$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json) Hash identifier: +76Jaml1U5xlzvaD47Lyvp2NKJEVyIYbFexMIFwgHUs= Subject key identifier: A0:D0:73:B0:35:08:DF:DD:D5:17:A7:B2:04:3F:39:A6:FE:ED:34:67 Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Certificate serial: 55355531601A017BBC5EEDC2996B475D518BC223 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft Manifest number: 43 Signing time: Fri 22 Nov 2024 09:12:11 +0000 Manifest this update: Fri 22 Nov 2024 09:07:11 +0000 Manifest next update: Mon 25 Nov 2024 16:58:11 +0000 Files and hashes: 1: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: eIjb8zXlk+Hq0C5VFvWNwBLH/Mg4kh8ft/EYMetIWog=) 2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: s292PcC6dBIs43USme90wNYPw9OQTbk8ASa0Cok4ryc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 16:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:35:55:31:60:1a:01:7b:bc:5e:ed:c2:99:6b:47:5d:51:8b:c2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Validity Not Before: Nov 22 09:07:11 2024 GMT Not After : Nov 25 16:58:11 2024 GMT Subject: CN=A0D073B03508DFDDD517A7B2043F39A6FEED3467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:cd:c4:80:3d:a8:d4:3e:b7:46:2d:f4:65: 18:ac:ed:e6:64:f2:db:ce:60:45:79:8b:7d:e1:34: 9c:d9:b2:8c:12:8c:69:ce:8b:f6:63:d1:69:ff:9b: d1:92:33:ec:9f:d8:d3:8d:50:f7:fe:ee:61:a3:4f: 79:16:89:55:83:fa:12:ac:b4:48:0c:4b:2e:8d:d6: c9:a2:26:86:02:8e:8a:3c:27:87:2a:11:85:d3:29: f8:d3:c1:73:6f:bb:17:f6:1c:48:a6:ef:4c:df:47: b6:6e:cc:9a:d7:f2:7f:4c:e8:75:01:58:ae:ba:f6: e1:26:d1:ab:3d:80:b8:71:77:39:48:38:8c:af:d3: 89:15:b9:dc:90:58:2e:a5:c3:0c:a9:85:25:2f:7b: 1f:6b:ed:75:ca:9a:a8:14:74:68:23:13:d0:8e:6a: c9:f0:94:cf:1d:31:58:84:d1:1e:94:b9:0d:9e:7b: 66:10:ad:9d:d6:26:10:99:7a:7a:4c:13:9a:d7:6f: 52:43:72:eb:e2:b5:77:18:dc:9e:c7:3b:d7:c6:c2: 2d:6f:19:0a:1e:6d:5b:55:96:bb:d9:15:58:08:69: 68:c2:69:3e:37:f5:af:18:b6:d6:2b:cd:83:61:7e: 06:b5:9e:e5:7e:31:18:cc:f0:f6:98:60:62:77:27: 44:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D0:73:B0:35:08:DF:DD:D5:17:A7:B2:04:3F:39:A6:FE:ED:34:67 X509v3 Authority Key Identifier: keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f8:b0:83:72:0f:41:3b:8f:30:9f:45:c0:7f:6c:30:99:45: 15:62:11:7d:66:47:08:65:ae:f3:db:81:81:e0:d4:b6:3d:fa: 48:e1:ee:99:2e:5a:99:7a:93:fa:ac:3d:91:b5:27:07:06:d8: 5c:24:4f:86:9a:55:cd:76:22:22:d7:f2:a7:e0:26:c3:5e:ca: 6a:6c:be:6e:f4:d0:7d:f5:38:a9:9e:94:81:6d:8c:96:1e:07: 17:ac:4b:0d:bd:ff:2f:bf:8c:1e:67:b3:5a:8b:ff:8c:2b:16: 7d:db:96:d7:cd:be:53:0b:d7:ae:9c:a3:3b:78:8d:f5:dd:ea: 7b:e0:13:55:fd:19:3b:3e:d3:3f:6c:9c:1e:32:16:a2:da:50: 09:54:11:3e:f2:b8:7f:f9:07:f2:8d:b3:15:fb:19:a8:78:e8: 97:ba:a4:95:26:4c:c2:df:2d:8b:34:2b:c7:6f:3d:32:49:64: e6:37:af:cb:6b:ad:55:88:b0:80:b7:c2:0d:f5:2a:d6:9a:5a: bb:6e:d7:62:be:16:d1:88:d0:92:a7:b7:3b:8c:14:3d:cb:6e: e4:a5:4a:f3:43:7e:32:6f:33:ec:7b:69:08:d0:f4:ec:74:db: 73:74:3c:68:1f:1f:26:33:84:dd:c7:ab:7a:8b:84:32:e4:19: 39:07:f6:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTVVMWAaAXu8Xu3CmWtHXVGLwiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJC ODQyODlGQjAeFw0yNDExMjIwOTA3MTFaFw0yNDExMjUxNjU4MTFaMDMxMTAvBgNV BAMTKEEwRDA3M0IwMzUwOERGRERENTE3QTdCMjA0M0YzOUE2RkVFRDM0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgc3EgD2o1D63Ri30ZRis7eZk 8tvOYEV5i33hNJzZsowSjGnOi/Zj0Wn/m9GSM+yf2NONUPf+7mGjT3kWiVWD+hKs tEgMSy6N1smiJoYCjoo8J4cqEYXTKfjTwXNvuxf2HEim70zfR7ZuzJrX8n9M6HUB WK669uEm0as9gLhxdzlIOIyv04kVudyQWC6lwwyphSUvex9r7XXKmqgUdGgjE9CO asnwlM8dMViE0R6UuQ2ee2YQrZ3WJhCZenpME5rXb1JDcuvitXcY3J7HO9fGwi1v GQoebVtVlrvZFVgIaWjCaT439a8YttYrzYNhfga1nuV+MRjM8PaYYGJ3J0StAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoNBzsDUI393VF6eyBD85pv7tNGcwHwYDVR0j BBgwFoAU9Sgml25+vb+JuTpCoWguQrhCifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZF N0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJCODQy ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJF NDJCODQyODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKH4sINyD0E7jzCfRcB/bDCZRRViEX1mRwhl rvPbgYHg1LY9+kjh7pkuWpl6k/qsPZG1JwcG2FwkT4aaVc12IiLX8qfgJsNeymps vm700H31OKmelIFtjJYeBxesSw29/y+/jB5ns1qL/4wrFn3bltfNvlML166cozt4 jfXd6nvgE1X9GTs+0z9snB4yFqLaUAlUET7yuH/5B/KNsxX7Gah46Je6pJUmTMLf LYs0K8dvPTJJZOY3r8trrVWIsIC3wg31KtaaWrtu12K+FtGI0JKntzuMFD3LbuSl SvNDfjJvM+x7aQjQ9Ox023N0PGgfHyYzhN3Hq3qLhDLkGTkH9mI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org