$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json) Hash identifier: rDaO8pZNHnNzzEaTELEzt9DL1nErmIZx8exTgqXSceI= Subject key identifier: F0:C6:EE:12:47:8B:AA:9F:25:06:85:BF:7C:BA:8D:DD:29:25:A4:02 Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 6283933E837E77E6525794DD10F14225F69076D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft Manifest number: 0489 Signing time: Tue 26 Nov 2024 22:22:16 +0000 Manifest this update: Tue 26 Nov 2024 22:17:16 +0000 Manifest next update: Sat 30 Nov 2024 00:07:16 +0000 Files and hashes: 1: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: BdJaFao8B+TjAWAlyv2cIwAqEFZulu5t7ZhP4Qtv2fY=) 2: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: zKd6+E55ZbDUQ7YKa8k4Cpz9zdnFGPH5UcQFrsVXtW8=) 3: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: XNyUIRQtKNQg0scHLvGfTd1iQ5fTzdzUb2EnWutkjlI=) 4: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: 28/7yzYFPU2INXX42MopSeFSOK24RIpHwZvJY6Bghl8=) 5: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: j7YamreoNvDtpRRCa1576yblhtpzYGNi0GVQwvs+/uU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 22:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:83:93:3e:83:7e:77:e6:52:57:94:dd:10:f1:42:25:f6:90:76:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Nov 26 22:17:16 2024 GMT Not After : Nov 30 00:07:16 2024 GMT Subject: CN=F0C6EE12478BAA9F250685BF7CBA8DDD2925A402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:9a:8e:b6:a4:70:be:37:51:b2:57:b9:21: b2:d9:88:74:36:94:5d:d9:d7:7a:d4:db:76:41:70: 17:74:1c:e3:a3:55:0f:70:e5:45:f1:83:33:87:7a: ac:8a:fd:f8:e7:da:62:7e:47:dc:0d:ec:7b:cb:f2: 91:11:13:ff:89:bd:85:79:64:18:81:8b:a4:c4:d9: 45:ce:29:1d:23:12:f1:ea:37:db:a2:ff:81:ea:54: 0a:4a:10:06:db:dd:44:2a:12:09:c8:84:ec:74:e4: ff:aa:e0:cf:2c:c1:bd:e5:23:1d:90:e8:aa:fc:31: 9e:3f:fb:42:2d:ac:8c:17:c9:3c:7b:04:40:33:d6: d6:f6:80:73:67:1a:cf:d8:4e:bb:33:6c:6e:f4:bd: df:bb:65:11:cb:da:95:be:58:1b:a0:cb:55:82:af: e6:4a:1e:fb:8f:21:e4:04:ce:46:6a:9b:c0:99:1b: 00:0a:fe:42:b9:20:3a:44:29:8f:cd:df:0c:6a:71: 71:6d:73:f8:f2:9b:c2:6e:12:84:a4:80:c4:5e:b1: e9:63:62:85:69:16:2e:3c:f7:f8:96:85:8a:92:9e: a1:55:e0:56:f4:09:3b:d0:56:e5:d2:ef:ca:3a:42: 45:eb:db:1f:b1:e8:7e:0a:3f:e7:0e:29:3c:f8:cb: 34:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C6:EE:12:47:8B:AA:9F:25:06:85:BF:7C:BA:8D:DD:29:25:A4:02 X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ab:b4:26:55:ff:11:5f:e2:81:2e:a2:de:fe:f2:f5:4d:ca: fb:05:11:21:c5:94:78:aa:6b:e7:4c:54:dc:25:48:1e:83:52: 55:84:0d:b9:29:bb:16:41:e6:fa:0b:b3:f2:ad:c7:c2:34:4e: b8:f8:41:64:e1:9e:f0:35:17:1d:fb:10:f5:cc:68:ec:7a:cb: 82:83:b7:bc:60:40:82:e9:dd:3d:22:d0:0b:df:31:73:d2:b9: 4c:67:12:7d:25:92:f6:6f:70:49:3e:d5:b7:29:4a:f1:69:c2: bc:68:59:0e:55:8a:cc:7f:fc:c0:09:1e:45:f4:e4:a7:cc:24: 72:04:b0:3c:bc:e7:3b:d4:94:ee:76:1c:26:8d:ea:01:bf:83: a0:dd:7b:d3:8f:7b:df:e5:d1:d7:bb:fa:9c:f4:af:33:c7:25: e7:b7:22:10:50:6e:5e:1d:0d:af:eb:0b:c0:4c:aa:2c:75:97: 7c:70:82:62:18:88:ba:b4:5b:af:d5:18:86:12:5e:00:bc:80: 11:8c:da:4c:cf:ca:c7:c8:4b:32:05:5f:a6:30:dd:f1:f7:f9: 83:f2:52:b7:a2:e0:76:59:48:01:48:02:56:28:ff:f1:b0:47: 52:67:cc:7f:ee:4b:8f:c0:cb:00:c5:d8:3d:f4:b2:30:9d:f2: 3b:3a:28:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYoOTPoN+d+ZSV5TdEPFCJfaQdtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNDExMjYyMjE3MTZaFw0yNDExMzAwMDA3MTZaMDMxMTAvBgNV BAMTKEYwQzZFRTEyNDc4QkFBOUYyNTA2ODVCRjdDQkE4REREMjkyNUE0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbJqOtqRwvjdRsle5IbLZiHQ2 lF3Z13rU23ZBcBd0HOOjVQ9w5UXxgzOHeqyK/fjn2mJ+R9wN7HvL8pERE/+JvYV5 ZBiBi6TE2UXOKR0jEvHqN9ui/4HqVApKEAbb3UQqEgnIhOx05P+q4M8swb3lIx2Q 6Kr8MZ4/+0ItrIwXyTx7BEAz1tb2gHNnGs/YTrszbG70vd+7ZRHL2pW+WBugy1WC r+ZKHvuPIeQEzkZqm8CZGwAK/kK5IDpEKY/N3wxqcXFtc/jym8JuEoSkgMReselj YoVpFi489/iWhYqSnqFV4Fb0CTvQVuXS78o6QkXr2x+x6H4KP+cOKTz4yzQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8MbuEkeLqp8lBoW/fLqN3SklpAIwHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhD MEQxQ0UzQjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKrtCZV/xFf4oEuot7+8vVNyvsFESHFlHiq a+dMVNwlSB6DUlWEDbkpuxZB5voLs/Ktx8I0Trj4QWThnvA1Fx37EPXMaOx6y4KD t7xgQILp3T0i0AvfMXPSuUxnEn0lkvZvcEk+1bcpSvFpwrxoWQ5Visx//MAJHkX0 5KfMJHIEsDy85zvUlO52HCaN6gG/g6Dde9OPe9/l0de7+pz0rzPHJee3IhBQbl4d Da/rC8BMqix1l3xwgmIYiLq0W6/VGIYSXgC8gBGM2kzPysfISzIFX6Yw3fH3+YPy Urei4HZZSAFIAlYo//GwR1JnzH/uS4/AywDF2D30sjCd8js6KHo= -----END CERTIFICATE-----Generated at Wed Nov 27 00:29:35 2024 by rpki-client on console-fra.rpki-client.org