$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: moR9VLgzjYYZp2CmZ5GQ8qx2jiVq7hc8XvwggxMN+AY= Subject key identifier: 2D:B6:40:FF:D7:4C:B5:39:EB:10:84:29:05:E9:CC:20:66:2E:87:97 Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 46CB5E626F79973C3DAA5B3FAB1222A44615DF2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 016F Signing time: Fri 22 Nov 2024 10:00:58 +0000 Manifest this update: Fri 22 Nov 2024 09:55:58 +0000 Manifest next update: Mon 25 Nov 2024 10:20:58 +0000 Files and hashes: 1: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: ns+3re2xjf2DCHP0O34XWP3LLYLuHBfKDvdHrJkc5xc=) 2: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: /vuj/h7kUZTjO1XHx69jnMNmoF3w0RvV89UjxypFeHI=) 3: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: mJLB2tKLnYbB9zMLRYUfW0oiNzOSUGzCunMjTLsdgdw=) 4: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: wKnxKcsBFGerGouJ4kIBj3lWM4P1DNm/Gs9+dq9PcB4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 10:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:cb:5e:62:6f:79:97:3c:3d:aa:5b:3f:ab:12:22:a4:46:15:df:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Nov 22 09:55:58 2024 GMT Not After : Nov 25 10:20:58 2024 GMT Subject: CN=2DB640FFD74CB539EB10842905E9CC20662E8797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:aa:fc:60:43:fe:3e:c0:a0:97:8a:a6:f5: 07:bd:4a:bb:df:17:c3:28:cf:f9:2e:14:92:94:03: 0a:2a:b3:69:a3:1f:4c:33:06:41:35:45:c4:ee:59: db:64:95:ec:df:8e:48:16:0a:93:47:8d:de:28:e1: 2c:23:81:60:6a:06:26:5b:86:cf:16:73:19:8e:35: f1:cc:cb:e7:fc:e3:7e:a0:0d:60:0f:7a:45:4a:0e: 51:c0:bb:85:30:67:95:48:c8:c4:ef:b0:d4:43:72: 2d:c2:fc:a1:f5:24:bf:52:b5:fb:92:64:89:f1:26: 33:ae:b9:16:de:20:4e:8d:25:c2:a6:6c:7a:26:4f: 1b:b6:1d:d3:99:5a:fc:b3:0a:22:3d:3b:b2:7b:82: 9f:89:c2:8e:83:19:cf:ce:d4:18:70:6c:f5:7a:7b: 26:98:f9:02:9b:33:0a:1a:44:c8:41:2e:1b:f6:4b: 97:8c:f6:f3:25:82:02:48:e2:64:5f:06:7e:3f:a4: a9:0e:3f:ca:e1:0d:db:72:30:04:3c:e2:ae:fa:08: 29:1a:fc:92:5c:74:f2:22:ba:31:24:c6:bc:b2:d6: 8c:85:4d:21:d1:a8:c4:35:6f:a8:03:e2:92:78:a4: fb:8f:60:8e:1d:63:71:9b:ba:3c:02:3b:ee:f2:fc: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B6:40:FF:D7:4C:B5:39:EB:10:84:29:05:E9:CC:20:66:2E:87:97 X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:6f:52:76:f3:9d:bf:69:20:e5:75:dd:60:f7:a1:4c:b6:d1: 71:31:30:f4:2d:62:c2:d3:8e:ce:08:95:a0:98:c3:df:cb:d4: de:d2:68:1c:62:3b:1a:ab:a8:d8:a6:1d:58:bc:42:26:d2:ec: 41:f5:e0:0e:a1:9d:4f:2a:ac:12:56:40:f8:51:02:db:b8:70: 45:d6:48:b8:ab:8d:20:c7:0d:ef:85:02:c5:1f:69:dc:02:da: 87:d2:9b:ec:af:ba:ab:09:f0:a0:f6:c5:07:96:61:79:8e:ff: d0:20:a9:c9:0a:cf:e7:67:8e:f4:a7:94:04:8d:cf:5e:c1:c9: 70:87:b8:50:5b:a0:fa:0d:5f:c8:0b:ce:c3:ba:88:4b:69:ef: d2:f8:cb:69:a7:fe:d4:0e:c2:c7:06:18:e0:da:9e:99:ce:05: fb:85:72:5e:39:ae:a7:3d:b2:5e:6d:dc:47:76:d0:f2:f6:70: 25:87:f7:5c:5d:eb:68:a5:57:30:87:23:13:29:af:16:b2:22: 85:ef:02:ca:52:d0:e9:be:e3:1a:81:11:0c:34:aa:84:c7:7a: 6a:a2:51:51:21:d9:a4:6b:06:75:41:f1:7f:fb:87:3a:fb:27: 8d:81:6f:10:9b:8d:a7:d2:40:91:26:4e:82:b9:7c:bf:b1:f2: 4f:73:1c:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsteYm95lzw9qls/qxIipEYV3yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNDExMjIwOTU1NThaFw0yNDExMjUxMDIwNThaMDMxMTAvBgNV BAMTKDJEQjY0MEZGRDc0Q0I1MzlFQjEwODQyOTA1RTlDQzIwNjYyRTg3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMar8YEP+PsCgl4qm9Qe9Srvf F8Moz/kuFJKUAwoqs2mjH0wzBkE1RcTuWdtklezfjkgWCpNHjd4o4SwjgWBqBiZb hs8WcxmONfHMy+f8436gDWAPekVKDlHAu4UwZ5VIyMTvsNRDci3C/KH1JL9StfuS ZInxJjOuuRbeIE6NJcKmbHomTxu2HdOZWvyzCiI9O7J7gp+Jwo6DGc/O1BhwbPV6 eyaY+QKbMwoaRMhBLhv2S5eM9vMlggJI4mRfBn4/pKkOP8rhDdtyMAQ84q76CCka /JJcdPIiujEkxryy1oyFTSHRqMQ1b6gD4pJ4pPuPYI4dY3GbujwCO+7y/MsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULbZA/9dMtTnrEIQpBenMIGYuh5cwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFvUnbznb9pIOV13WD3oUy20XExMPQtYsLT js4IlaCYw9/L1N7SaBxiOxqrqNimHVi8QibS7EH14A6hnU8qrBJWQPhRAtu4cEXW SLirjSDHDe+FAsUfadwC2ofSm+yvuqsJ8KD2xQeWYXmO/9AgqckKz+dnjvSnlASN z17ByXCHuFBboPoNX8gLzsO6iEtp79L4y2mn/tQOwscGGODanpnOBfuFcl45rqc9 sl5t3Ed20PL2cCWH91xd62ilVzCHIxMprxayIoXvAspS0Om+4xqBEQw0qoTHemqi UVEh2aRrBnVB8X/7hzr7J42BbxCbjafSQJEmToK5fL+x8k9zHPA= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org