$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft File: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json) Hash identifier: +hCIqpudAoIErszKyP0nyiCCgMHMOjqJz9t3MMgNppk= Subject key identifier: 0B:76:FC:8E:CE:00:97:F3:35:65:5F:F4:4E:E7:16:41:27:A4:7E:B5 Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Certificate serial: 523C2A8F81DD6F0FA8CB5F036027694826F27716 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft Manifest number: 0493 Signing time: Thu 21 Nov 2024 14:40:05 +0000 Manifest this update: Thu 21 Nov 2024 14:35:05 +0000 Manifest next update: Sun 24 Nov 2024 20:41:05 +0000 Files and hashes: 1: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: xIad1cbfpkkFrFXju0KSy8AIpVdCWSEtMiAqF7qID3c=) 2: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: IZIdj4MVauVRDpCQok6dBv3nTQTvOFsWDntkbq+SV20=) 3: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: n9ozOWQMzMeEdYIo0FEte5X/HvtCyN9+aT5sTd+tN0c=) 4: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: Enxf/xa4QiGnjWUhd96Msh7Dkzmv4QjqPDYSxD4tjhE=) 5: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: zXZN4XBzb/xjE5PUhLqfsrwTCA7e+BucjzfZkW492Ro=) 6: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: zDNAzKqw5j02WXuh6T5DV38kgqgTtQhlXzyZ+EBpvWk=) 7: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: siujlwkzUou5K4WYe044CdlVmPWfgaJ1MmQrHhAChAg=) 8: 34332e3234372e32322e302f32342d3234203d3e20313331373830.roa (hash: HBRVL6ab1EXX/4v+TicYMdAP2m56HzSbazq4BRWuQH4=) 9: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: Y6HORP6yRCGrAWJwDj8RiZ+o/wUqDRT+Ny8eG7aJ8kA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3c:2a:8f:81:dd:6f:0f:a8:cb:5f:03:60:27:69:48:26:f2:77:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Validity Not Before: Nov 21 14:35:05 2024 GMT Not After : Nov 24 20:41:05 2024 GMT Subject: CN=0B76FC8ECE0097F335655FF44EE7164127A47EB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:8a:7c:5f:01:0c:51:5c:c6:4e:05:8e:81: 78:cd:2c:6d:d9:9c:9d:8a:48:a3:10:30:f2:cd:d0: aa:28:77:03:40:f2:ed:ee:c2:c3:3a:77:34:86:bb: ec:f4:3a:a5:0a:ef:1f:54:76:26:c0:b5:58:4b:8e: 6e:f4:8a:4f:62:eb:5d:48:e2:87:c7:22:10:e3:fe: 69:df:9c:6d:d2:e8:0c:cc:87:bc:78:04:e6:c8:2c: 45:79:fb:91:af:6e:d8:2c:32:da:f5:5c:3d:f0:3a: 6e:cf:2f:56:43:83:bc:c1:20:69:cc:a9:3e:6b:08: f2:c9:ad:76:0d:f2:00:38:88:23:93:b4:39:15:81: ab:9e:ce:9a:a3:5e:de:4c:c8:91:2d:92:fb:33:4e: e3:cc:c7:da:48:20:de:e3:c8:7f:75:ba:76:df:4a: 62:a1:04:ac:ae:a4:9b:cc:35:5f:ea:a1:15:22:43: 68:47:16:aa:e0:c9:f4:2a:8f:cc:47:4a:9c:f8:25: 20:dd:15:af:55:d7:d3:54:b1:9e:32:43:13:c2:ad: a7:71:1c:c3:05:98:d1:48:fb:eb:6e:bd:28:32:37: ac:aa:b0:8b:d7:11:22:15:0a:07:d7:11:5d:b5:de: a4:e3:5d:82:9d:e7:df:2b:88:01:97:d7:7e:24:93: c9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:76:FC:8E:CE:00:97:F3:35:65:5F:F4:4E:E7:16:41:27:A4:7E:B5 X509v3 Authority Key Identifier: keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c9:f1:8a:b3:b5:ad:b8:26:7e:a1:69:38:98:89:aa:ac:22: f3:b5:f9:df:4c:81:6e:53:c9:32:50:ae:11:98:bd:88:20:61: 65:23:88:60:0d:63:d2:c9:08:86:c5:ad:a5:eb:1f:a8:79:74: 03:3c:8a:a8:da:1c:43:a2:2e:d8:82:c6:9b:17:b0:35:28:52: 88:d9:7d:19:10:a0:da:c4:c1:31:83:23:77:1c:44:17:25:b7: 61:b1:66:d5:26:ba:31:6b:aa:bf:11:45:0c:33:ae:32:fd:ce: 6e:01:f4:54:fb:ad:45:83:f8:4f:be:bd:2d:2e:5f:ff:9f:0b: 9d:08:ee:09:e9:7e:24:3f:71:d3:76:b3:8d:96:bb:a8:b2:e9: 91:3a:82:87:cb:26:13:a3:20:79:12:0e:c5:c4:85:52:a8:ab: 17:f5:6b:7a:87:42:33:bf:1b:0e:d1:cd:e9:4a:3f:cb:3d:e5: ed:35:dc:a2:ec:dd:94:13:12:6d:ae:fe:c8:48:a1:ed:37:83: e0:79:bf:af:ea:53:92:57:ce:1a:54:38:0a:5a:00:3a:f4:8a: 75:72:75:a7:76:61:08:39:7e:92:4a:12:38:6b:a6:67:37:d4: 70:7b:22:b2:69:f2:9b:f2:98:52:5c:ce:50:d1:a5:6c:f4:c8: cb:ae:0f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjwqj4Hdbw+oy18DYCdpSCbydxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC MjUwM0EzODAeFw0yNDExMjExNDM1MDVaFw0yNDExMjQyMDQxMDVaMDMxMTAvBgNV BAMTKDBCNzZGQzhFQ0UwMDk3RjMzNTY1NUZGNDRFRTcxNjQxMjdBNDdFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/Yp8XwEMUVzGTgWOgXjNLG3Z nJ2KSKMQMPLN0KoodwNA8u3uwsM6dzSGu+z0OqUK7x9UdibAtVhLjm70ik9i611I 4ofHIhDj/mnfnG3S6AzMh7x4BObILEV5+5GvbtgsMtr1XD3wOm7PL1ZDg7zBIGnM qT5rCPLJrXYN8gA4iCOTtDkVgauezpqjXt5MyJEtkvszTuPMx9pIIN7jyH91unbf SmKhBKyupJvMNV/qoRUiQ2hHFqrgyfQqj8xHSpz4JSDdFa9V19NUsZ4yQxPCradx HMMFmNFI++tuvSgyN6yqsIvXESIVCgfXEV213qTjXYKd598riAGX134kk8nnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC3b8js4Al/M1ZV/0TucWQSekfrUwHwYDVR0j BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw M0EzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1 ZjctZGZlN2M1NzIwNDg2LzAvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4 RUFCMjUwM0EzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDJ8Yqzta24Jn6haTiYiaqsIvO1+d9MgW5T yTJQrhGYvYggYWUjiGANY9LJCIbFraXrH6h5dAM8iqjaHEOiLtiCxpsXsDUoUojZ fRkQoNrEwTGDI3ccRBclt2GxZtUmujFrqr8RRQwzrjL9zm4B9FT7rUWD+E++vS0u X/+fC50I7gnpfiQ/cdN2s42Wu6iy6ZE6gofLJhOjIHkSDsXEhVKoqxf1a3qHQjO/ Gw7RzelKP8s95e013KLs3ZQTEm2u/shIoe03g+B5v6/qU5JXzhpUOApaADr0inVy dad2YQg5fpJKEjhrpmc31HB7IrJp8pvymFJczlDRpWz0yMuuDyQ= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org