$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: DXN2IKLQ7w7jZECZSPHec2AEUYbnxngeoBbHjx0ue90= Subject key identifier: 60:2E:AF:31:72:B6:8A:27:89:D6:7D:BD:A9:C5:D6:95:DA:D3:1F:08 Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 63843554B3CC16FEFFD6A2D9FE8B413B4DA19640 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: 33 Signing time: Fri 27 Sep 2024 23:44:08 +0000 Manifest this update: Fri 27 Sep 2024 23:39:08 +0000 Manifest next update: Tue 01 Oct 2024 03:53:08 +0000 Files and hashes: 1: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: sgoZuUi7jvpVRhKGhEruuNGzjvl8BybteoT7kUFRtd8=) 2: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: J3T8X7ZJVcf+xL7seKPOkVeZWHPjQGRxd1iPkjH4nwA=) 3: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: ctntkAXUI57UCQ3sU6b5QuN5R1MB/23qibMUlSwHY7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 10:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:84:35:54:b3:cc:16:fe:ff:d6:a2:d9:fe:8b:41:3b:4d:a1:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Sep 27 23:39:08 2024 GMT Not After : Oct 1 03:53:08 2024 GMT Subject: CN=602EAF3172B68A2789D67DBDA9C5D695DAD31F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:89:24:10:f9:9b:b7:24:ba:81:28:a4:91: 06:82:33:df:1b:bf:13:b3:f4:1e:d0:de:e2:3e:8d: d5:06:37:db:3d:04:08:a4:1d:d8:73:e3:96:8f:e1: 20:4e:bf:3c:26:6c:f2:5e:ef:ea:81:ba:9a:a2:18: 4d:4e:20:90:36:62:e2:c3:24:4e:16:9c:b6:d9:5b: 03:ad:48:3d:1a:4a:ad:e4:fc:71:1f:8d:0b:e2:d4: 7a:34:14:8e:2d:7c:b7:df:f2:3c:00:ef:19:af:01: 1a:f9:fe:c4:b9:30:df:bc:38:6a:71:bd:98:72:45: 22:40:60:f0:30:d3:46:8b:d8:a0:fe:e5:3f:35:a9: 59:1b:33:35:6a:56:8c:42:ef:ec:3e:21:69:2c:5e: 83:3d:84:5f:c2:6e:90:f5:e0:34:62:f2:c5:f7:9c: cb:dd:b1:24:7c:c8:ce:05:e9:1d:73:8c:46:89:e1: 2a:a3:05:7f:00:30:2e:3d:21:b1:f6:32:62:80:96: 84:55:ca:39:34:44:31:3c:5d:49:4d:6f:c6:9c:05: 9a:78:3b:90:c1:f2:6f:d7:9c:1d:ca:94:21:a5:d5: 58:be:05:17:80:fb:63:47:cc:bf:cb:ff:19:a4:47: e2:bd:fb:10:c1:4e:a8:db:d4:e7:73:58:89:70:14: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2E:AF:31:72:B6:8A:27:89:D6:7D:BD:A9:C5:D6:95:DA:D3:1F:08 X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:62:0b:27:8d:5a:b6:33:c0:a4:7c:a7:c3:87:c0:ef:73:7e: 71:1d:23:14:ad:d7:f0:e6:30:b8:72:96:a4:f3:be:c6:bc:4b: 20:16:f2:e2:e2:c5:42:0b:85:14:9c:44:09:c7:cf:ea:8f:a9: 2b:3d:ed:24:4e:ab:de:dc:92:66:03:c6:1f:0c:10:7c:f6:61: 50:a1:75:25:a3:42:6e:99:fe:8b:d2:33:23:7e:74:d4:6d:eb: 01:ed:45:53:7e:e3:8f:55:54:58:ce:3f:da:4e:22:44:a5:18: 88:1b:72:42:59:7c:06:fa:77:1f:ab:d3:66:3e:e9:e3:9d:fd: aa:7a:71:42:5e:c3:47:54:c0:5c:b0:64:b5:5a:fa:f1:bc:c6: b9:4c:a8:3f:80:ee:29:e2:7d:bd:6f:03:6d:5f:1b:c7:26:91: c8:b8:39:02:82:77:e1:c0:88:db:f7:8a:38:82:32:2f:ad:dd: 37:70:60:b2:67:15:ba:f3:22:ff:ad:02:ff:a8:72:a2:fa:18: 91:e3:f4:16:cc:3a:8e:9c:74:b1:af:ce:db:8d:b2:bf:06:62: 12:ca:4b:13:9d:48:cb:8b:22:ab:91:47:6d:c1:f9:09:18:6b: 38:a2:7b:7e:91:36:39:c9:53:9e:5f:e1:ea:07:0d:76:63:21: b9:20:41:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4Q1VLPMFv7/1qLZ/otBO02hlkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNDA5MjcyMzM5MDhaFw0yNDEwMDEwMzUzMDhaMDMxMTAvBgNV BAMTKDYwMkVBRjMxNzJCNjhBMjc4OUQ2N0RCREE5QzVENjk1REFEMzFGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDYkkEPmbtyS6gSikkQaCM98b vxOz9B7Q3uI+jdUGN9s9BAikHdhz45aP4SBOvzwmbPJe7+qBupqiGE1OIJA2YuLD JE4WnLbZWwOtSD0aSq3k/HEfjQvi1Ho0FI4tfLff8jwA7xmvARr5/sS5MN+8OGpx vZhyRSJAYPAw00aL2KD+5T81qVkbMzVqVoxC7+w+IWksXoM9hF/CbpD14DRi8sX3 nMvdsSR8yM4F6R1zjEaJ4SqjBX8AMC49IbH2MmKAloRVyjk0RDE8XUlNb8acBZp4 O5DB8m/XnB3KlCGl1Vi+BReA+2NHzL/L/xmkR+K9+xDBTqjb1OdzWIlwFL1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYC6vMXK2iieJ1n29qcXWldrTHwgwHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBiCyeNWrYzwKR8p8OHwO9zfnEdIxSt1/Dm MLhylqTzvsa8SyAW8uLixUILhRScRAnHz+qPqSs97SROq97ckmYDxh8MEHz2YVCh dSWjQm6Z/ovSMyN+dNRt6wHtRVN+449VVFjOP9pOIkSlGIgbckJZfAb6dx+r02Y+ 6eOd/ap6cUJew0dUwFywZLVa+vG8xrlMqD+A7inifb1vA21fG8cmkci4OQKCd+HA iNv3ijiCMi+t3TdwYLJnFbrzIv+tAv+ocqL6GJHj9BbMOo6cdLGvztuNsr8GYhLK SxOdSMuLIquRR23B+QkYaziie36RNjnJU55f4eoHDXZjIbkgQdI= -----END CERTIFICATE-----Generated at Sat Sep 28 01:14:15 2024 by rpki-client on console-ams.rpki-client.org