$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: kTg74sA4tmTB9l3Q0h0H4dX6mfJpYQb1kSMW/ew7O4E= Subject key identifier: 37:1F:5F:A6:16:DE:AC:69:14:E0:48:0F:21:69:0A:3C:6C:CB:D5:A6 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 0AE2FB29559AFC20D4519CD7C59FC880BCB9E42A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 0161 Signing time: Sun 24 Nov 2024 23:51:04 +0000 Manifest this update: Sun 24 Nov 2024 23:46:04 +0000 Manifest next update: Thu 28 Nov 2024 10:18:04 +0000 Files and hashes: 1: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: FeqaP2txuOgRBx2G96zuc78OrFRr2szEz0GSYPgv878=) 2: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: rvVfeVhsLZ7fWwhIJc3Pd2GqdWdss3UfF7UYtrrPnKo=) 3: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: MUfRn9lbrp81WMx09UFWCA0kG2/2E+bxpD3Uyi4FCjU=) 4: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: iUKGVzhyTEJeEGxOC/Chk8qCSbgQUyxbtxHAcSFlfVA=) 5: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: uAd0JDcy4hpWuoEBSRUvaHCaFXVpe2sxWabbA6bZmhw=) 6: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: APvRAxFS/BciWNG05hryQjcSm8DABLzRNy+ilZSBuW8=) 7: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: XthFBucegk7FWI/QJiZYFEOny8Qu92nOz1rkv8lTJ1o=) 8: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: NOw/NEm3PMCbXTGqxWPDqyT8dJkjuZuy6Yh+EG0lwcQ=) 9: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 1P2ogrnijw2MvpVLks2hrGbS/RxvIv2H3EW9osb1JfQ=) 10: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: 6Kf9IUmzERoeZfQ7/aZzSWCZomNZD6ZE9tg84PYvtV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e2:fb:29:55:9a:fc:20:d4:51:9c:d7:c5:9f:c8:80:bc:b9:e4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Nov 24 23:46:04 2024 GMT Not After : Nov 28 10:18:04 2024 GMT Subject: CN=371F5FA616DEAC6914E0480F21690A3C6CCBD5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:66:49:ee:7d:57:96:32:cb:bc:8f:5c:24: f1:0f:3b:4f:03:eb:d4:87:fa:d0:3b:28:8d:88:1d: 5f:39:f4:93:c2:54:e8:2e:fe:9b:5c:67:81:15:a7: 64:b3:b1:cc:f0:cb:10:2b:ed:8c:3e:86:b6:61:0e: b2:be:99:ff:06:ea:aa:4f:2f:fd:b0:85:d9:08:e7: c6:e2:75:f1:8d:5f:92:48:3b:59:1c:a5:33:f8:1a: 2d:ef:35:45:e5:0c:6f:d0:9e:eb:34:47:8c:1a:0c: 68:f3:04:9c:62:24:ba:f9:7b:96:91:9a:9e:3d:28: 31:6e:1e:65:8b:94:bd:a2:02:70:d6:d3:30:8a:12: 6c:ae:61:1f:8d:98:65:2f:2b:69:d3:f5:b6:4d:52: 1f:df:8d:1c:fa:da:5c:11:84:53:30:0e:92:ef:00: b3:ac:c7:30:26:51:00:8d:5a:a1:b1:79:17:0d:d9: 9c:4e:9f:ba:04:3c:ee:45:29:4c:1a:76:39:91:fa: 6a:77:f1:0d:ad:78:3f:80:93:c9:ae:9d:3d:9b:59: e4:3d:4e:dd:92:1d:c0:d6:58:f4:f9:6c:fb:a7:74: 55:f2:88:c5:85:96:90:6f:2e:1b:52:8f:d6:51:f5: a1:24:06:a9:f4:64:b1:fc:98:0f:b6:1d:67:cd:1d: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1F:5F:A6:16:DE:AC:69:14:E0:48:0F:21:69:0A:3C:6C:CB:D5:A6 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a6:a9:8c:80:5d:cb:26:21:dd:05:51:29:f9:fe:03:5c:f4: 08:c9:a6:9b:18:ed:34:68:8f:b9:70:b0:69:f8:6a:a8:d9:73: 63:55:da:b2:80:fc:f1:38:c6:4d:1a:b2:8c:bf:53:c9:f1:75: e0:b1:af:0a:c6:c0:32:4e:fe:be:19:46:40:3f:e0:8d:df:28: 30:7c:10:35:94:15:90:fb:3e:31:96:80:5f:93:e4:c7:ad:20: c9:e7:02:38:f8:35:1e:c8:3b:e1:5d:96:74:73:90:2d:04:ac: 23:53:4c:9f:ef:47:65:ad:35:ba:93:5b:bc:e4:96:0a:69:e9: b6:87:b1:80:3e:b8:a8:87:d0:9e:50:34:3d:8c:88:58:6e:98: 12:78:3f:2e:65:48:1e:38:ca:61:de:cc:87:e9:2d:68:d0:f3: 0b:bf:a9:72:69:60:20:8f:d4:c4:10:13:ba:1a:5b:ba:7e:6f: 59:c0:e4:71:20:6b:2f:bf:e4:e5:e1:25:6b:29:9a:e1:5c:dc: 4d:d0:63:49:08:0b:17:2f:60:b2:ea:4e:09:a0:44:87:d5:c4: 92:7d:41:9e:38:8e:02:fe:52:c1:a8:86:b7:4f:35:f4:46:b5: e9:67:7a:11:24:6f:e1:81:cd:f5:f0:4f:44:43:01:0b:12:f7: 6a:61:99:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCuL7KVWa/CDUUZzXxZ/IgLy55CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNDExMjQyMzQ2MDRaFw0yNDExMjgxMDE4MDRaMDMxMTAvBgNV BAMTKDM3MUY1RkE2MTZERUFDNjkxNEUwNDgwRjIxNjkwQTNDNkNDQkQ1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIGZJ7n1XljLLvI9cJPEPO08D 69SH+tA7KI2IHV859JPCVOgu/ptcZ4EVp2SzsczwyxAr7Yw+hrZhDrK+mf8G6qpP L/2whdkI58bidfGNX5JIO1kcpTP4Gi3vNUXlDG/Qnus0R4waDGjzBJxiJLr5e5aR mp49KDFuHmWLlL2iAnDW0zCKEmyuYR+NmGUvK2nT9bZNUh/fjRz62lwRhFMwDpLv ALOsxzAmUQCNWqGxeRcN2ZxOn7oEPO5FKUwadjmR+mp38Q2teD+Ak8munT2bWeQ9 Tt2SHcDWWPT5bPundFXyiMWFlpBvLhtSj9ZR9aEkBqn0ZLH8mA+2HWfNHRT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNx9fphberGkU4EgPIWkKPGzL1aYwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+mqYyAXcsmId0FUSn5/gNc9AjJppsY7TRo j7lwsGn4aqjZc2NV2rKA/PE4xk0asoy/U8nxdeCxrwrGwDJO/r4ZRkA/4I3fKDB8 EDWUFZD7PjGWgF+T5MetIMnnAjj4NR7IO+FdlnRzkC0ErCNTTJ/vR2WtNbqTW7zk lgpp6baHsYA+uKiH0J5QND2MiFhumBJ4Py5lSB44ymHezIfpLWjQ8wu/qXJpYCCP 1MQQE7oaW7p+b1nA5HEgay+/5OXhJWspmuFc3E3QY0kICxcvYLLqTgmgRIfVxJJ9 QZ44jgL+UsGohrdPNfRGtelnehEkb+GBzfXwT0RDAQsS92phmfU= -----END CERTIFICATE-----Generated at Mon Nov 25 00:59:33 2024 by rpki-client on console-ams.rpki-client.org