$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: OVYSanABwoxP18pbSbQ7vtx8irtmoPTWNF05b3bG+wo= Subject key identifier: A1:9C:74:EA:8D:68:3D:D7:61:E4:7F:6D:03:DA:D7:8D:30:86:4A:37 Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 281B42100E43151BE000B3B55A46C0E43A9574B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 0122 Signing time: Sun 24 Nov 2024 14:32:11 +0000 Manifest this update: Sun 24 Nov 2024 14:27:11 +0000 Manifest next update: Wed 27 Nov 2024 23:46:11 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: WABg6+jnoT1qTnV3WZS7hShFxGBieWXNbxreSqjsLyw=) 2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: xfTtg33Hr8zBPdm1tzzzg6wrcSAMqmGp8WRqQryR4sc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1b:42:10:0e:43:15:1b:e0:00:b3:b5:5a:46:c0:e4:3a:95:74:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Nov 24 14:27:11 2024 GMT Not After : Nov 27 23:46:11 2024 GMT Subject: CN=A19C74EA8D683DD761E47F6D03DAD78D30864A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:8e:7b:9b:e0:4b:fd:31:76:ae:03:c3:8a: 0f:2c:a3:1f:c0:ab:4d:17:62:2d:48:7b:9c:31:91: 9b:d5:98:4d:07:3f:f2:bb:c1:54:44:bd:e4:68:42: fb:02:b7:cb:4e:ae:94:83:55:2c:6e:74:68:b2:41: d5:f8:b5:45:49:dc:5f:1c:9e:bb:8c:40:76:fa:15: 22:c8:d7:ed:b5:71:15:e8:75:4e:31:62:5b:b7:ec: 50:2e:aa:a0:35:e5:c4:80:5d:88:2c:6e:13:65:3d: 5b:21:b6:b0:b2:ac:40:67:41:19:70:ff:4d:04:94: dc:e8:f0:4f:c4:df:2b:74:5a:23:42:24:3c:6f:01: 4f:58:9d:86:5c:29:28:76:19:3b:30:6a:a0:8a:b7: 4b:e0:50:b9:aa:24:ed:18:8b:24:b8:38:c3:bb:45: 21:61:94:15:9b:d9:2d:4a:82:3b:0e:ac:06:d1:a5: 52:5d:47:dd:c1:57:0d:29:c9:7b:af:c7:ff:25:60: c5:06:4b:91:7b:16:30:1d:5a:32:5a:1a:4c:3a:5d: c6:52:ce:bc:a5:16:81:04:e2:04:f3:4d:d1:3e:39: aa:1b:f3:a8:6c:eb:65:41:c5:c1:d2:2d:42:5a:8f: d3:8d:b6:ef:04:39:c7:85:67:9c:73:e2:7a:20:9f: 57:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9C:74:EA:8D:68:3D:D7:61:E4:7F:6D:03:DA:D7:8D:30:86:4A:37 X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d7:eb:31:3f:34:4d:8e:e9:d0:8a:90:7f:19:7f:3d:c2:fc: 28:e1:6e:d6:b9:29:6b:a6:91:bc:fb:e3:37:76:6b:55:56:a6: e6:3c:81:3e:51:ee:3b:ed:7d:ab:f0:65:31:7b:3f:6a:18:b2: 6f:c9:36:3e:7e:1d:4d:a6:41:f4:d4:7e:1d:3f:67:73:5a:fb: 62:94:68:36:19:ea:1c:88:e7:18:e0:0f:51:fb:39:2e:40:21: 16:1a:71:cb:55:d5:f4:c9:09:57:91:b2:39:47:5f:9d:13:38: af:c9:0b:37:8d:ee:57:e7:ae:88:af:a9:5c:f4:a7:4b:bd:3a: 9b:e7:1c:0a:df:b6:eb:e2:f9:24:37:95:67:db:ec:df:d8:a8: b4:2f:5b:d8:b7:ce:73:88:c0:dd:8b:17:bd:5e:00:c8:97:eb: 64:be:09:6a:b1:9a:3a:8d:76:07:a4:c9:34:a7:e7:86:9f:1a: fe:19:73:8c:db:f6:01:35:2e:b7:a8:03:6e:a8:00:9e:6f:a1: 86:72:c4:3a:63:52:30:ba:e1:7e:91:e0:43:3f:7f:ab:8b:a7: 8f:1d:33:33:6e:27:5b:ce:31:3c:2f:2c:b5:02:f7:d6:62:a8: d2:26:cf:3e:84:b1:12:ec:f2:f4:54:6c:fe:8a:ac:c7:b9:d6: 93:52:bd:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBtCEA5DFRvgALO1WkbA5DqVdLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNDExMjQxNDI3MTFaFw0yNDExMjcyMzQ2MTFaMDMxMTAvBgNV BAMTKEExOUM3NEVBOEQ2ODNERDc2MUU0N0Y2RDAzREFENzhEMzA4NjRBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hY57m+BL/TF2rgPDig8sox/A q00XYi1Ie5wxkZvVmE0HP/K7wVREveRoQvsCt8tOrpSDVSxudGiyQdX4tUVJ3F8c nruMQHb6FSLI1+21cRXodU4xYlu37FAuqqA15cSAXYgsbhNlPVshtrCyrEBnQRlw /00ElNzo8E/E3yt0WiNCJDxvAU9YnYZcKSh2GTswaqCKt0vgULmqJO0YiyS4OMO7 RSFhlBWb2S1KgjsOrAbRpVJdR93BVw0pyXuvx/8lYMUGS5F7FjAdWjJaGkw6XcZS zrylFoEE4gTzTdE+Oaob86hs62VBxcHSLUJaj9ONtu8EOceFZ5xz4nogn1fBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoZx06o1oPddh5H9tA9rXjTCGSjcwHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPX6zE/NE2O6dCKkH8Zfz3C/Cjhbta5KWum kbz74zd2a1VWpuY8gT5R7jvtfavwZTF7P2oYsm/JNj5+HU2mQfTUfh0/Z3Na+2KU aDYZ6hyI5xjgD1H7OS5AIRYacctV1fTJCVeRsjlHX50TOK/JCzeN7lfnroivqVz0 p0u9OpvnHArftuvi+SQ3lWfb7N/YqLQvW9i3znOIwN2LF71eAMiX62S+CWqxmjqN dgekyTSn54afGv4Zc4zb9gE1LreoA26oAJ5voYZyxDpjUjC64X6R4EM/f6uLp48d MzNuJ1vOMTwvLLUC99ZiqNImzz6EsRLs8vRUbP6KrMe51pNSvZA= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:09 2024 by rpki-client on console-ams.rpki-client.org