$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: tGFhmGo8R4tYwmwUyRy0w4WWSaxZDeEzj9tw9YLjY+o= Subject key identifier: C7:19:81:07:F2:E7:44:86:74:26:45:49:96:DB:8A:B3:5C:12:5A:A6 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 5A861FDACC3E585A4627B01BB8DEFE9D1D3C9F50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 0484 Signing time: Sat 23 Nov 2024 02:00:40 +0000 Manifest this update: Sat 23 Nov 2024 01:55:40 +0000 Manifest next update: Tue 26 Nov 2024 08:43:40 +0000 Files and hashes: 1: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: 5BVtDmEV06VuIEBqGHWc5TU1extMlSEbp67LFRJHJ4M=) 2: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: 0zHHmymmAg7KzILmxTwSb0pVLlyNqlqsvk/nikoNMwE=) 3: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: tqUKv7tErLGQvp6ntAe6oI+l6KjJLTNQkTevpmkwiwA=) 4: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 9x98XoLgB5n+u7mpQXGTvRK2RowXcZ6wi/CQh+FfyR8=) 5: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: T6Xc/5jQ5P34jc8AyllFKnkqVhvwowFLbBDgpaNIbvo=) 6: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: uRRS1BI3sCqvIVYrv7xZEsjdYK2j2pu3KFfDFYmGVqg=) 7: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: qB5I9SZzbVoPygBuyJA1K93AyAMM3PavIllsE1xXJ8Y=) 8: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: gYKpABPCZPAwfSakQwPekqx1ImCAYMUVjZIaoSefgv8=) 9: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: kui4ZivxNZ9Q3imWjNih9ERmYVIHPMxv7b6absdtP8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 05:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:86:1f:da:cc:3e:58:5a:46:27:b0:1b:b8:de:fe:9d:1d:3c:9f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Nov 23 01:55:40 2024 GMT Not After : Nov 26 08:43:40 2024 GMT Subject: CN=C7198107F2E744867426454996DB8AB35C125AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:3f:8a:54:0c:b4:a4:c3:a3:b3:9d:f7:2b: 46:2c:63:97:36:be:ec:8d:71:da:60:7b:fe:a3:5d: 74:bd:f6:5f:6d:e2:05:14:80:cf:68:bb:e5:85:c5: cb:30:f3:64:2d:5a:f5:fa:a6:98:d5:f2:60:4b:ed: bd:06:0b:c0:e3:95:90:84:c1:ac:e3:c8:0a:d4:7d: f7:62:0e:57:11:16:b6:af:76:2a:7e:89:23:cd:27: 42:6c:12:13:3f:78:07:6d:bf:82:93:bb:89:5a:c1: 15:ee:6c:2c:9b:4c:32:36:9a:0e:01:b6:30:f9:09: 9d:4a:0d:0f:07:a7:44:f6:3b:33:20:15:f8:f8:7e: 6a:84:22:37:22:c8:ae:9b:b7:31:cc:78:1d:2e:99: 07:aa:54:69:e6:52:38:87:45:10:51:55:ca:e8:d4: c8:cf:95:0d:55:a5:51:80:91:67:1e:81:ed:1b:04: 64:5a:99:fd:b8:97:a7:8c:ed:a4:5b:dd:ca:5f:9e: 7f:b3:4c:35:a6:4e:51:98:8d:21:11:d0:be:91:d7: bf:7d:f2:3d:94:dc:d4:a4:8c:4e:47:6d:ca:99:26: f6:73:93:8a:6c:13:4a:6f:ce:d5:9b:9a:ba:e1:dc: f7:80:5c:8b:00:14:74:aa:76:45:8e:35:ed:49:13: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:19:81:07:F2:E7:44:86:74:26:45:49:96:DB:8A:B3:5C:12:5A:A6 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:85:2a:55:a8:47:8a:d0:bb:c7:a7:08:80:9b:68:8a:7d:00: 7e:fc:e5:02:5a:0a:8a:aa:db:09:ec:31:2c:b9:aa:e0:31:f3: 27:21:d8:fc:e2:fe:7a:3b:1b:d7:bc:07:ad:41:b4:1c:d8:ec: b0:f1:b8:41:eb:cf:91:46:60:08:fc:e3:48:42:1c:50:a9:fe: 34:e4:35:57:a6:0c:5f:4e:b1:67:5f:5d:86:43:b8:7e:02:2b: 4d:76:4a:6f:9d:a6:a6:a3:02:92:b4:d9:12:c7:7e:8c:95:0a: 5a:f1:c4:ee:a3:88:cc:22:9e:f8:15:49:9e:fb:d1:1d:ff:89: 5c:98:02:4f:69:46:08:54:41:80:47:01:80:c4:d0:14:b7:ba: af:25:12:6b:cd:b5:e5:12:9c:c9:0c:7d:ac:92:e8:6e:28:5e: 85:cc:53:c6:a2:e4:a4:2f:33:9c:fe:47:98:22:1d:2c:8c:af: 1a:b8:e9:d8:50:6f:80:7e:8e:64:d7:f8:a7:70:0b:5f:5d:4d: 5f:f0:77:c6:90:d2:4d:ac:04:00:fc:e1:b8:15:61:d3:b0:e3: c7:7c:c3:6c:7c:7a:b0:21:59:22:05:65:25:cd:fd:19:e6:de: fc:ec:85:2b:d1:88:e3:12:8a:0d:40:b8:1a:67:44:4f:dc:57: 25:a6:72:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWoYf2sw+WFpGJ7AbuN7+nR08n1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNDExMjMwMTU1NDBaFw0yNDExMjYwODQzNDBaMDMxMTAvBgNV BAMTKEM3MTk4MTA3RjJFNzQ0ODY3NDI2NDU0OTk2REI4QUIzNUMxMjVBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIj+KVAy0pMOjs533K0YsY5c2 vuyNcdpge/6jXXS99l9t4gUUgM9ou+WFxcsw82QtWvX6ppjV8mBL7b0GC8DjlZCE wazjyArUffdiDlcRFravdip+iSPNJ0JsEhM/eAdtv4KTu4lawRXubCybTDI2mg4B tjD5CZ1KDQ8Hp0T2OzMgFfj4fmqEIjciyK6btzHMeB0umQeqVGnmUjiHRRBRVcro 1MjPlQ1VpVGAkWcege0bBGRamf24l6eM7aRb3cpfnn+zTDWmTlGYjSER0L6R1799 8j2U3NSkjE5HbcqZJvZzk4psE0pvztWbmrrh3PeAXIsAFHSqdkWONe1JEyX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxxmBB/LnRIZ0JkVJltuKs1wSWqYwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSFKlWoR4rQu8enCICbaIp9AH785QJaCoqq 2wnsMSy5quAx8ych2Pzi/no7G9e8B61BtBzY7LDxuEHrz5FGYAj840hCHFCp/jTk NVemDF9OsWdfXYZDuH4CK012Sm+dpqajApK02RLHfoyVClrxxO6jiMwinvgVSZ77 0R3/iVyYAk9pRghUQYBHAYDE0BS3uq8lEmvNteUSnMkMfayS6G4oXoXMU8ai5KQv M5z+R5giHSyMrxq46dhQb4B+jmTX+KdwC19dTV/wd8aQ0k2sBAD84bgVYdOw48d8 w2x8erAhWSIFZSXN/Rnm3vzshSvRiOMSig1AuBpnRE/cVyWmcsA= -----END CERTIFICATE-----Generated at Sat Nov 23 03:54:06 2024 by rpki-client on console-ams.rpki-client.org