$ rpki-client -vvf repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft File: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft (raw, json) Hash identifier: Z/1qgCkOteMU10PZVommzEVUc76rkwB9YJ8WsDhMtYs= Subject key identifier: 3A:6C:9F:4D:4C:45:F3:39:37:A2:3C:8C:41:FD:B5:9F:80:46:9C:09 Authority key identifier: 74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C Certificate issuer: /CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Certificate serial: 0C98119E38A97F7591A63E3ACB73087D59F6305A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft Manifest number: 0184 Signing time: Wed 20 Nov 2024 11:42:02 +0000 Manifest this update: Wed 20 Nov 2024 11:37:02 +0000 Manifest next update: Sat 23 Nov 2024 23:15:02 +0000 Files and hashes: 1: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: /VOApx0WTt/kqF8MIp5l+eZa1Xw9VJVwe2Jy1w2XBd4=) 2: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl (hash: UhQld8dr3xHF96+0Gv27PfCzQzYjCTiJf4wF7K/qrB4=) 3: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: +T0r2N2JsODZcz6yVxBAruEfSzS5sBjYBXLPk3rRakY=) 4: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: MxebdHEhOjXip7gq4+61F23EIcShrXqwS4BKGpKtDTs=) 5: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: lT4i2I1kp5QXvRWP6Y3CyMWdYfvPbMf8mprwGrOyT/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:98:11:9e:38:a9:7f:75:91:a6:3e:3a:cb:73:08:7d:59:f6:30:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Validity Not Before: Nov 20 11:37:02 2024 GMT Not After : Nov 23 23:15:02 2024 GMT Subject: CN=3A6C9F4D4C45F33937A23C8C41FDB59F80469C09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:38:4b:4e:30:96:e1:18:a0:15:b5:a0:ac:3c: 51:1b:12:5e:42:30:2a:aa:f9:a2:fb:75:06:1f:d8: 4f:c8:60:75:37:b4:f5:f4:b3:ad:e3:39:71:c2:5a: 86:7d:84:cb:04:36:01:6f:29:8a:a9:31:78:d0:d0: 8f:23:b7:bd:c9:c6:83:44:dd:f2:ac:a4:e6:4a:c0: 49:65:b4:0c:c5:90:0d:c7:92:14:85:8e:9c:a1:e4: 73:12:ab:06:d7:4c:f2:03:6a:25:84:d9:9c:3d:1b: 52:81:95:87:e4:cd:b7:9d:de:3a:82:8a:86:7f:b2: 1d:c7:10:34:dd:0d:ca:0e:81:2d:9e:7a:73:c4:db: 69:24:ea:1c:ef:16:8b:76:50:18:58:c9:ec:46:42: a8:5b:69:25:80:c1:c3:d0:12:5e:6c:db:48:f2:97: c9:0e:eb:86:3b:bb:24:db:e1:52:d3:c6:25:65:53: a4:97:51:7d:88:56:b7:e0:0c:c8:55:27:4d:7d:19: 51:c7:db:bf:62:49:d1:1f:3a:10:c7:a5:b9:e0:66: 73:b8:bc:cd:25:36:8e:93:ee:e0:61:3f:07:98:5f: d1:a3:19:40:c8:3a:d7:31:bc:3c:1b:ef:e4:96:9d: 04:38:f5:ec:df:3f:56:20:22:f3:6b:25:c7:53:15: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6C:9F:4D:4C:45:F3:39:37:A2:3C:8C:41:FD:B5:9F:80:46:9C:09 X509v3 Authority Key Identifier: keyid:74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7a:7b:1d:87:63:f7:a8:4d:96:3e:7a:37:d3:4d:63:11:c7: 1f:53:09:01:ff:02:3d:98:7e:5e:63:3c:97:85:10:ac:c8:46: 38:da:34:05:d1:e2:6c:3c:0a:30:23:10:fb:7a:50:41:f9:22: b0:19:30:6d:0b:1e:ae:1b:24:0d:d3:60:fe:df:bb:93:3f:d9: b9:16:0d:bd:66:91:53:4e:3e:e6:f3:7f:78:69:a4:70:d3:1c: c2:9c:9f:a2:34:01:f6:16:a7:90:63:23:78:c9:78:2a:04:2a: 81:bc:28:19:33:d9:4a:45:fb:65:d9:97:45:46:77:ef:2a:3e: d0:10:41:96:b7:7d:90:49:99:e5:2e:82:bf:b7:dc:a9:d4:44: 38:7d:ec:00:c7:38:7d:66:61:79:3c:bd:71:c8:3a:e8:e0:1c: 1c:5f:16:ae:dc:60:19:26:de:8b:f7:5c:dc:3a:f3:1e:2b:6a: b1:c1:7f:45:d3:83:d2:f8:97:cc:bc:17:af:36:b8:47:a9:27: 67:1c:6a:92:e5:29:35:d9:a3:d0:46:90:59:c7:b3:75:5a:24: d0:9d:dc:a5:cc:7c:2a:83:2d:08:ad:46:4f:e1:07:65:f5:ce: d4:2d:14:07:a0:81:ba:23:59:4a:49:b0:99:be:eb:8b:48:3e: 68:c5:a3:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJgRnjipf3WRpj46y3MIfVn2MFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNF QTI3NjM1QzAeFw0yNDExMjAxMTM3MDJaFw0yNDExMjMyMzE1MDJaMDMxMTAvBgNV BAMTKDNBNkM5RjRENEM0NUYzMzkzN0EyM0M4QzQxRkRCNTlGODA0NjlDMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaOEtOMJbhGKAVtaCsPFEbEl5C MCqq+aL7dQYf2E/IYHU3tPX0s63jOXHCWoZ9hMsENgFvKYqpMXjQ0I8jt73JxoNE 3fKspOZKwElltAzFkA3HkhSFjpyh5HMSqwbXTPIDaiWE2Zw9G1KBlYfkzbed3jqC ioZ/sh3HEDTdDcoOgS2eenPE22kk6hzvFot2UBhYyexGQqhbaSWAwcPQEl5s20jy l8kO64Y7uyTb4VLTxiVlU6SXUX2IVrfgDMhVJ019GVHH279iSdEfOhDHpbngZnO4 vM0lNo6T7uBhPweYX9GjGUDIOtcxvDwb7+SWnQQ49ezfP1YgIvNrJcdTFc45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOmyfTUxF8zk3ojyMQf21n4BGnAkwHwYDVR0j BBgwFoAUdJ6PbF8i0YpwtoL4bGXs0+onY1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWU4ZGIzOC02M2E4LTQxM2MtYTlmNi1jYzIyM2FmYTRhNzUvMC83NDlFOEY2QzVG MjJEMThBNzBCNjgyRjg2QzY1RUNEM0VBMjc2MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNFQTI3 NjM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVD RDNFQTI3NjM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ6ex2HY/eoTZY+ejfTTWMRxx9TCQH/Aj2Y fl5jPJeFEKzIRjjaNAXR4mw8CjAjEPt6UEH5IrAZMG0LHq4bJA3TYP7fu5M/2bkW Db1mkVNOPubzf3hppHDTHMKcn6I0AfYWp5BjI3jJeCoEKoG8KBkz2UpF+2XZl0VG d+8qPtAQQZa3fZBJmeUugr+33KnURDh97ADHOH1mYXk8vXHIOujgHBxfFq7cYBkm 3ov3XNw68x4rarHBf0XTg9L4l8y8F682uEepJ2ccapLlKTXZo9BGkFnHs3VaJNCd 3KXMfCqDLQitRk/hB2X1ztQtFAeggbojWUpJsJm+64tIPmjFoxs= -----END CERTIFICATE-----Generated at Wed Nov 20 14:21:28 2024 by rpki-client on console-fra.rpki-client.org