$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: u2uijeDEOCmk/qdVFwUGes1o7zvUp0GJy/HegNPwpgw= Subject key identifier: AD:C9:24:9B:77:E8:56:E4:43:B5:23:8A:E1:BF:4D:5F:44:13:A8:14 Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 31FFE3F528E893ECB69CE91C49BC8F8AE5930E80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 048B Signing time: Fri 22 Nov 2024 10:00:50 +0000 Manifest this update: Fri 22 Nov 2024 09:55:50 +0000 Manifest next update: Mon 25 Nov 2024 16:20:50 +0000 Files and hashes: 1: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: 9Q99Kg7kcs5TlK0zDsAJUsyJe4V4AmWVrmwNiBBnVIg=) 2: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: 0n3I1/VBzu98cTdVFt1qC7Pkofr2BvlEzdvsLd58Im8=) 3: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: uZ4OxUBl7mQryixYavVJfrjOf8hm7yHdrF4u6JTnw6M=) 4: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: Xf34jGkxVo3XvTaFp3TimXxxSY4P5vn0e8EVY+2zxgw=) 5: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ez01GaUkqipcpRQQkpWHs+clGj6hxJbh4TgasLiuBv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 16:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ff:e3:f5:28:e8:93:ec:b6:9c:e9:1c:49:bc:8f:8a:e5:93:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Nov 22 09:55:50 2024 GMT Not After : Nov 25 16:20:50 2024 GMT Subject: CN=ADC9249B77E856E443B5238AE1BF4D5F4413A814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:9f:04:20:bf:5b:03:cf:ed:9b:0d:58:71: b7:b2:e2:ac:33:76:24:2c:74:6c:a6:ee:29:7e:0c: 09:d6:7f:8c:fa:eb:4b:87:45:0c:5c:d9:15:41:d7: f7:7e:f5:4b:a0:54:0c:f2:52:b2:b7:dc:0b:78:eb: 4f:15:e8:99:73:15:61:96:71:6f:d2:5c:79:e7:f8: 18:b5:52:fc:e9:ed:ac:88:b1:0b:e4:92:cd:ca:5e: 34:cc:c9:96:b7:8d:4e:fc:a2:91:7e:40:24:da:3c: b2:4c:a9:78:43:9b:ba:f3:f3:c1:92:6c:ce:53:d8: d3:83:4b:75:85:20:f5:f0:fa:2f:93:2e:1b:52:b2: 16:b0:b2:64:28:a9:ad:16:d8:d5:66:81:95:59:e7: 20:03:ef:91:84:ad:4e:20:09:0b:4e:e7:df:2e:b3: 5e:65:74:49:00:08:68:78:62:d1:f2:9f:66:51:0b: 0d:16:84:5e:d7:d6:73:c4:71:0e:7f:f1:07:f0:7f: ca:08:21:10:8d:5c:e6:92:bb:45:37:b7:dd:ae:1c: 5b:e8:df:e5:6c:2d:5b:b7:b5:bb:03:3c:f6:a3:b3: 9b:5c:c4:a8:75:d7:1b:cb:3c:7c:0f:44:0c:4a:f4: b0:38:d7:dd:ce:9a:54:67:c7:f1:ec:b9:48:45:4d: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C9:24:9B:77:E8:56:E4:43:B5:23:8A:E1:BF:4D:5F:44:13:A8:14 X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f7:a0:32:f4:e3:1d:2a:20:22:75:da:1c:10:5b:7d:d6:5f: e7:23:6d:c7:ab:9c:59:e9:62:33:06:23:81:08:91:93:40:b1: d2:44:b5:55:6e:e2:f0:0a:53:05:10:f1:55:f6:5e:fb:31:c2: c8:b9:39:91:57:f6:80:fd:72:d5:8d:3c:35:37:0e:2e:18:3e: ad:5a:3a:8e:a7:b7:42:f4:6c:d1:dc:80:dc:27:8a:f0:eb:96: 65:47:c3:dd:50:40:f0:bf:26:84:d4:ed:1f:98:1a:d0:f6:65: 33:af:97:93:c6:83:1e:9f:fc:c6:fa:59:d8:eb:7e:cd:04:33: 0f:fb:01:ad:17:85:d1:9b:cf:c9:29:80:6f:fa:6f:32:df:3e: f7:82:92:69:6e:72:65:74:bd:57:c6:a7:ed:4e:e8:8d:9d:9b: 03:e6:bd:7f:b1:ba:00:e9:7b:db:44:47:09:02:a1:6d:dd:1e: 81:c3:b1:a3:68:db:5a:62:58:15:e4:31:25:d0:40:90:86:76: ed:ec:82:c1:55:d1:a1:83:25:e8:4e:5c:6b:60:37:9b:df:c6: df:89:6a:6f:f4:73:d4:35:3b:87:23:7d:07:9e:f8:fb:f9:b1: a6:77:bf:1a:58:82:0f:4c:ef:92:e4:8d:55:ca:2e:b2:1a:23: a4:92:b8:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMf/j9Sjok+y2nOkcSbyPiuWTDoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNDExMjIwOTU1NTBaFw0yNDExMjUxNjIwNTBaMDMxMTAvBgNV BAMTKEFEQzkyNDlCNzdFODU2RTQ0M0I1MjM4QUUxQkY0RDVGNDQxM0E4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCikZ8EIL9bA8/tmw1Ycbey4qwz diQsdGym7il+DAnWf4z660uHRQxc2RVB1/d+9UugVAzyUrK33At4608V6JlzFWGW cW/SXHnn+Bi1Uvzp7ayIsQvkks3KXjTMyZa3jU78opF+QCTaPLJMqXhDm7rz88GS bM5T2NODS3WFIPXw+i+TLhtSshawsmQoqa0W2NVmgZVZ5yAD75GErU4gCQtO598u s15ldEkACGh4YtHyn2ZRCw0WhF7X1nPEcQ5/8Qfwf8oIIRCNXOaSu0U3t92uHFvo 3+VsLVu3tbsDPPajs5tcxKh11xvLPHwPRAxK9LA4193OmlRnx/HsuUhFTVRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrckkm3foVuRDtSOK4b9NX0QTqBQwHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/3oDL04x0qICJ12hwQW33WX+cjbcernFnp YjMGI4EIkZNAsdJEtVVu4vAKUwUQ8VX2Xvsxwsi5OZFX9oD9ctWNPDU3Di4YPq1a Oo6nt0L0bNHcgNwnivDrlmVHw91QQPC/JoTU7R+YGtD2ZTOvl5PGgx6f/Mb6Wdjr fs0EMw/7Aa0XhdGbz8kpgG/6bzLfPveCkmlucmV0vVfGp+1O6I2dmwPmvX+xugDp e9tERwkCoW3dHoHDsaNo21piWBXkMSXQQJCGdu3sgsFV0aGDJehOXGtgN5vfxt+J am/0c9Q1O4cjfQee+Pv5saZ3vxpYgg9M75LkjVXKLrIaI6SSuG4= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org