$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: SZHpH6/nGGQF70I1q445QzOT8qETvqZbUjMkly7gL0E= Subject key identifier: 75:49:60:3A:0B:67:B1:B0:6C:07:B2:D5:2B:BD:5B:62:1B:97:52:78 Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 138775BDFC8A8FF402D93A565A1878DD473027BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: 3B Signing time: Fri 27 Sep 2024 21:51:06 +0000 Manifest this update: Fri 27 Sep 2024 21:46:06 +0000 Manifest next update: Tue 01 Oct 2024 04:45:06 +0000 Files and hashes: 1: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: nvbZjZ+huqXbS/JKyuHhEMF7xo3c9QbThk8AtkhBVWw=) 2: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: r8fLesmFkRnmjh3JTXGMPG85JJ/2mDQiedE9E440qUg=) 3: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: 0a5X5+pMLYP7M6RSVDhEjNb2RIf6WIedAG9R4G/lXSw=) 4: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: RX5AFQf1N0hrSKSfhIOWzMoZVZ8ufQKdXMlbaXBrIJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 10:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:87:75:bd:fc:8a:8f:f4:02:d9:3a:56:5a:18:78:dd:47:30:27:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Sep 27 21:46:06 2024 GMT Not After : Oct 1 04:45:06 2024 GMT Subject: CN=7549603A0B67B1B06C07B2D52BBD5B621B975278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:07:51:20:6c:ad:03:d3:c3:ef:75:2a:91: 6a:02:ce:d1:7b:26:56:c9:a8:21:6e:c2:22:d3:73: 98:f5:a2:b0:b3:ba:47:eb:68:75:99:30:21:66:4e: 0e:a9:82:b5:ed:37:74:80:86:e8:60:f6:05:70:b2: 2d:16:9a:b4:ef:f6:f4:42:83:3b:a4:8a:0a:10:9f: b6:46:23:56:0a:29:e7:10:51:23:31:f7:6a:c9:25: 6d:20:34:aa:ca:d8:2c:77:3d:c9:83:63:63:d1:7c: fe:6b:cb:6d:55:8e:0d:1d:43:3a:55:97:33:72:22: b3:fa:3f:2b:4b:69:a8:e1:5e:77:d5:f5:80:ea:53: 7b:3d:cc:53:18:9f:81:dc:23:0c:0b:fb:61:cd:11: 64:19:0b:35:91:58:d1:74:6b:14:31:59:1f:42:23: a1:1c:9e:1b:bd:97:b7:39:fb:ad:fa:28:e3:b6:88: e1:9c:79:d9:35:c5:c0:39:23:27:d0:26:bf:fe:cc: b9:2d:c5:2f:b2:31:5a:52:e0:8c:93:31:b1:0e:5c: 45:94:bb:84:b5:2a:4f:6b:d5:58:2d:a5:24:39:d2: 83:12:f8:e9:f4:9e:80:97:08:bd:9b:99:28:fd:b7: 27:56:2c:88:bb:a9:bd:bf:96:14:23:a9:9e:01:23: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:49:60:3A:0B:67:B1:B0:6C:07:B2:D5:2B:BD:5B:62:1B:97:52:78 X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:71:60:5a:b6:74:64:27:2a:44:6d:a8:fa:58:c1:a4:b7:c4: de:4d:95:3c:18:07:7e:21:dd:c7:25:6c:12:3c:ec:30:5b:74: 5a:d9:52:10:c6:29:df:94:b7:37:5b:c3:af:47:80:40:24:f1: 9e:4f:99:95:87:0d:64:c8:5d:8e:ab:15:1a:2e:b2:80:c4:2c: 4f:17:1b:85:21:6b:ed:4b:86:04:ef:be:1c:98:77:7b:9c:b9: 3b:de:47:24:90:e7:a6:7a:c4:c2:c3:5a:ad:d8:4a:f8:cd:80: 98:c6:3c:8a:22:d1:49:60:7e:36:b8:5e:30:22:63:58:e3:1b: 22:60:5c:7c:46:f5:b4:8b:4e:d7:87:11:e9:a8:35:88:2b:b7: 89:ca:03:61:14:2e:75:7c:8d:fc:39:1c:7a:35:2d:b4:58:cc: 83:15:f1:67:11:2e:20:82:8f:29:bf:a2:b8:98:88:67:ae:43: 22:69:4c:7b:11:36:32:ce:e8:d4:20:09:42:9e:38:5e:f2:78: 32:43:f2:86:77:44:19:d6:6f:80:13:74:23:f7:0b:2e:cc:98: a9:36:8d:ca:be:2c:9a:47:5f:49:2f:23:79:6c:6c:52:79:22: 8e:1f:5f:eb:e1:19:dd:89:8a:27:a6:d4:30:04:cb:87:60:1f: 4f:34:76:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4d1vfyKj/QC2TpWWhh43UcwJ70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNDA5MjcyMTQ2MDZaFw0yNDEwMDEwNDQ1MDZaMDMxMTAvBgNV BAMTKDc1NDk2MDNBMEI2N0IxQjA2QzA3QjJENTJCQkQ1QjYyMUI5NzUyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0DAdRIGytA9PD73UqkWoCztF7 JlbJqCFuwiLTc5j1orCzukfraHWZMCFmTg6pgrXtN3SAhuhg9gVwsi0WmrTv9vRC gzukigoQn7ZGI1YKKecQUSMx92rJJW0gNKrK2Cx3PcmDY2PRfP5ry21Vjg0dQzpV lzNyIrP6PytLaajhXnfV9YDqU3s9zFMYn4HcIwwL+2HNEWQZCzWRWNF0axQxWR9C I6Ecnhu9l7c5+636KOO2iOGcedk1xcA5IyfQJr/+zLktxS+yMVpS4IyTMbEOXEWU u4S1Kk9r1VgtpSQ50oMS+On0noCXCL2bmSj9tydWLIi7qb2/lhQjqZ4BI6m3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdUlgOgtnsbBsB7LVK71bYhuXUngwHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItxYFq2dGQnKkRtqPpYwaS3xN5NlTwYB34h 3cclbBI87DBbdFrZUhDGKd+Utzdbw69HgEAk8Z5PmZWHDWTIXY6rFRousoDELE8X G4Uha+1LhgTvvhyYd3ucuTveRySQ56Z6xMLDWq3YSvjNgJjGPIoi0Ulgfja4XjAi Y1jjGyJgXHxG9bSLTteHEemoNYgrt4nKA2EULnV8jfw5HHo1LbRYzIMV8WcRLiCC jym/oriYiGeuQyJpTHsRNjLO6NQgCUKeOF7yeDJD8oZ3RBnWb4ATdCP3Cy7MmKk2 jcq+LJpHX0kvI3lsbFJ5Io4fX+vhGd2Jiiem1DAEy4dgH080dl0= -----END CERTIFICATE-----Generated at Fri Sep 27 23:26:14 2024 by rpki-client on console-fra.rpki-client.org