$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json) Hash identifier: fgX+zEKs4z1RM2FwWTz3hBjNuxdNPG/gPKrCArihDcg= Subject key identifier: 1A:F1:A3:5F:62:75:CF:FD:4C:17:50:5D:73:8E:8F:72:31:F1:D5:C8 Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Certificate serial: 3323DD77ED3B808401D256BDD7E9E8929D70806E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft Manifest number: 0150 Signing time: Sun 24 Nov 2024 18:32:06 +0000 Manifest this update: Sun 24 Nov 2024 18:27:06 +0000 Manifest next update: Wed 27 Nov 2024 20:23:06 +0000 Files and hashes: 1: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: uoYw/yUfHK3xwYpCXGbBFk1OlhQPkZr27ajCpI9Vh9s=) 2: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: 1U6pmMUp+8Lq3v575Z7MeI6aI6eoROBSgpXA9B1lI8M=) 3: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: kr66VWz9ye7cEYI+Ui3/51KV5kPNpIqBw6Ls86Iek2w=) 4: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: W1A0wml2XJGreY3wGrAq+WTS5z07v2mVl/IFKcV6dpU=) 5: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: 0VPlvYNrqzxpY8Rb45QKRlqy5Mx96w9w99AUCgJm3MY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:23:dd:77:ed:3b:80:84:01:d2:56:bd:d7:e9:e8:92:9d:70:80:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Validity Not Before: Nov 24 18:27:06 2024 GMT Not After : Nov 27 20:23:06 2024 GMT Subject: CN=1AF1A35F6275CFFD4C17505D738E8F7231F1D5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:de:22:77:79:6b:ef:e8:b4:95:a2:40:d6:1e: 63:8d:e9:a0:40:05:ff:2e:54:82:5f:8a:46:c2:78: 74:0b:df:ab:aa:65:5f:de:72:73:ca:33:cb:53:1f: a4:90:ca:7b:4f:e7:a5:49:bf:48:0c:fd:09:2e:89: b4:ce:3c:4f:46:27:d3:cc:b6:59:55:20:c4:26:49: a7:af:ae:76:73:8a:67:4b:32:a6:16:75:62:c1:4e: 67:85:88:92:d9:b5:77:de:23:07:c7:1e:59:0e:87: b1:41:52:ae:ad:41:64:2c:45:37:ad:ae:c1:8e:52: 95:26:90:6c:c9:d7:e5:c5:c0:95:20:08:26:a5:cc: 26:01:73:b9:3e:fd:9c:f3:07:61:e1:5d:48:5b:55: b0:e2:af:0b:94:43:b2:aa:35:7c:50:b7:21:75:80: 4c:c1:51:6b:80:47:fe:e9:fa:e6:61:80:0e:6a:c0: 0a:ef:44:81:a5:5b:95:31:33:1a:de:c8:54:e0:c4: 5d:b9:1c:a6:7f:70:fc:17:f6:74:f5:d1:19:5e:b3: 25:61:9b:65:80:51:49:9e:0c:56:e5:19:f7:0d:a2: bc:65:57:36:62:87:0f:0b:84:78:0f:4c:2b:c1:9f: 2d:b5:9f:56:92:11:ac:77:61:be:18:42:13:fe:ca: 24:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F1:A3:5F:62:75:CF:FD:4C:17:50:5D:73:8E:8F:72:31:F1:D5:C8 X509v3 Authority Key Identifier: keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1e:c6:fc:45:13:db:f4:62:c7:84:9b:c4:e2:35:c3:ac:13: 79:b8:98:91:27:37:42:ee:3b:00:e6:ac:26:bf:3f:19:35:2b: 6c:bf:a4:61:e9:06:da:45:41:f7:83:2c:a1:81:9c:9c:e7:19: c7:68:84:26:84:99:57:cd:eb:02:ed:ae:8e:aa:c8:96:39:af: 54:c4:9f:8e:29:3e:10:7d:ef:8b:08:b9:4e:5c:6c:e0:37:26: 08:c1:14:f8:07:f0:09:b0:01:9a:94:93:a2:3c:29:b8:44:6f: 88:5d:05:6d:5b:26:f4:b7:e1:a0:8e:6f:b6:c8:cd:be:b0:3b: 6b:1a:cb:e1:29:4d:02:be:9c:65:2a:dd:be:79:a7:29:86:11: 68:15:57:b4:68:5a:51:a5:de:c4:69:2b:7d:ea:df:bd:cf:e5: 80:9d:f3:b1:3c:b5:e2:9c:1f:73:07:46:d9:c3:c7:6f:76:87: fd:bb:f4:c3:0f:03:8d:c0:cf:c2:e7:80:8e:82:12:98:fa:9f: 2f:c8:9d:b3:91:dd:e5:3f:1d:93:6e:50:8b:ce:31:22:1c:61: 8d:2e:df:77:c3:c2:19:91:42:17:53:78:9f:d7:33:86:81:55: 72:31:c2:f7:f7:b1:4e:14:7b:67:0e:a4:c1:b4:7f:5e:a0:74: e4:f3:47:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyPdd+07gIQB0la91+nokp1wgG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5 NDNEQTIzQzAeFw0yNDExMjQxODI3MDZaFw0yNDExMjcyMDIzMDZaMDMxMTAvBgNV BAMTKDFBRjFBMzVGNjI3NUNGRkQ0QzE3NTA1RDczOEU4RjcyMzFGMUQ1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV3iJ3eWvv6LSVokDWHmON6aBA Bf8uVIJfikbCeHQL36uqZV/ecnPKM8tTH6SQyntP56VJv0gM/QkuibTOPE9GJ9PM tllVIMQmSaevrnZzimdLMqYWdWLBTmeFiJLZtXfeIwfHHlkOh7FBUq6tQWQsRTet rsGOUpUmkGzJ1+XFwJUgCCalzCYBc7k+/ZzzB2HhXUhbVbDirwuUQ7KqNXxQtyF1 gEzBUWuAR/7p+uZhgA5qwArvRIGlW5UxMxreyFTgxF25HKZ/cPwX9nT10RlesyVh m2WAUUmeDFblGfcNorxlVzZihw8LhHgPTCvBny21n1aSEax3Yb4YQhP+yiRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGvGjX2J1z/1MF1Bdc46PcjHx1cgwHwYDVR0j BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4 QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsexvxFE9v0YseEm8TiNcOsE3m4mJEnN0Lu OwDmrCa/Pxk1K2y/pGHpBtpFQfeDLKGBnJznGcdohCaEmVfN6wLtro6qyJY5r1TE n44pPhB974sIuU5cbOA3JgjBFPgH8AmwAZqUk6I8KbhEb4hdBW1bJvS34aCOb7bI zb6wO2say+EpTQK+nGUq3b55pymGEWgVV7RoWlGl3sRpK33q373P5YCd87E8teKc H3MHRtnDx292h/279MMPA43Az8LngI6CEpj6ny/InbOR3eU/HZNuUIvOMSIcYY0u 33fDwhmRQhdTeJ/XM4aBVXIxwvf3sU4Ue2cOpMG0f16gdOTzR6A= -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org