$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: PH3Qwfz/47wXF1wZgVB3WZu8kB2m5dTo7rstT9gv9Ss= Subject key identifier: BB:C2:C6:7B:46:5D:7C:16:59:0A:60:59:E8:80:9F:CA:D1:71:37:50 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 406031A05C87843426533A1D2F23D3F89402C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0486 Signing time: Fri 22 Nov 2024 16:51:10 +0000 Manifest this update: Fri 22 Nov 2024 16:46:10 +0000 Manifest next update: Mon 25 Nov 2024 20:05:10 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: JrTA8afK2n1L33dQO9//qwiVueSvsY8BHaaEpxhw9/4=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: 4qq8fLLMpC72S9jYa5StA0Il3fRAmw80WmOq9dK/H2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:60:31:a0:5c:87:84:34:26:53:3a:1d:2f:23:d3:f8:94:02:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Nov 22 16:46:10 2024 GMT Not After : Nov 25 20:05:10 2024 GMT Subject: CN=BBC2C67B465D7C16590A6059E8809FCAD1713750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:a0:a5:92:7c:b6:b1:96:90:c0:39:56:bf: d8:d2:11:fa:6d:b7:8e:d8:89:a1:3d:5b:7d:47:f8: 67:c7:ac:8b:e6:20:a2:42:91:2e:63:af:50:66:68: e9:cf:a9:48:19:e4:59:a8:15:27:6e:b5:da:fc:0d: ed:07:f0:b4:14:4c:10:9d:11:07:68:29:60:05:f7: 58:54:dd:dc:77:ea:5a:ff:68:12:4f:ce:2d:66:da: 85:a3:14:37:b7:71:cc:76:81:2b:8c:94:6f:93:93: f3:19:d3:32:88:e3:bb:fc:4d:3f:d0:b1:5b:66:83: b6:62:90:57:85:fc:ec:74:4d:82:e0:7a:aa:a0:a7: a3:88:27:e9:9c:4b:4a:0c:6c:de:35:6b:dd:4e:64: 7e:55:8f:32:be:88:06:e9:70:2c:6b:d1:35:3f:a5: a6:39:31:b5:01:bf:9b:62:3d:bc:34:c2:8e:2b:7a: 43:28:e6:18:e5:9a:27:7a:e1:37:a0:66:73:56:43: 98:3c:24:e7:5f:0f:60:dd:64:98:e1:20:d2:65:9c: c1:e4:ad:24:bd:fb:a2:5e:e4:54:e6:68:8f:ab:a4: 87:35:d9:7a:40:09:a8:3b:12:32:9c:b8:af:71:67: da:93:19:81:ac:a5:43:12:1e:35:49:c3:32:f5:97: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C2:C6:7B:46:5D:7C:16:59:0A:60:59:E8:80:9F:CA:D1:71:37:50 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ac:da:8b:fe:81:21:e0:1d:bf:93:5c:9f:78:ec:46:7d:05: 5c:43:62:6d:93:89:bf:d5:66:17:a0:35:b1:89:44:e6:1f:28: 3b:c3:a4:f5:40:f9:e2:cb:fc:af:2f:19:7b:1a:28:0f:75:f9: 84:65:42:98:cf:5c:2a:22:41:24:9b:05:44:a1:fd:7e:d4:96: ca:fb:77:8e:cf:91:d2:71:ed:9f:4e:50:05:c0:a7:5d:58:8f: 80:b3:52:f8:06:89:f1:47:2f:c1:d7:e9:42:8b:25:e0:fc:f8: 8d:cd:65:40:5b:53:5f:d2:47:d3:35:0c:87:b4:9e:20:87:06: 8d:7a:43:4a:09:9c:da:48:46:fd:ca:41:c6:27:6a:ae:fd:98: 00:19:47:3d:2e:85:eb:0d:0a:1b:4a:7c:2c:a5:c3:08:fa:3f: 7f:53:2f:42:47:94:86:82:8e:48:0e:e0:f9:3f:77:30:63:9e: 19:b0:fb:32:71:11:bf:d6:4a:0d:6c:f5:fd:4e:51:dd:d2:16: 36:e8:0d:13:26:45:83:0b:47:92:3f:b4:c8:03:46:aa:01:7d: 1d:f9:db:c3:fb:b9:56:5c:36:fb:85:e5:d8:4d:cd:40:f7:4e: 1f:b9:7c:53:5e:f2:14:4f:72:16:a2:34:6b:60:41:6f:9c:ab: 21:ce:b0:38 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQGAxoFyHhDQmUzodLyPT+JQCxDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0OTBBMDZCMjBGNjE5MjU2OEYxRkU3NUY4QTM5RkNFN0Uy QUM4N0Y1MB4XDTI0MTEyMjE2NDYxMFoXDTI0MTEyNTIwMDUxMFowMzExMC8GA1UE AxMoQkJDMkM2N0I0NjVEN0MxNjU5MEE2MDU5RTg4MDlGQ0FEMTcxMzc1MDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALKBoKWSfLaxlpDAOVa/2NIR+m23 jtiJoT1bfUf4Z8esi+YgokKRLmOvUGZo6c+pSBnkWagVJ2612vwN7QfwtBRMEJ0R B2gpYAX3WFTd3HfqWv9oEk/OLWbahaMUN7dxzHaBK4yUb5OT8xnTMojju/xNP9Cx W2aDtmKQV4X87HRNguB6qqCno4gn6ZxLSgxs3jVr3U5kflWPMr6IBulwLGvRNT+l pjkxtQG/m2I9vDTCjit6QyjmGOWaJ3rhN6Bmc1ZDmDwk518PYN1kmOEg0mWcweSt JL37ol7kVOZoj6ukhzXZekAJqDsSMpy4r3Fn2pMZgaylQxIeNUnDMvWXoKkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBS7wsZ7Rl18FlkKYFnogJ/K0XE3UDAfBgNVHSME GDAWgBRJCgayD2GSVo8f51+KOfzn4qyH9TAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZh YWMzNTYyLWQ1NDktNDNjZS04NTFmLWZlOTI0NzI3ZjkxOC8wLzQ5MEEwNkIyMEY2 MTkyNTY4RjFGRTc1RjhBMzlGQ0U3RTJBQzg3RjUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi80OTBBMDZCMjBGNjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4 N0Y1LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82YWFjMzU2Mi1kNTQ5LTQzY2UtODUx Zi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBGNjE5MjU2OEYxRkU3NUY4QTM5RkNF N0UyQUM4N0Y1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAFKzai/6BIeAdv5Ncn3jsRn0FXENibZOJv9Vm F6A1sYlE5h8oO8Ok9UD54sv8ry8ZexooD3X5hGVCmM9cKiJBJJsFRKH9ftSWyvt3 js+R0nHtn05QBcCnXViPgLNS+AaJ8UcvwdfpQosl4Pz4jc1lQFtTX9JH0zUMh7Se IIcGjXpDSgmc2khG/cpBxidqrv2YABlHPS6F6w0KG0p8LKXDCPo/f1MvQkeUhoKO SA7g+T93MGOeGbD7MnERv9ZKDWz1/U5R3dIWNugNEyZFgwtHkj+0yANGqgF9Hfnb w/u5Vlw2+4Xl2E3NQPdOH7l8U17yFE9yFqI0a2BBb5yrIc6wOA== -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org