$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: LWlonpw+lvM/841BBFwQf7hl41VHofP8djdOm76CYgw= Subject key identifier: F7:FC:AE:43:D7:41:54:CB:A8:86:3D:8B:6C:81:F2:99:6D:9E:80:37 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 3957166AEBE1FB47BB97BB1D6FAE8F45E02CEFD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0486 Signing time: Thu 21 Nov 2024 07:21:20 +0000 Manifest this update: Thu 21 Nov 2024 07:16:20 +0000 Manifest next update: Sun 24 Nov 2024 10:14:20 +0000 Files and hashes: 1: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: 6Z6gxTWfD3ARKqfG9o8QF6TpfuXdMJbjFHfFmTtyniQ=) 2: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: j2I72lJY6F4OaCuusSbdZx1ZS2aVDkAwbIUbsuKk/mg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:57:16:6a:eb:e1:fb:47:bb:97:bb:1d:6f:ae:8f:45:e0:2c:ef:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Nov 21 07:16:20 2024 GMT Not After : Nov 24 10:14:20 2024 GMT Subject: CN=F7FCAE43D74154CBA8863D8B6C81F2996D9E8037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:e8:4f:7d:14:76:93:e3:78:40:95:f9:19: 47:0f:7a:7d:8c:f4:32:07:af:26:f9:9e:07:c7:53: b4:7d:2e:21:65:cd:3d:7a:ff:7a:2b:46:22:21:8b: 8e:76:a9:33:40:2a:7c:f1:ac:5d:95:b6:83:df:df: 43:35:31:d9:de:71:79:f8:69:1a:48:4b:b6:ab:37: 81:76:1e:05:b1:ba:c6:d3:56:3f:93:3a:73:86:c9: f0:ff:a0:eb:29:ea:15:62:e3:f5:ba:55:e9:9c:49: 87:63:a6:d4:14:9d:46:55:22:63:fc:a6:dc:b2:09: 33:7f:37:06:e1:df:c6:48:e2:c1:e3:62:19:33:40: a8:44:32:c4:21:ed:3d:ca:b0:65:f6:25:c3:81:42: 8c:d6:bc:62:97:a3:7c:0f:ed:2c:16:42:7d:83:b8: 7c:71:db:06:b8:45:44:64:08:6b:4c:80:ea:a4:48: 84:f5:64:a4:13:a0:bc:f9:c7:64:ba:36:38:cf:ca: 37:86:42:ea:8e:46:9e:27:43:48:b9:04:b9:8a:3f: 05:55:e0:ed:1a:2d:f0:95:92:c1:56:51:99:be:2b: d3:07:88:d1:62:59:59:a5:59:bd:0b:07:7a:ee:30: e2:9f:56:60:d2:d6:ad:c1:71:31:77:c9:76:5c:58: 88:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FC:AE:43:D7:41:54:CB:A8:86:3D:8B:6C:81:F2:99:6D:9E:80:37 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9c:db:f3:1f:79:8c:fc:ac:e1:7e:9e:f8:2d:e0:2e:a9:6c: 31:fa:9c:b5:e8:43:1a:5b:2b:5b:b3:d6:b3:75:19:13:57:68: 91:ce:c9:3e:91:8e:b2:aa:d4:a6:ab:f9:c1:cd:31:33:12:79: 7f:5f:e0:b5:e9:db:fb:b3:5b:da:8f:3d:52:e9:8e:d8:17:f6: 2d:03:3a:64:b6:20:0f:fc:aa:57:2f:35:7b:e5:20:dc:59:9e: 73:98:30:37:bc:e0:8d:9a:b3:59:ba:90:64:fd:18:7d:c5:00: 89:15:5e:6d:e4:60:10:67:18:ce:e6:2e:59:33:47:08:d8:70: 2f:06:bd:53:18:0a:7f:de:f7:09:ae:77:3f:ba:3b:fd:42:01: 4a:7e:38:4e:9e:76:ae:d4:9a:83:4c:c8:30:86:ee:37:2c:94: be:2c:25:df:6b:46:c9:d4:0f:90:75:c3:1e:46:bb:c1:58:c2: af:e0:f9:79:df:cb:51:06:00:cb:4f:6d:17:da:c3:03:31:20: bd:cb:32:2e:fd:37:3b:60:65:b9:53:f1:47:97:ea:63:bb:54: b1:96:5a:f5:36:c1:79:6a:c6:81:30:c0:50:e7:96:3f:8c:86: 4c:40:ea:b6:cc:d7:40:05:01:6f:ad:cf:2e:a2:42:a1:3d:d2: 76:fc:60:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVcWauvh+0e7l7sdb66PReAs79YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNDExMjEwNzE2MjBaFw0yNDExMjQxMDE0MjBaMDMxMTAvBgNV BAMTKEY3RkNBRTQzRDc0MTU0Q0JBODg2M0Q4QjZDODFGMjk5NkQ5RTgwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrOhPfRR2k+N4QJX5GUcPen2M 9DIHryb5ngfHU7R9LiFlzT16/3orRiIhi452qTNAKnzxrF2VtoPf30M1MdnecXn4 aRpIS7arN4F2HgWxusbTVj+TOnOGyfD/oOsp6hVi4/W6VemcSYdjptQUnUZVImP8 ptyyCTN/Nwbh38ZI4sHjYhkzQKhEMsQh7T3KsGX2JcOBQozWvGKXo3wP7SwWQn2D uHxx2wa4RURkCGtMgOqkSIT1ZKQToLz5x2S6NjjPyjeGQuqORp4nQ0i5BLmKPwVV 4O0aLfCVksFWUZm+K9MHiNFiWVmlWb0LB3ruMOKfVmDS1q3BcTF3yXZcWIixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9/yuQ9dBVMuohj2LbIHymW2egDcwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADic2/MfeYz8rOF+nvgt4C6pbDH6nLXoQxpb K1uz1rN1GRNXaJHOyT6RjrKq1Kar+cHNMTMSeX9f4LXp2/uzW9qPPVLpjtgX9i0D OmS2IA/8qlcvNXvlINxZnnOYMDe84I2as1m6kGT9GH3FAIkVXm3kYBBnGM7mLlkz RwjYcC8GvVMYCn/e9wmudz+6O/1CAUp+OE6edq7UmoNMyDCG7jcslL4sJd9rRsnU D5B1wx5Gu8FYwq/g+Xnfy1EGAMtPbRfawwMxIL3LMi79NztgZblT8UeX6mO7VLGW WvU2wXlqxoEwwFDnlj+MhkxA6rbM10AFAW+tzy6iQqE90nb8YDg= -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:04 2024 by rpki-client on console-ams.rpki-client.org