$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft File: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft (raw, json) Hash identifier: v851kyuf0Qw54YOIl1HUrPKsulS7horQ9jErae0+EGQ= Subject key identifier: D8:64:E9:9D:50:CE:7C:BB:38:4A:A7:FD:9D:A1:F6:D0:C3:88:E1:43 Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Certificate serial: 5AFCD0BFD4B3BE3862C9333F3316A55874CA861B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft Manifest number: 0490 Signing time: Sun 24 Nov 2024 09:00:02 +0000 Manifest this update: Sun 24 Nov 2024 08:55:01 +0000 Manifest next update: Wed 27 Nov 2024 17:50:01 +0000 Files and hashes: 1: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: lpfns/g/H9K8Wfv1chRemKmhS+d6ZGfM1lGRlJ6bBVk=) 2: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: BE++yCjQX47WWB6S5ls0xJdupFNe769usXbGx7dHHBM=) 3: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: rNIknBN49Czhf1hziOpm6i5yxwizp3oUDeoDC9vUoKQ=) 4: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: 97SrnRSrUSZ16NnEkcOkfyw1LKTcRWGpwcN9oS56FBw=) 5: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: 18oVhB2sTi3iocLxX/xcEu6OuCJaTnvrPxNJBGq5PfY=) 6: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl (hash: G0EAj/Jlp31bRfdKjr1kwrHt7TDuNp2sdD2SYxjXRWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fc:d0:bf:d4:b3:be:38:62:c9:33:3f:33:16:a5:58:74:ca:86:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Validity Not Before: Nov 24 08:55:01 2024 GMT Not After : Nov 27 17:50:01 2024 GMT Subject: CN=D864E99D50CE7CBB384AA7FD9DA1F6D0C388E143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:54:a2:b6:3c:b2:cd:62:84:13:70:bb:7f:f8: 4e:ea:e3:09:0b:d4:c5:62:e3:ee:9d:fe:4b:52:21: 4a:4b:13:0b:ad:cb:13:e3:29:90:9f:6b:bb:3a:57: 86:6c:e1:c9:41:21:42:09:6b:6c:4f:ef:9b:f1:23: bc:8a:01:1e:91:8e:35:83:28:e6:1c:a3:eb:0b:7b: b1:03:f0:90:9e:82:2d:08:69:10:7b:9e:3d:09:06: 1f:61:be:7c:a9:69:14:5c:9b:e9:f4:e5:06:ba:cb: e5:76:36:fe:85:b9:a4:3a:96:80:4b:bf:0f:10:6d: 99:d2:c7:b9:82:6c:cb:e8:ec:3d:24:7d:f7:94:a8: 7d:f0:9d:df:4a:c5:ae:c3:4b:e3:74:ea:68:66:c4: a6:38:3f:e8:a0:d0:0f:8e:c3:fa:b7:02:9f:cb:ce: fa:b5:28:1c:b2:d5:2a:7d:df:89:d3:b8:7b:13:e3: 95:ee:3e:b2:c4:ff:d3:85:ed:77:30:4e:48:c1:de: 43:97:2a:53:ec:e3:04:05:a0:15:e8:e2:1a:72:80: b0:d3:e1:10:68:48:4b:7f:b0:87:87:cf:9c:85:cc: 52:c1:68:6a:a0:7d:6c:ed:00:d3:fc:99:be:ec:6c: 5c:c5:23:b5:ce:86:38:df:72:46:7d:95:8d:bf:8a: 37:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:64:E9:9D:50:CE:7C:BB:38:4A:A7:FD:9D:A1:F6:D0:C3:88:E1:43 X509v3 Authority Key Identifier: keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:35:bf:63:df:dc:41:c3:39:16:e8:ea:da:2d:24:23:9b:52: eb:95:dc:3a:d9:07:87:91:6d:84:b3:bd:82:f3:9c:9d:6b:70: b1:e0:c5:a0:fb:96:ae:a1:45:03:be:28:15:2d:45:94:cd:ef: f6:2c:f1:2d:92:ce:94:be:ef:63:4b:49:30:7a:68:de:70:ae: c0:63:88:64:a6:e4:a0:0d:8f:c8:e5:16:62:cc:b0:c3:ac:4b: d8:c7:73:68:73:e2:82:09:30:68:02:3a:6f:e2:a4:23:ca:6f: d6:20:ba:7a:3e:d4:40:49:55:8f:83:2e:dc:59:2f:0c:15:b3: 47:f0:ab:47:6e:ec:df:9e:b3:80:88:67:2c:e8:9c:fc:91:32: 87:05:27:ee:fc:e5:83:fb:c8:35:da:e3:ba:90:44:29:9f:10: f6:40:50:20:a2:43:4e:f7:4e:70:09:ac:f8:26:c3:2c:93:f2: 1f:5f:72:43:1c:cf:05:22:85:5f:95:2b:b9:ed:37:f3:ae:aa: 43:72:8b:e4:ff:60:2b:19:4d:79:4f:dd:ba:57:29:d7:c3:76: ed:af:66:af:92:84:82:ef:f6:2c:26:52:d0:9c:04:73:b9:e1: 59:63:ff:6c:dd:7a:4b:b4:1d:f2:c2:d1:d7:42:05:26:ce:73: 3c:7c:2b:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWvzQv9SzvjhiyTM/MxalWHTKhhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNF RTZBRDFGOTAeFw0yNDExMjQwODU1MDFaFw0yNDExMjcxNzUwMDFaMDMxMTAvBgNV BAMTKEQ4NjRFOTlENTBDRTdDQkIzODRBQTdGRDlEQTFGNkQwQzM4OEUxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfVKK2PLLNYoQTcLt/+E7q4wkL 1MVi4+6d/ktSIUpLEwutyxPjKZCfa7s6V4Zs4clBIUIJa2xP75vxI7yKAR6RjjWD KOYco+sLe7ED8JCegi0IaRB7nj0JBh9hvnypaRRcm+n05Qa6y+V2Nv6FuaQ6loBL vw8QbZnSx7mCbMvo7D0kffeUqH3wnd9Kxa7DS+N06mhmxKY4P+ig0A+Ow/q3Ap/L zvq1KByy1Sp934nTuHsT45XuPrLE/9OF7XcwTkjB3kOXKlPs4wQFoBXo4hpygLDT 4RBoSEt/sIeHz5yFzFLBaGqgfWztANP8mb7sbFzFI7XOhjjfckZ9lY2/ijczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GTpnVDOfLs4Sqf9naH20MOI4UMwHwYDVR0j BBgwFoAUTe+92YVL6NHij3MwoLgCw+5q0fkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MGRlMjMxZi1mYjhhLTQyN2EtYWEzNi0wYTNmYzk3MjMyOGQvMC80REVGQkREOTg1 NEJFOEQxRTI4RjczMzBBMEI4MDJDM0VFNkFEMUY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNFRTZB RDFGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAy QzNFRTZBRDFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGg1v2Pf3EHDORbo6totJCObUuuV3DrZB4eR bYSzvYLznJ1rcLHgxaD7lq6hRQO+KBUtRZTN7/Ys8S2SzpS+72NLSTB6aN5wrsBj iGSm5KANj8jlFmLMsMOsS9jHc2hz4oIJMGgCOm/ipCPKb9Yguno+1EBJVY+DLtxZ LwwVs0fwq0du7N+es4CIZyzonPyRMocFJ+785YP7yDXa47qQRCmfEPZAUCCiQ073 TnAJrPgmwyyT8h9fckMczwUihV+VK7ntN/OuqkNyi+T/YCsZTXlP3bpXKdfDdu2v Zq+ShILv9iwmUtCcBHO54Vlj/2zdeku0HfLC0ddCBSbOczx8Kxo= -----END CERTIFICATE-----Generated at Sun Nov 24 10:18:22 2024 by rpki-client on console-fra.rpki-client.org