$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft File: F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft (raw, json) Hash identifier: gqLCL591P0F4Jth0YesLDtp9mHLExqF6ygZ0cTyCUeA= Subject key identifier: E2:D3:72:F8:35:37:33:2E:52:3C:BF:63:F5:DE:D8:C6:0E:69:40:B1 Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Certificate serial: 6BB439CD541B4C3193B16344EEDE4FB02EB2A07A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft Manifest number: 01F3 Signing time: Wed 20 Nov 2024 16:00:02 +0000 Manifest this update: Wed 20 Nov 2024 15:55:02 +0000 Manifest next update: Sun 24 Nov 2024 02:40:02 +0000 Files and hashes: 1: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: qsAy9+8K3YocUUVABAHpwtAAQ9W+nqV1JTT37/pzGo4=) 2: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: kInQZ6+a0szsE+89xOKFo2QCmfmxhWma36K3DO0bgYU=) 3: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: 8rveHwJAjbzT7JrCP+j85CvzS9UmV2iXwgKY+Z+QZfY=) 4: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: D+zqgakWFBdHD5/mV/z3ocZSo/C1/ZxuuNBMHS2Lcrc=) 5: F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl (hash: TzFDBKQZG6lZ08yFQpHqCSvoeIJLIXN/SsMSrzbzQgE=) 6: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: 5nvoiGj4OjH2+HTzWQu4bmTNWJXJYHQTVDrsbt8AseA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b4:39:cd:54:1b:4c:31:93:b1:63:44:ee:de:4f:b0:2e:b2:a0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Validity Not Before: Nov 20 15:55:02 2024 GMT Not After : Nov 24 02:40:02 2024 GMT Subject: CN=E2D372F83537332E523CBF63F5DED8C60E6940B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:1d:b6:ad:cd:ed:ba:33:ae:ef:fa:d4:5d: db:79:25:5c:23:65:f5:fe:eb:6a:95:77:44:56:c0: 5f:3f:67:10:a9:3b:52:6a:41:b2:48:74:1c:26:f3: 36:84:44:c7:b1:02:be:57:64:98:a0:ca:fc:af:7e: 2c:ad:87:a4:3d:a2:49:19:e8:cb:c7:75:5b:46:d9: b0:71:17:72:0e:4f:c5:bc:13:01:25:40:70:b2:a2: ef:e4:7c:37:3c:94:61:7d:d6:36:a4:d5:e6:7f:96: 66:00:ff:7e:ee:6d:79:95:6e:35:76:69:f1:8c:91: b2:b9:4f:a9:f7:e5:47:a6:5b:7f:a6:1a:74:a9:95: 9c:08:41:32:c9:31:18:1c:a7:9f:0e:81:a1:b6:70: 2d:12:51:ed:87:db:d2:a2:cd:73:0c:ed:66:b5:ae: e3:33:0b:3f:b0:ce:1a:08:77:89:6c:98:2e:7b:72: 4b:a7:d7:18:54:a1:91:53:c7:16:13:d3:17:86:75: 4e:68:3a:1e:cb:88:d4:57:a8:ba:24:01:02:a9:9e: 48:f6:e0:02:3e:23:60:f6:c8:82:1d:94:30:1b:6a: f5:0c:46:5e:a6:d4:dc:bd:91:78:72:d8:d0:75:27: 14:5d:0c:eb:f8:e6:c4:29:a7:2a:97:e1:2b:b9:25: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D3:72:F8:35:37:33:2E:52:3C:BF:63:F5:DE:D8:C6:0E:69:40:B1 X509v3 Authority Key Identifier: keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7e:9b:06:7f:06:b3:b5:c1:21:0d:78:97:f8:c6:71:a0:97: d3:f5:0a:ad:24:6f:a7:ec:91:a9:92:2a:04:87:b1:10:e6:4c: 10:d4:00:21:01:f9:e7:15:e3:21:52:56:56:30:7d:07:54:db: 09:ef:81:2a:3d:d6:a5:7f:d1:45:fc:00:9e:f4:42:15:1e:43: 96:43:05:2b:5f:7f:71:af:c6:af:08:6b:46:52:2c:5c:70:76: 38:68:4a:ac:5e:93:d2:2a:bb:f6:66:0c:6c:c6:13:90:f6:d9: 7f:f7:9c:4d:17:40:2f:a5:9e:ac:02:66:f4:66:25:c5:87:4d: 66:a1:71:53:e5:c2:20:3c:c0:43:01:7b:14:85:59:09:56:fd: 45:a2:3d:0a:68:9f:ae:dc:03:17:07:6b:16:0f:5c:a4:e2:c8: 5c:ca:45:5a:b1:d9:73:f5:34:7c:c4:5a:a1:93:8b:63:62:43: 36:49:32:05:61:b3:7e:4c:ce:1d:c4:d0:90:d6:97:5c:ed:a8: 54:db:e2:80:a7:5b:8f:dd:a2:08:d9:00:7f:52:5d:69:8b:db: 0c:2f:2a:3e:f1:1b:7e:54:aa:40:8e:57:dd:58:e1:19:f6:fa: ef:88:f0:d6:2b:b4:8f:9f:35:a3:f7:2c:83:8d:76:8d:70:7d: 91:56:ab:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7Q5zVQbTDGTsWNE7t5PsC6yoHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkx QkJCOTJGNzAeFw0yNDExMjAxNTU1MDJaFw0yNDExMjQwMjQwMDJaMDMxMTAvBgNV BAMTKEUyRDM3MkY4MzUzNzMzMkU1MjNDQkY2M0Y1REVEOEM2MEU2OTQwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwB22rc3tujOu7/rUXdt5JVwj ZfX+62qVd0RWwF8/ZxCpO1JqQbJIdBwm8zaERMexAr5XZJigyvyvfiyth6Q9okkZ 6MvHdVtG2bBxF3IOT8W8EwElQHCyou/kfDc8lGF91jak1eZ/lmYA/37ubXmVbjV2 afGMkbK5T6n35UemW3+mGnSplZwIQTLJMRgcp58OgaG2cC0SUe2H29KizXMM7Wa1 ruMzCz+wzhoId4lsmC57ckun1xhUoZFTxxYT0xeGdU5oOh7LiNRXqLokAQKpnkj2 4AI+I2D2yIIdlDAbavUMRl6m1Ny9kXhy2NB1JxRdDOv45sQppyqX4Su5Jf1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4tNy+DU3My5SPL9j9d7Yxg5pQLEwHwYDVR0j BBgwFoAU+N9A5Mlfnr+BRThwc2mV6Ru7kvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDAzYWYwMS1mMjM5LTRhMWYtODFjZC00MTA2YmViYjJhMjIvMC9GOERGNDBFNEM5 NUY5RUJGODE0NTM4NzA3MzY5OTVFOTFCQkI5MkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkxQkJC OTJGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1 RTkxQkJCOTJGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFR+mwZ/BrO1wSENeJf4xnGgl9P1Cq0kb6fs kamSKgSHsRDmTBDUACEB+ecV4yFSVlYwfQdU2wnvgSo91qV/0UX8AJ70QhUeQ5ZD BStff3Gvxq8Ia0ZSLFxwdjhoSqxek9Iqu/ZmDGzGE5D22X/3nE0XQC+lnqwCZvRm JcWHTWahcVPlwiA8wEMBexSFWQlW/UWiPQpon67cAxcHaxYPXKTiyFzKRVqx2XP1 NHzEWqGTi2NiQzZJMgVhs35Mzh3E0JDWl1ztqFTb4oCnW4/dogjZAH9SXWmL2wwv Kj7xG35UqkCOV91Y4Rn2+u+I8NYrtI+fNaP3LIONdo1wfZFWq2I= -----END CERTIFICATE-----Generated at Wed Nov 20 18:41:50 2024 by rpki-client on console-fra.rpki-client.org