$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: lAckMeErQXLGU1FwlQ5ykEMv/DvLcERLYt6nDTg863o= Subject key identifier: A8:0F:93:89:B9:F1:08:48:2F:28:F0:2F:41:35:75:F8:FC:A9:56:EC Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 4463D899F13F767B3525263B829047D011F772E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 045A Signing time: Wed 20 Nov 2024 15:51:59 +0000 Manifest this update: Wed 20 Nov 2024 15:46:59 +0000 Manifest next update: Sat 23 Nov 2024 20:58:59 +0000 Files and hashes: 1: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 3kwk4UMF9iNYpMSf21W/eUwvYsmaPApbmHcViGehMaU=) 2: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: 8/0SjjzNEyDp/MoMvXfi1pnsjLhs1tqUD5z9JQqkSr8=) 3: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: tPobItRGD2Vk5fK4/Oz2ojiatmX4ZdcXGBSqbeWy7Ng=) 4: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: aiifXcdy2AXRocJRKbN8Cd9UOvAE9erAu5vyFTkl88c=) 5: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: DO7ogbI2UpcST5Do0xfAryknKNzHKoFL4YPFX4NOgG8=) 6: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: fxJmoMXfPQSVI/NFPZTXD29cP4LOXZQELRHD2ZQCYfc=) 7: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: PwE45jFMLVz2aKNWwjQc8HudCo64xhteJbVEjdFpgd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:63:d8:99:f1:3f:76:7b:35:25:26:3b:82:90:47:d0:11:f7:72:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Nov 20 15:46:59 2024 GMT Not After : Nov 23 20:58:59 2024 GMT Subject: CN=A80F9389B9F108482F28F02F413575F8FCA956EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:79:f1:ab:9d:f3:a7:8a:e7:7e:ed:c9:d1: 71:54:f5:81:4d:c7:38:33:ae:2a:58:a2:2e:b2:a6: 20:7e:c2:af:f1:93:e3:93:ce:f6:cc:5a:aa:78:ad: 22:96:69:38:c8:9b:02:8e:5e:79:1b:37:3c:46:3a: 0b:62:0b:05:68:2b:74:27:b3:ca:37:04:46:56:20: b9:d2:fe:71:6c:f4:27:44:96:69:89:d2:b8:b6:ef: be:0b:5c:20:94:93:10:5d:5b:96:de:dd:cf:37:8d: d9:36:76:b9:6d:07:65:47:f7:4b:53:94:8e:f2:42: 31:9a:1e:a8:6e:d1:6d:7f:b7:69:d4:8e:99:49:ec: 48:4f:b4:ec:eb:a4:e2:4d:98:88:33:72:6a:77:c7: d1:99:b8:1f:9e:16:68:88:59:32:49:f6:9e:e4:9d: 60:c4:79:6e:c2:dc:25:d7:52:07:dd:12:3f:fa:db: 5a:d2:32:b5:2d:ed:b4:e3:6d:45:9f:0b:3a:ef:85: 9a:14:da:b6:28:2d:d4:b8:cb:65:34:58:74:b7:46: f9:93:f0:87:59:5d:5a:0c:3d:3e:6a:7b:6e:0a:c9: 5c:b7:8d:7d:24:3a:be:dd:aa:d1:96:19:71:2a:67: fc:da:60:7d:cd:0e:1b:11:47:3e:9e:f7:2f:d0:4f: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0F:93:89:B9:F1:08:48:2F:28:F0:2F:41:35:75:F8:FC:A9:56:EC X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:25:ec:2d:39:9a:8b:28:89:0a:2a:3a:1e:4b:2e:0d:4f:eb: fd:45:cb:90:02:1f:be:2b:ae:2b:42:d4:ac:fd:33:c7:97:f0: 9d:2f:8c:75:c8:c6:b5:39:b1:e3:c1:6f:69:8c:28:7c:99:98: e0:ea:75:e7:26:c2:d9:65:c0:0b:1c:e9:2b:fa:c1:27:7d:09: 60:e7:ee:35:01:85:3f:9b:94:90:22:c3:41:2a:8a:88:f1:60: 43:6d:84:f5:8c:7f:76:fb:3d:d0:ed:0d:d7:5f:01:84:74:93: 2a:77:d9:a2:11:4f:b5:42:60:03:cc:6f:f7:82:86:b5:6e:f6: fb:7f:2d:c7:61:e2:cc:85:29:78:d6:99:a3:1c:b2:1e:fd:27: fd:c5:42:20:85:06:ed:3c:f9:10:d0:14:54:34:2a:7c:6f:c4: c2:86:ae:a2:ee:86:d5:34:95:cc:3f:fe:4b:ec:ef:72:aa:75: 5e:f5:83:53:e9:5b:57:84:91:3c:00:24:8b:37:f6:f0:72:a5: 16:58:bf:56:3f:15:84:e1:5e:98:21:92:8e:a4:72:61:80:2d: c6:e2:dc:2a:3e:0d:86:4d:2e:bd:9d:6b:84:55:36:e9:55:01: 5e:66:29:2a:1e:67:af:62:09:ff:f9:11:9c:12:50:8c:f7:30: f4:b8:d1:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGPYmfE/dns1JSY7gpBH0BH3cuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNDExMjAxNTQ2NTlaFw0yNDExMjMyMDU4NTlaMDMxMTAvBgNV BAMTKEE4MEY5Mzg5QjlGMTA4NDgyRjI4RjAyRjQxMzU3NUY4RkNBOTU2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvnnxq53zp4rnfu3J0XFU9YFN xzgzripYoi6ypiB+wq/xk+OTzvbMWqp4rSKWaTjImwKOXnkbNzxGOgtiCwVoK3Qn s8o3BEZWILnS/nFs9CdElmmJ0ri2774LXCCUkxBdW5be3c83jdk2drltB2VH90tT lI7yQjGaHqhu0W1/t2nUjplJ7EhPtOzrpOJNmIgzcmp3x9GZuB+eFmiIWTJJ9p7k nWDEeW7C3CXXUgfdEj/621rSMrUt7bTjbUWfCzrvhZoU2rYoLdS4y2U0WHS3RvmT 8IdZXVoMPT5qe24KyVy3jX0kOr7dqtGWGXEqZ/zaYH3NDhsRRz6e9y/QT3NhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqA+TibnxCEgvKPAvQTV1+PypVuwwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4l7C05mosoiQoqOh5LLg1P6/1Fy5ACH74r ritC1Kz9M8eX8J0vjHXIxrU5sePBb2mMKHyZmODqdecmwtllwAsc6Sv6wSd9CWDn 7jUBhT+blJAiw0EqiojxYENthPWMf3b7PdDtDddfAYR0kyp32aIRT7VCYAPMb/eC hrVu9vt/Lcdh4syFKXjWmaMcsh79J/3FQiCFBu08+RDQFFQ0KnxvxMKGrqLuhtU0 lcw//kvs73KqdV71g1PpW1eEkTwAJIs39vBypRZYv1Y/FYThXpghko6kcmGALcbi 3Co+DYZNLr2da4RVNulVAV5mKSoeZ69iCf/5EZwSUIz3MPS40f0= -----END CERTIFICATE-----Generated at Wed Nov 20 18:41:50 2024 by rpki-client on console-fra.rpki-client.org