$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft File: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft (raw, json) Hash identifier: uJqVWaB7Cdb44Y69i/xbRWN8FqhepKEOkZdi00JGThA= Subject key identifier: 81:0C:5C:4E:32:FF:E2:58:A7:C9:97:C4:73:4E:AF:02:C6:EF:F9:87 Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Certificate serial: 125D2715554350D39D14518F0848E87645C0A5DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft Manifest number: 0485 Signing time: Fri 22 Nov 2024 07:51:05 +0000 Manifest this update: Fri 22 Nov 2024 07:46:05 +0000 Manifest next update: Mon 25 Nov 2024 09:50:05 +0000 Files and hashes: 1: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: W5YLdWhnOdLeAXEY1MixBlpWbhGhQrghXBcYMuYDx9E=) 2: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl (hash: Nv8hi51Xwi1XKJm6Snd9BTCGDpog0+BQy3Bh7Jl+090=) 3: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: 2xjLAoUthqLolTYw8fUKOsWqs/c7S8uY9JLSigkrYUk=) 4: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: EwNPctz3GEA8b4HEhWJU+9J961tRLY7I9c2qIR6c9pU=) 5: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: i0k8diaTpdGEA+1RnifMXA8toR7ceP46n+4PEFdgPCI=) 6: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: 4bch934Vv2mVexj5yORxeulNe94hD9yd+8wpN2L0zkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5d:27:15:55:43:50:d3:9d:14:51:8f:08:48:e8:76:45:c0:a5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Validity Not Before: Nov 22 07:46:05 2024 GMT Not After : Nov 25 09:50:05 2024 GMT Subject: CN=810C5C4E32FFE258A7C997C4734EAF02C6EFF987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:44:a0:27:b0:70:f5:fc:ad:92:8e:2b:a4: 87:12:e5:92:67:58:bc:e7:42:c3:fd:ae:55:f2:01: b9:ca:f1:7a:ac:10:0c:d5:77:bb:6e:7a:75:ab:3d: da:bc:a1:f8:83:77:b1:80:a9:55:73:54:6d:38:cc: 5f:f6:56:2d:8c:1f:e0:db:d9:79:01:5e:dd:8c:53: 31:32:c2:31:a9:1d:b4:15:61:25:9e:4f:7e:0f:40: b1:29:7f:94:da:cc:30:fb:d9:35:51:8e:ee:e5:04: f0:64:19:ea:43:ae:7e:62:3d:fd:5e:12:62:6d:4d: de:0f:81:e5:ff:64:b1:72:23:bc:93:4c:f3:b5:c7: 76:fa:19:a8:46:dc:59:40:44:be:ec:d0:af:72:4e: 79:07:9c:56:e1:5e:16:8d:0a:0a:e6:cd:15:cf:ce: 7c:4c:8e:d1:e4:ca:4e:1c:01:2a:aa:b0:aa:10:7b: cf:41:9b:af:8a:61:09:4d:f1:97:3c:31:e4:de:80: d2:7c:7e:f5:91:8c:00:0f:1e:b2:ea:1f:59:1a:3e: 1f:f7:e1:52:1d:d3:66:d0:c7:6c:4d:66:cf:f8:26: c8:80:13:ad:c9:44:49:b6:b4:f1:9f:b6:b9:09:b7: d0:85:c8:4c:e8:ae:43:4e:1b:93:d5:f4:f6:17:79: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0C:5C:4E:32:FF:E2:58:A7:C9:97:C4:73:4E:AF:02:C6:EF:F9:87 X509v3 Authority Key Identifier: keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1e:ff:5e:4b:37:b5:9d:ae:c0:03:50:99:e0:f1:9a:1c:76: e0:3b:e4:87:27:43:5d:01:28:de:79:c8:76:46:ec:11:ca:8a: 6c:83:3c:a3:3a:17:3f:78:72:71:7b:3f:e2:7c:72:a6:e7:ee: bd:69:75:16:5d:e8:5e:f9:be:18:7e:7f:ec:9c:ab:e3:75:dd: 90:c9:73:1b:df:97:ad:c2:70:7d:6f:35:d4:ad:c6:a4:ce:f7: 32:df:f1:49:5e:9b:cb:4c:a8:6a:a0:08:cc:62:0b:22:0a:4b: 9f:64:8a:69:03:92:76:33:0b:eb:7b:06:b7:6d:f8:40:0c:b5: dd:c3:1c:0e:02:8d:1d:ce:a5:6c:b3:fc:7a:8b:4e:54:65:26: b1:3c:25:d8:8f:45:1d:49:8d:50:aa:3b:b6:3e:bd:44:d8:2f: 5d:e2:fb:4e:d8:4e:da:0f:ef:44:02:31:97:5b:0c:29:15:5d: 06:a3:42:28:3a:19:2e:95:0a:06:6a:1e:9c:0a:5d:f4:f9:90: 54:d9:36:99:30:35:42:7c:f6:2a:99:3b:e0:5a:9b:7f:5c:22: 76:b4:e0:6f:ac:b7:90:8b:8b:ad:d7:01:85:c0:0e:6a:b8:ae: 4b:b7:56:73:b9:d6:93:0f:97:1c:50:d0:bb:e7:67:fb:a4:dc: e0:0c:01:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEl0nFVVDUNOdFFGPCEjodkXApd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1 MDU3QUNFNTAeFw0yNDExMjIwNzQ2MDVaFw0yNDExMjUwOTUwMDVaMDMxMTAvBgNV BAMTKDgxMEM1QzRFMzJGRkUyNThBN0M5OTdDNDczNEVBRjAyQzZFRkY5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmUSgJ7Bw9fytko4rpIcS5ZJn WLznQsP9rlXyAbnK8XqsEAzVd7tuenWrPdq8ofiDd7GAqVVzVG04zF/2Vi2MH+Db 2XkBXt2MUzEywjGpHbQVYSWeT34PQLEpf5TazDD72TVRju7lBPBkGepDrn5iPf1e EmJtTd4PgeX/ZLFyI7yTTPO1x3b6GahG3FlARL7s0K9yTnkHnFbhXhaNCgrmzRXP znxMjtHkyk4cASqqsKoQe89Bm6+KYQlN8Zc8MeTegNJ8fvWRjAAPHrLqH1kaPh/3 4VId02bQx2xNZs/4JsiAE63JREm2tPGftrkJt9CFyEzorkNOG5PV9PYXeSYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgQxcTjL/4linyZfEc06vAsbv+YcwHwYDVR0j BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2 RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3 QUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdjZDY4ZjQtNjlhNS00NzVmLWFl ZTQtM2VmNGI4ZDMwMmRkLzAvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3 QkM1MDU3QUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKse/15LN7WdrsADUJng8ZocduA75IcnQ10B KN55yHZG7BHKimyDPKM6Fz94cnF7P+J8cqbn7r1pdRZd6F75vhh+f+ycq+N13ZDJ cxvfl63CcH1vNdStxqTO9zLf8Ulem8tMqGqgCMxiCyIKS59kimkDknYzC+t7Brdt +EAMtd3DHA4CjR3OpWyz/HqLTlRlJrE8JdiPRR1JjVCqO7Y+vUTYL13i+07YTtoP 70QCMZdbDCkVXQajQig6GS6VCgZqHpwKXfT5kFTZNpkwNUJ89iqZO+Bam39cIna0 4G+st5CLi63XAYXADmq4rku3VnO51pMPlxxQ0LvnZ/uk3OAMAcI= -----END CERTIFICATE-----Generated at Fri Nov 22 09:29:43 2024 by rpki-client on console-fra.rpki-client.org