$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft File: 41820333252DF92B1DBA238F558CC8D822C768EF.mft (raw, json) Hash identifier: g+DQcG55zpMQaRyw5lK8XFd2eWxWMZrgyQDfQ1G481I= Subject key identifier: E1:AE:A4:D2:04:77:11:E7:1E:52:AE:2A:8F:71:88:EB:94:7E:F6:42 Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF Certificate issuer: /CN=41820333252DF92B1DBA238F558CC8D822C768EF Certificate serial: 34C0461CC9053CA7AC9926013DE01CE0D635BDCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft Manifest number: 0120 Signing time: Sun 24 Nov 2024 07:11:15 +0000 Manifest this update: Sun 24 Nov 2024 07:06:15 +0000 Manifest next update: Wed 27 Nov 2024 11:23:15 +0000 Files and hashes: 1: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: ueEktd1sAwmpdQ74SOzvsBDLzHoQEwnVisNVfqRC7tw=) 2: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: hxfBRBAVhM2xZlcKk0WyDOCqux5nYUYy5is3DJ5HmbM=) 3: 41820333252DF92B1DBA238F558CC8D822C768EF.crl (hash: hKAg+ZKX/oG25ceXJW4nyYdQXoxEOZIZ6JERYgOcGlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c0:46:1c:c9:05:3c:a7:ac:99:26:01:3d:e0:1c:e0:d6:35:bd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF Validity Not Before: Nov 24 07:06:15 2024 GMT Not After : Nov 27 11:23:15 2024 GMT Subject: CN=E1AEA4D2047711E71E52AE2A8F7188EB947EF642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ea:aa:07:9e:11:14:01:6f:f9:74:e5:b5:ba: ce:ff:ac:f8:d9:1e:f4:12:ee:5c:8f:83:13:39:9e: 7a:45:3d:09:3c:d9:95:8d:e9:66:18:55:70:dd:99: ca:b8:d7:b2:6a:09:77:eb:63:65:19:09:8f:6c:7b: c8:ae:c1:ce:63:36:6a:a5:8e:b2:d7:a8:5e:6b:6b: 8d:17:ff:b3:8d:a5:59:1b:ee:79:91:38:9e:a0:ef: f6:f6:42:71:fb:19:2d:84:4c:15:a1:ba:95:88:b8: 50:9e:28:50:58:18:59:a2:19:05:a1:02:56:5d:18: 05:53:97:28:4f:9f:dd:cf:aa:eb:a0:fd:bd:6a:25: 80:d1:ff:0b:2f:5d:d3:33:13:24:06:a0:a3:a9:01: b6:fc:ad:68:e7:47:c4:d5:62:64:2f:e7:34:7d:7d: 8d:5c:6f:b2:b9:47:8d:a5:be:0e:ad:a0:72:b4:ed: 6a:81:1e:20:3c:b3:8d:1b:f3:44:76:95:84:3b:21: a0:ff:cb:ea:b0:c0:3c:76:0c:46:82:51:63:69:42: 31:d7:80:e5:1e:63:30:d2:7e:c5:4c:7b:be:dc:34: 0b:00:c7:2b:ee:9e:19:2d:a8:7a:23:6d:1a:1d:10: ba:a5:66:ed:59:8d:73:98:84:1e:6a:85:76:a5:ba: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AE:A4:D2:04:77:11:E7:1E:52:AE:2A:8F:71:88:EB:94:7E:F6:42 X509v3 Authority Key Identifier: keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:db:b3:a0:b7:9c:19:0f:5e:e8:77:92:24:5f:9c:ee:54:9b: 9c:ee:6b:d5:3e:cd:45:4a:64:29:dd:72:44:76:46:48:d8:be: 34:63:34:da:5e:cd:1e:bd:12:34:fe:78:14:a1:34:63:74:b9: 6f:08:ec:45:bf:e9:f7:6b:5e:51:a3:a3:42:93:19:1d:57:ff: c0:91:72:c7:c0:be:bb:bd:23:8f:ec:da:ec:91:29:b9:5a:02: 52:c3:b8:d5:73:0d:7d:3f:31:51:6f:cb:e8:9f:a5:45:33:0f: c3:26:fa:e6:0c:94:89:4e:e2:df:08:b3:aa:e8:75:c8:df:fe: 56:62:14:66:38:71:b0:e9:21:19:02:57:a1:80:db:60:60:75: 3e:b5:05:7d:98:e9:dd:fb:26:ba:49:21:f1:1e:1e:f2:b9:48: f6:6e:50:de:56:1a:75:a5:4a:21:ec:98:bf:81:68:71:1c:e7: 25:22:46:d7:34:ce:07:94:94:3f:7a:88:c5:c7:f3:b5:f1:a9: 02:ec:ba:0e:56:d8:83:9f:b1:8d:b5:b0:95:d8:55:3c:65:aa: a7:de:42:6a:2d:5c:58:a3:2a:b8:67:7b:e2:39:c2:de:e3:1e: 28:95:95:a2:87:4b:6b:3f:90:3e:da:6e:6c:2f:40:90:1b:56: d7:79:14:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMBGHMkFPKesmSYBPeAc4NY1vcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgy MkM3NjhFRjAeFw0yNDExMjQwNzA2MTVaFw0yNDExMjcxMTIzMTVaMDMxMTAvBgNV BAMTKEUxQUVBNEQyMDQ3NzExRTcxRTUyQUUyQThGNzE4OEVCOTQ3RUY2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd6qoHnhEUAW/5dOW1us7/rPjZ HvQS7lyPgxM5nnpFPQk82ZWN6WYYVXDdmcq417JqCXfrY2UZCY9se8iuwc5jNmql jrLXqF5ra40X/7ONpVkb7nmROJ6g7/b2QnH7GS2ETBWhupWIuFCeKFBYGFmiGQWh AlZdGAVTlyhPn93Pquug/b1qJYDR/wsvXdMzEyQGoKOpAbb8rWjnR8TVYmQv5zR9 fY1cb7K5R42lvg6toHK07WqBHiA8s40b80R2lYQ7IaD/y+qwwDx2DEaCUWNpQjHX gOUeYzDSfsVMe77cNAsAxyvunhktqHojbRodELqlZu1ZjXOYhB5qhXalunjhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4a6k0gR3EeceUq4qj3GI65R+9kIwHwYDVR0j BBgwFoAUQYIDMyUt+SsduiOPVYzI2CLHaO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NTk3MWFlOS01Y2RkLTRkNDEtYjYyYS01YzI4NGFhODA5OGUvMC80MTgyMDMzMzI1 MkRGOTJCMURCQTIzOEY1NThDQzhEODIyQzc2OEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgyMkM3 NjhFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4 RDgyMkM3NjhFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvbs6C3nBkPXuh3kiRfnO5Um5zua9U+zUVK ZCndckR2RkjYvjRjNNpezR69EjT+eBShNGN0uW8I7EW/6fdrXlGjo0KTGR1X/8CR csfAvru9I4/s2uyRKblaAlLDuNVzDX0/MVFvy+ifpUUzD8Mm+uYMlIlO4t8Is6ro dcjf/lZiFGY4cbDpIRkCV6GA22BgdT61BX2Y6d37JrpJIfEeHvK5SPZuUN5WGnWl SiHsmL+BaHEc5yUiRtc0zgeUlD96iMXH87XxqQLsug5W2IOfsY21sJXYVTxlqqfe QmotXFijKrhne+I5wt7jHiiVlaKHS2s/kD7abmwvQJAbVtd5FFo= -----END CERTIFICATE-----Generated at Sun Nov 24 08:35:26 2024 by rpki-client on console-ams.rpki-client.org