$ rpki-client -vvf repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft File: FE5652AD4702104DB082C396B05EE5D04542E7D7.mft (raw, json) Hash identifier: 09/YwDTM/yqSP4Xo7ZEsJfvvxwbQVJGdaBeIDQFdnrM= Subject key identifier: 03:D2:CF:2B:6A:52:B4:FD:35:81:1B:62:FE:22:BC:C9:8B:04:34:EF Authority key identifier: FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 Certificate issuer: /CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Certificate serial: 69DCB92C746EF937553EF8FE6436655BBAF80AFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft Manifest number: DB Signing time: Thu 21 Nov 2024 20:21:59 +0000 Manifest this update: Thu 21 Nov 2024 20:16:59 +0000 Manifest next update: Mon 25 Nov 2024 03:46:59 +0000 Files and hashes: 1: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: H3hffUKrAMQgM7P8EVWElY25bwWrRFq4QzBAmlTISAU=) 2: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: qQiMuOKfrH8PAPkv5BzDpLFaZ1Dhp8Gu3GpyZWN3n5w=) 3: FE5652AD4702104DB082C396B05EE5D04542E7D7.crl (hash: 1T2Rd1RNfItxsIcBIIsgvQqt8yJUcgiVMyhkXWAQ9Fg=) 4: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: F9P1ZnUuqGV0taVDJEnFJzgAXTbawikhZBmBVym2mNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:dc:b9:2c:74:6e:f9:37:55:3e:f8:fe:64:36:65:5b:ba:f8:0a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Validity Not Before: Nov 21 20:16:59 2024 GMT Not After : Nov 25 03:46:59 2024 GMT Subject: CN=03D2CF2B6A52B4FD35811B62FE22BCC98B0434EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bc:0a:b3:ec:6e:fa:17:14:ba:21:ad:70:94: 6d:66:3f:ad:fc:e2:4f:29:69:b2:ef:e7:74:fa:da: a5:df:f0:14:8e:88:20:35:0e:bd:fb:32:b3:aa:65: 2f:47:f3:45:99:8b:37:e5:87:57:31:f0:3f:16:87: 9c:ed:74:72:85:dc:06:1d:e7:65:3a:64:be:86:a4: a3:20:0c:33:b9:07:97:77:a6:67:b3:86:2e:30:22: ba:e1:1e:03:f5:2e:91:03:bd:90:0b:19:1a:f0:83: c2:3e:6b:56:e7:03:e0:55:7b:8b:dd:17:0c:64:73: ab:57:94:27:a9:79:7d:17:dc:9d:8b:fe:ea:40:86: a4:3a:66:26:58:d6:bb:17:50:b6:63:19:e3:48:b7: 57:f6:d1:a0:6f:39:6e:66:98:1e:7e:77:a5:05:07: bd:91:88:42:8b:5b:3b:74:3d:20:aa:c7:27:f1:ec: e1:44:ba:e1:ee:8b:8c:f8:f5:21:ca:2b:6d:41:cb: ac:b1:0f:b8:93:5f:ed:31:7c:17:aa:f3:16:0c:7c: 7c:ac:31:ca:16:c8:67:77:9f:64:fa:53:9b:86:56: a5:b1:76:03:70:9f:f8:cc:c1:7c:0c:a5:ff:44:a0: 04:fc:ae:ac:b7:6c:b2:ec:ff:42:ba:72:db:9a:7f: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D2:CF:2B:6A:52:B4:FD:35:81:1B:62:FE:22:BC:C9:8B:04:34:EF X509v3 Authority Key Identifier: keyid:FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0e:16:43:ae:2c:db:36:79:02:d1:92:10:8d:fa:d4:ed:00: d1:e8:5b:02:42:6e:83:5b:6f:f5:c9:f6:5a:e2:16:4b:ef:0c: 26:38:37:59:7f:18:e0:dd:ef:28:4a:6e:c6:3b:08:44:3d:fa: 75:dd:c5:0a:e5:3c:ef:76:4f:b7:d0:3c:3a:d5:df:5e:c8:f0: 17:6e:f1:7d:cc:c4:bf:8c:26:85:ad:b7:c4:04:7b:e6:5c:58: 45:5e:f0:6c:24:d9:0e:ac:ea:5a:72:e2:b8:05:e2:0a:11:af: 1b:03:35:5f:0d:88:43:a6:60:f8:ca:f5:b6:e7:6c:04:b7:00: 56:92:d2:bf:3e:7e:68:39:cd:6f:1a:e8:28:ef:3f:84:25:a2: 98:f0:96:46:7e:b6:42:50:37:be:ca:c3:7e:e0:6b:e2:84:d8: 16:06:00:ff:fc:a6:31:0e:69:70:5c:6e:7e:8a:32:c6:e3:7b: 7a:bc:d6:5f:09:d2:50:3d:1a:13:c1:a2:12:5c:27:4e:6e:27: 5e:8d:e3:c4:40:b2:99:4a:5f:dc:08:80:fa:40:b6:27:c1:71: 3c:3c:3d:ef:8a:55:7b:49:3f:d3:63:c8:41:bb:b6:a4:39:88: 6a:be:7a:4e:a4:31:10:59:98:fb:19:34:ec:b5:af:08:0f:6f: 1c:78:fc:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUady5LHRu+TdVPvj+ZDZlW7r4CvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0 NTQyRTdENzAeFw0yNDExMjEyMDE2NTlaFw0yNDExMjUwMzQ2NTlaMDMxMTAvBgNV BAMTKDAzRDJDRjJCNkE1MkI0RkQzNTgxMUI2MkZFMjJCQ0M5OEIwNDM0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvAqz7G76FxS6Ia1wlG1mP638 4k8pabLv53T62qXf8BSOiCA1Dr37MrOqZS9H80WZizflh1cx8D8Wh5ztdHKF3AYd 52U6ZL6GpKMgDDO5B5d3pmezhi4wIrrhHgP1LpEDvZALGRrwg8I+a1bnA+BVe4vd Fwxkc6tXlCepeX0X3J2L/upAhqQ6ZiZY1rsXULZjGeNIt1f20aBvOW5mmB5+d6UF B72RiEKLWzt0PSCqxyfx7OFEuuHui4z49SHKK21By6yxD7iTX+0xfBeq8xYMfHys McoWyGd3n2T6U5uGVqWxdgNwn/jMwXwMpf9EoAT8rqy3bLLs/0K6ctuaf/fDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA9LPK2pStP01gRti/iK8yYsENO8wHwYDVR0j BBgwFoAU/lZSrUcCEE2wgsOWsF7l0EVC59cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2FmZDU3YS1lNmRlLTRhNWYtYjVjNi0xMDg2NWQ1YThjOTgvMC9GRTU2NTJBRDQ3 MDIxMDREQjA4MkMzOTZCMDVFRTVEMDQ1NDJFN0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0NTQy RTdENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1 RDA0NTQyRTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgOFkOuLNs2eQLRkhCN+tTtANHoWwJCboNb b/XJ9lriFkvvDCY4N1l/GODd7yhKbsY7CEQ9+nXdxQrlPO92T7fQPDrV317I8Bdu 8X3MxL+MJoWtt8QEe+ZcWEVe8Gwk2Q6s6lpy4rgF4goRrxsDNV8NiEOmYPjK9bbn bAS3AFaS0r8+fmg5zW8a6CjvP4QlopjwlkZ+tkJQN77Kw37ga+KE2BYGAP/8pjEO aXBcbn6KMsbje3q81l8J0lA9GhPBohJcJ05uJ16N48RAsplKX9wIgPpAtifBcTw8 Pe+KVXtJP9NjyEG7tqQ5iGq+ek6kMRBZmPsZNOy1rwgPbxx4/Dw= -----END CERTIFICATE-----Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org