$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: cih4lbnj4YC2f9vm0H6JRXBXMfhnm9tNaBxMSO4C5bA= Subject key identifier: 14:13:1E:16:D7:1D:56:84:33:FC:CD:5E:AE:C5:DA:CC:E6:A2:A5:2D Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 75340450A886EE53B4FB5F95F3AC3360B0B69683 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 014A Signing time: Thu 21 Nov 2024 05:02:07 +0000 Manifest this update: Thu 21 Nov 2024 04:57:07 +0000 Manifest next update: Sun 24 Nov 2024 15:59:07 +0000 Files and hashes: 1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: jCIi6xnL0X9x7d8IEkHfah2DqG8/oNDacSJSk7YacN0=) 2: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: RBWECUBCq7BfyX9NOeAHxZapskVYIy+CNCkdzLjzvw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:34:04:50:a8:86:ee:53:b4:fb:5f:95:f3:ac:33:60:b0:b6:96:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Nov 21 04:57:07 2024 GMT Not After : Nov 24 15:59:07 2024 GMT Subject: CN=14131E16D71D568433FCCD5EAEC5DACCE6A2A52D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:3a:12:b9:81:0c:d3:c3:6b:a9:ca:4e:71: bc:22:7d:dc:bb:86:a2:21:b3:bd:f4:97:cb:74:65: d8:bc:9f:08:34:d3:ea:36:b2:cc:d8:20:e8:4f:94: 4c:94:76:8c:25:6d:9b:37:2c:6e:90:37:0a:d0:46: 62:d3:46:1e:1c:27:7f:28:18:5b:f0:04:e8:01:52: 7e:dd:ab:d1:13:f7:1d:cb:8e:45:9a:f0:c2:86:4c: 03:85:cc:a4:1d:d2:de:e2:66:b8:90:1d:16:ca:f9: 4b:a9:d2:f1:a3:2b:d7:1d:c9:af:0e:a4:87:69:7f: 5c:a6:1c:d0:c3:73:97:ff:f6:e6:b2:92:71:4c:a9: d0:49:b1:14:44:c6:6b:45:d6:d9:aa:ab:bc:fb:61: 46:af:93:07:9c:57:52:d8:a3:4e:cb:f2:38:0e:5d: 00:1a:98:37:4f:96:fc:e9:29:0c:8f:97:9f:b4:e3: 4f:6b:51:dc:1f:fe:ca:4a:32:37:b1:1b:43:10:9a: 45:30:f8:7d:ff:5d:f5:d2:e7:89:0b:0f:51:26:d4: dc:fb:7d:d3:9c:5b:a2:b1:30:56:58:73:97:70:d5: ce:2b:2a:7f:6c:50:0e:47:af:28:15:f4:a9:2f:f1: d0:36:25:2a:41:71:ef:27:01:46:0c:03:35:87:80: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:13:1E:16:D7:1D:56:84:33:FC:CD:5E:AE:C5:DA:CC:E6:A2:A5:2D X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:31:06:8e:84:59:e2:4b:28:3d:01:9c:1a:fb:ab:fe:b0:37: 47:86:d8:5b:da:5d:ef:75:95:0e:b0:ee:f8:f6:9c:dc:22:43: e0:51:19:39:b1:c4:2a:2b:30:ae:5a:71:fb:3a:7e:18:69:91: be:38:73:7c:43:f3:e1:11:9e:7f:58:52:e7:36:2d:79:f5:1e: 2d:da:a5:0a:de:30:5f:e5:a5:79:98:25:c6:65:ea:42:94:99: 06:ef:45:f6:85:3a:a2:5d:46:da:7a:8b:ca:ae:e0:5a:4c:fb: 30:f3:79:82:03:61:28:19:4b:e5:e1:87:12:41:7c:46:e4:d7: 35:c2:fe:31:0c:7d:20:94:44:a2:38:32:b8:66:bf:fa:fc:19: ca:6f:c0:05:94:f4:a6:e0:72:69:6c:71:48:ec:f9:dd:86:93: aa:85:58:ed:24:3b:17:11:ca:b1:6b:2b:91:e1:d3:53:75:9e: fe:10:8d:18:d9:da:76:b6:c2:ed:aa:a6:b0:83:b9:1b:4a:97: 3f:e1:1a:21:6d:fa:ec:2e:66:28:64:33:c8:bb:24:39:a2:ce: d1:28:17:e2:7e:54:3a:4a:2b:44:9d:a8:0e:9b:aa:12:f1:24: 4f:0c:43:03:2f:a5:6a:e3:fa:5a:90:08:f8:7f:b6:d9:08:37: 9b:45:2f:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdTQEUKiG7lO0+1+V86wzYLC2loMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNDExMjEwNDU3MDdaFw0yNDExMjQxNTU5MDdaMDMxMTAvBgNV BAMTKDE0MTMxRTE2RDcxRDU2ODQzM0ZDQ0Q1RUFFQzVEQUNDRTZBMkE1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TToSuYEM08NrqcpOcbwifdy7 hqIhs730l8t0Zdi8nwg00+o2sszYIOhPlEyUdowlbZs3LG6QNwrQRmLTRh4cJ38o GFvwBOgBUn7dq9ET9x3LjkWa8MKGTAOFzKQd0t7iZriQHRbK+Uup0vGjK9cdya8O pIdpf1ymHNDDc5f/9uayknFMqdBJsRRExmtF1tmqq7z7YUavkwecV1LYo07L8jgO XQAamDdPlvzpKQyPl5+0409rUdwf/spKMjexG0MQmkUw+H3/XfXS54kLD1Em1Nz7 fdOcW6KxMFZYc5dw1c4rKn9sUA5HrygV9Kkv8dA2JSpBce8nAUYMAzWHgHpdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFBMeFtcdVoQz/M1ersXazOaipS0wHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIxBo6EWeJLKD0BnBr7q/6wN0eG2FvaXe91 lQ6w7vj2nNwiQ+BRGTmxxCorMK5acfs6fhhpkb44c3xD8+ERnn9YUuc2LXn1Hi3a pQreMF/lpXmYJcZl6kKUmQbvRfaFOqJdRtp6i8qu4FpM+zDzeYIDYSgZS+XhhxJB fEbk1zXC/jEMfSCURKI4Mrhmv/r8GcpvwAWU9KbgcmlscUjs+d2Gk6qFWO0kOxcR yrFrK5Hh01N1nv4QjRjZ2na2wu2qprCDuRtKlz/hGiFt+uwuZihkM8i7JDmiztEo F+J+VDpKK0SdqA6bqhLxJE8MQwMvpWrj+lqQCPh/ttkIN5tFL78= -----END CERTIFICATE-----Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org