$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft File: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json) Hash identifier: c9YUF/DAReCMgS5j8J+euQX0EZeINPmOmILKE4OP+Xs= Subject key identifier: 91:17:76:45:30:1A:0D:0A:00:D1:2E:F0:10:5B:07:B7:AC:07:4D:F0 Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 1C8ADD278E9BC94012A6B5445CBD2C815EB2661E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft Manifest number: 0485 Signing time: Mon 25 Nov 2024 22:32:00 +0000 Manifest this update: Mon 25 Nov 2024 22:27:00 +0000 Manifest next update: Fri 29 Nov 2024 01:17:00 +0000 Files and hashes: 1: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: Wj7M1inq6nzKkGSYNAsMKNcxvsfpPzzRRsQVe4syiBI=) 2: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: IKbVUage9szVAQYG/l4n17p5kjrbb8lhF1AIOQmlQXY=) 3: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: oTf+Eqxxrg0C7eWejuIjxaoc4JqS5/m4GGFT+fKHFXc=) 4: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: nj9bauInlPAQsEyCAqTGoQFhQtKovDqYDK/sMjG5xrs=) 5: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: 3SQWi+Pl6w1jfN2tgPrneap7VhhoC+xLaWgb1ecnuOU=) 6: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: 7xHl0+KUCsZIExTJxrLFivBTLLcx75z1wBdAQI6NTSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8a:dd:27:8e:9b:c9:40:12:a6:b5:44:5c:bd:2c:81:5e:b2:66:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Nov 25 22:27:00 2024 GMT Not After : Nov 29 01:17:00 2024 GMT Subject: CN=91177645301A0D0A00D12EF0105B07B7AC074DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:11:76:ae:9f:1e:44:57:a6:d5:0e:1d:ce:35: 9b:ed:a6:3f:63:d1:46:76:7b:60:b9:76:7f:79:b3: 42:29:71:68:cb:1c:27:05:b5:9b:49:0d:d0:06:d2: 35:2f:66:ed:8e:51:56:47:34:fc:61:bd:02:f9:f2: 85:05:49:dc:f6:6d:8e:23:b7:a6:fa:e5:6b:0c:92: c2:02:e2:15:a0:00:34:53:1e:21:22:4c:f9:f5:bd: f1:d4:25:5a:4d:9f:27:8f:12:93:71:46:cb:ad:6d: f2:54:0c:84:d7:18:18:4f:d5:c6:99:69:58:28:bb: 8a:d6:31:c9:79:3d:f0:83:b6:a5:56:53:00:7b:a2: df:d9:7f:78:ba:69:7e:2d:4e:c1:31:74:87:1b:52: bb:02:be:f9:95:21:0f:34:d6:2b:5e:ed:02:db:2d: bc:bd:44:75:13:41:2c:75:f0:6c:13:e2:2b:be:8a: 92:16:4e:89:ec:c7:f8:72:6f:cc:0a:7b:53:cd:ae: e9:d4:ac:b1:15:49:3a:94:e7:dc:61:c5:65:8f:8d: 3c:73:dd:ca:8d:7b:fc:23:60:e7:d2:86:fe:10:24: 45:61:b3:e2:79:ec:b1:d6:c9:10:9b:f0:d0:b3:a2: 19:58:8d:2b:93:66:54:7f:f6:c2:12:22:78:e4:68: d8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:17:76:45:30:1A:0D:0A:00:D1:2E:F0:10:5B:07:B7:AC:07:4D:F0 X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:5d:23:3f:fd:80:52:25:3c:f6:e0:a3:b8:32:31:8a:fe:94: c6:a4:30:63:fa:56:b9:7a:cd:21:0e:d4:2b:9b:9c:3f:af:59: 90:09:92:ba:fd:58:9e:dc:90:bc:7c:30:a7:b1:36:bd:8d:b6: 23:24:19:12:5e:e5:0f:ca:94:80:74:05:9c:14:0e:52:41:bf: a5:5b:3f:68:89:03:a0:a5:d6:da:b2:64:ea:56:aa:3a:2a:fb: 8c:1f:df:c2:ae:e0:9c:52:72:1f:4b:2a:35:bc:03:41:23:75: fe:8e:0b:ae:28:72:31:d1:cd:ff:c5:66:d7:64:ab:2c:d3:bd: 57:22:7f:4f:3b:69:04:97:c9:06:15:c3:09:19:1e:27:a5:96: ae:8b:7a:0d:b4:ab:6b:bf:9f:70:b7:0d:cb:4a:49:06:cf:6a: 65:18:23:89:b4:94:90:a7:85:18:15:f7:95:66:02:f3:d8:f1: 0a:ee:d6:4a:70:7a:68:bc:52:95:90:eb:cd:0d:dc:69:0d:86: da:f1:f5:04:07:c3:bc:93:8f:63:46:fa:7a:f3:bd:41:44:25: 47:76:1c:50:67:c2:65:ad:3e:93:46:d8:2d:a2:29:d0:df:1c: a5:b2:8a:74:46:6e:cb:05:14:4d:6d:40:fb:62:0e:48:f0:77: 10:21:5a:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHIrdJ46byUASprVEXL0sgV6yZh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNDExMjUyMjI3MDBaFw0yNDExMjkwMTE3MDBaMDMxMTAvBgNV BAMTKDkxMTc3NjQ1MzAxQTBEMEEwMEQxMkVGMDEwNUIwN0I3QUMwNzRERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuEXaunx5EV6bVDh3ONZvtpj9j 0UZ2e2C5dn95s0IpcWjLHCcFtZtJDdAG0jUvZu2OUVZHNPxhvQL58oUFSdz2bY4j t6b65WsMksIC4hWgADRTHiEiTPn1vfHUJVpNnyePEpNxRsutbfJUDITXGBhP1caZ aVgou4rWMcl5PfCDtqVWUwB7ot/Zf3i6aX4tTsExdIcbUrsCvvmVIQ801ite7QLb Lby9RHUTQSx18GwT4iu+ipIWTonsx/hyb8wKe1PNrunUrLEVSTqU59xhxWWPjTxz 3cqNe/wjYOfShv4QJEVhs+J57LHWyRCb8NCzohlYjSuTZlR/9sISInjkaNgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkRd2RTAaDQoA0S7wEFsHt6wHTfAwHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NF NDQxQTc4M0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZdIz/9gFIlPPbgo7gyMYr+lMakMGP6Vrl6 zSEO1CubnD+vWZAJkrr9WJ7ckLx8MKexNr2NtiMkGRJe5Q/KlIB0BZwUDlJBv6Vb P2iJA6Cl1tqyZOpWqjoq+4wf38Ku4JxSch9LKjW8A0Ejdf6OC64ocjHRzf/FZtdk qyzTvVcif087aQSXyQYVwwkZHiellq6Leg20q2u/n3C3DctKSQbPamUYI4m0lJCn hRgV95VmAvPY8Qru1kpwemi8UpWQ680N3GkNhtrx9QQHw7yTj2NG+nrzvUFEJUd2 HFBnwmWtPpNG2C2iKdDfHKWyinRGbssFFE1tQPtiDkjwdxAhWms= -----END CERTIFICATE-----Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org