$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: RaHkFqLZaRrbSFpsq8s69ooAGV8sUGTXWwlBMCr5D8A= Subject key identifier: 1C:DD:9A:04:94:FA:AF:E3:40:A0:E1:64:1F:3E:C7:38:B1:5F:62:61 Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 6E3CF4EA37E9DAB2DC7981B289EA85580900255F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 023C Signing time: Sun 24 Nov 2024 00:40:59 +0000 Manifest this update: Sun 24 Nov 2024 00:35:59 +0000 Manifest next update: Wed 27 Nov 2024 03:55:59 +0000 Files and hashes: 1: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: NhbEnUbS1RFVhQFgb/k13Oo2qyTOB30jh0qFTUkaAik=) 2: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: ptSpa0yORFDFTGktJ23ziYaQuqfcwcD6+X4WfU20Bt4=) 3: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: vJN17h6zHlw8lhqv4ICIcSweY39vapLLmQqw71/RhS0=) 4: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: Cu2RdLHzB+A2EJBsuRCMa0mxP5/Kmd4TOJ7qAO2a+Js=) 5: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: 4hTYB6oeBmhzrslyPSwrX3Ek6Lkwqv8RzR59ex14KTA=) 6: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: MXbZaqgZrAMjFWvpeNabWpV08YGnoUdjC3eKn2tJnUM=) 7: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: yBaA0+xOkr+iculo5l4/62QXBhceh7/LNqxDxugk/Cg=) 8: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: 7LF1a7D5EDLG17ihfLxfwJXRWol/1ek+UfoMR7jTEuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:3c:f4:ea:37:e9:da:b2:dc:79:81:b2:89:ea:85:58:09:00:25:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Nov 24 00:35:59 2024 GMT Not After : Nov 27 03:55:59 2024 GMT Subject: CN=1CDD9A0494FAAFE340A0E1641F3EC738B15F6261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:9d:fd:80:0a:02:fe:46:eb:f3:b3:86:85: 29:b0:13:d4:18:1e:5a:d1:51:bf:92:b1:ce:11:dd: 28:a6:66:f4:51:d2:05:8c:2e:09:88:28:e5:bb:52: 99:c2:04:c7:c6:d3:22:32:b9:1a:8a:03:83:1d:15: 9b:33:5c:64:18:68:2f:92:4f:0d:b2:7a:85:5b:e5: 73:16:6e:9b:bb:c4:25:d6:fc:23:86:81:b2:bc:43: 5a:e8:ea:88:2e:52:e5:1e:a9:d8:11:39:76:7c:f4: 98:a0:30:22:9d:59:b0:c5:7c:64:68:1c:21:a6:c8: c0:ea:b4:9f:04:ba:70:96:7f:41:d4:5b:45:cd:99: cc:7e:51:2b:20:d9:82:16:f0:a9:c4:28:2b:6f:d6: 97:15:2d:26:ad:90:59:86:72:46:0b:1a:c7:34:ff: fc:a1:40:56:0e:1c:e0:7d:83:0f:4c:1c:22:58:01: bd:dd:7a:ac:16:91:51:40:6f:96:0a:8d:dc:45:58: f2:b8:a3:c0:30:e0:83:9d:6e:da:b0:04:7a:dc:03: 70:34:e6:d1:7b:7b:86:a7:6c:46:3a:c0:d3:00:2f: 67:9b:be:7d:74:19:5d:3d:d4:b5:ac:30:84:45:0c: 30:b4:9b:b4:1c:99:35:65:77:8e:ca:d6:aa:dd:24: 26:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DD:9A:04:94:FA:AF:E3:40:A0:E1:64:1F:3E:C7:38:B1:5F:62:61 X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e5:7e:c3:0b:98:37:aa:69:b4:76:5c:09:ba:d5:42:85:3b: 79:e3:b8:de:d1:fd:e9:18:28:81:f9:cf:21:6b:59:09:b8:34: a0:64:25:35:93:2c:be:fe:c0:cc:93:01:21:b9:ee:39:63:55: c4:f0:61:2b:38:cd:c8:5c:ac:c4:d8:a7:36:62:6a:41:29:e0: 54:04:59:4d:a4:c2:00:95:38:3c:22:5f:36:82:7a:c8:1c:2b: 47:46:7d:44:50:05:37:32:4f:42:fb:87:de:90:b8:41:66:8a: 2e:bd:18:99:56:b3:ee:ff:ab:bc:53:90:db:81:38:1e:35:fe: d7:fc:5f:4f:21:7a:c9:14:da:89:f8:01:cc:4d:ca:19:e3:6d: e6:ba:89:d5:6e:74:9c:20:02:cf:6f:59:1d:7a:a7:89:e0:4c: f8:91:62:a5:4d:98:34:fa:43:61:f5:5e:ab:24:1f:45:72:ec: 20:d2:ce:85:a0:dc:d1:c1:cc:03:a4:ec:86:52:38:37:66:bc: 62:df:3a:c7:d0:36:93:23:c2:4d:52:4e:e7:1a:b8:a3:ad:7d: 0e:22:5c:95:bc:b0:1d:ef:7b:08:39:2a:68:11:b1:c4:42:0d: 48:39:a1:4f:11:b8:38:18:d5:68:99:ca:97:88:1f:8a:04:cd: c8:30:c9:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjz06jfp2rLceYGyieqFWAkAJV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNDExMjQwMDM1NTlaFw0yNDExMjcwMzU1NTlaMDMxMTAvBgNV BAMTKDFDREQ5QTA0OTRGQUFGRTM0MEEwRTE2NDFGM0VDNzM4QjE1RjYyNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FJ39gAoC/kbr87OGhSmwE9QY HlrRUb+Ssc4R3SimZvRR0gWMLgmIKOW7UpnCBMfG0yIyuRqKA4MdFZszXGQYaC+S Tw2yeoVb5XMWbpu7xCXW/COGgbK8Q1ro6oguUuUeqdgROXZ89JigMCKdWbDFfGRo HCGmyMDqtJ8EunCWf0HUW0XNmcx+USsg2YIW8KnEKCtv1pcVLSatkFmGckYLGsc0 //yhQFYOHOB9gw9MHCJYAb3deqwWkVFAb5YKjdxFWPK4o8Aw4IOdbtqwBHrcA3A0 5tF7e4anbEY6wNMAL2ebvn10GV091LWsMIRFDDC0m7QcmTVld47K1qrdJCa7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHN2aBJT6r+NAoOFkHz7HOLFfYmEwHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7lfsMLmDeqabR2XAm61UKFO3njuN7R/ekY KIH5zyFrWQm4NKBkJTWTLL7+wMyTASG57jljVcTwYSs4zchcrMTYpzZiakEp4FQE WU2kwgCVODwiXzaCesgcK0dGfURQBTcyT0L7h96QuEFmii69GJlWs+7/q7xTkNuB OB41/tf8X08heskU2on4AcxNyhnjbea6idVudJwgAs9vWR16p4ngTPiRYqVNmDT6 Q2H1XqskH0Vy7CDSzoWg3NHBzAOk7IZSODdmvGLfOsfQNpMjwk1STucauKOtfQ4i XJW8sB3vewg5KmgRscRCDUg5oU8RuDgY1WiZypeIH4oEzcgwyeU= -----END CERTIFICATE-----Generated at Sun Nov 24 01:31:57 2024 by rpki-client on console-ams.rpki-client.org