$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft File: F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft (raw, json) Hash identifier: 75GbizRaq02ondzAG7WByXxHqosIYY0rsKf4m0Olltw= Subject key identifier: 2E:BF:DB:47:57:AC:64:F5:08:07:05:79:8E:E9:02:51:7D:B0:B3:D2 Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Certificate issuer: /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Certificate serial: 7A4B39AF0B63E1CACC7CE8E9F498EE7068776973 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft Manifest number: 041C Signing time: Thu 21 Nov 2024 21:31:55 +0000 Manifest this update: Thu 21 Nov 2024 21:26:55 +0000 Manifest next update: Mon 25 Nov 2024 03:04:55 +0000 Files and hashes: 1: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: 4ujJx3862oYXI+kui8VPv/8wetRwESOHwDeVR8biwJY=) 2: F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl (hash: Z+qhYjZOetNMcddp4XEfjh4dkx2eZ6iX+NrudESnI7g=) 3: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: gijq71WUIKwqTkiUrcH4e0KYl0f3NugCOM107Gyg1TQ=) 4: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: HKp1z82dwndkEh4Vdac5ps8RWvQhptPK64Rz93mARG4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4b:39:af:0b:63:e1:ca:cc:7c:e8:e9:f4:98:ee:70:68:77:69:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Validity Not Before: Nov 21 21:26:55 2024 GMT Not After : Nov 25 03:04:55 2024 GMT Subject: CN=2EBFDB4757AC64F5080705798EE902517DB0B3D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:53:d3:f0:05:ae:32:41:2d:ce:67:b3:3c:92: 5d:7c:df:e4:9f:f4:87:b4:78:d0:46:ce:0f:a2:13: 22:fb:61:d6:78:0a:6e:ea:9f:4a:ad:a1:ce:9e:16: 83:c0:f0:24:57:98:71:97:bf:ff:c8:85:ac:b6:42: c1:c4:d5:db:34:bd:58:55:4a:62:19:c0:9e:95:28: cf:a1:55:f4:1d:5c:5f:15:6f:aa:3b:f6:07:80:c5: fa:69:63:ca:ce:82:29:29:8f:6e:f5:38:32:91:fe: 76:c9:29:91:1e:d7:89:20:a1:56:1e:c6:30:ef:6e: 8d:d7:75:ea:57:6c:34:45:de:50:42:d4:36:9e:70: 86:85:70:ab:ac:d6:f8:c4:47:a3:d7:67:35:30:99: ef:68:5c:e0:77:c9:4a:a4:e6:f2:3a:b8:f0:dd:33: 87:2b:a0:87:54:75:3a:97:b2:a6:1f:4c:27:6c:ca: b8:08:7c:d7:af:d1:8c:99:03:c5:25:49:25:69:73: ea:4b:ac:81:27:65:f7:88:01:f0:3d:66:db:4c:28: 54:47:95:49:38:17:f5:9e:50:db:80:60:c0:9e:d2: fd:8b:e2:d9:90:33:0d:37:4c:7d:2f:c0:57:f7:57: f7:6c:fb:e9:87:13:80:a0:4d:d2:7a:33:01:27:6b: e7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BF:DB:47:57:AC:64:F5:08:07:05:79:8E:E9:02:51:7D:B0:B3:D2 X509v3 Authority Key Identifier: keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9f:fb:82:80:dd:2a:a9:1e:2d:19:66:8c:d8:d5:c5:f7:b3: 85:70:dd:cd:78:75:67:39:08:64:b1:c8:f2:8a:9c:4d:ff:30: 3d:9a:07:94:1e:f7:7f:d0:ec:f2:ad:22:77:78:b8:9d:4a:3d: 14:f5:c8:b5:bc:af:57:c8:4e:5d:bd:fd:e3:59:88:6a:a4:89: dd:3c:e7:fe:2e:25:55:10:c3:84:fe:7f:91:ef:2f:c8:9b:35: 75:cf:bf:ec:99:86:79:6d:ce:96:f2:c1:93:b2:7b:9a:fe:cf: 66:bb:fe:c4:9b:0b:17:cf:7b:46:33:25:32:d0:65:02:c1:a2: 58:6f:91:6e:2b:21:d5:74:58:e1:f6:01:5c:81:83:02:f4:39: 01:d6:c3:52:dc:51:0a:cb:0d:a0:71:88:73:44:28:bc:60:8e: 02:86:33:bd:85:50:ec:ec:fd:a9:c8:44:b8:2a:98:9e:dd:6e: 5e:59:19:78:5b:65:09:bd:ae:73:e3:4b:e3:62:a3:25:6e:ff: 6e:b8:54:62:d2:d4:c5:4b:4a:02:70:6a:08:69:9f:c0:08:8f: 5e:94:6b:b8:96:b6:16:86:5b:13:ee:4c:5d:2e:59:e2:61:87: f2:af:0c:ee:5d:73:a0:ed:82:df:4a:8d:69:b9:51:c3:39:c6: db:fa:e1:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeks5rwtj4crMfOjp9JjucGh3aXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMw NjI0MDc1MTAeFw0yNDExMjEyMTI2NTVaFw0yNDExMjUwMzA0NTVaMDMxMTAvBgNV BAMTKDJFQkZEQjQ3NTdBQzY0RjUwODA3MDU3OThFRTkwMjUxN0RCMEIzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHU9PwBa4yQS3OZ7M8kl183+Sf 9Ie0eNBGzg+iEyL7YdZ4Cm7qn0qtoc6eFoPA8CRXmHGXv//Ihay2QsHE1ds0vVhV SmIZwJ6VKM+hVfQdXF8Vb6o79geAxfppY8rOgikpj271ODKR/nbJKZEe14kgoVYe xjDvbo3XdepXbDRF3lBC1DaecIaFcKus1vjER6PXZzUwme9oXOB3yUqk5vI6uPDd M4croIdUdTqXsqYfTCdsyrgIfNev0YyZA8UlSSVpc+pLrIEnZfeIAfA9ZttMKFRH lUk4F/WeUNuAYMCe0v2L4tmQMw03TH0vwFf3V/ds++mHE4CgTdJ6MwEna+epAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULr/bR1esZPUIBwV5jukCUX2ws9IwHwYDVR0j BBgwFoAU+PKiyIXUd952pbLnXWmdXAYkB1EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9GOEYyQTJDODg1 RDQ3N0RFNzZBNUIyRTc1RDY5OUQ1QzA2MjQwNzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMwNjI0 MDc1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlE NUMwNjI0MDc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmf+4KA3SqpHi0ZZozY1cX3s4Vw3c14dWc5 CGSxyPKKnE3/MD2aB5Qe93/Q7PKtInd4uJ1KPRT1yLW8r1fITl29/eNZiGqkid08 5/4uJVUQw4T+f5HvL8ibNXXPv+yZhnltzpbywZOye5r+z2a7/sSbCxfPe0YzJTLQ ZQLBolhvkW4rIdV0WOH2AVyBgwL0OQHWw1LcUQrLDaBxiHNEKLxgjgKGM72FUOzs /anIRLgqmJ7dbl5ZGXhbZQm9rnPjS+NioyVu/264VGLS1MVLSgJwaghpn8AIj16U a7iWthaGWxPuTF0uWeJhh/KvDO5dc6Dtgt9KjWm5UcM5xtv64Vs= -----END CERTIFICATE-----Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org