$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: NsVGwRoNp6EJ93RI4HP6dS4u96yHn+NGRxP8PbclluM= Subject key identifier: 12:36:19:77:01:8B:17:C6:5D:09:55:3D:96:5C:EC:8C:3C:C3:E9:49 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 49990258AD5B7612B40A987DAC31D866117AA6D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: 34 Signing time: Thu 26 Sep 2024 14:41:21 +0000 Manifest this update: Thu 26 Sep 2024 14:36:21 +0000 Manifest next update: Sun 29 Sep 2024 22:43:21 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: PiWVlKjUs0amBWCdvxLs5cX1/7M8WB7XrVQaBgAMMxY=) 2: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: T8iJE6XY0tLDBpoGqkFdcLLwv+c0qMZlr9cr86BIxMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Sep 2024 12:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:99:02:58:ad:5b:76:12:b4:0a:98:7d:ac:31:d8:66:11:7a:a6:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Sep 26 14:36:21 2024 GMT Not After : Sep 29 22:43:21 2024 GMT Subject: CN=12361977018B17C65D09553D965CEC8C3CC3E949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bb:e0:79:b9:21:7f:e1:b1:e2:fb:4c:53:94: dc:7d:1c:6a:23:fb:2e:e1:eb:49:94:b3:66:cf:bc: 52:49:f7:9b:ce:37:92:14:c2:46:1b:f3:29:f2:45: 35:a9:6d:5a:42:1a:47:a1:fe:04:ee:8e:7d:5d:9d: e8:58:e9:b9:86:41:79:3f:1e:ac:b7:70:28:5b:ab: 82:cd:08:64:92:ca:40:37:a2:8c:c0:9e:f4:af:ff: ba:0a:43:d0:73:4f:cf:69:41:4d:59:d5:a0:04:40: 70:c1:20:3e:ba:21:42:2b:11:63:68:ff:7e:57:1e: 1b:70:1a:c7:7b:e5:13:c2:4f:c9:74:37:3f:1e:40: 2f:fe:10:75:b7:dc:92:f6:58:0a:a4:9c:4f:63:3c: b8:de:0d:18:84:fc:0a:95:ee:5a:4b:50:54:ee:56: 75:d8:0d:71:83:a8:ec:f6:95:1e:6b:c2:f9:80:e5: b0:63:ef:65:74:51:27:c5:0a:bc:d8:0d:02:b7:d2: 6a:fc:90:a1:40:bb:92:fc:b7:e2:4a:82:5a:2c:08: 67:76:58:9a:21:1f:dc:c3:1b:2f:ca:a5:86:6c:95: e7:79:07:1d:ae:33:24:d1:a8:eb:93:2e:01:46:93: f3:7c:77:87:58:d1:17:e9:75:86:14:15:30:c5:eb: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:36:19:77:01:8B:17:C6:5D:09:55:3D:96:5C:EC:8C:3C:C3:E9:49 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c5:d8:75:c5:76:cb:ab:d6:8a:b7:f5:62:e4:b4:7a:51:c2: 42:d9:c8:a1:c5:c9:7c:4a:9b:0d:cc:d8:04:1e:11:9f:19:4e: eb:1b:b8:fe:eb:7e:44:5b:c6:7a:f0:b8:4f:a0:d5:4f:9e:65: 47:46:26:ee:90:66:34:ab:72:8b:7b:f1:78:c1:7a:d5:36:9e: 50:f0:e6:70:9b:07:21:82:b5:02:72:f2:9e:f0:a7:8f:8e:9b: ff:00:98:83:0b:2c:c8:59:e7:db:62:25:16:9e:b6:c3:09:9e: 52:84:86:b7:cf:92:8c:dd:1c:22:da:0d:15:55:01:d0:b2:42: 3f:ea:30:03:21:cb:f8:d2:95:06:10:f2:67:de:5f:2c:7b:fb: a2:31:66:7e:bb:5b:ce:5f:a9:32:64:d2:c4:ec:e2:bd:4e:6f: bd:a0:b0:d5:28:4b:85:d3:81:0a:41:5d:d7:5b:ec:42:d1:cc: 3f:cd:3b:ba:f2:24:ff:56:7a:92:a3:ee:ef:26:f4:6b:35:ec: 17:7f:30:3a:6f:d9:61:a9:cf:10:0d:6d:26:9b:c4:4d:42:a7: 62:2b:d8:54:a9:08:f4:50:36:19:de:79:50:12:98:fd:a4:53: e4:28:b5:1f:54:55:c7:c7:c6:94:8e:5d:45:43:03:78:6c:87: db:98:0d:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZkCWK1bdhK0Cph9rDHYZhF6ptEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNDA5MjYxNDM2MjFaFw0yNDA5MjkyMjQzMjFaMDMxMTAvBgNV BAMTKDEyMzYxOTc3MDE4QjE3QzY1RDA5NTUzRDk2NUNFQzhDM0NDM0U5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpu+B5uSF/4bHi+0xTlNx9HGoj +y7h60mUs2bPvFJJ95vON5IUwkYb8ynyRTWpbVpCGkeh/gTujn1dnehY6bmGQXk/ Hqy3cChbq4LNCGSSykA3oozAnvSv/7oKQ9BzT89pQU1Z1aAEQHDBID66IUIrEWNo /35XHhtwGsd75RPCT8l0Nz8eQC/+EHW33JL2WAqknE9jPLjeDRiE/AqV7lpLUFTu VnXYDXGDqOz2lR5rwvmA5bBj72V0USfFCrzYDQK30mr8kKFAu5L8t+JKglosCGd2 WJohH9zDGy/KpYZsled5Bx2uMyTRqOuTLgFGk/N8d4dY0RfpdYYUFTDF67nfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEjYZdwGLF8ZdCVU9llzsjDzD6UkwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXF2HXFdsur1oq39WLktHpRwkLZyKHFyXxK mw3M2AQeEZ8ZTusbuP7rfkRbxnrwuE+g1U+eZUdGJu6QZjSrcot78XjBetU2nlDw 5nCbByGCtQJy8p7wp4+Om/8AmIMLLMhZ59tiJRaetsMJnlKEhrfPkozdHCLaDRVV AdCyQj/qMAMhy/jSlQYQ8mfeXyx7+6IxZn67W85fqTJk0sTs4r1Ob72gsNUoS4XT gQpBXddb7ELRzD/NO7ryJP9WepKj7u8m9Gs17Bd/MDpv2WGpzxANbSabxE1Cp2Ir 2FSpCPRQNhneeVASmP2kU+QotR9UVcfHxpSOXUVDA3hsh9uYDYY= -----END CERTIFICATE-----Generated at Thu Sep 26 17:16:04 2024 by rpki-client on console-fra.rpki-client.org