$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: n3tiT+TNQegFVjb7+JsHhv7iU4UL1kXwk/jS86XE8VE= Subject key identifier: 0B:B0:D2:5D:16:7B:65:F2:7F:2A:6C:E3:06:5E:E2:F6:76:E0:4F:6B Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 50A75177218E877C63EB9FB5BCF1A5F4FC1F257E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: 3E Signing time: Thu 21 Nov 2024 21:50:05 +0000 Manifest this update: Thu 21 Nov 2024 21:45:05 +0000 Manifest next update: Mon 25 Nov 2024 05:19:05 +0000 Files and hashes: 1: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: jQnjcD09zdciZtR813IMGvy4lK93eqWOtX5t9dz1Ldg=) 2: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: NCa+GGSq3yT3mQagCDKq6Gw5W/C1zRiWNAtTo6ViycU=) 3: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: Tn7TDSW+adNbJWWGJZH4AHcWPfC1aqL5ZrmZovxxV0I=) 4: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: l/rrbEpNeb1GQ2wJ0vFCmJ1Zty4z+52/HZ1JBvBf910=) 5: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: vedpw75pYg32EKc3+zGdMyoaK+rjElwKepgBrYXzeZw=) 6: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: rCl3Wuft1WIRGE3tw3SxP242bdORGtg1GIBI8B19PUM=) 7: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: xk8tVxqn5heNhUDrnWm94cOrNBZG78jygDDr9I5XxcA=) 8: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: odz+XvlU6wUZHmxANYcPfjvU3FxzONeuGBAElE5SFM8=) 9: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: QHJuip7O3VcDdL7ndKGxilEe3owxbbSbcIiD01Visj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a7:51:77:21:8e:87:7c:63:eb:9f:b5:bc:f1:a5:f4:fc:1f:25:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Nov 21 21:45:05 2024 GMT Not After : Nov 25 05:19:05 2024 GMT Subject: CN=0BB0D25D167B65F27F2A6CE3065EE2F676E04F6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:b2:c8:4e:f8:dd:23:e7:95:93:e6:18:78: 3f:58:86:e9:d7:af:79:a8:9f:0d:48:8e:c9:2c:87: 49:4d:9f:da:a2:2a:9f:51:9d:07:30:c4:8d:49:17: 6c:8e:f1:80:53:e9:8b:d3:81:0a:57:02:42:31:65: ff:6a:70:b1:00:0f:b3:fa:34:2c:67:51:18:b0:58: b1:1e:49:40:2c:6e:61:0e:5a:72:23:b0:c7:8a:16: dc:6e:b0:b6:5d:9a:c0:95:4e:d4:94:7a:45:7e:41: 9d:b7:cd:a8:93:a7:98:9c:7e:2b:06:e4:f3:27:fd: a4:6a:75:d5:e9:bd:ea:c0:ea:a4:b9:87:76:f9:66: bd:b7:5a:9f:e0:88:3b:e9:08:36:2d:bb:2d:b9:7e: c3:97:10:b5:2a:2e:3b:cf:20:aa:aa:ca:89:ed:ab: 09:f6:5e:0e:1d:66:16:67:d6:8c:07:c9:1b:8f:56: 93:ff:47:b2:23:be:1c:80:17:8c:c8:6f:9f:88:66: 51:9c:61:46:cb:b2:24:c5:32:bf:02:0e:ca:32:1e: 83:9f:af:e0:dc:39:ab:62:45:0d:0a:de:d8:25:dd: 78:68:bd:75:b3:18:c9:41:7d:ee:bb:b0:3b:69:42: 1a:9f:64:00:a5:67:aa:47:b2:e8:60:0e:6e:aa:fd: a2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B0:D2:5D:16:7B:65:F2:7F:2A:6C:E3:06:5E:E2:F6:76:E0:4F:6B X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:78:94:e3:1d:ae:19:8d:e8:df:4e:72:c5:01:df:7e:47:2b: 6e:1a:86:c9:7a:00:f0:2c:68:1f:0d:97:17:6d:01:d1:84:01: 28:46:ac:96:4b:26:83:1a:57:ee:3a:16:c5:50:ea:65:e0:a8: 2f:00:0e:e7:6a:36:88:a9:e7:79:52:3f:b2:90:bf:2f:83:ea: 1e:45:00:c1:62:a3:82:aa:0b:cd:82:af:7c:ba:e8:ff:b0:02: bf:2e:8e:f4:39:6f:ff:68:70:96:f7:82:ac:22:73:2b:10:d4: f8:e7:b9:b4:0b:78:e2:87:5f:3f:7f:d2:54:51:ea:45:00:8e: 53:a6:eb:25:c9:12:15:f0:0c:ad:fa:1d:25:90:39:6c:8d:6f: 99:3b:d8:d5:5c:e5:d1:3c:4f:3b:27:ea:ce:f9:c2:4e:00:1b: e0:f8:59:07:2d:f1:03:bf:c1:68:b6:f4:0f:08:29:56:df:9f: 88:ce:71:2a:3b:8e:6b:94:d8:37:1d:1a:da:02:e5:12:8b:d6: cc:e6:aa:33:8c:c3:8c:20:30:40:63:aa:b4:6e:08:22:19:91: ef:15:02:b1:ba:d7:fe:2f:12:00:66:a6:5d:3b:d5:37:7a:7b: 6d:8a:7b:1b:64:f7:9c:90:75:4b:88:33:e9:cf:91:35:df:63: 6b:4e:e1:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKdRdyGOh3xj65+1vPGl9PwfJX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNDExMjEyMTQ1MDVaFw0yNDExMjUwNTE5MDVaMDMxMTAvBgNV BAMTKDBCQjBEMjVEMTY3QjY1RjI3RjJBNkNFMzA2NUVFMkY2NzZFMDRGNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3u7LITvjdI+eVk+YYeD9YhunX r3monw1Ijsksh0lNn9qiKp9RnQcwxI1JF2yO8YBT6YvTgQpXAkIxZf9qcLEAD7P6 NCxnURiwWLEeSUAsbmEOWnIjsMeKFtxusLZdmsCVTtSUekV+QZ23zaiTp5icfisG 5PMn/aRqddXpverA6qS5h3b5Zr23Wp/giDvpCDYtuy25fsOXELUqLjvPIKqqyont qwn2Xg4dZhZn1owHyRuPVpP/R7IjvhyAF4zIb5+IZlGcYUbLsiTFMr8CDsoyHoOf r+DcOatiRQ0K3tgl3XhovXWzGMlBfe67sDtpQhqfZAClZ6pHsuhgDm6q/aIRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC7DSXRZ7ZfJ/KmzjBl7i9nbgT2swHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJh4lOMdrhmN6N9OcsUB335HK24ahsl6APAs aB8NlxdtAdGEAShGrJZLJoMaV+46FsVQ6mXgqC8ADudqNoip53lSP7KQvy+D6h5F AMFio4KqC82Cr3y66P+wAr8ujvQ5b/9ocJb3gqwicysQ1PjnubQLeOKHXz9/0lRR 6kUAjlOm6yXJEhXwDK36HSWQOWyNb5k72NVc5dE8Tzsn6s75wk4AG+D4WQct8QO/ wWi29A8IKVbfn4jOcSo7jmuU2DcdGtoC5RKL1szmqjOMw4wgMEBjqrRuCCIZke8V ArG61/4vEgBmpl071Td6e22Kextk95yQdUuIM+nPkTXfY2tO4YA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org