMYU/LIThG9X8 a1CLRHxxWnV3MPRcX7L81JZ6pthx2UPeoSqtVD6egwrITw3Lod4W254y1YsWXLvL x8CmU78qHG9hRotd2o+LewBusoN3tLoA138dI7g5KeNDQqn6xwmuUcMbZp8nikvF vrwWDyIC1/fm3PU10m3QrITyW/dJTuRr4FsDzGjl9Xg7T9fcoOUIxVAn1kYPb2I3 G4EmBv8ViO/UycJc+2f/urAtVEuzKh4mVDerKaE0h/gWaNgB02c= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org