$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft File: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft (raw, json) Hash identifier: JeLtga5g80+f+xCK7CRPqF2Au5aAgGSVpNsuB7NY268= Subject key identifier: 66:F7:49:0D:B6:09:9D:C7:9D:1E:88:A3:3D:02:AC:CF:34:BB:16:14 Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E Certificate issuer: /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Certificate serial: 557F9828A7C6D3FF4C57582FF8505F8D922C730C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft Manifest number: 01AC Signing time: Thu 21 Nov 2024 20:51:57 +0000 Manifest this update: Thu 21 Nov 2024 20:46:57 +0000 Manifest next update: Mon 25 Nov 2024 06:57:57 +0000 Files and hashes: 1: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl (hash: Mqbz3HTExfjpHuOjFUHFSrg9LbFNbN9VjO7c+OWW0wY=) 2: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: zAcA0BmrAGpI2x1qPJ/5zl3N7iUAkyEYd57j0/HZ4ok=) 3: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: mYfH315eP068ERJYYE5247VW3yxdOs2HUR3r6PYDS0s=) 4: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: hIMnQPggRl/A4s6mlKVqz6cYpD+s0WdNhVv+CTnK11g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7f:98:28:a7:c6:d3:ff:4c:57:58:2f:f8:50:5f:8d:92:2c:73:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Validity Not Before: Nov 21 20:46:57 2024 GMT Not After : Nov 25 06:57:57 2024 GMT Subject: CN=66F7490DB6099DC79D1E88A33D02ACCF34BB1614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:f8:f6:60:82:77:fd:2d:91:a4:e1:83:63: fe:3f:4e:45:5d:f6:41:d0:e9:13:c2:70:91:7d:d4: d8:6a:ab:b7:3e:dc:65:dd:2b:e8:3d:d1:2c:90:f4: c6:7c:11:d0:4a:29:60:25:2e:2c:65:c5:0c:a4:0f: d7:87:92:14:1a:a9:9c:4f:fe:11:96:42:d8:b3:73: 43:7e:ee:39:eb:26:a4:cc:6c:b8:ac:d9:c9:19:29: 88:d2:44:56:61:1c:e5:90:57:c5:bd:a4:1e:48:ab: a8:6a:f9:7c:88:d4:04:94:49:f8:79:25:16:41:2c: 6d:66:69:d8:b9:1b:6d:69:be:04:a6:27:44:ee:46: 03:d3:0d:7a:44:5a:97:79:20:76:68:77:33:f8:ad: f0:f7:43:96:51:af:2f:ea:b2:1b:18:1f:bb:d2:49: 25:85:23:ba:40:9b:22:da:0d:6c:16:f9:13:68:8f: 2b:07:8f:93:9a:01:4b:c4:57:1d:80:61:9d:b8:12: 47:30:15:b0:db:7d:9a:9b:b3:45:1b:1d:e8:b3:a5: f6:f9:20:34:2a:11:2e:0e:b8:c1:eb:3e:e7:6c:bf: f1:c3:ed:1d:54:5b:3a:18:f3:77:46:c2:fb:f4:6b: 7a:6c:4c:c9:cb:1b:d0:70:90:a5:21:cb:ae:65:66: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F7:49:0D:B6:09:9D:C7:9D:1E:88:A3:3D:02:AC:CF:34:BB:16:14 X509v3 Authority Key Identifier: keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:66:1f:8d:29:da:65:a6:1a:eb:03:30:21:46:42:f2:35:29: 06:dd:c7:d9:79:ce:a7:c5:5e:87:32:fc:91:93:c1:47:95:c0: 70:d1:c9:09:fb:e5:63:d8:c7:40:e4:94:79:1b:00:b5:7c:b9: f5:f8:d8:ce:97:f6:3a:91:a8:17:aa:61:0e:c0:eb:4b:d9:da: 75:52:b6:4a:46:70:77:c4:81:aa:4f:ea:59:0d:2b:ef:9a:2e: 16:06:87:98:0c:81:72:7d:c3:c6:06:57:13:69:fe:29:69:d9: 6f:2a:59:c4:cc:90:9c:e2:64:52:bb:a6:71:f7:94:c0:be:d0: 11:fb:16:a9:bb:e9:e0:2a:df:ac:3a:98:63:72:79:87:07:9e: 91:2b:c4:73:d4:b0:d3:08:6a:20:b3:de:ca:6d:49:57:5e:f3: 36:ea:a3:b7:89:d9:e7:f6:c6:00:98:6b:b6:59:32:51:87:53: 21:fc:8a:61:b2:f3:62:3d:5f:53:d2:26:82:f8:3c:a8:76:2b: 56:22:16:1c:2c:bc:7d:96:81:87:2c:f9:78:ab:fd:ba:4e:46: 40:b5:c6:29:73:0b:a2:f1:bb:39:0f:a4:b6:a6:c9:d9:af:17: e8:e6:cf:0d:f8:ea:7e:5a:4b:91:cc:a9:2e:a0:f3:3d:24:de: fa:5d:7e:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVX+YKKfG0/9MV1gv+FBfjZIscwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdF MkZGMjYzRTAeFw0yNDExMjEyMDQ2NTdaFw0yNDExMjUwNjU3NTdaMDMxMTAvBgNV BAMTKDY2Rjc0OTBEQjYwOTlEQzc5RDFFODhBMzNEMDJBQ0NGMzRCQjE2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sPj2YIJ3/S2RpOGDY/4/TkVd 9kHQ6RPCcJF91Nhqq7c+3GXdK+g90SyQ9MZ8EdBKKWAlLixlxQykD9eHkhQaqZxP /hGWQtizc0N+7jnrJqTMbLis2ckZKYjSRFZhHOWQV8W9pB5Iq6hq+XyI1ASUSfh5 JRZBLG1madi5G21pvgSmJ0TuRgPTDXpEWpd5IHZodzP4rfD3Q5ZRry/qshsYH7vS SSWFI7pAmyLaDWwW+RNojysHj5OaAUvEVx2AYZ24EkcwFbDbfZqbs0UbHeizpfb5 IDQqES4OuMHrPudsv/HD7R1UWzoY83dGwvv0a3psTMnLG9BwkKUhy65lZnZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZvdJDbYJncedHoijPQKszzS7FhQwHwYDVR0j BBgwFoAUhuZ5Wsq5nPKc58fhDX/M5+L/Jj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGUxYWM3Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC84NkU2Nzk1QUNB Qjk5Q0YyOUNFN0M3RTEwRDdGQ0NFN0UyRkYyNjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdFMkZG MjYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkND RTdFMkZGMjYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFmH40p2mWmGusDMCFGQvI1KQbdx9l5zqfF Xocy/JGTwUeVwHDRyQn75WPYx0DklHkbALV8ufX42M6X9jqRqBeqYQ7A60vZ2nVS tkpGcHfEgapP6lkNK++aLhYGh5gMgXJ9w8YGVxNp/ilp2W8qWcTMkJziZFK7pnH3 lMC+0BH7Fqm76eAq36w6mGNyeYcHnpErxHPUsNMIaiCz3sptSVde8zbqo7eJ2ef2 xgCYa7ZZMlGHUyH8imGy82I9X1PSJoL4PKh2K1YiFhwsvH2WgYcs+Xir/bpORkC1 xilzC6LxuzkPpLamydmvF+jmzw346n5aS5HMqS6g8z0k3vpdfhs= -----END CERTIFICATE-----Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org