$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft File: 5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft (raw, json) Hash identifier: ovD4fuK2Y1f4BJS7X32v3AiV2WofC3Lb2KamkwcmDfY= Subject key identifier: CF:F8:4C:2D:F8:2A:AE:DC:E8:E4:B6:63:1D:BD:3E:67:FB:06:99:B9 Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 Certificate issuer: /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Certificate serial: 49AA60B3AC884802F9F9A44BF8C9CA924803DD04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft Manifest number: E9 Signing time: Sun 24 Nov 2024 19:10:48 +0000 Manifest this update: Sun 24 Nov 2024 19:05:48 +0000 Manifest next update: Thu 28 Nov 2024 02:17:48 +0000 Files and hashes: 1: 3131362e3231322e37382e302f32342d3234203d3e203436303330.roa (hash: dtV1Q6fEQu7guvWg1pDBwsSUTQpraVOALaMqaYy+cFA=) 2: 3138322e34382e3137302e302f32342d3234203d3e203436303330.roa (hash: aKrqLRc3oeRmKtAiHafzWG0ZDnPDSTTrhQnihUWKQwo=) 3: 3138322e34382e3137312e302f32342d3234203d3e203436303330.roa (hash: XUZtKsFqeIODkga1fqeHIpmKBxMRUS8FwuufwXLfaPo=) 4: 3138322e34382e3138352e302f32342d3234203d3e203436303330.roa (hash: If36ui5ISEg5WOxMXpH75GpsG72nyYEsakjMPL+WNvw=) 5: 3138322e34382e3137372e302f32342d3234203d3e203436303330.roa (hash: E6yvlnYsuG3P5SR0gAsCcrs4Zwrazl+Nme+VfnR7wyc=) 6: 3138322e34382e3136392e302f32342d3234203d3e203436303330.roa (hash: 0T544xsN4ySjg/INxvgLm+aGX2IXFj2ZfP/2WfvI8lw=) 7: 3138322e34382e3136352e302f32342d3234203d3e203436303330.roa (hash: r++7vd+gdxt9z/eLhSAte5ZAfnULkbSvxuv/vc8jEv4=) 8: 3138322e34382e3138332e302f32342d3234203d3e203436303330.roa (hash: nn+YViD8iPMYRRHFPKoRPa0Fdfw/822DV5P0FtNw2b8=) 9: 3138322e34382e3136332e302f32342d3234203d3e203436303330.roa (hash: fz7pE6lsWM9JX0ijg+ZHjfZgq5viOkafk0ivlWyKRSU=) 10: 3138322e34382e3136312e302f32342d3234203d3e203436303330.roa (hash: K3nlfYirDvR769Z3V9W4HIGLTuxY51u/PpBe0jv+QR4=) 11: 3138322e34382e3138362e302f32342d3234203d3e203436303330.roa (hash: HcQ5GoHHnRwocPGqeTpV3GVhbsdLlY1Kz5sRfa/HuSw=) 12: 3138322e34382e3136372e302f32342d3234203d3e203436303330.roa (hash: Wjv/vr9DyEUW/Sqv35zo20T9exfa1tRPk200tPXrs1M=) 13: 3138322e34382e3137332e302f32342d3234203d3e203436303330.roa (hash: owkU42wor7dF3uScrXa9xU3lLmFWohXt8gzZEU3sqsI=) 14: 3138322e34382e3137362e302f32342d3234203d3e203436303330.roa (hash: +39ZiPXe2qiuQnI8Twz2gwGEEiloIsDlYgaNtpnRdkA=) 15: 3138322e34382e3139312e302f32342d3234203d3e203436303330.roa (hash: ceEnfWRwmqLHh0Lw2syLsn9i08+vwf2GZqNCFPBl9j4=) 16: 3138322e34382e3136322e302f32342d3234203d3e203436303330.roa (hash: BxjzlC7u077w9xTRDDpKRSMBAPXLK5WE9elUMfJdUYs=) 17: 3138322e34382e3138322e302f32342d3234203d3e203436303330.roa (hash: RKQd5pmBLA8JjLOOUuipDyEd6jTJEf9cqIFWli7xFOg=) 18: 3131362e3231322e37352e302f32342d3234203d3e203436303330.roa (hash: 0LgCtl5aduvId4VplIQD/Xs1NbhFNgZFMAvngluSFL0=) 19: 3131362e3231322e37332e302f32342d3234203d3e203436303330.roa (hash: LSv0+zJii1HC1fg1FYrZ1lSSdy6fFemV9KE3MB6q6pg=) 20: 3131362e3231322e37362e302f32342d3234203d3e203436303330.roa (hash: CWFZQsV4yhJm2Qx9usWj6hPfyHJpvtDrYrIDwA/5YX4=) 21: 3138322e34382e3138312e302f32342d3234203d3e203436303330.roa (hash: 21dVvDFGfDiujO47vod+njWBpHIx18cGyjhfYBLp0fI=) 22: 3138322e34382e3138302e302f32342d3234203d3e203436303330.roa (hash: cv8YHeeRc0AB35HSHUjNGSFgPBIjP+/hJy8V1jkJnHs=) 23: 3131362e3231322e37342e302f32342d3234203d3e203436303330.roa (hash: 20n03HuyGAQTXshs+DPoPR8amBFYZ3n7onA27ygvSuU=) 24: 5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl (hash: gj9rXl26++fOlRkRfl8fuv0196p+hU1neN8CxmTaKvc=) 25: 3131362e3231322e37322e302f32342d3234203d3e203436303330.roa (hash: bPRucN9mP+x6XcRUCqS2LOfuwAQtoYyOOJN3L9ZeYEk=) 26: 3138322e34382e3137352e302f32342d3234203d3e203436303330.roa (hash: 0Z6Y7wUs3sQvIXvwwz0LAIPFW+P/u9fdTsG7k0NE8dw=) 27: 3138322e34382e3136382e302f32342d3234203d3e203436303330.roa (hash: AolT7J+ePa9J4EKtOpAu1IDbbuDZUgCU4YfooWQ+Ldc=) 28: 3138322e34382e3136342e302f32342d3234203d3e203436303330.roa (hash: 6U6opXheXLSLB9cg3bDYpV3wRaHn5z1n1hNb82/TKxM=) 29: 3131362e3231322e37322e302f32312d3234203d3e203436303330.roa (hash: gx3HhvD+um8M59vvpKpxIdsP+E9PUgnQxDxum3XiRT0=) 30: 3138322e34382e3138342e302f32342d3234203d3e203436303330.roa (hash: aOAMgvu/7AUsSGCKkRwvfE95K3iF0Yt6aw1p3uNHS4I=) 31: 3138322e34382e3138372e302f32342d3234203d3e203436303330.roa (hash: 3UgjHn9Kd6NUaKC2uKO0a9pveb+sI6oz03h+BYFrifs=) 32: 3138322e34382e3137322e302f32342d3234203d3e203436303330.roa (hash: c/XXZqHYOXjpYHVGdSoE0QNSnKAtAYncR4+lDVCTcSA=) 33: 3138322e34382e3137392e302f32342d3234203d3e203436303330.roa (hash: 0rnvuoiVtTgdbOPInOefPtOaPzt6aW8XAQ2SKwISHBE=) 34: 3138322e34382e3137342e302f32342d3234203d3e203436303330.roa (hash: cGitK55x4/e0mnc8p8NPISgyJ0orLGwNlfFzH6C3lxQ=) 35: 3138322e34382e3136302e302f31392d3234203d3e203436303330.roa (hash: JTZjh8mtMCSpfsCqOmu6KAFKtC1C+gsku2metbecnM8=) 36: 3138322e34382e3136362e302f32342d3234203d3e203436303330.roa (hash: FVh1gXMkRIjDohWK3vKEyHUK3kAZCcI0I12czLT7IfM=) 37: 3138322e34382e3137382e302f32342d3234203d3e203436303330.roa (hash: Qi/UyyL93gzEX4HNieop4l2lTEkryddDu04UVVgkEQs=) 38: 3138322e34382e3138392e302f32342d3234203d3e203436303330.roa (hash: xZ7N0Y4uMOiwZDEXq8NBNpcOhrO2mBzlc3rxHFlTag8=) 39: 3138322e34382e3136302e302f32342d3234203d3e203436303330.roa (hash: sVp2t5x46iRQTpVmORMMAEOst4NyrQl8BB4AXHIyVD4=) 40: 3138322e34382e3138382e302f32342d3234203d3e203436303330.roa (hash: T3Mw/OBXpFnXkmGVbmW6oJW0+llnpIs6LNmKUc6HW2k=) 41: 3131362e3231322e37372e302f32342d3234203d3e203436303330.roa (hash: lfywBJOdb6STCk6FdcuLb1+jI7uTny9uVeOeSeE90ZI=) 42: 3138322e34382e3139302e302f32342d3234203d3e203436303330.roa (hash: TfAVjqrgdjPazQqn9ICGBllLFoUdMpfHEws2stUEtZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:aa:60:b3:ac:88:48:02:f9:f9:a4:4b:f8:c9:ca:92:48:03:dd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Validity Not Before: Nov 24 19:05:48 2024 GMT Not After : Nov 28 02:17:48 2024 GMT Subject: CN=CFF84C2DF82AAEDCE8E4B6631DBD3E67FB0699B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:38:44:7c:93:20:e3:f7:85:8e:28:4f:50: 8d:2d:13:d2:6f:2a:b0:9b:ab:aa:b4:83:16:68:7e: c9:9d:1d:13:bd:9e:6d:f4:0e:95:df:e6:b0:c1:75: 99:5a:e3:b5:cc:9d:e8:2f:d8:0a:f7:b4:1d:e9:e1: 6c:76:78:68:d6:62:4d:f1:19:86:3b:8d:be:b6:1a: f1:38:6c:f6:1a:5c:16:5d:e9:5a:45:c8:1e:b0:22: 40:ea:2f:25:93:d6:a7:5d:9b:10:78:cd:74:c9:66: ce:41:72:23:69:1e:92:33:74:86:06:80:25:e5:93: 7d:22:a7:0f:4f:eb:9f:ed:3f:ec:56:66:21:82:b2: 16:65:21:d1:63:ea:aa:85:19:77:e0:0e:14:4d:98: ad:44:96:d9:e7:d4:46:c2:5e:73:88:69:6a:bb:0a: 8c:9c:bd:cc:7c:34:78:69:b7:22:8f:bc:0a:4c:57: f8:12:fc:aa:28:8c:02:3a:22:b1:c3:da:51:fc:23: f4:3e:e3:2b:0a:76:ec:28:c0:c6:d8:32:5d:c0:3e: c3:ea:ed:13:4e:91:9b:af:7c:54:40:9a:ae:96:da: 2f:c3:b6:83:f0:45:d0:9b:be:2a:73:3d:02:d6:5d: d9:9f:ce:5a:87:6f:40:34:25:44:ae:61:0b:80:04: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F8:4C:2D:F8:2A:AE:DC:E8:E4:B6:63:1D:BD:3E:67:FB:06:99:B9 X509v3 Authority Key Identifier: keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ee:7a:80:76:69:c5:1d:5a:ab:7a:a8:f6:46:a3:f5:fd:9b: 25:c4:18:84:36:0c:46:32:4d:4e:66:f9:75:5e:d5:af:90:01: 12:34:f6:18:61:5f:e7:0d:10:cf:7b:31:df:ed:51:d1:c2:54: ef:9e:be:fc:ae:22:ae:40:d5:03:c6:ba:02:08:72:e3:0d:b6: a8:dd:4e:d4:b6:ea:62:be:91:84:71:51:25:04:4f:c3:99:71: 4c:90:a8:b8:1b:a0:ed:36:7d:a6:4a:80:26:ae:c8:c4:cd:2d: 54:04:18:d9:de:02:8a:78:d6:da:40:0f:d4:50:1d:d3:97:81: 99:54:3d:3c:5c:5e:09:13:78:d5:c0:1c:09:65:ad:00:21:fe: 71:80:64:65:f0:fc:95:f2:70:bf:b0:53:53:25:37:bf:de:8a: fd:2d:94:13:18:1e:92:0f:a5:d4:c6:c3:de:df:f8:51:cc:80: 80:f2:19:12:8b:c1:9c:b6:3d:da:80:eb:cb:3f:25:3b:4a:6a: 18:de:f9:69:b0:d8:e2:f2:3b:b2:95:39:f9:4c:bf:38:29:07: 11:0f:91:64:ea:78:3c:74:37:f9:95:c9:16:6f:63:52:48:22: a1:79:c9:f6:fe:6b:65:b5:2d:08:88:61:2d:12:2d:8b:bd:bd: 33:ff:51:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSapgs6yISAL5+aRL+MnKkkgD3QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0 MEZCMDU1NjAeFw0yNDExMjQxOTA1NDhaFw0yNDExMjgwMjE3NDhaMDMxMTAvBgNV BAMTKENGRjg0QzJERjgyQUFFRENFOEU0QjY2MzFEQkQzRTY3RkIwNjk5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPjhEfJMg4/eFjihPUI0tE9Jv KrCbq6q0gxZofsmdHRO9nm30DpXf5rDBdZla47XMnegv2Ar3tB3p4Wx2eGjWYk3x GYY7jb62GvE4bPYaXBZd6VpFyB6wIkDqLyWT1qddmxB4zXTJZs5BciNpHpIzdIYG gCXlk30ipw9P65/tP+xWZiGCshZlIdFj6qqFGXfgDhRNmK1Eltnn1EbCXnOIaWq7 Coycvcx8NHhptyKPvApMV/gS/KoojAI6IrHD2lH8I/Q+4ysKduwowMbYMl3APsPq 7RNOkZuvfFRAmq6W2i/DtoPwRdCbvipzPQLWXdmfzlqHb0A0JUSuYQuABBMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/hMLfgqrtzo5LZjHb0+Z/sGmbkwHwYDVR0j BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC MDU1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQxZDU5NmMtMDllMy00NjIxLWE2 M2ItMjBhNTEzY2Q0OGI5LzAvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1 N0I0MEZCMDU1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDueoB2acUdWqt6qPZGo/X9myXEGIQ2DEYy TU5m+XVe1a+QARI09hhhX+cNEM97Md/tUdHCVO+evvyuIq5A1QPGugIIcuMNtqjd TtS26mK+kYRxUSUET8OZcUyQqLgboO02faZKgCauyMTNLVQEGNneAop41tpAD9RQ HdOXgZlUPTxcXgkTeNXAHAllrQAh/nGAZGXw/JXycL+wU1MlN7/eiv0tlBMYHpIP pdTGw97f+FHMgIDyGRKLwZy2PdqA68s/JTtKahje+Wmw2OLyO7KVOflMvzgpBxEP kWTqeDx0N/mVyRZvY1JIIqF5yfb+a2W1LQiIYS0SLYu9vTP/UW8= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org