$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: DL4kiPKP7lfyutuQQjL7VBcpCF5ppN4XwiYIdUDBDEQ= Subject key identifier: 90:15:55:CC:1C:4C:55:95:D9:E0:8C:22:15:2A:25:34:81:FF:40:24 Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 36C7B2244435911AB78A578DE692E65877F95F7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 0199 Signing time: Wed 20 Nov 2024 09:10:55 +0000 Manifest this update: Wed 20 Nov 2024 09:05:55 +0000 Manifest next update: Sat 23 Nov 2024 18:18:55 +0000 Files and hashes: 1: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: i87TyACWQ7ZhbVvoIz5FiY6rt+QM7cK6vcvZ8nf5D/w=) 2: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Ot4At1+tUgvIlqttQWFd4UQN09/rD5hlu+pQJL/AHeA=) 3: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: Y1zY0ncYkWeXUJOV4216wYSLQGD/F4pRJA8Na3r0rU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c7:b2:24:44:35:91:1a:b7:8a:57:8d:e6:92:e6:58:77:f9:5f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Nov 20 09:05:55 2024 GMT Not After : Nov 23 18:18:55 2024 GMT Subject: CN=901555CC1C4C5595D9E08C22152A253481FF4024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:70:29:a8:53:82:e2:b5:8c:8a:11:77:0f:65: 4d:d4:dd:c5:52:cc:6b:81:6a:31:3a:5d:87:08:93: 3a:3f:d9:d6:4d:27:d0:ac:07:00:ed:c3:17:74:fd: 5d:83:51:b5:ab:f0:54:8a:21:0a:42:88:d6:90:07: 8d:51:91:97:0d:57:c0:b3:55:d8:ad:3b:b5:8b:4b: 2a:45:62:e5:a8:37:38:fe:a9:c8:3e:ae:f3:74:1a: 91:6f:73:a4:f7:c7:d7:4a:4a:fc:d9:fc:7e:b2:b3: ca:be:90:83:3e:f6:12:a3:f6:47:aa:ec:d5:8d:ba: 22:e8:77:59:7a:d1:39:3b:d3:a6:e1:01:07:ae:4c: 18:ce:8b:98:60:d8:7e:fd:60:05:ab:3d:94:91:86: 5f:75:2c:34:63:96:d3:ad:c3:58:20:d2:6b:2f:12: 61:be:ac:17:2c:b3:6a:54:c6:02:8c:4f:3d:00:f0: 65:3d:fc:84:14:93:8f:7e:fc:4f:59:a8:78:2e:7b: 98:05:cf:2a:8a:25:b4:83:c7:0a:49:60:f3:a8:b4: 75:3e:91:90:f7:76:42:f2:60:32:58:d8:6b:a9:ed: 0b:68:5c:ee:6b:9d:22:04:9a:a2:a9:e7:7e:49:a9: fc:26:7a:22:e9:5a:3f:26:b0:d1:26:5c:41:91:21: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:15:55:CC:1C:4C:55:95:D9:E0:8C:22:15:2A:25:34:81:FF:40:24 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:48:7f:43:30:a0:43:36:09:af:e6:41:23:bd:d8:7a:63:ab: 31:05:65:ae:9b:39:f9:16:d1:21:5e:9b:75:fe:73:13:af:ef: 5f:96:c0:06:4a:6d:63:e9:87:e1:ef:d2:b1:ca:26:d9:28:e5: db:e9:10:f6:ed:97:ea:f0:30:fc:b1:b6:7d:10:9f:79:5f:c7: a0:57:ff:75:92:e8:6c:da:69:68:a6:f2:f4:b2:a8:cb:74:2f: 39:af:ff:73:a9:96:5c:16:e9:52:bf:93:ad:2c:83:82:65:46: c2:77:96:79:3b:16:57:42:74:54:d9:bc:9d:8b:6b:81:b9:68: 01:1f:67:d7:a7:8d:d5:f2:64:d9:ec:46:c4:9d:04:6e:e6:47: bc:3e:c9:09:a3:a8:cf:bb:29:a9:f1:02:28:d2:f0:a4:b3:80: 09:9d:41:57:7c:83:83:08:b6:4a:fb:b5:be:2f:db:94:9e:8c: c1:4a:1c:5e:d5:d9:98:75:e8:40:50:27:de:5b:e2:b4:a3:01: c5:7e:a9:43:3f:63:c9:97:83:22:dd:3a:e6:82:d0:c5:76:6d: ae:8a:40:bb:db:00:51:4b:74:c4:16:f4:0f:a8:34:a2:08:88: a7:d3:27:64:25:fe:ca:73:27:67:6a:27:07:b7:b7:fd:a0:8b: 8b:bc:67:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNseyJEQ1kRq3ileN5pLmWHf5X3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNDExMjAwOTA1NTVaFw0yNDExMjMxODE4NTVaMDMxMTAvBgNV BAMTKDkwMTU1NUNDMUM0QzU1OTVEOUUwOEMyMjE1MkEyNTM0ODFGRjQwMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcCmoU4LitYyKEXcPZU3U3cVS zGuBajE6XYcIkzo/2dZNJ9CsBwDtwxd0/V2DUbWr8FSKIQpCiNaQB41RkZcNV8Cz VditO7WLSypFYuWoNzj+qcg+rvN0GpFvc6T3x9dKSvzZ/H6ys8q+kIM+9hKj9keq 7NWNuiLod1l60Tk706bhAQeuTBjOi5hg2H79YAWrPZSRhl91LDRjltOtw1gg0msv EmG+rBcss2pUxgKMTz0A8GU9/IQUk49+/E9ZqHgue5gFzyqKJbSDxwpJYPOotHU+ kZD3dkLyYDJY2Gup7QtoXO5rnSIEmqKp535JqfwmeiLpWj8msNEmXEGRIVNhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkBVVzBxMVZXZ4IwiFSolNIH/QCQwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJIf0MwoEM2Ca/mQSO92HpjqzEFZa6bOfkW 0SFem3X+cxOv71+WwAZKbWPph+Hv0rHKJtko5dvpEPbtl+rwMPyxtn0Qn3lfx6BX /3WS6GzaaWim8vSyqMt0Lzmv/3OpllwW6VK/k60sg4JlRsJ3lnk7FldCdFTZvJ2L a4G5aAEfZ9enjdXyZNnsRsSdBG7mR7w+yQmjqM+7KanxAijS8KSzgAmdQVd8g4MI tkr7tb4v25SejMFKHF7V2Zh16EBQJ95b4rSjAcV+qUM/Y8mXgyLdOuaC0MV2ba6K QLvbAFFLdMQW9A+oNKIIiKfTJ2Ql/spzJ2dqJwe3t/2gi4u8Z+E= -----END CERTIFICATE-----Generated at Wed Nov 20 11:08:52 2024 by rpki-client on console-ams.rpki-client.org