$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: gyCCko3sIaDxsvByoDrFyKoCA2PwNZ3gI9KpOJJli5Q= Subject key identifier: 9F:45:AA:BC:6A:12:F5:8B:06:A3:36:0C:54:F1:61:BD:AF:14:38:2E Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 210D94AFD8DBC09F3ED28F712EB44601C2C8CFFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 0486 Signing time: Mon 25 Nov 2024 17:41:51 +0000 Manifest this update: Mon 25 Nov 2024 17:36:51 +0000 Manifest next update: Thu 28 Nov 2024 21:52:51 +0000 Files and hashes: 1: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: eh9L4Tsi0TWOJ96L0aONhD0NCfoHgdr4v7RDNkWy5XM=) 2: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: euGW3qyiY1cvGkXvLfjMjljBNDqFA3m50maYeGElOOA=) 3: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: 5J9pdeUzn90hxP1e/RN4K8mRZHsF8wbCP7AsLa2LaxY=) 4: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: opB77sSQRa8yU+zBNhiB8mZHxzzniJ/cdeJyip9E/rI=) 5: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: qBwD0j9D6HJINKNFlu+kuEBY/vArkgezOjBuJFqmG7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 21:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0d:94:af:d8:db:c0:9f:3e:d2:8f:71:2e:b4:46:01:c2:c8:cf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Nov 25 17:36:51 2024 GMT Not After : Nov 28 21:52:51 2024 GMT Subject: CN=9F45AABC6A12F58B06A3360C54F161BDAF14382E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:8d:65:5a:39:83:3d:28:84:24:e1:65:5e: 24:21:0f:05:1b:f8:4a:32:d8:e8:fa:88:73:03:aa: bf:5d:63:59:68:ce:f3:13:11:89:28:b0:21:f7:c8: 03:0e:8e:e4:9c:32:ce:73:81:47:74:c0:16:ad:fb: ce:4a:2d:6d:42:01:f6:42:36:81:1b:df:e1:fa:0d: ec:1a:89:5c:fc:70:d4:25:17:57:55:17:53:33:4c: c0:73:dc:27:2c:92:91:67:28:ee:8d:6c:dc:c8:e1: e3:1f:eb:c5:71:a1:98:b1:fe:70:f9:1e:ce:2c:40: ad:dc:c5:4d:04:b1:c4:be:01:75:63:2a:c4:44:05: 63:90:9e:e3:b4:b8:02:2e:ca:d7:d4:23:6b:d5:69: b4:20:37:c4:8d:47:7c:1c:a5:ff:c7:53:7e:20:7d: 85:2c:1b:6c:7c:f4:76:0c:d8:5d:fd:c7:32:84:30: 77:ef:7c:9d:9f:50:14:d6:57:d5:dd:cb:dc:74:f6: 14:e7:bd:c0:ec:7a:be:85:e6:6e:46:ad:f9:90:85: 47:62:4f:6c:20:6b:90:d3:f0:4e:89:e4:bb:d6:0d: fc:68:fd:d1:79:26:4d:63:b2:73:62:ca:94:ab:5f: 1e:51:ed:8d:03:15:b2:60:3d:df:d8:77:dd:b5:f1: b3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:45:AA:BC:6A:12:F5:8B:06:A3:36:0C:54:F1:61:BD:AF:14:38:2E X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:07:63:e9:b3:35:17:af:41:3c:f1:58:31:dd:5d:98:2a:cc: 09:49:1c:5d:f5:30:4d:d5:14:5b:f2:be:84:29:cf:3f:28:51: c8:60:9a:8b:20:b9:e9:c6:2d:99:16:3d:e0:eb:9b:e3:ed:ab: ad:b9:47:ed:73:4f:99:20:fa:f5:69:19:20:96:3f:ae:46:24: 71:93:a1:c9:08:5f:fc:88:45:a6:60:f9:dd:00:a8:2e:95:bc: d9:27:17:fd:b0:3e:85:80:d6:bc:b6:a4:c4:c5:06:d7:6d:9c: e6:0c:0f:62:93:ba:2d:d1:39:7b:88:10:f5:4b:24:d9:70:de: 7d:44:12:77:e3:9f:8a:de:b7:76:7c:ba:7a:c0:98:43:e5:27: b6:11:56:75:c9:74:d1:26:ae:c2:fc:f2:81:a2:88:f8:fb:90: f4:05:36:77:4e:d1:89:e6:ed:3c:2f:1b:2d:2c:7c:b0:4a:67: f7:cd:aa:95:9f:da:58:74:0f:9c:a6:14:bb:82:68:5f:7a:93: 60:4a:7f:07:35:36:09:72:56:a0:9b:f4:11:d3:f7:04:46:40: 55:b1:15:0b:7f:83:5d:48:52:e0:b1:75:02:9a:39:7f:ae:8e: d5:63:2d:d3:8a:bc:e4:f5:aa:42:78:ad:61:67:6b:9e:f8:08: 33:4d:0e:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQ2Ur9jbwJ8+0o9xLrRGAcLIz/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNDExMjUxNzM2NTFaFw0yNDExMjgyMTUyNTFaMDMxMTAvBgNV BAMTKDlGNDVBQUJDNkExMkY1OEIwNkEzMzYwQzU0RjE2MUJEQUYxNDM4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9o1lWjmDPSiEJOFlXiQhDwUb +Eoy2Oj6iHMDqr9dY1lozvMTEYkosCH3yAMOjuScMs5zgUd0wBat+85KLW1CAfZC NoEb3+H6DewaiVz8cNQlF1dVF1MzTMBz3CcskpFnKO6NbNzI4eMf68VxoZix/nD5 Hs4sQK3cxU0EscS+AXVjKsREBWOQnuO0uAIuytfUI2vVabQgN8SNR3wcpf/HU34g fYUsG2x89HYM2F39xzKEMHfvfJ2fUBTWV9Xdy9x09hTnvcDser6F5m5GrfmQhUdi T2wga5DT8E6J5LvWDfxo/dF5Jk1jsnNiypSrXx5R7Y0DFbJgPd/Yd9218bNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn0WqvGoS9YsGozYMVPFhva8UOC4wHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwHY+mzNRevQTzxWDHdXZgqzAlJHF31ME3V FFvyvoQpzz8oUchgmosguenGLZkWPeDrm+Ptq625R+1zT5kg+vVpGSCWP65GJHGT ockIX/yIRaZg+d0AqC6VvNknF/2wPoWA1ry2pMTFBtdtnOYMD2KTui3ROXuIEPVL JNlw3n1EEnfjn4ret3Z8unrAmEPlJ7YRVnXJdNEmrsL88oGiiPj7kPQFNndO0Ynm 7TwvGy0sfLBKZ/fNqpWf2lh0D5ymFLuCaF96k2BKfwc1NglyVqCb9BHT9wRGQFWx FQt/g11IUuCxdQKaOX+ujtVjLdOKvOT1qkJ4rWFna574CDNNDuk= -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:15 2024 by rpki-client on console-fra.rpki-client.org