$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: aRXMaG6RdY1QQXleH/3l+clBOtFtRVpqMy/V6cGXILI= Subject key identifier: 61:8D:61:FA:D4:68:4B:F4:0C:C4:03:4C:91:35:B2:29:B1:F2:5A:8E Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 5CC99F8E5A0C0C0578EB6459F85D58787F9ED812 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 0488 Signing time: Mon 25 Nov 2024 10:32:41 +0000 Manifest this update: Mon 25 Nov 2024 10:27:41 +0000 Manifest next update: Thu 28 Nov 2024 14:08:41 +0000 Files and hashes: 1: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: hOCK13r+B/dAQLwaJ4bxI3Dus+croif/M/egvG3idZ8=) 2: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: ehfavKJYShgP2TV1M1uRS+C1vrvpl5VhW1fhvktvS38=) 3: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: eEx4NWwR1k9vkDQfEfkXnOdl3qvSuzaAej2N1OIEynI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c9:9f:8e:5a:0c:0c:05:78:eb:64:59:f8:5d:58:78:7f:9e:d8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Nov 25 10:27:41 2024 GMT Not After : Nov 28 14:08:41 2024 GMT Subject: CN=618D61FAD4684BF40CC4034C9135B229B1F25A8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:71:5e:63:17:ea:30:dc:38:7e:b0:5e:5a: 78:85:9d:09:e9:8c:88:ea:77:d8:53:21:a7:7b:dc: 56:39:5d:e1:e9:00:61:d0:f8:f6:fb:62:9b:5f:dc: 1c:1e:52:6a:50:2f:78:cc:37:07:58:3e:f9:6c:76: 6b:c4:cc:54:85:c1:c1:0b:92:e5:76:e7:39:1d:af: 09:f8:46:03:f6:1b:87:26:56:c7:fe:93:c3:62:97: 5b:f4:97:f6:e1:fd:36:9b:1c:33:b1:92:69:99:56: 46:dd:b3:b6:50:a9:ae:c8:76:9d:5f:b3:3b:8b:2a: 6c:cc:c6:6b:05:b0:6f:17:8e:83:4a:3a:bd:2a:30: 29:32:0c:02:9a:7b:e7:52:a5:ff:ba:c2:ac:46:57: 7d:b3:ab:27:4d:67:42:e7:3c:91:d0:c2:b9:a1:17: e7:6e:d8:e5:af:b6:29:11:84:3b:fe:94:c4:8e:ce: 8b:a4:73:2d:5e:b4:9b:c9:51:74:9b:9b:19:35:57: 3c:a1:44:be:e3:27:3a:a1:33:5a:ea:60:9a:28:85: 0d:43:c4:25:da:6e:9a:10:23:79:94:ae:17:a0:df: 1e:f6:4f:b8:cd:f1:b7:bc:2c:37:87:a0:67:fe:64: 23:06:4a:2d:85:aa:6b:d3:f5:2e:d3:a3:32:15:46: c9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8D:61:FA:D4:68:4B:F4:0C:C4:03:4C:91:35:B2:29:B1:F2:5A:8E X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:88:6d:ca:12:2f:51:90:c4:17:0c:ff:32:17:1b:5d:63:ba: 46:21:4b:15:21:5d:3d:f3:7d:ec:f6:91:ec:71:99:1d:ee:00: 23:8c:bf:3d:c0:ba:83:b5:e3:96:c4:f7:23:46:8e:32:b9:87: 7f:5e:78:99:a1:2d:6b:b5:db:d6:55:bf:a5:51:09:26:18:1f: 6f:11:d1:93:84:84:89:9b:53:22:fb:a2:78:32:04:83:60:50: 40:7b:81:77:9a:6f:05:17:f0:59:c6:ec:07:24:d8:d5:e2:b0: 9b:bb:b7:d6:71:df:59:e7:e2:49:e3:63:68:75:88:09:ec:5e: 44:b3:2c:ab:f4:29:44:66:b5:51:7a:c1:58:27:a7:51:ce:d2: c8:8f:1e:0b:b2:ef:09:1f:f1:0d:17:46:e9:e1:a7:c8:a5:11: 92:6f:cf:22:5c:bf:38:64:b2:dc:9b:ff:06:f1:64:11:98:3a: 78:b2:6e:7e:b2:21:e2:7e:34:f1:b0:f1:9a:2a:f3:96:03:64: 60:92:08:f4:8e:c3:b9:38:b2:06:30:6b:9b:01:88:4c:d1:5a: 92:56:10:f9:96:25:a1:72:a8:b4:4c:1a:4c:0f:45:3f:eb:c0: a0:1c:07:d8:73:60:10:3c:4d:7e:91:f6:ac:12:39:63:54:44: cb:a5:86:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMmfjloMDAV462RZ+F1YeH+e2BIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNDExMjUxMDI3NDFaFw0yNDExMjgxNDA4NDFaMDMxMTAvBgNV BAMTKDYxOEQ2MUZBRDQ2ODRCRjQwQ0M0MDM0QzkxMzVCMjI5QjFGMjVBOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkbXFeYxfqMNw4frBeWniFnQnp jIjqd9hTIad73FY5XeHpAGHQ+Pb7Yptf3BweUmpQL3jMNwdYPvlsdmvEzFSFwcEL kuV25zkdrwn4RgP2G4cmVsf+k8Nil1v0l/bh/TabHDOxkmmZVkbds7ZQqa7Idp1f szuLKmzMxmsFsG8XjoNKOr0qMCkyDAKae+dSpf+6wqxGV32zqydNZ0LnPJHQwrmh F+du2OWvtikRhDv+lMSOzoukcy1etJvJUXSbmxk1VzyhRL7jJzqhM1rqYJoohQ1D xCXabpoQI3mUrheg3x72T7jN8be8LDeHoGf+ZCMGSi2FqmvT9S7TozIVRsmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYY1h+tRoS/QMxANMkTWyKbHyWo4wHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWIbcoSL1GQxBcM/zIXG11jukYhSxUhXT3z fez2kexxmR3uACOMvz3AuoO145bE9yNGjjK5h39eeJmhLWu129ZVv6VRCSYYH28R 0ZOEhImbUyL7ongyBINgUEB7gXeabwUX8FnG7Ack2NXisJu7t9Zx31nn4knjY2h1 iAnsXkSzLKv0KURmtVF6wVgnp1HO0siPHguy7wkf8Q0XRunhp8ilEZJvzyJcvzhk styb/wbxZBGYOniybn6yIeJ+NPGw8Zoq85YDZGCSCPSOw7k4sgYwa5sBiEzRWpJW EPmWJaFyqLRMGkwPRT/rwKAcB9hzYBA8TX6R9qwSOWNURMulhrs= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:17 2024 by rpki-client on console-ams.rpki-client.org