$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: A3WZI9EMh0O5EJmsS1kO55SIQvv1jIIx1PNB6uSd9+0= Subject key identifier: 1A:03:DC:93:93:80:A7:C9:07:F0:27:56:92:6E:35:7F:95:84:12:6C Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 6053D3636326B14C94C7ED1E5FAC94B55202600D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: 55 Signing time: Mon 25 Nov 2024 12:21:16 +0000 Manifest this update: Mon 25 Nov 2024 12:16:16 +0000 Manifest next update: Thu 28 Nov 2024 12:31:16 +0000 Files and hashes: 1: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: r8fLesmFkRnmjh3JTXGMPG85JJ/2mDQiedE9E440qUg=) 2: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: jypZ2jGmtR1JvwhS/wevDDeo9t55XqoB0lvNvX3N1z8=) 3: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: nvbZjZ+huqXbS/JKyuHhEMF7xo3c9QbThk8AtkhBVWw=) 4: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: RX5AFQf1N0hrSKSfhIOWzMoZVZ8ufQKdXMlbaXBrIJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 12:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:53:d3:63:63:26:b1:4c:94:c7:ed:1e:5f:ac:94:b5:52:02:60:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Nov 25 12:16:16 2024 GMT Not After : Nov 28 12:31:16 2024 GMT Subject: CN=1A03DC939380A7C907F02756926E357F9584126C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:33:9e:10:29:2f:ba:74:46:54:ff:00:2c: 02:91:46:90:3b:19:3a:b4:47:2d:f3:c8:a0:70:e0: a8:f6:02:11:17:42:82:09:61:c0:85:1a:a7:ae:1d: e1:9c:ae:fa:69:96:06:e9:67:cb:03:c9:ee:79:87: 0a:28:4c:7d:32:5b:ed:0f:e3:c8:63:51:53:3f:93: f8:45:f9:2e:f2:e0:b5:48:fb:c7:bc:e5:6e:50:57: a3:0c:5f:db:ad:92:c2:89:aa:57:56:4f:3a:8b:12: 55:bc:67:90:8b:22:bc:a4:4f:20:d6:90:5a:f3:89: c3:6c:df:09:42:06:06:aa:56:7d:68:d0:6e:07:27: 3c:ad:72:18:a2:2e:eb:e3:84:b2:66:90:77:2c:0e: e8:2b:56:3e:6b:04:39:9b:94:ad:bf:a2:6b:82:51: 89:35:08:9c:0c:27:b5:74:55:e3:75:2b:8f:f0:6f: 8d:0e:06:35:b8:35:bc:b4:35:33:8d:c6:7e:09:93: c5:73:5a:23:54:7f:fa:ea:a9:3f:60:23:7e:79:27: a2:84:6d:75:b1:96:d2:75:79:5b:02:ed:84:32:de: 9c:a8:60:2b:e8:cc:df:80:60:c8:3e:0f:77:d5:42: 27:0c:e8:0d:b9:e0:9e:d4:ca:7d:89:1f:56:67:b6: b6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:03:DC:93:93:80:A7:C9:07:F0:27:56:92:6E:35:7F:95:84:12:6C X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e1:ae:03:45:45:36:bf:c2:05:13:3b:34:aa:09:d1:fa:c3: 37:5c:52:56:43:18:4c:24:3c:7c:91:ed:10:2a:89:f3:4d:28: 56:78:c4:53:47:81:7c:02:f8:20:af:6f:8d:d4:ad:1b:8f:b2: 08:93:ec:e4:c3:42:e9:9e:71:30:e0:61:26:18:dc:51:07:1b: 90:07:2b:3c:f7:97:cb:d1:72:11:f4:65:46:fa:ab:8a:e8:bd: 85:95:d9:d1:ab:4b:a9:d2:d3:81:63:26:bf:18:92:58:ec:66: 1b:4b:f9:72:c7:fc:1b:19:03:60:45:e9:80:08:7c:1c:8c:8f: 58:bc:df:24:b4:b7:6a:2b:0c:fd:02:17:79:56:f4:aa:8f:1f: e9:b6:b1:ad:a2:07:8a:15:f4:26:e4:06:61:83:1a:ac:c4:61: cb:69:83:62:78:a0:ba:d3:7c:9b:a7:e5:d8:77:c2:1e:cc:43: 6f:1d:3c:00:4e:9d:43:30:75:14:1b:5f:9a:92:ba:db:34:46: b2:5b:63:f8:fa:03:fb:4d:f8:1d:d2:b0:e1:5a:8e:88:4b:72: b9:10:0f:d7:1b:7d:db:52:c5:e1:d9:ed:b2:81:ec:a5:f4:c6: 40:8a:fe:2a:a7:d4:17:51:02:d3:36:d8:de:f4:41:22:2d:68: d0:2f:ea:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFPTY2MmsUyUx+0eX6yUtVICYA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNDExMjUxMjE2MTZaFw0yNDExMjgxMjMxMTZaMDMxMTAvBgNV BAMTKDFBMDNEQzkzOTM4MEE3QzkwN0YwMjc1NjkyNkUzNTdGOTU4NDEyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWTOeECkvunRGVP8ALAKRRpA7 GTq0Ry3zyKBw4Kj2AhEXQoIJYcCFGqeuHeGcrvpplgbpZ8sDye55hwooTH0yW+0P 48hjUVM/k/hF+S7y4LVI+8e85W5QV6MMX9utksKJqldWTzqLElW8Z5CLIrykTyDW kFrzicNs3wlCBgaqVn1o0G4HJzytchiiLuvjhLJmkHcsDugrVj5rBDmblK2/omuC UYk1CJwMJ7V0VeN1K4/wb40OBjW4Nby0NTONxn4Jk8VzWiNUf/rqqT9gI355J6KE bXWxltJ1eVsC7YQy3pyoYCvozN+AYMg+D3fVQicM6A254J7Uyn2JH1ZntraDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGgPck5OAp8kH8CdWkm41f5WEEmwwHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPhrgNFRTa/wgUTOzSqCdH6wzdcUlZDGEwk PHyR7RAqifNNKFZ4xFNHgXwC+CCvb43UrRuPsgiT7OTDQumecTDgYSYY3FEHG5AH Kzz3l8vRchH0ZUb6q4rovYWV2dGrS6nS04FjJr8YkljsZhtL+XLH/BsZA2BF6YAI fByMj1i83yS0t2orDP0CF3lW9KqPH+m2sa2iB4oV9CbkBmGDGqzEYctpg2J4oLrT fJun5dh3wh7MQ28dPABOnUMwdRQbX5qSuts0RrJbY/j6A/tN+B3SsOFajohLcrkQ D9cbfdtSxeHZ7bKB7KX0xkCK/iqn1BdRAtM22N70QSItaNAv6oc= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org