$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: UA5e2fGYWNB8r2GCnG9QORDazkbQ+E41Nm+CD1BsWa4= Subject key identifier: 9B:6C:99:D0:72:58:C4:7C:E4:C7:F5:DE:6B:5C:61:67:93:C2:34:F6 Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 4B46315E8E79344ED52FC6EB5F8C4C831BAB896C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 048A Signing time: Mon 25 Nov 2024 14:01:46 +0000 Manifest this update: Mon 25 Nov 2024 13:56:46 +0000 Manifest next update: Fri 29 Nov 2024 01:39:46 +0000 Files and hashes: 1: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: v0JnWBcFbtwhuEExnHHxx56viykqhWrUtZwwJfq93rE=) 2: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: DuPPvM0N+z/I5fh+w6ISB+swswfHuIEOv1y6nFrqj6k=) 3: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: 1Qt8qwh2i4MUTtsEtJwYMVCZJ1mTgJP3oDU6QNeWNqw=) 4: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: pp6eJWM9IAd1evvhu8IEUVdnwjKeJpRQ3lUtbh9s/rI=) 5: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: UbBgZ51f4C8Vvj6Jx9oSBaJ3qNsiB9IL8hCIyy1Np8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:46:31:5e:8e:79:34:4e:d5:2f:c6:eb:5f:8c:4c:83:1b:ab:89:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: Nov 25 13:56:46 2024 GMT Not After : Nov 29 01:39:46 2024 GMT Subject: CN=9B6C99D07258C47CE4C7F5DE6B5C616793C234F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:f7:52:1e:06:2b:83:af:b0:f2:cd:43:f3: 0c:e3:d9:f5:2f:b7:89:6f:40:bc:47:c6:20:cd:e4: b6:e9:c2:2f:40:a9:36:e5:c1:ec:a5:f6:09:b4:e3: 63:e2:e6:9a:76:ec:ff:fb:aa:d8:cf:4e:7f:5f:a2: df:a5:14:3d:78:78:ad:b1:c6:27:ac:69:ff:df:e5: a8:18:e5:96:c3:81:5f:25:22:b0:01:7c:db:25:de: 4b:f9:21:aa:82:20:06:f5:a8:8b:16:ef:f8:0d:3d: d5:80:03:f6:9b:a3:04:c8:8c:5c:b2:3f:0f:6b:1e: 57:eb:f3:bd:ae:c6:99:00:5d:93:a0:79:af:03:1c: 6c:5b:af:67:90:40:79:07:5b:6e:a0:f8:e0:cf:ea: e4:fe:bc:77:03:90:48:21:0a:78:18:3b:30:e0:25: e4:6a:4b:82:3a:54:a5:74:ab:9e:6b:a6:9b:46:2f: 7b:c0:3f:20:4b:fe:a6:1a:57:4c:28:26:7f:5f:b1: aa:6d:7d:30:24:21:78:da:a4:bc:e1:95:37:a3:3c: 16:0a:4a:bc:a4:09:05:18:4d:7b:e0:a8:28:a4:60: 1b:13:bc:42:6d:ab:68:68:8d:45:3a:f2:1c:d1:fc: 12:44:53:07:60:06:ee:d6:13:62:b8:e9:f9:e3:3d: ad:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6C:99:D0:72:58:C4:7C:E4:C7:F5:DE:6B:5C:61:67:93:C2:34:F6 X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:87:0e:3b:8b:20:87:94:78:9c:0a:12:30:5e:04:58:54:a9: 9b:ac:cd:9d:85:89:b3:3b:16:58:04:62:68:72:d9:d8:57:7b: db:1b:8a:e9:00:30:a2:41:61:f3:e6:fa:86:3b:dc:3f:70:85: f7:d7:e5:74:8d:75:29:db:21:a1:0a:c0:4f:d9:b8:de:dd:4d: 15:d0:3b:c3:14:e5:67:07:1d:2d:6a:32:87:81:54:17:f4:05: 3d:b9:c0:3c:c9:ad:9e:90:3c:84:30:88:88:9d:9d:16:1d:2d: 68:bc:22:dc:89:99:05:92:4b:4d:55:07:fc:ce:7f:cd:a0:52: a8:54:86:18:12:2f:13:74:0f:f8:66:80:7b:77:bc:b7:bf:17: a3:e9:e1:f3:38:e1:56:d4:45:5f:8c:6a:f7:8a:fa:88:97:0b: e8:7d:ea:f5:18:bd:27:88:f1:5d:26:ca:2d:e2:b7:ce:83:c2: ef:00:0f:72:86:69:f5:39:c3:fc:84:a6:7d:31:c9:bd:ab:1d: b9:78:34:0d:a1:fd:8a:93:66:fb:ff:3d:b7:69:c8:00:bd:f8: 02:e7:a4:73:5c:c9:ff:78:a0:bb:57:91:af:4b:e9:46:1c:7c: ff:d4:c3:02:56:01:5d:22:44:36:71:63:4e:73:97:92:6d:e9: e6:a1:f7:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0YxXo55NE7VL8brX4xMgxuriWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNDExMjUxMzU2NDZaFw0yNDExMjkwMTM5NDZaMDMxMTAvBgNV BAMTKDlCNkM5OUQwNzI1OEM0N0NFNEM3RjVERTZCNUM2MTY3OTNDMjM0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFvdSHgYrg6+w8s1D8wzj2fUv t4lvQLxHxiDN5Lbpwi9AqTblweyl9gm042Pi5pp27P/7qtjPTn9fot+lFD14eK2x xiesaf/f5agY5ZbDgV8lIrABfNsl3kv5IaqCIAb1qIsW7/gNPdWAA/abowTIjFyy Pw9rHlfr872uxpkAXZOgea8DHGxbr2eQQHkHW26g+ODP6uT+vHcDkEghCngYOzDg JeRqS4I6VKV0q55rpptGL3vAPyBL/qYaV0woJn9fsaptfTAkIXjapLzhlTejPBYK SrykCQUYTXvgqCikYBsTvEJtq2hojUU68hzR/BJEUwdgBu7WE2K46fnjPa37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm2yZ0HJYxHzkx/Xea1xhZ5PCNPYwHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiHDjuLIIeUeJwKEjBeBFhUqZuszZ2FibM7 FlgEYmhy2dhXe9sbiukAMKJBYfPm+oY73D9whffX5XSNdSnbIaEKwE/ZuN7dTRXQ O8MU5WcHHS1qMoeBVBf0BT25wDzJrZ6QPIQwiIidnRYdLWi8ItyJmQWSS01VB/zO f82gUqhUhhgSLxN0D/hmgHt3vLe/F6Pp4fM44VbURV+MaveK+oiXC+h96vUYvSeI 8V0myi3it86Dwu8AD3KGafU5w/yEpn0xyb2rHbl4NA2h/YqTZvv/PbdpyAC9+ALn pHNcyf94oLtXka9L6UYcfP/UwwJWAV0iRDZxY05zl5Jt6eah9+0= -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org