$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: baAwnqiL7q/W/REeNG5tXceQ7MnuEMk8qET2KcA137Y= Subject key identifier: 62:56:70:ED:DB:1D:7E:03:05:BE:20:30:3D:B8:F4:44:4F:B8:E7:18 Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 6CB751ED6A53496AF2E947218F801792799A5F53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 0217 Signing time: Fri 22 Nov 2024 14:32:15 +0000 Manifest this update: Fri 22 Nov 2024 14:27:15 +0000 Manifest next update: Mon 25 Nov 2024 23:21:15 +0000 Files and hashes: 1: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: bvyISvx5BIoaAcIFh7gy3ACE1bFOgd8mQ2Gp3lzlyj4=) 2: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: rBHXQQE56sq6EsG7xu2y3Ai8w3KX+cJsV+YvOEbZG7g=) 3: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: 1jgLlaBezLH1bN98QVh+doY7e4FkZJNvq1+3PndysYw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b7:51:ed:6a:53:49:6a:f2:e9:47:21:8f:80:17:92:79:9a:5f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Nov 22 14:27:15 2024 GMT Not After : Nov 25 23:21:15 2024 GMT Subject: CN=625670EDDB1D7E0305BE20303DB8F4444FB8E718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:10:5d:41:d4:bc:ab:22:af:ff:17:16:eb: 1f:9a:4c:8b:7b:40:c6:93:14:6f:58:da:20:d5:2f: e5:e0:6a:f9:06:1a:f8:28:4f:81:2f:9f:e7:3e:74: a9:d9:43:35:68:5b:f8:03:ad:8a:ae:2a:f8:31:35: d5:40:e6:3b:8e:89:10:57:28:bb:28:df:67:d2:06: f4:69:43:ca:68:98:26:4e:c3:66:4c:ed:50:05:fa: df:47:7f:dc:71:13:46:50:6f:7b:25:77:d8:3a:d6: 59:99:f9:34:8c:a1:2c:a4:cb:16:0c:8a:77:a7:ab: ba:5f:6f:e3:42:58:be:d9:5d:2b:b9:50:e9:89:4b: c1:03:76:38:96:72:cb:eb:13:92:d8:55:cd:32:e5: 24:b4:78:09:d6:c7:30:51:49:b9:9c:9b:fa:42:f1: 0b:cf:4f:8d:5d:05:25:23:ba:8e:d3:ad:a0:f1:6f: b2:8f:ad:5c:4a:83:18:63:cb:ea:c0:0f:f3:1d:fd: 75:25:d9:9b:e6:fd:fa:12:b2:4f:35:19:4c:c7:7e: 1c:cf:b9:4d:8c:24:eb:0e:75:5e:02:6d:96:3d:d8: b9:e2:30:08:34:70:8c:6b:95:6c:b8:5f:3b:26:b0: cc:d6:8f:ad:2d:03:4f:85:f4:c3:75:a2:84:17:26: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:56:70:ED:DB:1D:7E:03:05:BE:20:30:3D:B8:F4:44:4F:B8:E7:18 X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:12:53:1f:49:54:a8:5f:97:33:40:8d:96:da:61:cf:2d:9a: 31:d0:64:c9:ed:31:43:5a:73:cb:75:59:65:ce:61:88:1a:e1: 88:34:6c:2d:43:26:d6:49:69:a2:f8:d0:16:b0:65:7e:28:d8: bb:43:cb:9f:d0:2a:61:e3:d2:ae:0e:97:4e:b5:d4:3a:7a:b4: 7a:8c:9e:24:50:a8:b1:0b:bd:ec:22:68:a2:97:5d:eb:f9:3d: 3a:38:de:6b:60:22:38:1c:ae:b3:8f:54:13:40:f0:8a:61:fa: a6:a7:00:ed:11:3d:46:44:bb:0e:7c:aa:95:09:07:ce:8e:4f: f4:df:4e:d6:cc:ef:1a:5f:01:ba:59:e7:ed:fb:58:b0:9d:3b: 0c:29:a1:8c:c7:72:2b:c2:eb:f0:23:39:28:96:25:ed:16:f2: 6d:1c:7d:de:89:7d:42:e3:a3:d9:93:c7:16:f9:3b:81:d0:e4: 38:fd:1b:b2:e1:5a:ff:1d:7d:0c:39:dd:01:74:e2:aa:c7:22: cd:e7:47:f4:8f:f1:60:4c:03:b5:99:9a:11:08:dd:ef:66:b5: 51:21:b7:17:a2:7b:38:e9:31:de:2a:bb:2e:9b:3e:02:b2:46: 37:3e:62:4e:1c:08:89:30:b5:44:d7:72:38:ce:8b:34:fc:d8: 85:c0:14:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLdR7WpTSWry6Uchj4AXknmaX1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNDExMjIxNDI3MTVaFw0yNDExMjUyMzIxMTVaMDMxMTAvBgNV BAMTKDYyNTY3MEVEREIxRDdFMDMwNUJFMjAzMDNEQjhGNDQ0NEZCOEU3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuxBdQdS8qyKv/xcW6x+aTIt7 QMaTFG9Y2iDVL+XgavkGGvgoT4Evn+c+dKnZQzVoW/gDrYquKvgxNdVA5juOiRBX KLso32fSBvRpQ8pomCZOw2ZM7VAF+t9Hf9xxE0ZQb3sld9g61lmZ+TSMoSykyxYM inenq7pfb+NCWL7ZXSu5UOmJS8EDdjiWcsvrE5LYVc0y5SS0eAnWxzBRSbmcm/pC 8QvPT41dBSUjuo7TraDxb7KPrVxKgxhjy+rAD/Md/XUl2Zvm/foSsk81GUzHfhzP uU2MJOsOdV4CbZY92LniMAg0cIxrlWy4XzsmsMzWj60tA0+F9MN1ooQXJk3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYlZw7dsdfgMFviAwPbj0RE+45xgwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMSUx9JVKhflzNAjZbaYc8tmjHQZMntMUNa c8t1WWXOYYga4Yg0bC1DJtZJaaL40BawZX4o2LtDy5/QKmHj0q4Ol0611Dp6tHqM niRQqLELvewiaKKXXev5PTo43mtgIjgcrrOPVBNA8Iph+qanAO0RPUZEuw58qpUJ B86OT/TfTtbM7xpfAbpZ5+37WLCdOwwpoYzHcivC6/AjOSiWJe0W8m0cfd6JfULj o9mTxxb5O4HQ5Dj9G7LhWv8dfQw53QF04qrHIs3nR/SP8WBMA7WZmhEI3e9mtVEh txeiezjpMd4quy6bPgKyRjc+Yk4cCIkwtUTXcjjOizT82IXAFDE= -----END CERTIFICATE-----Generated at Fri Nov 22 15:22:19 2024 by rpki-client on console-fra.rpki-client.org