$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: NmFV9C4l18ljFK+65638CU5KwZwyD2e+Tt9dZSMiwFg= Subject key identifier: D8:E4:AC:B7:C9:19:C0:60:40:89:14:0D:47:FF:B2:8C:4D:DD:F7:FF Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 03A60D0975AF6698B59634150E7ACCC5054F666B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 03C5 Signing time: Mon 25 Nov 2024 08:51:23 +0000 Manifest this update: Mon 25 Nov 2024 08:46:23 +0000 Manifest next update: Thu 28 Nov 2024 13:02:23 +0000 Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: WW7W6Yj2G/47WPhY9FaJiFfRCgajmearKgt2Y7lE/bA=) 2: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: cFu5e6dg3qiRuun1jIPBf0TewZCHgaaG/3Q/cahlfmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a6:0d:09:75:af:66:98:b5:96:34:15:0e:7a:cc:c5:05:4f:66:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Nov 25 08:46:23 2024 GMT Not After : Nov 28 13:02:23 2024 GMT Subject: CN=D8E4ACB7C919C0604089140D47FFB28C4DDDF7FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:d0:14:66:4f:a5:2b:6c:6d:5f:ef:2c:ff: 16:c9:70:85:ba:ef:9a:6c:f9:b2:1b:e1:03:c8:45: 77:64:2c:6e:ff:9c:c7:15:45:b7:df:b3:50:eb:18: 4e:b0:5f:56:d0:f7:d7:98:74:45:f9:f8:06:85:6a: 54:c2:86:65:a9:9d:d3:9a:13:9e:64:01:e2:4f:38: fd:79:29:5e:c1:89:3f:e6:7f:67:48:6a:c4:b6:eb: 70:fd:f9:9e:af:df:e0:29:62:bc:ab:42:ba:57:15: d2:a7:b0:70:10:d6:e2:ff:29:d5:89:40:5d:cc:13: d0:bf:7f:b6:50:53:85:4b:d9:e7:d2:5c:b6:00:22: 48:ff:75:ef:bd:3a:64:44:b7:c2:f5:bc:3b:c0:25: 00:02:5a:ef:02:19:40:aa:41:12:50:9a:e4:40:32: 53:e9:e2:d1:40:2f:95:5a:4a:33:2a:8a:f5:44:77: 5f:a0:84:9d:03:bd:57:7c:2a:5e:24:db:61:05:29: 87:17:e4:cd:73:ed:aa:e1:d9:c4:01:66:36:3e:22: 8b:8e:3d:67:ee:11:ec:19:2a:93:3a:cc:7f:6d:7b: 3e:dd:88:89:08:00:d5:95:ff:71:71:07:c1:e9:ef: 42:2c:82:3f:58:0c:e5:e6:dc:40:7e:d2:79:a6:a2: f4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E4:AC:B7:C9:19:C0:60:40:89:14:0D:47:FF:B2:8C:4D:DD:F7:FF X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:95:a4:36:0d:c5:f6:f0:e2:fa:72:89:20:c4:14:aa:d0:08: d5:47:8d:7f:48:f8:07:93:e6:cf:8b:aa:31:f7:86:89:49:49: 77:25:48:a7:f0:6b:39:53:01:a9:ad:8b:06:5e:25:9a:dc:76: 17:d0:e1:07:1c:e2:6d:8b:a8:29:5e:48:0e:ec:ff:d6:96:30: 56:5f:f3:57:2c:42:00:89:4d:ce:7c:10:fa:08:8d:3f:14:41: 9d:1e:85:0a:c7:ab:7d:c9:d0:2e:8e:a3:be:6d:ea:eb:5f:a3: 6e:16:a4:93:e8:44:91:ed:15:e7:09:99:d6:5f:40:cd:2e:99: 5b:9c:87:2f:db:be:ba:b1:74:37:fc:9a:63:65:dd:01:97:16: de:c4:c9:49:f1:8c:49:2a:0b:c9:0b:95:9b:6e:f0:94:8b:11: b8:96:96:43:73:02:20:a2:78:ba:b4:95:10:4b:ac:df:18:58: e1:24:25:4f:0f:34:c9:a3:dd:f6:3d:5e:c8:61:ca:9d:d3:89: 94:41:27:3e:e0:4b:69:56:e3:c5:a6:a8:60:5a:cb:04:a7:0c: c8:62:1e:ca:15:15:d7:cb:23:d1:5b:6b:da:28:e5:e6:50:44: 28:29:a5:b2:73:8a:7e:4b:15:ab:ad:06:cb:f2:72:a6:31:38: a4:45:6d:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA6YNCXWvZpi1ljQVDnrMxQVPZmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNDExMjUwODQ2MjNaFw0yNDExMjgxMzAyMjNaMDMxMTAvBgNV BAMTKEQ4RTRBQ0I3QzkxOUMwNjA0MDg5MTQwRDQ3RkZCMjhDNEREREY3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRdAUZk+lK2xtX+8s/xbJcIW6 75ps+bIb4QPIRXdkLG7/nMcVRbffs1DrGE6wX1bQ99eYdEX5+AaFalTChmWpndOa E55kAeJPOP15KV7BiT/mf2dIasS263D9+Z6v3+ApYryrQrpXFdKnsHAQ1uL/KdWJ QF3ME9C/f7ZQU4VL2efSXLYAIkj/de+9OmREt8L1vDvAJQACWu8CGUCqQRJQmuRA MlPp4tFAL5VaSjMqivVEd1+ghJ0DvVd8Kl4k22EFKYcX5M1z7arh2cQBZjY+IouO PWfuEewZKpM6zH9tez7diIkIANWV/3FxB8Hp70Isgj9YDOXm3EB+0nmmovSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2OSst8kZwGBAiRQNR/+yjE3d9/8wHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGVpDYNxfbw4vpyiSDEFKrQCNVHjX9I+AeT 5s+LqjH3holJSXclSKfwazlTAamtiwZeJZrcdhfQ4Qcc4m2LqCleSA7s/9aWMFZf 81csQgCJTc58EPoIjT8UQZ0ehQrHq33J0C6Oo75t6utfo24WpJPoRJHtFecJmdZf QM0umVuchy/bvrqxdDf8mmNl3QGXFt7EyUnxjEkqC8kLlZtu8JSLEbiWlkNzAiCi eLq0lRBLrN8YWOEkJU8PNMmj3fY9Xshhyp3TiZRBJz7gS2lW48WmqGBaywSnDMhi HsoVFdfLI9Fba9oo5eZQRCgppbJzin5LFautBsvycqYxOKRFbRM= -----END CERTIFICATE-----Generated at Mon Nov 25 10:55:38 2024 by rpki-client on console-ams.rpki-client.org