$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft File: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft (raw, json) Hash identifier: kHrH3GSxOvl7fk2xOFbK1aF0q1nMxtv1hgRLBEMD7Sg= Subject key identifier: 55:77:15:0B:01:C8:49:57:6A:9E:2F:FC:C8:B7:25:10:66:53:AA:CE Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 03B10CE47DDD0E0D8B7ED02AD0B7B4E4ED37BF0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft Manifest number: 29 Signing time: Wed 20 Nov 2024 05:20:48 +0000 Manifest this update: Wed 20 Nov 2024 05:15:48 +0000 Manifest next update: Sat 23 Nov 2024 13:46:48 +0000 Files and hashes: 1: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: MO6/lQY/Nl8VnXin+gA+foQOLuvJOUz6SX7TNLs7MqE=) 2: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: k9ZzAkFQGvt+xqoKJ82nD9k3QBtwiwB5qwFg/LMZg2I=) 3: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl (hash: 99cWJCyJ+oEwplW4s95N2IVGyN+iXiQzIkbtGdGcFMU=) 4: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: oOhjxNchKYaSdtA4Y1DYNdIAblAIJ4R/DzgKf/zg2vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 13:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b1:0c:e4:7d:dd:0e:0d:8b:7e:d0:2a:d0:b7:b4:e4:ed:37:bf:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Nov 20 05:15:48 2024 GMT Not After : Nov 23 13:46:48 2024 GMT Subject: CN=5577150B01C849576A9E2FFCC8B725106653AACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:91:a5:93:5f:94:c6:ef:51:7c:b9:28:e4:f0: 10:a0:30:ac:8f:1f:67:c4:ea:da:2c:bd:45:ad:6b: 71:99:7f:db:37:b0:8b:ec:5d:53:95:59:f8:70:da: 8d:e5:f9:45:22:bf:13:62:df:3a:0b:dc:71:11:aa: 1a:78:24:e1:b4:84:84:1d:39:ef:98:7b:7a:90:0c: d9:e0:81:27:ee:6a:31:91:95:f7:eb:63:94:9e:19: 10:d9:78:17:e5:eb:8d:3b:a1:4a:5b:fb:32:41:70: 7e:6b:cc:03:42:25:a7:7b:b9:41:5a:fa:5b:6d:0a: 0b:eb:41:04:eb:e9:a0:a9:c5:f8:d0:dc:e9:a9:da: 73:8a:e0:d8:fc:f8:00:85:90:2c:87:7a:ba:53:13: 43:94:ee:c9:87:2c:cf:66:4a:53:02:2e:cd:a9:fd: 96:f7:a9:71:37:31:e6:f4:67:14:97:5d:46:42:8b: c7:b1:0e:84:db:09:1d:b7:5c:36:11:81:89:1a:16: b0:dd:a4:ff:e5:09:70:fb:55:08:95:01:5e:c2:4f: c8:52:a2:ca:29:5e:e2:c8:21:68:c6:93:60:97:64: 10:20:fc:56:c1:7e:c0:a9:fd:5e:96:ed:01:99:d4: 85:c8:65:47:f7:42:5e:0b:7d:70:23:69:2a:d1:37: 6a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:77:15:0B:01:C8:49:57:6A:9E:2F:FC:C8:B7:25:10:66:53:AA:CE X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8e:0f:ef:77:d8:d3:db:93:00:b5:7a:0f:52:af:7a:6d:e6: 47:67:6e:29:18:f2:05:7b:7d:92:75:b2:ff:f5:f8:05:68:30: 87:1d:60:ec:e3:39:81:b8:6b:80:c1:e7:2c:3d:ea:c2:ad:ca: 55:97:0d:ed:84:b5:64:aa:8e:33:1e:5d:d6:0e:b8:71:f8:6b: f0:5c:58:c3:76:4d:63:9f:ce:d9:59:b0:6d:09:78:12:e4:35: d8:62:c6:88:82:4d:88:8b:5b:9f:70:ca:1a:53:f4:02:9d:4b: 9c:24:0f:c4:f8:97:76:dd:22:7a:09:e2:51:3c:32:88:78:b1: 58:21:03:ad:bc:51:fe:e5:21:b7:df:8e:e5:57:b8:fd:a8:62: 1e:ec:7f:00:38:bb:dc:55:ba:18:60:6f:52:00:c3:7b:fd:c6: f2:20:9d:97:d8:7b:7f:cf:b0:42:5c:7d:0b:2f:03:c8:1d:fa: fa:43:d3:58:2c:59:34:4f:d9:36:5e:46:2b:0e:83:fa:a4:eb: bd:ea:83:3a:86:0f:58:4d:8e:4a:16:b8:18:75:14:00:be:fd: a7:78:4d:63:55:d1:5e:74:a3:04:bf:c5:2a:d8:97:9f:63:6a: 27:2a:fb:d9:b3:5a:8f:74:8e:11:cf:19:47:87:65:61:83:a5: e2:44:86:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7EM5H3dDg2LftAq0Le05O03vw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNDExMjAwNTE1NDhaFw0yNDExMjMxMzQ2NDhaMDMxMTAvBgNV BAMTKDU1NzcxNTBCMDFDODQ5NTc2QTlFMkZGQ0M4QjcyNTEwNjY1M0FBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkaWTX5TG71F8uSjk8BCgMKyP H2fE6tosvUWta3GZf9s3sIvsXVOVWfhw2o3l+UUivxNi3zoL3HERqhp4JOG0hIQd Oe+Ye3qQDNnggSfuajGRlffrY5SeGRDZeBfl6407oUpb+zJBcH5rzANCJad7uUFa +lttCgvrQQTr6aCpxfjQ3Omp2nOK4Nj8+ACFkCyHerpTE0OU7smHLM9mSlMCLs2p /Zb3qXE3Meb0ZxSXXUZCi8exDoTbCR23XDYRgYkaFrDdpP/lCXD7VQiVAV7CT8hS osopXuLIIWjGk2CXZBAg/FbBfsCp/V6W7QGZ1IXIZUf3Ql4LfXAjaSrRN2pdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVXcVCwHISVdqni/8yLclEGZTqs4wHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVG QzBFOUIyREEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiOD+932NPbkwC1eg9Sr3pt5kdnbikY8gV7 fZJ1sv/1+AVoMIcdYOzjOYG4a4DB5yw96sKtylWXDe2EtWSqjjMeXdYOuHH4a/Bc WMN2TWOfztlZsG0JeBLkNdhixoiCTYiLW59wyhpT9AKdS5wkD8T4l3bdInoJ4lE8 Moh4sVghA628Uf7lIbffjuVXuP2oYh7sfwA4u9xVuhhgb1IAw3v9xvIgnZfYe3/P sEJcfQsvA8gd+vpD01gsWTRP2TZeRisOg/qk673qgzqGD1hNjkoWuBh1FAC+/ad4 TWNV0V50owS/xSrYl59jaicq+9mzWo90jhHPGUeHZWGDpeJEhhU= -----END CERTIFICATE-----Generated at Wed Nov 20 06:21:50 2024 by rpki-client on console-ams.rpki-client.org