$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: 9Hqw3daEy9nxqMhZHFSMMIHTydZACTGEzsTBEDQvBcw= Subject key identifier: 3F:E8:D0:AD:30:53:4F:B4:DC:ED:A1:5B:AC:F5:AB:A1:BB:01:53:F1 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 084485796E11132C9C9E97BA61417CE61F617DFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 044E Signing time: Sun 24 Nov 2024 06:40:45 +0000 Manifest this update: Sun 24 Nov 2024 06:35:45 +0000 Manifest next update: Wed 27 Nov 2024 11:15:45 +0000 Files and hashes: 1: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: KvQlUIt+O8XkzXwyaibxzHplxyBpRPScmdyCJyB/bbo=) 2: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: fgSOFTmHBsm+tHxB6f309xDzUMsP9VUt4jQONOxHUT0=) 3: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: /Eup8tdHkmF1OiWgOo07rXbMZL0neWK2mgu6RTJQYOo=) 4: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: 09pTyAPGkDhkuez65QhC+JUUx/+DkLuWQ1gGTLu7lyc=) 5: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: eICFPX1ffRHHlODjPDwkCsraQZYn70z4zLEPXC3PC0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:44:85:79:6e:11:13:2c:9c:9e:97:ba:61:41:7c:e6:1f:61:7d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Nov 24 06:35:45 2024 GMT Not After : Nov 27 11:15:45 2024 GMT Subject: CN=3FE8D0AD30534FB4DCEDA15BACF5ABA1BB0153F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f9:c7:1d:7d:fb:78:7b:6b:5f:a2:e2:07:f0: 11:19:f3:da:cb:e4:7d:08:ea:47:54:1a:5b:f1:92: 2e:51:ff:25:53:59:7a:04:4b:76:86:d7:b6:6a:66: fb:84:0b:5a:eb:9d:4e:1d:bd:71:a2:88:a9:be:79: dd:36:b8:9b:eb:c3:3f:ba:12:27:fa:1f:e2:76:2c: 8f:1b:93:5b:89:20:67:46:a2:ed:fc:51:3e:ad:07: b4:4f:a9:ac:2e:b3:f0:5f:1f:56:6a:ef:03:b5:ba: ea:24:12:0b:9a:5d:bc:0a:4b:82:9e:dc:05:65:a3: 3d:1c:1c:26:f2:c1:2b:ec:08:64:37:4c:14:7e:bb: 40:9b:73:eb:e3:a3:18:51:09:90:f5:67:1d:a3:87: 9b:1c:42:4d:a7:05:ee:e1:19:b4:72:e7:0b:41:c2: c2:8b:56:85:09:e1:68:73:d8:b0:a4:79:56:7d:04: d4:eb:9d:9a:ed:79:4a:62:dd:6b:26:a9:a4:ab:7c: 17:53:0d:3a:df:84:35:8a:73:f8:40:a5:c2:51:98: 12:74:e8:d8:42:bb:56:f9:db:41:f4:e9:fa:0f:0c: 66:37:e1:20:74:2c:d2:e4:ec:e2:31:b8:9b:fe:92: 98:d3:05:16:8e:1d:a7:a4:05:db:2e:dd:97:50:3b: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E8:D0:AD:30:53:4F:B4:DC:ED:A1:5B:AC:F5:AB:A1:BB:01:53:F1 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:db:54:39:15:13:b2:15:04:0b:2a:68:5f:e1:a7:43:7b:d5: 76:22:21:db:a2:cd:54:d8:08:29:e8:ff:15:03:58:e8:9d:01: ce:0c:aa:7f:d9:22:cf:32:d0:16:b4:a9:13:12:f0:2b:31:15: 99:12:71:92:d5:01:7d:f9:99:48:82:74:75:21:ac:07:c9:6a: 1c:32:93:4a:c2:a7:77:2b:0c:bf:a6:30:66:2d:76:a3:15:55: 39:36:4c:c7:80:ee:8b:58:b3:45:82:bb:86:6a:44:4b:1f:61: 0c:53:10:2e:fe:80:27:6b:42:ef:27:73:09:a6:6b:f0:00:dc: 1a:9d:56:4d:d1:15:e6:ad:78:9e:50:a8:ee:7e:61:e8:17:24: c8:9c:ee:a2:4f:8e:83:3a:ee:4c:bc:35:a9:fa:2d:84:ec:21: 89:23:c6:d0:e6:58:1a:98:34:7c:7e:c9:c3:5e:01:76:eb:d7: 53:c3:7c:62:cf:1e:22:6e:c0:88:8a:7f:43:2d:22:65:17:e9: ea:83:2f:a4:51:a4:4b:bd:71:8c:d7:20:90:7f:5a:b9:85:93: 8e:b9:cc:21:c9:7d:b2:75:6e:2f:e2:db:8d:f3:d3:23:21:51: 33:04:41:58:ef:a9:7f:a4:d0:23:f3:8d:4a:e3:7d:71:ac:75: 39:30:20:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCESFeW4REyycnpe6YUF85h9hffswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNDExMjQwNjM1NDVaFw0yNDExMjcxMTE1NDVaMDMxMTAvBgNV BAMTKDNGRThEMEFEMzA1MzRGQjREQ0VEQTE1QkFDRjVBQkExQkIwMTUzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+ccdfft4e2tfouIH8BEZ89rL 5H0I6kdUGlvxki5R/yVTWXoES3aG17ZqZvuEC1rrnU4dvXGiiKm+ed02uJvrwz+6 Eif6H+J2LI8bk1uJIGdGou38UT6tB7RPqawus/BfH1Zq7wO1uuokEguaXbwKS4Ke 3AVloz0cHCbywSvsCGQ3TBR+u0Cbc+vjoxhRCZD1Zx2jh5scQk2nBe7hGbRy5wtB wsKLVoUJ4Whz2LCkeVZ9BNTrnZrteUpi3WsmqaSrfBdTDTrfhDWKc/hApcJRmBJ0 6NhCu1b520H06foPDGY34SB0LNLk7OIxuJv+kpjTBRaOHaekBdsu3ZdQO17HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+jQrTBTT7Tc7aFbrPWrobsBU/EwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzbVDkVE7IVBAsqaF/hp0N71XYiIduizVTY CCno/xUDWOidAc4Mqn/ZIs8y0Ba0qRMS8CsxFZkScZLVAX35mUiCdHUhrAfJahwy k0rCp3crDL+mMGYtdqMVVTk2TMeA7otYs0WCu4ZqREsfYQxTEC7+gCdrQu8ncwmm a/AA3BqdVk3RFeateJ5QqO5+YegXJMic7qJPjoM67ky8Nan6LYTsIYkjxtDmWBqY NHx+ycNeAXbr11PDfGLPHiJuwIiKf0MtImUX6eqDL6RRpEu9cYzXIJB/WrmFk465 zCHJfbJ1bi/i243z0yMhUTMEQVjvqX+k0CPzjUrjfXGsdTkwIDk= -----END CERTIFICATE-----Generated at Sun Nov 24 08:35:26 2024 by rpki-client on console-ams.rpki-client.org