$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: 2KpVezC/uKKV57r/aVrkOjQ0k6b7oLXo42kDllFGBJk= Subject key identifier: 99:BA:BC:62:6A:10:B6:56:A1:00:73:0B:46:26:5A:4A:3C:58:3D:D5 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 48761BE52A36A5EAA6CD2AC363588DFA59A989FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: 46 Signing time: Mon 25 Nov 2024 16:20:37 +0000 Manifest this update: Mon 25 Nov 2024 16:15:37 +0000 Manifest next update: Thu 28 Nov 2024 17:40:37 +0000 Files and hashes: 1: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: m+35hyOj2Nnoj6pj71T7+3XP5y/lbF8MsVayMmQM9SM=) 2: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: S37RXDSRwFckaVAXXa2L/pmaBR5uDTckFqN12JhVmHQ=) 3: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: oFpzvK/Po5EcbGA/2a5hh8S0BSXSuROMsPqn6lKBhiU=) 4: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: xyD3jbPTr9K9B49whNUkbJF3Q4OvFFoAIwwuGmcGsPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 17:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:76:1b:e5:2a:36:a5:ea:a6:cd:2a:c3:63:58:8d:fa:59:a9:89:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Nov 25 16:15:37 2024 GMT Not After : Nov 28 17:40:37 2024 GMT Subject: CN=99BABC626A10B656A100730B46265A4A3C583DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:2a:c6:0a:4d:4d:01:c6:65:ef:0f:79:30: eb:df:c5:62:ef:34:3b:0c:70:4c:42:1d:df:5d:ba: ea:6f:7b:26:a8:53:b9:a4:74:f2:45:59:39:ae:f8: 37:bb:c0:09:00:c0:df:4f:64:d7:0e:20:1a:ea:e4: 80:71:e9:0b:2f:33:0d:f7:83:5e:08:7e:43:7f:1e: e1:2c:ce:90:d7:a4:b3:13:d3:33:59:fa:b4:21:6f: ad:c2:00:24:f8:90:f4:76:3a:2c:48:ef:f2:e8:6b: ca:ec:50:02:4b:fe:e8:e6:81:66:57:b2:41:e7:2b: 6b:b7:35:17:19:72:8c:a3:d2:e6:93:4a:40:a3:07: f6:24:ab:1a:0f:9f:2d:a5:a9:50:c7:98:68:06:ef: b5:fd:b1:56:4f:4c:87:20:9f:83:9c:b6:96:4e:62: 28:50:fe:6a:18:ec:2b:71:ae:21:b4:f9:6e:51:32: 9e:f3:fb:49:7d:11:b0:e1:46:0f:84:4c:e8:ef:13: 07:d2:40:32:04:2d:4e:4d:8b:b3:76:b6:fe:49:c6: 37:ad:26:7e:c4:60:28:75:24:63:44:fb:9d:e2:cb: 36:91:1e:83:ac:69:eb:0b:ed:41:8f:fc:01:00:a2: 9d:ba:17:7b:79:49:94:0c:6f:66:99:6a:02:4c:de: b7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BA:BC:62:6A:10:B6:56:A1:00:73:0B:46:26:5A:4A:3C:58:3D:D5 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:52:05:af:22:03:c2:f5:ec:e9:d7:e4:ae:a4:a2:c1:0e:09: 57:9e:63:7b:24:27:52:55:28:55:4a:2a:5c:96:a7:9e:da:bb: da:4a:c7:f4:f5:0c:81:7c:53:fa:5b:25:26:0a:c3:41:a9:1a: 6d:49:f0:f3:3c:a9:99:2b:3c:22:77:a3:b8:34:0c:18:f0:d5: 0d:d0:66:2b:6a:ab:0f:b0:81:8e:f9:ba:6f:a3:25:32:09:d6: ae:f3:c6:33:77:1b:21:ec:28:61:5c:3a:34:d1:f7:af:6a:2a: 74:79:1b:ab:12:d1:f7:09:1f:7b:40:d7:5c:c1:67:4d:90:ef: d8:fd:6e:98:e8:59:9e:53:39:5e:fb:1f:37:3a:b4:cf:a6:ad: bb:fb:15:98:73:82:75:29:a3:74:c8:90:b1:ab:01:f7:4c:da: 77:8b:6a:9e:bf:92:02:7c:ca:70:51:d7:cf:c7:d0:4e:df:52: e9:bd:d2:43:fd:f5:1c:87:91:1a:d9:a5:63:c8:70:98:35:0c: 80:cc:e6:00:31:e0:e1:3c:9a:9a:c3:6a:4f:41:97:e0:07:b3: de:aa:69:7b:1f:5e:03:7e:67:a2:29:ac:f7:62:79:da:9b:7f: 60:da:bd:df:03:d3:ce:f6:52:2e:70:ca:75:36:70:4b:a9:42: 2a:8f:2e:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHYb5So2peqmzSrDY1iN+lmpif4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNDExMjUxNjE1MzdaFw0yNDExMjgxNzQwMzdaMDMxMTAvBgNV BAMTKDk5QkFCQzYyNkExMEI2NTZBMTAwNzMwQjQ2MjY1QTRBM0M1ODNERDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dCrGCk1NAcZl7w95MOvfxWLv NDsMcExCHd9duupveyaoU7mkdPJFWTmu+De7wAkAwN9PZNcOIBrq5IBx6QsvMw33 g14IfkN/HuEszpDXpLMT0zNZ+rQhb63CACT4kPR2OixI7/Loa8rsUAJL/ujmgWZX skHnK2u3NRcZcoyj0uaTSkCjB/YkqxoPny2lqVDHmGgG77X9sVZPTIcgn4OctpZO YihQ/moY7CtxriG0+W5RMp7z+0l9EbDhRg+ETOjvEwfSQDIELU5Ni7N2tv5Jxjet Jn7EYCh1JGNE+53iyzaRHoOsaesL7UGP/AEAop26F3t5SZQMb2aZagJM3rdRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmbq8YmoQtlahAHMLRiZaSjxYPdUwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFSBa8iA8L17OnX5K6kosEOCVeeY3skJ1JV KFVKKlyWp57au9pKx/T1DIF8U/pbJSYKw0GpGm1J8PM8qZkrPCJ3o7g0DBjw1Q3Q Zitqqw+wgY75um+jJTIJ1q7zxjN3GyHsKGFcOjTR969qKnR5G6sS0fcJH3tA11zB Z02Q79j9bpjoWZ5TOV77Hzc6tM+mrbv7FZhzgnUpo3TIkLGrAfdM2neLap6/kgJ8 ynBR18/H0E7fUum90kP99RyHkRrZpWPIcJg1DIDM5gAx4OE8mprDak9Bl+AHs96q aXsfXgN+Z6IprPdiedqbf2Davd8D0872Ui5wynU2cEupQiqPLsA= -----END CERTIFICATE-----Generated at Mon Nov 25 17:55:29 2024 by rpki-client on console-fra.rpki-client.org