$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: B8YqSwn0bjhA+eH0J/kV131KdqSX2kn6EXNPyNi+wH0= Subject key identifier: 76:B5:7B:6A:47:E0:03:8E:3F:DA:4C:1B:57:38:13:2F:3C:AC:45:5A Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 5C6247448BD43C99EA46811E2922677FF7D0D5B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 0487 Signing time: Fri 22 Nov 2024 12:52:00 +0000 Manifest this update: Fri 22 Nov 2024 12:47:00 +0000 Manifest next update: Mon 25 Nov 2024 22:22:00 +0000 Files and hashes: 1: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: diSJtF4pncDv3TYDAQkVNDujeOW0TndNL50eRWU9t2k=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: neCvjYj4OGxzsARs2VAX0fQB/pQLEakmCBDGYrtFesk=) 3: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: tknpc6+dz2Mw7wDeDSK+YWDsKRVOhy3cU9HaqJfyi6Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:62:47:44:8b:d4:3c:99:ea:46:81:1e:29:22:67:7f:f7:d0:d5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Nov 22 12:47:00 2024 GMT Not After : Nov 25 22:22:00 2024 GMT Subject: CN=76B57B6A47E0038E3FDA4C1B5738132F3CAC455A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8e:c8:d3:ab:68:8d:94:da:bd:6d:2a:0a:58: b9:cb:05:8c:44:06:df:fa:56:f3:47:66:57:d1:85: f7:ac:9b:8a:8b:8b:cd:ee:9b:19:54:05:3d:da:8b: 1a:ea:cd:3f:2d:b7:17:69:2c:c5:3d:5d:1f:86:18: 27:74:a2:59:29:2f:4f:53:a1:cb:1e:7a:7a:f9:c4: 5b:39:8f:b9:02:5c:22:8a:14:bd:a3:9e:e4:fe:99: 15:f3:24:df:3d:c6:8b:8d:26:bf:00:55:17:d1:25: fc:78:ef:32:bb:40:85:27:21:c8:5f:29:cd:ce:24: 6c:74:db:c5:10:f6:00:94:bc:77:fa:d0:17:16:03: 7c:6c:72:66:51:95:21:e7:86:b0:a3:46:5b:90:02: 9a:16:c4:61:dc:e5:fd:9d:a9:7c:d5:23:13:99:4e: ac:42:c1:7c:94:17:f3:5b:0a:95:9f:f8:14:90:41: 32:2e:23:18:00:59:e8:c6:80:22:9c:40:d7:e0:12: b9:ca:85:1e:8f:ea:5b:8c:3c:d4:41:3a:08:72:66: a7:63:2c:c6:39:3b:57:1b:af:82:d0:7c:ec:8d:6c: fb:0c:c8:b9:2b:24:7b:f6:92:b2:8b:51:74:5f:60: 9f:d4:37:96:8c:25:1b:f2:86:eb:49:49:5a:1f:9e: e4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B5:7B:6A:47:E0:03:8E:3F:DA:4C:1B:57:38:13:2F:3C:AC:45:5A X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f1:6d:a2:f9:47:8e:17:af:2a:5c:aa:df:13:eb:5d:04:d3: b8:cb:8e:20:d8:49:23:f8:06:52:46:cd:fa:1e:33:15:19:d7: ab:c8:55:4c:83:cc:7e:09:d7:d9:6c:d9:fb:ab:8e:c2:a8:24: c0:b9:1a:6b:ec:2c:82:85:f6:71:15:ca:f8:c2:f7:ea:88:d9: 3a:de:30:77:80:61:2a:78:de:cc:17:0c:30:df:03:d8:07:f6: c9:47:71:42:a1:43:09:b4:3c:13:1c:06:2a:09:9f:35:6c:35: 47:64:ab:51:7b:0a:9b:74:ab:c2:4e:cf:3c:1f:6a:9b:56:d9: 8f:d4:29:80:ac:fc:d6:d5:6d:a1:fe:16:97:b8:c2:d2:03:ea: be:ab:b7:d0:3a:ff:57:86:21:7e:eb:8a:64:dc:45:55:72:fa: 65:8a:33:6a:bf:60:18:0c:64:d9:c8:5b:9e:92:a8:ad:b4:04: 4d:81:1c:8f:20:9c:bb:09:8d:85:82:4d:8c:8e:df:56:8b:ae: 11:fa:61:ae:b1:c5:d4:e6:c4:07:3e:5f:12:00:c1:32:bb:fe: 0d:89:ca:91:b3:3c:8b:61:00:ed:4d:2a:73:a5:c7:de:30:59: 06:54:61:9d:66:d1:09:83:b0:70:66:b9:49:a9:c0:8d:7a:37: 74:61:09:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXGJHRIvUPJnqRoEeKSJnf/fQ1bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNDExMjIxMjQ3MDBaFw0yNDExMjUyMjIyMDBaMDMxMTAvBgNV BAMTKDc2QjU3QjZBNDdFMDAzOEUzRkRBNEMxQjU3MzgxMzJGM0NBQzQ1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjsjTq2iNlNq9bSoKWLnLBYxE Bt/6VvNHZlfRhfesm4qLi83umxlUBT3aixrqzT8ttxdpLMU9XR+GGCd0olkpL09T ocseenr5xFs5j7kCXCKKFL2jnuT+mRXzJN89xouNJr8AVRfRJfx47zK7QIUnIchf Kc3OJGx028UQ9gCUvHf60BcWA3xscmZRlSHnhrCjRluQApoWxGHc5f2dqXzVIxOZ TqxCwXyUF/NbCpWf+BSQQTIuIxgAWejGgCKcQNfgErnKhR6P6luMPNRBOghyZqdj LMY5O1cbr4LQfOyNbPsMyLkrJHv2krKLUXRfYJ/UN5aMJRvyhutJSVofnuQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdrV7akfgA44/2kwbVzgTLzysRVowHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErxbaL5R44Xrypcqt8T610E07jLjiDYSSP4 BlJGzfoeMxUZ16vIVUyDzH4J19ls2furjsKoJMC5GmvsLIKF9nEVyvjC9+qI2Tre MHeAYSp43swXDDDfA9gH9slHcUKhQwm0PBMcBioJnzVsNUdkq1F7Cpt0q8JOzzwf aptW2Y/UKYCs/NbVbaH+Fpe4wtID6r6rt9A6/1eGIX7rimTcRVVy+mWKM2q/YBgM ZNnIW56SqK20BE2BHI8gnLsJjYWCTYyO31aLrhH6Ya6xxdTmxAc+XxIAwTK7/g2J ypGzPIthAO1NKnOlx94wWQZUYZ1m0QmDsHBmuUmpwI16N3RhCQ4= -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org