$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft File: 1635F5E419798341BDC615D4E1C6AE340C34BEED.mft (raw, json) Hash identifier: QAgEEJ4AXTOB9WPLXCclhv89Sfu/yGECGaRdlQv10VQ= Subject key identifier: E8:D8:59:9C:22:E2:7B:08:73:4A:01:5D:21:6E:B9:38:B0:89:15:B2 Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED Certificate issuer: /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Certificate serial: 6D83FCF22ECB74C31DFAA529CF889E7A1DE891F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft Manifest number: 048A Signing time: Sun 24 Nov 2024 08:21:32 +0000 Manifest this update: Sun 24 Nov 2024 08:16:32 +0000 Manifest next update: Wed 27 Nov 2024 11:30:32 +0000 Files and hashes: 1: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: Elh39w1U+GBq3XiIsIcKakRKgH0ks1OQk6DpSiPwZ6E=) 2: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: bEXjgt5oe/QCk1NlQcPsjuArMBUfj88EZpYXft80tYY=) 3: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: Yz30CPTYH/dOzjwnz1TP6tkfawJNbjkHzYhNkLuWAMM=) 4: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: FrhZIsA2EAriYUEHDAEqTDZdZdNHqsPml83KdFcpBMM=) 5: 1635F5E419798341BDC615D4E1C6AE340C34BEED.crl (hash: Ic5Fh84O46w2YV9OxHD8qrvFkef5cwXBCkxromrb/2Q=) 6: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: +LKBbBTxZfejrH0n6yxZTpzAQ0ctc1KNHYYJokKKnzg=) 7: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: C106cMZ7nVpbdEo6RtpPPocV8QkCM3iy9iSeYnPa1lI=) 8: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: 53tgdiqtdjNpYH/nxHiWdMfkZz/bYs/54zzLtN7gns8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:83:fc:f2:2e:cb:74:c3:1d:fa:a5:29:cf:88:9e:7a:1d:e8:91:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Validity Not Before: Nov 24 08:16:32 2024 GMT Not After : Nov 27 11:30:32 2024 GMT Subject: CN=E8D8599C22E27B08734A015D216EB938B08915B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:cf:89:52:aa:e4:d3:5a:61:4b:70:9f:5b: d4:3b:ce:e3:c9:b4:96:6a:8c:5b:37:40:2a:df:85: 80:4a:ed:bd:89:7c:c0:e8:92:5e:ee:64:44:d2:cf: 72:ae:63:52:52:dc:20:5d:59:d8:68:a2:4c:e1:e4: c1:0d:6f:4a:65:2d:59:58:49:c5:57:3a:67:cb:24: 27:eb:68:d7:a3:62:bf:09:d4:1a:f0:c7:a3:9b:d2: 42:61:ff:3f:00:00:07:49:55:50:70:0d:78:65:20: 16:b9:c1:47:78:c4:d9:85:e2:98:6e:6e:3e:d5:67: 4e:02:23:c5:8d:b6:5c:d7:6f:40:0a:f3:af:cd:e7: 09:6d:3c:c8:39:9b:b3:b6:c7:7d:a7:10:de:22:c5: be:72:a6:17:18:48:7f:db:bf:b1:1f:76:57:83:e4: c0:8f:a9:b2:9e:b1:41:fe:99:fa:9b:76:2c:de:8f: 96:c3:f9:94:d0:b4:65:28:87:5f:6c:e2:1e:a0:6d: fe:20:77:1b:57:7b:e7:f8:a2:5b:02:49:8e:e9:c5: 60:e1:2b:10:b5:4d:99:87:39:e8:ff:16:bb:bc:7e: 5e:23:ab:b5:d7:2e:74:c6:31:d8:3b:89:07:2b:4e: d0:14:bb:95:16:96:b8:4e:25:a0:b5:f6:3a:0f:ef: e2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D8:59:9C:22:E2:7B:08:73:4A:01:5D:21:6E:B9:38:B0:89:15:B2 X509v3 Authority Key Identifier: keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:3c:6e:ee:23:0d:f4:0f:e8:41:cb:92:ce:21:bd:95:f0:d7: d9:1b:bf:26:d4:5a:f2:2f:c5:81:20:4e:33:e3:18:9c:3a:e6: 73:6c:b7:46:15:ed:69:c8:86:35:71:9a:cb:87:7b:8d:45:20: 45:18:92:f4:34:50:59:c7:e0:00:db:40:b5:08:19:bc:d8:01: c5:8f:41:b9:75:18:4a:ff:eb:83:84:bf:e8:69:fb:2c:d8:50: 16:c8:eb:a8:ce:ef:35:21:e5:fc:38:4f:99:af:b7:3f:16:5a: 04:11:f4:bf:88:67:09:17:44:c3:b6:6a:86:9d:f8:ec:07:62: c4:35:1c:4a:38:df:d6:ec:66:34:7b:84:3c:8f:ec:9d:0d:9c: e0:ad:d0:56:e5:04:a7:70:17:6c:17:d8:4f:5c:4c:3d:e5:29: f2:6b:5b:22:35:50:65:9d:6e:c6:ad:5f:37:4e:93:a5:85:0d: ea:72:c6:b1:c4:26:20:30:78:ba:44:86:99:74:13:8c:33:46: 56:09:53:0b:8c:8c:7c:68:04:f7:8b:ae:ab:e2:de:51:85:ba: 32:a0:cf:76:a0:ba:90:8d:79:a8:1f:3e:af:30:25:9c:26:ef: 59:c9:99:dc:5b:5f:3e:84:05:d4:66:6c:de:70:6f:8d:07:a5: af:a5:9c:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYP88i7LdMMd+qUpz4ieeh3okfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQw QzM0QkVFRDAeFw0yNDExMjQwODE2MzJaFw0yNDExMjcxMTMwMzJaMDMxMTAvBgNV BAMTKEU4RDg1OTlDMjJFMjdCMDg3MzRBMDE1RDIxNkVCOTM4QjA4OTE1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Y8+JUqrk01phS3CfW9Q7zuPJ tJZqjFs3QCrfhYBK7b2JfMDokl7uZETSz3KuY1JS3CBdWdhookzh5MENb0plLVlY ScVXOmfLJCfraNejYr8J1Brwx6Ob0kJh/z8AAAdJVVBwDXhlIBa5wUd4xNmF4phu bj7VZ04CI8WNtlzXb0AK86/N5wltPMg5m7O2x32nEN4ixb5yphcYSH/bv7EfdleD 5MCPqbKesUH+mfqbdizej5bD+ZTQtGUoh19s4h6gbf4gdxtXe+f4olsCSY7pxWDh KxC1TZmHOej/Fru8fl4jq7XXLnTGMdg7iQcrTtAUu5UWlrhOJaC19joP7+LFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NhZnCLiewhzSgFdIW65OLCJFbIwHwYDVR0j BBgwFoAUFjX15Bl5g0G9xhXU4cauNAw0vu0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMC8xNjM1RjVFNDE5 Nzk4MzQxQkRDNjE1RDRFMUM2QUUzNDBDMzRCRUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQwQzM0 QkVFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY0NTAwMzItNTQ5Mi00YTVhLTk0 M2YtYmRiNDczMzQxMjMzLzAvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFF MzQwQzM0QkVFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM88bu4jDfQP6EHLks4hvZXw19kbvybUWvIv xYEgTjPjGJw65nNst0YV7WnIhjVxmsuHe41FIEUYkvQ0UFnH4ADbQLUIGbzYAcWP Qbl1GEr/64OEv+hp+yzYUBbI66jO7zUh5fw4T5mvtz8WWgQR9L+IZwkXRMO2aoad +OwHYsQ1HEo439bsZjR7hDyP7J0NnOCt0FblBKdwF2wX2E9cTD3lKfJrWyI1UGWd bsatXzdOk6WFDepyxrHEJiAweLpEhpl0E4wzRlYJUwuMjHxoBPeLrqvi3lGFujKg z3agupCNeagfPq8wJZwm71nJmdxbXz6EBdRmbN5wb40Hpa+lnPA= -----END CERTIFICATE-----Generated at Sun Nov 24 09:08:48 2024 by rpki-client on console-fra.rpki-client.org