$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft File: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft (raw, json) Hash identifier: FGn2ha7ONrMPMWD6lKe3RpZjDtuG8T61yild/GLlAGo= Subject key identifier: EE:53:0A:9B:F7:42:A1:54:AA:98:56:93:DF:C6:29:08:75:BA:A6:8B Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Certificate serial: 599275642260240BE4A680CC1E4656A40F24C05D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft Manifest number: 010F Signing time: Fri 22 Nov 2024 17:11:20 +0000 Manifest this update: Fri 22 Nov 2024 17:06:20 +0000 Manifest next update: Mon 25 Nov 2024 18:12:20 +0000 Files and hashes: 1: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: Cffb9PkKzDpnNi+H5wjp//YtIY4RaBP+4ANvlLTOSTE=) 2: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: 5O64hKt9RzH3ZzDpkJQi2OQjZz2H00iXtdqxYuETUUo=) 3: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl (hash: w90qwEDJUAO9BcZHOaUOfrLArFxN2vSkQIMrzFAtx7g=) 4: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: YRe6enaJqWVTJR1Jjaj35/a7biuZfOw432b2vxqaDoU=) 5: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: KeyqYwWRulk+OFOsVfZqlpRSGJ0ZS+rCEYgeptsrcsk=) 6: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: cYSH2vn92qbrcEWKMz2fC0jHljokBUi4MArcwakpwcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:92:75:64:22:60:24:0b:e4:a6:80:cc:1e:46:56:a4:0f:24:c0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Validity Not Before: Nov 22 17:06:20 2024 GMT Not After : Nov 25 18:12:20 2024 GMT Subject: CN=EE530A9BF742A154AA985693DFC6290875BAA68B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:bf:ea:d3:2d:84:74:9c:45:b6:37:c6:52: 8a:d0:d1:73:02:ba:ee:bf:d0:83:3a:dc:ea:46:9f: c3:91:06:fc:3d:1c:f9:f0:2d:38:5f:70:e9:25:96: cd:e5:ee:46:6e:62:be:09:c4:97:21:3a:07:7b:4f: 3b:f7:01:d0:f1:dd:98:76:10:4c:02:d6:92:dc:e1: 5f:14:6e:09:36:52:0d:aa:ca:30:d9:76:2a:8a:69: 89:f9:4e:c4:46:35:c1:8c:5d:a4:2d:c5:17:3e:d1: 26:3e:8e:46:77:0b:6a:de:6e:24:c9:6d:5b:23:65: 98:c2:c6:80:ba:b9:1f:cb:08:a6:7a:af:ce:f4:c9: 58:c9:d6:29:64:d9:c5:d2:ab:e6:f4:1a:cc:27:75: 69:1c:2d:14:06:c9:54:ba:9c:cf:5e:1c:4b:8b:3c: 3f:6e:49:e9:04:6c:b0:90:0d:04:d9:e2:12:4f:75: f0:09:23:8b:1c:91:ca:db:86:da:8c:e3:63:5d:8f: bb:6e:5b:2f:8e:f7:52:bc:2e:69:2b:95:d9:8f:02: 5e:a4:40:3b:e6:a4:ae:20:b6:db:4e:1f:cb:51:12: fe:02:8f:db:65:d3:b9:28:fb:9f:da:aa:b2:56:2c: 37:47:66:f2:55:af:07:b8:4a:68:ee:03:83:74:a6: 7d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:53:0A:9B:F7:42:A1:54:AA:98:56:93:DF:C6:29:08:75:BA:A6:8B X509v3 Authority Key Identifier: keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:89:79:64:77:93:39:a7:f0:0b:4e:1e:1c:cd:7c:61:55:7c: a9:f1:bc:05:6e:80:30:39:bf:78:ea:16:2b:ef:41:a4:78:e4: 8b:f7:39:62:1c:6f:4b:15:d4:17:42:a5:81:7a:c7:7d:d0:11: 96:4d:f4:73:8f:9b:0f:aa:5c:94:99:e7:47:9b:8d:32:50:07: d5:f3:be:7d:98:6e:e1:f8:f6:eb:d1:43:f7:03:b7:7f:5c:6f: 7e:4e:3b:24:ef:9f:0f:4f:9f:c2:dc:01:b4:04:c0:b3:63:08: 1f:b9:55:ff:9e:00:46:2d:b2:2b:02:b0:d9:29:7d:3b:ee:5c: 52:09:e5:77:b5:06:43:d8:09:cb:ed:f9:71:c5:b8:c0:86:06: 70:47:f7:b5:05:ab:ab:06:08:b7:19:49:99:67:3f:b2:5f:dc: dc:a8:cb:a5:04:cf:f9:7a:96:75:b2:e6:0b:9e:a0:6d:04:45: ba:58:2b:e6:96:3f:2c:79:4f:e1:8c:e7:b7:40:f4:03:9b:bd: fe:27:91:7f:e4:f8:c8:b6:ef:53:ec:ee:70:93:31:42:34:fd: 2c:2e:d7:25:f1:b8:d4:9f:c4:fb:db:91:dc:dd:b9:89:4e:ba: 6f:17:0a:ff:c7:b7:06:0e:df:e5:c0:0d:0a:19:4a:37:a0:06: a4:6e:f2:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZJ1ZCJgJAvkpoDMHkZWpA8kwF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC NTM2OTVGQzAeFw0yNDExMjIxNzA2MjBaFw0yNDExMjUxODEyMjBaMDMxMTAvBgNV BAMTKEVFNTMwQTlCRjc0MkExNTRBQTk4NTY5M0RGQzYyOTA4NzVCQUE2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOL/q0y2EdJxFtjfGUorQ0XMC uu6/0IM63OpGn8ORBvw9HPnwLThfcOklls3l7kZuYr4JxJchOgd7Tzv3AdDx3Zh2 EEwC1pLc4V8Ubgk2Ug2qyjDZdiqKaYn5TsRGNcGMXaQtxRc+0SY+jkZ3C2rebiTJ bVsjZZjCxoC6uR/LCKZ6r870yVjJ1ilk2cXSq+b0GswndWkcLRQGyVS6nM9eHEuL PD9uSekEbLCQDQTZ4hJPdfAJI4sckcrbhtqM42Ndj7tuWy+O91K8LmkrldmPAl6k QDvmpK4gtttOH8tREv4Cj9tl07ko+5/aqrJWLDdHZvJVrwe4SmjuA4N0pn1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7lMKm/dCoVSqmFaT38YpCHW6poswHwYDVR0j BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2 OTVGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4 MDlCNTM2OTVGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGJeWR3kzmn8AtOHhzNfGFVfKnxvAVugDA5 v3jqFivvQaR45Iv3OWIcb0sV1BdCpYF6x33QEZZN9HOPmw+qXJSZ50ebjTJQB9Xz vn2YbuH49uvRQ/cDt39cb35OOyTvnw9Pn8LcAbQEwLNjCB+5Vf+eAEYtsisCsNkp fTvuXFIJ5Xe1BkPYCcvt+XHFuMCGBnBH97UFq6sGCLcZSZlnP7Jf3Nyoy6UEz/l6 lnWy5gueoG0ERbpYK+aWPyx5T+GM57dA9AObvf4nkX/k+Mi271Ps7nCTMUI0/Swu 1yXxuNSfxPvbkdzduYlOum8XCv/HtwYO3+XADQoZSjegBqRu8hc= -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org