$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: 4sx9iR/8RokXC3XH88VfhoPQpYp91lVT0kvhYnQf2MY= Subject key identifier: 7C:5E:B3:29:A1:F5:6A:22:46:D3:A7:EE:EF:1D:E3:7C:AB:12:37:58 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 3744951E795CFA66281FA65212725DE92D54713C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 0155 Signing time: Thu 21 Nov 2024 07:31:28 +0000 Manifest this update: Thu 21 Nov 2024 07:26:28 +0000 Manifest next update: Sun 24 Nov 2024 07:57:28 +0000 Files and hashes: 1: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: CtFPAoFCWQMoGC7obJ982ibcO5Aaxh3EjrLSrLSyo4E=) 2: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: +3d3ni85obTjksCVTVT5eeZhuEeRN8VnJiNM8q/vZ10=) 3: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: +rCdQ21qGPJKDOH1kmxHqKywp0g59cceLlOdQnbBf/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 07:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:44:95:1e:79:5c:fa:66:28:1f:a6:52:12:72:5d:e9:2d:54:71:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Nov 21 07:26:28 2024 GMT Not After : Nov 24 07:57:28 2024 GMT Subject: CN=7C5EB329A1F56A2246D3A7EEEF1DE37CAB123758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:0c:90:31:ea:e3:81:72:e1:ca:58:90:fe: 72:df:fe:70:f8:b6:30:b7:3d:d5:f9:d5:35:1a:b3: fd:18:84:b2:02:7b:dc:4b:b5:9d:f1:f9:1a:4c:19: 8a:b3:f7:3d:df:87:a9:2a:59:eb:aa:35:09:d3:91: 98:03:b8:61:bf:77:dc:d1:7f:70:4e:c6:3f:1b:bc: 3e:c3:52:49:75:d1:d3:76:f8:17:2d:de:43:12:65: 24:cc:07:06:b8:c8:ef:16:03:ea:57:14:4c:44:28: 5f:64:d5:22:e6:4b:63:60:83:52:ae:c4:28:3f:de: d8:db:8f:5c:27:4a:72:73:a4:35:6a:6c:97:21:8a: 26:52:9e:4e:fb:2b:47:ec:57:24:bc:0a:fc:a8:3b: 55:53:4d:fd:5b:6c:0b:d0:f9:8d:a5:68:7b:f0:ac: 9a:a1:65:76:d0:6c:e3:7b:14:6c:4b:45:6e:08:6b: 3f:63:65:9d:1e:4a:84:a2:82:00:7e:5a:d4:9a:df: 1a:30:ce:9a:67:b6:71:8e:3c:74:be:c2:8a:61:8a: 40:8a:49:82:a2:d9:90:e7:db:b7:2f:74:3f:d9:34: 7a:4c:10:ad:83:4e:a6:23:c1:fb:3b:52:70:0d:6d: f0:26:ab:02:fb:cc:fa:d3:ce:d6:0e:05:08:54:98: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5E:B3:29:A1:F5:6A:22:46:D3:A7:EE:EF:1D:E3:7C:AB:12:37:58 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7b:4b:1f:2c:c5:6f:5c:0b:a0:8f:33:b6:7b:21:88:0b:fb: f1:5b:9b:11:8f:e6:64:1a:4d:4d:c2:86:18:ab:2a:91:94:4d: 0a:4f:da:65:21:cf:86:0e:c3:0a:69:a8:9e:2a:05:91:46:65: 44:d9:01:da:93:ea:4b:ef:f5:dd:00:9f:7d:f5:8d:51:5a:79: 5a:2a:fa:c4:05:65:5a:c9:4d:eb:3d:b8:af:b1:0a:1c:c9:3a: 3b:e1:c9:d5:0e:dd:d6:36:ad:32:93:8e:eb:54:17:12:e2:86: 20:4e:04:0c:78:b4:2b:99:b6:4d:34:9a:ef:eb:3c:ba:7d:bc: ac:ed:3d:d7:2c:1a:df:9b:9e:44:af:1a:11:e4:58:f5:ad:60: 5e:a6:f9:df:df:0d:e9:39:f8:b2:5e:4d:b1:69:d1:1c:7f:12: 70:17:e5:b7:e2:fa:2c:0c:32:ea:7c:03:57:0f:96:af:94:fb: 44:a6:65:f9:87:51:0d:95:4d:00:7e:1e:fa:aa:8f:ed:d0:74: 5c:0e:6c:7a:22:de:a5:4d:53:d2:ba:33:cf:f9:61:8c:0d:be: e9:f4:53:9d:a5:b6:57:ac:07:29:f8:16:00:54:bd:56:b4:09: 71:08:94:9f:d3:ef:ca:83:80:b0:0b:95:13:9b:16:dc:d1:89: d1:bb:4f:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0SVHnlc+mYoH6ZSEnJd6S1UcTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNDExMjEwNzI2MjhaFw0yNDExMjQwNzU3MjhaMDMxMTAvBgNV BAMTKDdDNUVCMzI5QTFGNTZBMjI0NkQzQTdFRUVGMURFMzdDQUIxMjM3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQQyQMerjgXLhyliQ/nLf/nD4 tjC3PdX51TUas/0YhLICe9xLtZ3x+RpMGYqz9z3fh6kqWeuqNQnTkZgDuGG/d9zR f3BOxj8bvD7DUkl10dN2+Bct3kMSZSTMBwa4yO8WA+pXFExEKF9k1SLmS2Ngg1Ku xCg/3tjbj1wnSnJzpDVqbJchiiZSnk77K0fsVyS8CvyoO1VTTf1bbAvQ+Y2laHvw rJqhZXbQbON7FGxLRW4Iaz9jZZ0eSoSiggB+WtSa3xowzppntnGOPHS+wophikCK SYKi2ZDn27cvdD/ZNHpMEK2DTqYjwfs7UnANbfAmqwL7zPrTztYOBQhUmK6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfF6zKaH1aiJG06fu7x3jfKsSN1gwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ7Sx8sxW9cC6CPM7Z7IYgL+/FbmxGP5mQa TU3ChhirKpGUTQpP2mUhz4YOwwppqJ4qBZFGZUTZAdqT6kvv9d0An331jVFaeVoq +sQFZVrJTes9uK+xChzJOjvhydUO3dY2rTKTjutUFxLihiBOBAx4tCuZtk00mu/r PLp9vKztPdcsGt+bnkSvGhHkWPWtYF6m+d/fDek5+LJeTbFp0Rx/EnAX5bfi+iwM Mup8A1cPlq+U+0SmZfmHUQ2VTQB+Hvqqj+3QdFwObHoi3qVNU9K6M8/5YYwNvun0 U52ltlesByn4FgBUvVa0CXEIlJ/T78qDgLALlRObFtzRidG7T5I= -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org