$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: h91iLSw+0pHIlP4QYTb4MArG8mjf3SvWeXPjeMvGKQQ= Subject key identifier: A6:4B:A0:7D:BD:3D:6F:5F:53:E8:A6:E3:54:5D:EA:4C:1F:1E:C2:F6 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 78E44D356C9F590B9CAD7301A3C5D01D0F968357 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 0487 Signing time: Sun 24 Nov 2024 05:02:33 +0000 Manifest this update: Sun 24 Nov 2024 04:57:33 +0000 Manifest next update: Wed 27 Nov 2024 13:45:33 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: I1MqTlW3Nbk576r2Yxvip0ZNvGZvD6MB25x1BaXP3Z4=) 2: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: 9EaQ6my2UFSTe3UIpqw/ajqeK4nFYmn0MZKumuZyFvo=) 3: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e4:4d:35:6c:9f:59:0b:9c:ad:73:01:a3:c5:d0:1d:0f:96:83:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Nov 24 04:57:33 2024 GMT Not After : Nov 27 13:45:33 2024 GMT Subject: CN=A64BA07DBD3D6F5F53E8A6E3545DEA4C1F1EC2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:f9:12:b5:65:4e:61:13:46:d0:95:37:1f: 7b:9e:be:71:95:8a:d7:57:c3:09:71:55:5b:76:38: 90:ca:2f:32:2b:91:b7:4e:1e:a7:f2:aa:5d:d8:c1: 04:f3:10:fd:6a:38:c1:dd:ed:33:72:6e:c6:61:46: 6f:06:ca:e1:83:28:68:36:b9:50:6c:cd:c8:44:87: 4d:2c:c4:6e:4e:30:8b:67:40:ea:b9:91:41:8e:6a: 5c:b1:ae:f9:cf:80:23:f5:01:1c:1e:6c:73:df:af: e7:48:1a:3a:5d:3f:42:88:59:93:02:bc:5b:da:8c: 6e:73:1c:50:ab:46:c2:96:1e:ac:ea:7d:47:cb:ae: 13:d1:1b:14:ba:1f:23:5d:76:93:3e:d1:06:35:35: 0c:bd:0c:0f:6a:f5:06:cb:0e:fb:e8:83:69:9a:88: 9f:aa:8b:83:cc:d0:be:4c:9e:7c:60:98:4a:84:5b: b8:6e:52:45:0e:88:de:7d:01:ab:54:1e:65:80:78: 0f:a0:eb:ac:bb:db:8b:62:7d:a9:23:f5:ad:5b:ec: b5:97:5f:dc:12:ed:4f:20:2a:74:8a:37:98:2b:5d: 68:bc:0f:50:c6:57:7b:80:b9:e1:9d:6a:80:68:e9: dd:aa:4a:a8:c8:ad:8c:59:1f:ba:66:23:56:87:70: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4B:A0:7D:BD:3D:6F:5F:53:E8:A6:E3:54:5D:EA:4C:1F:1E:C2:F6 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:a1:ad:9c:11:0b:ab:6f:d6:7a:67:a7:c1:52:a2:8b:96:4c: a5:f1:bb:15:ca:9d:64:74:c5:d1:e8:66:72:a4:2e:8a:ae:af: ba:59:ba:8a:ee:a3:4c:d8:15:59:91:8e:91:2c:90:19:54:ba: 00:5f:24:e6:84:58:30:68:d4:38:35:cd:a9:da:6a:45:8e:6c: cb:d5:cd:1a:19:57:67:c0:3d:0c:53:7a:c1:d5:1f:cd:c6:b2: 4f:34:5b:3a:3d:91:18:30:2f:4a:73:09:b6:5f:03:64:16:8a: bc:64:ad:66:f0:b1:4e:40:f5:ad:89:e5:68:99:7d:2e:42:34: a9:57:5e:36:42:90:74:95:d7:e9:83:4b:a1:31:93:c6:fd:58: 77:19:6b:dc:6f:4f:3f:82:bb:9a:ec:29:00:ae:93:79:77:6b: 00:9c:e8:c7:14:71:cc:dc:d9:15:4e:74:4b:80:d6:97:32:c2: 8a:13:2e:70:d8:26:e3:47:ff:b0:8e:0d:46:4d:75:d0:8c:45: 2f:d7:d9:7f:e8:0c:7a:34:3b:00:56:f1:4a:86:42:02:8c:75: 81:0a:e5:ea:68:cc:32:c0:f6:f0:18:88:0b:60:e6:36:f5:f5: 6e:f8:74:1c:0c:a8:4e:f5:9d:bf:8c:9a:15:4c:7e:f2:4b:90: d5:64:66:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeORNNWyfWQucrXMBo8XQHQ+Wg1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNDExMjQwNDU3MzNaFw0yNDExMjcxMzQ1MzNaMDMxMTAvBgNV BAMTKEE2NEJBMDdEQkQzRDZGNUY1M0U4QTZFMzU0NURFQTRDMUYxRUMyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hPkStWVOYRNG0JU3H3uevnGV itdXwwlxVVt2OJDKLzIrkbdOHqfyql3YwQTzEP1qOMHd7TNybsZhRm8GyuGDKGg2 uVBszchEh00sxG5OMItnQOq5kUGOalyxrvnPgCP1ARwebHPfr+dIGjpdP0KIWZMC vFvajG5zHFCrRsKWHqzqfUfLrhPRGxS6HyNddpM+0QY1NQy9DA9q9QbLDvvog2ma iJ+qi4PM0L5MnnxgmEqEW7huUkUOiN59AatUHmWAeA+g66y724tifakj9a1b7LWX X9wS7U8gKnSKN5grXWi8D1DGV3uAueGdaoBo6d2qSqjIrYxZH7pmI1aHcP1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkugfb09b19T6KbjVF3qTB8ewvYwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANGhrZwRC6tv1npnp8FSoouWTKXxuxXKnWR0 xdHoZnKkLoqur7pZuoruo0zYFVmRjpEskBlUugBfJOaEWDBo1Dg1zanaakWObMvV zRoZV2fAPQxTesHVH83Gsk80Wzo9kRgwL0pzCbZfA2QWirxkrWbwsU5A9a2J5WiZ fS5CNKlXXjZCkHSV1+mDS6Exk8b9WHcZa9xvTz+Cu5rsKQCuk3l3awCc6McUcczc 2RVOdEuA1pcywooTLnDYJuNH/7CODUZNddCMRS/X2X/oDHo0OwBW8UqGQgKMdYEK 5epozDLA9vAYiAtg5jb19W74dBwMqE71nb+MmhVMfvJLkNVkZjk= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org