$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: 5SxWj90P/rbKmH03jWv/FEYczgDCJE0z7GnagGu1Km0= Subject key identifier: FD:C5:BE:F0:59:64:8D:56:61:D9:FB:4A:C2:02:F9:E9:4B:96:9A:F3 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 7D12B8DA80C710B67FCE7509B1E99CB9DEE6A5CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 0486 Signing time: Thu 21 Nov 2024 17:11:06 +0000 Manifest this update: Thu 21 Nov 2024 17:06:06 +0000 Manifest next update: Sun 24 Nov 2024 18:22:06 +0000 Files and hashes: 1: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: 2vipDNHkAigu2uT5W7FDzRLLshb8CXIRnjNsD4RfK2A=) 2: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: 5/6N/wKA5JiwUXzea2oEDMuaf78pI5QkyVnOS9KfQvM=) 3: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: Kzuit7flC/q/AhzsHbDOQA9CaWnNa9oDmVzmfgUvay8=) 4: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: EEoe6rcJHCI5WYJCV/Syozu2zB8bUqSrlyAM5hNEakA=) 5: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: j8OvebUImpIJJ2+WqOUtRsS/Lczxkx5d22kPjma9xr8=) 6: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: dgINQ5MJ3Auvon1oiBib4P8uI+HksPXhV6zDgPNH+z4=) 7: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: nlKrd5AKR7h3FCJzv+3n5dJLAh4Gtx9yY/SstgPTAXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:12:b8:da:80:c7:10:b6:7f:ce:75:09:b1:e9:9c:b9:de:e6:a5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Nov 21 17:06:06 2024 GMT Not After : Nov 24 18:22:06 2024 GMT Subject: CN=FDC5BEF059648D5661D9FB4AC202F9E94B969AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:fb:d4:b4:7f:d8:83:d8:79:d0:6e:cb:e1: d8:d9:a3:cd:ff:8b:03:73:24:f3:dc:38:6d:f5:76: de:e1:3b:1d:62:b9:9b:2b:d7:f3:d3:74:05:29:60: 3e:7f:f3:98:9c:f5:0a:ba:6e:cc:d3:87:99:f7:23: e5:04:98:3f:b1:4b:7f:aa:97:07:7b:2f:1a:62:d4: c6:92:37:f0:80:4f:7a:26:ac:8d:95:dc:18:ca:d7: ed:e8:0d:66:a1:6f:ac:ab:38:b1:23:a9:0c:7b:a8: f8:0d:44:46:20:d9:51:cf:a5:00:43:96:42:03:a0: 3f:20:50:d8:23:fe:2e:2c:71:67:f6:ec:4d:ee:6a: 14:36:8d:82:17:74:b0:48:25:4f:68:95:33:0d:71: 11:02:aa:b6:88:60:f9:c2:25:a6:02:6a:8f:10:47: c3:84:90:ae:e2:3e:79:b3:05:96:0f:36:cb:33:fa: 80:5a:06:7f:7f:47:0d:3b:d6:29:99:b4:5b:a4:6d: bc:61:b2:f2:14:c4:43:dc:e6:54:a8:62:38:ca:f6: a6:81:22:fe:22:e8:f0:14:14:d8:70:b5:4f:33:07: 26:36:fb:ef:05:7b:cd:26:c1:22:c8:bc:03:c6:a3: ff:27:c0:dc:0d:44:d1:eb:6e:5d:44:5e:4c:13:67: 7a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C5:BE:F0:59:64:8D:56:61:D9:FB:4A:C2:02:F9:E9:4B:96:9A:F3 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e7:76:d1:c0:eb:1e:50:d8:33:34:40:3b:73:da:5a:68:9f: ef:0e:bd:74:80:b2:58:f0:d9:72:81:5f:3a:1b:06:24:94:58: 1a:b2:ff:f8:ff:a8:ba:94:85:25:a1:0a:b8:80:f1:61:e7:6e: f5:b3:16:8a:a5:4b:bf:2b:40:54:1a:8a:1d:53:61:ba:e3:98: 2b:df:64:a5:0c:91:5a:da:31:8e:54:54:f7:16:ef:a4:89:9c: 87:10:f2:1e:ce:10:60:58:9a:75:d6:44:f5:8b:fb:c4:20:1d: 87:b6:d9:5d:1d:78:ae:a1:c6:32:76:c5:75:26:51:57:5c:14: 47:86:d9:d1:3e:74:7e:35:3b:30:21:4a:a9:3b:b0:8d:ec:bf: 0c:da:97:9e:3c:e9:d6:3d:40:72:a0:1a:5e:eb:8a:17:de:77: fe:25:61:59:96:78:a1:f6:28:42:0e:00:98:7c:2d:f0:2c:7a: 1c:46:c9:33:bd:15:45:4d:b9:ca:56:3e:ed:f2:3c:b4:57:2d: b8:7b:47:f2:c5:bb:97:c5:e3:66:c9:86:57:ab:2f:f7:40:5c: 5f:dd:fd:ea:d0:41:95:36:1d:83:39:26:16:71:5c:e9:4f:a6: b0:52:77:12:f1:c1:b5:ee:ad:82:6f:a9:63:e5:0a:ec:bc:5c: dc:8d:1d:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRK42oDHELZ/znUJsemcud7mpc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNDExMjExNzA2MDZaFw0yNDExMjQxODIyMDZaMDMxMTAvBgNV BAMTKEZEQzVCRUYwNTk2NDhENTY2MUQ5RkI0QUMyMDJGOUU5NEI5NjlBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQC/vUtH/Yg9h50G7L4djZo83/ iwNzJPPcOG31dt7hOx1iuZsr1/PTdAUpYD5/85ic9Qq6bszTh5n3I+UEmD+xS3+q lwd7Lxpi1MaSN/CAT3omrI2V3BjK1+3oDWahb6yrOLEjqQx7qPgNREYg2VHPpQBD lkIDoD8gUNgj/i4scWf27E3uahQ2jYIXdLBIJU9olTMNcRECqraIYPnCJaYCao8Q R8OEkK7iPnmzBZYPNssz+oBaBn9/Rw071imZtFukbbxhsvIUxEPc5lSoYjjK9qaB Iv4i6PAUFNhwtU8zByY2++8Fe80mwSLIvAPGo/8nwNwNRNHrbl1EXkwTZ3qLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/cW+8FlkjVZh2ftKwgL56UuWmvMwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvndtHA6x5Q2DM0QDtz2lpon+8OvXSAsljw 2XKBXzobBiSUWBqy//j/qLqUhSWhCriA8WHnbvWzFoqlS78rQFQaih1TYbrjmCvf ZKUMkVraMY5UVPcW76SJnIcQ8h7OEGBYmnXWRPWL+8QgHYe22V0deK6hxjJ2xXUm UVdcFEeG2dE+dH41OzAhSqk7sI3svwzal5486dY9QHKgGl7rihfed/4lYVmWeKH2 KEIOAJh8LfAsehxGyTO9FUVNucpWPu3yPLRXLbh7R/LFu5fF42bJhlerL/dAXF/d /erQQZU2HYM5JhZxXOlPprBSdxLxwbXurYJvqWPlCuy8XNyNHU4= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org