$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: 9T85fIrgfp0gNZUzdmlpzgaJvdQwYAJGXCfDylVupWk= Subject key identifier: 3F:AB:D5:9B:C8:01:75:6F:C3:FD:AE:F8:58:0C:71:0B:DB:40:05:56 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 365E71E5243745D514D4330A12957CFBEE87BD18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 02A8 Signing time: Wed 20 Nov 2024 17:31:37 +0000 Manifest this update: Wed 20 Nov 2024 17:26:37 +0000 Manifest next update: Sat 23 Nov 2024 18:37:37 +0000 Files and hashes: 1: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: GaOCj9kYh7d6tsfEz6UJgMKi+nAeFQfMzv6ALo0e51A=) 2: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: kC2qM7I8hVuuQY8d0Cgq74WXRL6h6kj3VTJz5FiMr+c=) 3: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: pWlpG/Yf5dMmuqVX+D5hDzY2m+if7yFZBCfzsCshbCQ=) 4: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: QpaaW4/ZTzOjg9T2cVqZjeF6GPV2b6e7U8MFz6lRZnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:5e:71:e5:24:37:45:d5:14:d4:33:0a:12:95:7c:fb:ee:87:bd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Nov 20 17:26:37 2024 GMT Not After : Nov 23 18:37:37 2024 GMT Subject: CN=3FABD59BC801756FC3FDAEF8580C710BDB400556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:f5:48:6d:3f:c3:d1:42:f6:cf:49:91:c0: 83:72:4f:fb:2b:d8:7b:88:04:63:cf:23:52:5a:df: c4:e3:40:b9:96:82:32:dd:26:e0:f3:e1:4c:33:21: 38:ad:08:89:27:a9:ed:6e:94:3e:2b:0e:31:45:82: 91:2a:d0:55:d8:b8:9a:64:68:22:96:a8:48:a1:95: 9d:e5:62:84:23:0d:e4:e5:22:9f:ae:9a:1c:1f:5e: 6e:46:25:e7:d1:d9:fd:a7:32:7a:ad:75:b3:a8:04: cc:91:7f:db:4b:5a:aa:3d:3a:ea:be:56:07:55:52: d0:f1:c5:7e:d9:9f:25:19:ee:bd:73:cc:2d:75:5b: 5f:c5:01:b3:23:26:70:28:91:f3:ef:7c:96:0b:e8: 83:34:df:c6:43:c9:c4:02:0f:cd:43:48:cf:e2:f1: 4e:6d:db:34:bb:c5:32:c4:1a:10:3a:9b:df:56:e0: 74:ea:9e:25:44:fe:7c:43:83:02:e6:ae:27:a6:52: f4:b0:c9:df:12:ba:1b:e0:1e:a8:0c:09:73:ec:03: 91:35:c1:f4:ce:7d:0f:4a:b7:66:29:1f:10:67:03: 9b:1a:7d:25:51:35:f3:d6:78:a9:07:51:90:b6:c6: 32:e7:64:62:7d:26:58:6f:93:9c:4c:a6:5b:c0:e6: 6a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AB:D5:9B:C8:01:75:6F:C3:FD:AE:F8:58:0C:71:0B:DB:40:05:56 X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ab:4a:4d:9e:45:3d:31:a5:70:b5:c1:ed:f7:df:f4:da:65: 17:f9:33:02:2f:07:08:8f:be:79:a8:58:11:55:55:58:94:5f: 41:c9:3e:dd:c4:99:21:1a:ab:58:a6:fc:b6:83:d0:cb:fa:cf: d5:51:3d:2a:17:a8:14:0c:75:d7:d5:3d:de:ae:9b:5b:1c:fa: 16:c9:38:6f:1c:c3:a8:fe:54:6f:55:a2:4e:b4:e7:fc:4a:f1: 04:59:53:50:0f:b9:6c:23:12:15:67:8e:28:ac:fc:c9:a4:57: be:c4:73:2f:39:a3:49:11:a3:b9:97:c6:8f:2e:0b:45:6e:cc: 7a:de:e4:ea:9c:97:b1:c4:f3:72:e6:d0:b1:0e:ce:ab:b2:1d: 3c:42:5b:5b:9d:5c:56:c7:64:98:0f:c1:ac:56:04:a4:0c:f4: 11:8e:da:7a:43:bb:76:84:90:8d:95:62:90:34:ea:5e:9f:37: 19:bf:fd:cf:4b:0d:42:e4:4e:c5:77:51:fa:d7:e5:52:82:74: 38:5d:98:89:1b:f8:d3:84:00:de:bb:c8:61:16:82:f4:8c:0f: 82:0a:88:4a:71:9d:b4:9a:a5:19:24:cc:5b:ad:6e:ba:d9:14: f7:95:0a:8a:f0:15:d3:ac:71:27:80:10:9e:b8:cb:1c:ac:9a: 02:ff:7e:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNl5x5SQ3RdUU1DMKEpV8++6HvRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNDExMjAxNzI2MzdaFw0yNDExMjMxODM3MzdaMDMxMTAvBgNV BAMTKDNGQUJENTlCQzgwMTc1NkZDM0ZEQUVGODU4MEM3MTBCREI0MDA1NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJffVIbT/D0UL2z0mRwINyT/sr 2HuIBGPPI1Ja38TjQLmWgjLdJuDz4UwzITitCIknqe1ulD4rDjFFgpEq0FXYuJpk aCKWqEihlZ3lYoQjDeTlIp+umhwfXm5GJefR2f2nMnqtdbOoBMyRf9tLWqo9Ouq+ VgdVUtDxxX7ZnyUZ7r1zzC11W1/FAbMjJnAokfPvfJYL6IM038ZDycQCD81DSM/i 8U5t2zS7xTLEGhA6m99W4HTqniVE/nxDgwLmriemUvSwyd8SuhvgHqgMCXPsA5E1 wfTOfQ9Kt2YpHxBnA5safSVRNfPWeKkHUZC2xjLnZGJ9Jlhvk5xMplvA5mr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP6vVm8gBdW/D/a74WAxxC9tABVYwHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmrSk2eRT0xpXC1we333/TaZRf5MwIvBwiP vnmoWBFVVViUX0HJPt3EmSEaq1im/LaD0Mv6z9VRPSoXqBQMddfVPd6um1sc+hbJ OG8cw6j+VG9Vok605/xK8QRZU1APuWwjEhVnjiis/MmkV77Ecy85o0kRo7mXxo8u C0VuzHre5Oqcl7HE83Lm0LEOzquyHTxCW1udXFbHZJgPwaxWBKQM9BGO2npDu3aE kI2VYpA06l6fNxm//c9LDULkTsV3UfrX5VKCdDhdmIkb+NOEAN67yGEWgvSMD4IK iEpxnbSapRkkzFutbrrZFPeVCorwFdOscSeAEJ64yxysmgL/fnk= -----END CERTIFICATE-----Generated at Wed Nov 20 18:41:50 2024 by rpki-client on console-fra.rpki-client.org