$ rpki-client -vvf repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft File: FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft (raw, json) Hash identifier: rxMcqPoIANZtgzDuixdEYOA3WP5wuGfEhYuoClQf7KM= Subject key identifier: 74:CA:64:0A:FB:FB:09:00:11:84:61:2E:CF:63:29:06:CD:06:0A:70 Authority key identifier: FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 Certificate issuer: /CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Certificate serial: 264D70486530F5EA626C6B4B4CDAFE4296299CE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft Manifest number: 0122 Signing time: Thu 21 Nov 2024 14:41:27 +0000 Manifest this update: Thu 21 Nov 2024 14:36:27 +0000 Manifest next update: Mon 25 Nov 2024 01:09:27 +0000 Files and hashes: 1: FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl (hash: MdzhxzCGKstU0k/u13aaZpHuWnvEqshtkycrAl2il7Y=) 2: 3130332e38342e3230372e302f32342d3234203d3e203538343837.roa (hash: 88IBv6cQcVEHkf+P28Avyyz4PrcBixcj5Be74wH4xLY=) 3: 3130332e38342e3230362e302f32342d3234203d3e203538343837.roa (hash: wD/tq3qxtfJ3y2T3ldF1/BO80ye0su5ixxAqIkEwqMs=) 4: 3130332e38342e3230362e302f32332d3233203d3e203538343837.roa (hash: 3M2XlAUkWUOgGm0S5JrWoHlfUxPXjBveBq4SSc5Mgk0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4d:70:48:65:30:f5:ea:62:6c:6b:4b:4c:da:fe:42:96:29:9c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Validity Not Before: Nov 21 14:36:27 2024 GMT Not After : Nov 25 01:09:27 2024 GMT Subject: CN=74CA640AFBFB09001184612ECF632906CD060A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:30:b9:80:aa:7f:36:c9:3f:13:d0:d6:1c:2e: 4a:c4:ad:60:52:02:51:0c:34:c4:4f:90:9d:03:94: 16:8d:27:75:80:12:53:d5:a7:30:e7:a5:e7:04:0e: e5:2b:fd:7d:6b:06:2c:18:49:28:ae:43:e0:72:75: db:63:29:63:4b:cd:26:cc:92:0d:c3:ae:63:d5:02: 4c:99:fc:d3:43:b7:4e:32:bf:5a:b4:b5:29:ab:8d: 7d:c2:56:85:6d:0b:f9:e8:25:4b:c3:11:e8:7a:a2: 70:da:e7:af:6a:23:15:4c:11:0a:d3:ce:05:d8:73: b3:a6:49:76:b7:cb:b3:23:bf:77:42:db:e4:b3:c0: 5f:93:7d:08:14:c5:f9:f8:c2:db:f5:f0:e4:6f:22: f4:37:85:8c:66:69:14:2c:52:18:d5:e8:06:de:87: 06:31:0d:81:9b:bb:0e:df:c4:c9:c5:ff:47:b7:22: 02:a4:3d:09:8a:45:f2:7b:d2:72:0e:d4:43:b9:c0: 51:43:43:0f:f6:b2:d0:d5:a2:18:80:7b:16:9e:66: ca:11:d4:61:3b:f4:1d:ed:31:aa:51:7d:2d:bc:9c: 33:4e:22:f5:3b:e7:9e:1e:37:2c:d1:ee:fd:c8:94: 04:a5:97:9a:fb:a0:af:f3:63:3d:23:6f:c0:c1:a7: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CA:64:0A:FB:FB:09:00:11:84:61:2E:CF:63:29:06:CD:06:0A:70 X509v3 Authority Key Identifier: keyid:FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:82:8e:c4:5b:59:94:4f:16:86:16:ae:82:00:54:5a:ac:97: 23:d9:e9:f9:97:e2:62:b5:0c:16:5d:13:ab:b9:06:2f:d5:04: d7:42:a6:00:86:1c:e1:bf:05:0b:6e:74:8c:b6:9a:61:6c:d6: 26:62:aa:2b:bb:52:f5:89:37:3a:7c:24:4f:01:14:49:eb:54: 0c:22:b5:86:25:b8:fa:42:47:81:d9:c4:2a:c0:f2:ff:44:74: 3c:88:c8:e7:ed:3d:2b:b3:e8:2f:8c:64:ea:e6:ff:46:45:58: 81:38:e8:6c:f9:6d:d2:aa:b5:1a:f8:54:f2:30:cb:8c:c0:dd: 3a:91:d3:85:d3:e9:ef:b0:8a:d3:37:df:6b:a4:ed:74:23:43: f2:f5:ff:e2:97:1c:61:06:b3:a5:dc:c7:97:0f:cc:8a:0a:bd: fd:69:d2:ee:ce:96:1a:92:67:98:12:1a:5a:80:82:1d:35:f5: cf:f5:78:8b:bb:e7:5e:8d:81:ae:cf:2b:7e:17:b1:49:af:6e: 48:76:e2:d4:ab:b3:44:6b:6c:02:de:fb:b3:3c:35:df:f6:08: b3:86:cb:f3:0f:10:dc:70:59:ec:29:26:e7:cc:dc:e4:c4:5e: 3a:27:4c:20:ca:14:d6:c0:0d:23:6c:9c:29:81:84:b2:01:f7: d4:87:3a:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJk1wSGUw9epibGtLTNr+QpYpnOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3 MURDQUNBMTAeFw0yNDExMjExNDM2MjdaFw0yNDExMjUwMTA5MjdaMDMxMTAvBgNV BAMTKDc0Q0E2NDBBRkJGQjA5MDAxMTg0NjEyRUNGNjMyOTA2Q0QwNjBBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMLmAqn82yT8T0NYcLkrErWBS AlEMNMRPkJ0DlBaNJ3WAElPVpzDnpecEDuUr/X1rBiwYSSiuQ+ByddtjKWNLzSbM kg3DrmPVAkyZ/NNDt04yv1q0tSmrjX3CVoVtC/noJUvDEeh6onDa569qIxVMEQrT zgXYc7OmSXa3y7Mjv3dC2+SzwF+TfQgUxfn4wtv18ORvIvQ3hYxmaRQsUhjV6Abe hwYxDYGbuw7fxMnF/0e3IgKkPQmKRfJ70nIO1EO5wFFDQw/2stDVohiAexaeZsoR 1GE79B3tMapRfS28nDNOIvU7554eNyzR7v3IlASll5r7oK/zYz0jb8DBp8f5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdMpkCvv7CQARhGEuz2MpBs0GCnAwHwYDVR0j BBgwFoAU/8w8h5JQ9jUWVK/i7RN+7XHcrKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGVlYTA4Yy0zZmQyLTQ4OGUtYTU3NC05ZjliYjYzMWE2MmIvMC9GRkNDM0M4Nzky NTBGNjM1MTY1NEFGRTJFRDEzN0VFRDcxRENBQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3MURD QUNBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlZWEwOGMtM2ZkMi00ODhlLWE1 NzQtOWY5YmI2MzFhNjJiLzAvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdF RUQ3MURDQUNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6CjsRbWZRPFoYWroIAVFqslyPZ6fmX4mK1 DBZdE6u5Bi/VBNdCpgCGHOG/BQtudIy2mmFs1iZiqiu7UvWJNzp8JE8BFEnrVAwi tYYluPpCR4HZxCrA8v9EdDyIyOftPSuz6C+MZOrm/0ZFWIE46Gz5bdKqtRr4VPIw y4zA3TqR04XT6e+witM332uk7XQjQ/L1/+KXHGEGs6Xcx5cPzIoKvf1p0u7OlhqS Z5gSGlqAgh019c/1eIu7516Nga7PK34XsUmvbkh24tSrs0RrbALe+7M8Nd/2CLOG y/MPENxwWewpJufM3OTEXjonTCDKFNbADSNsnCmBhLIB99SHOpA= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org