$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft File: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft (raw, json) Hash identifier: N0aVipw+79hNYoaQY+2SXbdv5baxTjiFhVBfi99FgO0= Subject key identifier: 82:6E:3A:65:E5:03:EC:A0:2E:37:E2:B0:0D:2D:3D:2C:B9:15:E8:56 Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Certificate serial: 40FB1BFF65F10E32FF651EEF7EDBF2885D98C20D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft Manifest number: 0453 Signing time: Wed 20 Nov 2024 20:30:06 +0000 Manifest this update: Wed 20 Nov 2024 20:25:06 +0000 Manifest next update: Sat 23 Nov 2024 21:06:06 +0000 Files and hashes: 1: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl (hash: trMBX9S3PWq5JeMJ0vKQSnL6fScwohwKllqeyIUMm+g=) 2: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: oI85Nkz5/CMZA7k3SxUQ6Xmc+24Tvrh8kDV6p9ogj1M=) 3: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: ZgDGXCsSyzDrJGQuDM1q2yAFTUBJsm9YLq4ntv3/5wQ=) 4: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: r0TbBF8saS2mOL5XeCwhn4JCtsrTGBwfR9bmqMpX7uY=) 5: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: dK7eIqeYPbIOw6nXsyQPzgXcTaUh+WVDmTdqwqkNOyk=) 6: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: GGTZ8ZWEqHxChvcJE8MjjNJMuF3dWYhHR2I8858Cz0U=) 7: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: XGyX1fDJCJeIJhfCIkQQCr6OHIb1I8YyoWexjVgFMdA=) 8: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: BrYtifMnKnRRiHxJbZJmvvBOsJOs2dpAKTUH37CnH1c=) 9: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5sdbY3VZICg/l4Thx0k/TS0lWX+ToDYtenymMHLejE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 21:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fb:1b:ff:65:f1:0e:32:ff:65:1e:ef:7e:db:f2:88:5d:98:c2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Validity Not Before: Nov 20 20:25:06 2024 GMT Not After : Nov 23 21:06:06 2024 GMT Subject: CN=826E3A65E503ECA02E37E2B00D2D3D2CB915E856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:d9:23:00:e8:7c:38:01:3a:ed:a0:5c:f1: d2:09:26:48:9e:5c:c3:a4:7f:10:ce:40:4d:21:04: 90:ef:01:2d:69:25:e9:45:7c:94:02:23:4c:26:84: 94:3f:99:ce:db:d8:97:d5:7a:5b:4d:40:46:cd:c4: 5b:80:53:f3:28:2c:1b:84:d0:4c:8e:e8:7d:f1:47: 94:b0:92:d8:63:4a:c5:3b:55:94:00:60:23:8b:20: 41:5b:f1:64:b8:84:e6:79:a4:75:5d:49:97:33:35: fd:18:fe:03:68:39:b0:bf:2a:00:0d:02:98:9f:07: ac:da:d9:f6:45:55:a4:64:6e:e6:3c:71:c6:d7:66: 7b:bb:a1:19:20:38:f0:81:07:f5:c7:76:2b:94:38: 8d:d0:9a:bb:04:7b:b2:5d:ec:e2:dc:d1:2b:c0:4c: f0:cb:b4:75:f2:b4:1a:53:9a:b8:fe:05:b5:e3:98: 4e:e4:7b:a6:1c:ed:9c:e3:d2:55:22:e9:7f:ca:05: f5:0a:ce:af:67:9a:8a:f5:2f:7e:bf:73:4b:78:89: ff:89:99:c6:14:c3:4f:c3:90:0d:42:99:c2:09:c6: e4:c0:db:fb:70:3d:4c:70:b9:87:b3:94:90:57:26: ec:52:b3:8b:c4:57:7d:44:04:0d:0b:3d:c9:f6:46: f4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6E:3A:65:E5:03:EC:A0:2E:37:E2:B0:0D:2D:3D:2C:B9:15:E8:56 X509v3 Authority Key Identifier: keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:78:33:eb:b0:96:66:9d:22:ea:1a:c9:d1:9a:3e:b9:82:36: 63:b5:a3:33:6a:1f:f9:39:d9:8b:24:cb:f9:06:93:37:dc:90: bd:a0:57:48:ec:7e:d9:3f:e5:6a:09:3d:d9:c0:39:89:63:42: 50:6a:9d:a6:db:31:db:1c:95:31:98:ea:30:55:c0:c7:8f:7e: 3d:31:61:74:25:61:1f:4d:cb:88:78:37:ad:81:fb:96:d9:98: 6c:d1:c3:a1:f2:a6:86:81:43:d5:2d:b8:1d:74:b9:ea:60:2f: 49:25:72:8c:24:7c:08:be:48:e3:d9:15:49:27:c9:ec:15:9d: 66:e4:d9:a1:16:ae:52:8a:9b:f2:20:a9:0c:5f:1f:b8:50:6a: 1c:c7:84:f8:62:67:0f:9d:86:42:ed:60:91:35:aa:76:63:0f: c8:f0:4f:f1:bb:6f:5e:cf:66:5c:a5:35:df:48:93:e4:53:ad: cc:49:e7:52:23:d8:e0:a7:18:fc:00:b6:e1:56:bb:26:61:82: d7:5b:f1:63:5f:7c:c3:11:8e:8b:44:45:5b:83:56:5d:77:3f: cc:59:87:81:7c:d7:eb:cd:38:11:e8:09:18:a4:0c:34:20:31: b1:1b:dd:39:1c:62:3b:d1:b5:09:6b:54:33:ac:c9:61:9c:a8: b2:ff:b9:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPsb/2XxDjL/ZR7vftvyiF2Ywg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5 Qjk0MTBFOTAeFw0yNDExMjAyMDI1MDZaFw0yNDExMjMyMTA2MDZaMDMxMTAvBgNV BAMTKDgyNkUzQTY1RTUwM0VDQTAyRTM3RTJCMDBEMkQzRDJDQjkxNUU4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4EtkjAOh8OAE67aBc8dIJJkie XMOkfxDOQE0hBJDvAS1pJelFfJQCI0wmhJQ/mc7b2JfVeltNQEbNxFuAU/MoLBuE 0EyO6H3xR5SwkthjSsU7VZQAYCOLIEFb8WS4hOZ5pHVdSZczNf0Y/gNoObC/KgAN ApifB6za2fZFVaRkbuY8ccbXZnu7oRkgOPCBB/XHdiuUOI3QmrsEe7Jd7OLc0SvA TPDLtHXytBpTmrj+BbXjmE7ke6Yc7Zzj0lUi6X/KBfUKzq9nmor1L36/c0t4if+J mcYUw0/DkA1CmcIJxuTA2/twPUxwuYezlJBXJuxSs4vEV31EBA0LPcn2RvQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgm46ZeUD7KAuN+KwDS09LLkV6FYwHwYDVR0j BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4 RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0 MTBFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFE ODI5Qjk0MTBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFN4M+uwlmadIuoaydGaPrmCNmO1ozNqH/k5 2Ysky/kGkzfckL2gV0jsftk/5WoJPdnAOYljQlBqnabbMdsclTGY6jBVwMePfj0x YXQlYR9Ny4h4N62B+5bZmGzRw6HypoaBQ9UtuB10uepgL0klcowkfAi+SOPZFUkn yewVnWbk2aEWrlKKm/IgqQxfH7hQahzHhPhiZw+dhkLtYJE1qnZjD8jwT/G7b17P ZlylNd9Ik+RTrcxJ51Ij2OCnGPwAtuFWuyZhgtdb8WNffMMRjotERVuDVl13P8xZ h4F81+vNOBHoCRikDDQgMbEb3TkcYjvRtQlrVDOsyWGcqLL/uS8= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:51 2024 by rpki-client on console-fra.rpki-client.org