$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: fk3qS8rD1CO8Gsbeu77CXxOXmaS0cIHKQgFLd8dQB9I= Subject key identifier: E4:E5:A2:C6:45:4B:E5:64:77:AD:C2:E7:D3:4D:5A:C5:69:E5:D5:CD Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 5AE5A6D45C89A6B343F57E2C65C454A2D7CB0BBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: 3E Signing time: Fri 27 Sep 2024 08:11:55 +0000 Manifest this update: Fri 27 Sep 2024 08:06:55 +0000 Manifest next update: Mon 30 Sep 2024 17:01:55 +0000 Files and hashes: 1: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: rhPXvt3vZoIcR1IRod2t44CHmG+h6gK4lk8l2hSp6UQ=) 2: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: X8TpdFdWasIKasbVus53xdoue7ejTqDVyaNdA71kTFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 06:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e5:a6:d4:5c:89:a6:b3:43:f5:7e:2c:65:c4:54:a2:d7:cb:0b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Sep 27 08:06:55 2024 GMT Not After : Sep 30 17:01:55 2024 GMT Subject: CN=E4E5A2C6454BE56477ADC2E7D34D5AC569E5D5CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:46:77:fe:a7:0b:f1:c3:ee:80:a2:9f:12: 22:2d:1e:d9:1f:6a:be:63:41:f1:99:f6:5d:7b:5d: 80:56:a3:f9:d6:21:3f:b3:b7:72:6d:cd:6f:d8:48: f9:8c:5a:36:af:68:66:10:a8:13:2b:b9:c3:5e:3b: e8:64:df:81:22:90:d8:22:69:d4:7b:b5:05:cf:3d: 6c:10:e8:00:c5:6c:36:3a:62:8b:14:dd:53:ce:fc: a6:1b:45:14:c9:d3:1e:e8:bb:d9:86:55:e7:f4:07: 5d:95:ab:c1:49:dd:6b:45:61:74:f3:11:bc:0f:4a: a5:17:30:60:55:de:39:fa:ec:31:b4:ee:4f:f1:de: c6:be:ab:21:98:ae:f4:9c:02:39:79:07:b2:31:bf: 65:45:18:7e:9a:ef:21:27:54:e4:5d:b4:9b:75:d5: ab:ea:5c:c7:f5:ed:e7:77:38:99:17:16:d0:e6:70: 3a:48:d4:e9:ad:f3:73:f3:b9:dd:38:fb:78:f4:14: 9f:51:15:d5:c0:f0:64:f3:c2:a8:c9:da:9c:a5:8f: 25:07:eb:1a:96:1a:dd:51:32:e7:cc:52:f4:3f:d4: 54:e5:6f:4d:98:af:22:ff:c5:e9:16:78:81:cc:c7: 76:aa:35:0d:f6:4b:48:69:48:ac:a4:bb:e2:f3:ac: 77:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E5:A2:C6:45:4B:E5:64:77:AD:C2:E7:D3:4D:5A:C5:69:E5:D5:CD X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e3:55:a7:c9:c4:99:07:bf:87:5f:f4:f7:ee:34:ba:c5:bb: 41:a7:70:df:e7:7c:bf:e8:c0:98:f6:ad:ce:11:55:d4:a8:d1: 3b:63:a3:5c:33:43:d2:22:4a:68:81:fb:bc:27:70:56:48:5b: e9:12:a0:d9:66:c7:fc:2f:2d:4b:ca:c6:9a:1a:55:8c:7b:3a: fe:20:10:16:e4:d0:b5:e7:e0:0c:ed:24:e1:c4:5e:d6:7f:8c: 08:8e:31:65:d0:2b:9f:15:a3:fb:10:f1:97:ef:aa:d9:c2:51: 72:0d:66:b4:f2:ba:9d:ee:13:02:2b:25:90:68:03:a7:2f:f8: d3:f8:27:38:80:c2:d5:8c:b3:6d:fd:4a:7c:bc:c8:d3:00:a9: f0:6a:d9:79:62:fa:91:3c:71:ef:ac:aa:7b:59:9a:28:06:bb: e6:16:af:21:2f:a7:d2:0f:9f:b6:db:91:7c:58:15:2d:86:06: 0a:db:b7:94:9a:bd:1a:07:b5:55:28:99:a0:ca:da:41:7c:01: d1:0d:fc:25:00:8f:b3:ff:8d:20:3a:b9:f9:26:fb:94:a3:5c: e6:b4:bc:d4:73:6d:b4:fd:2a:8a:1d:4f:7a:fa:5d:5b:38:02: 67:ff:43:41:5c:33:d8:7d:0a:5f:42:45:a3:e8:74:c0:ac:16: 34:d1:6a:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWuWm1FyJprND9X4sZcRUotfLC70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNDA5MjcwODA2NTVaFw0yNDA5MzAxNzAxNTVaMDMxMTAvBgNV BAMTKEU0RTVBMkM2NDU0QkU1NjQ3N0FEQzJFN0QzNEQ1QUM1NjlFNUQ1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChe0Z3/qcL8cPugKKfEiItHtkf ar5jQfGZ9l17XYBWo/nWIT+zt3JtzW/YSPmMWjavaGYQqBMrucNeO+hk34EikNgi adR7tQXPPWwQ6ADFbDY6YosU3VPO/KYbRRTJ0x7ou9mGVef0B12Vq8FJ3WtFYXTz EbwPSqUXMGBV3jn67DG07k/x3sa+qyGYrvScAjl5B7Ixv2VFGH6a7yEnVORdtJt1 1avqXMf17ed3OJkXFtDmcDpI1Omt83Pzud04+3j0FJ9RFdXA8GTzwqjJ2pyljyUH 6xqWGt1RMufMUvQ/1FTlb02YryL/xekWeIHMx3aqNQ32S0hpSKyku+LzrHfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5OWixkVL5WR3rcLn001axWnl1c0wHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHjVafJxJkHv4df9PfuNLrFu0GncN/nfL/o wJj2rc4RVdSo0Ttjo1wzQ9IiSmiB+7wncFZIW+kSoNlmx/wvLUvKxpoaVYx7Ov4g EBbk0LXn4AztJOHEXtZ/jAiOMWXQK58Vo/sQ8ZfvqtnCUXINZrTyup3uEwIrJZBo A6cv+NP4JziAwtWMs239Sny8yNMAqfBq2Xli+pE8ce+sqntZmigGu+YWryEvp9IP n7bbkXxYFS2GBgrbt5SavRoHtVUomaDK2kF8AdEN/CUAj7P/jSA6ufkm+5SjXOa0 vNRzbbT9KoodT3r6XVs4Amf/Q0FcM9h9Cl9CRaPodMCsFjTRal0= -----END CERTIFICATE-----Generated at Fri Sep 27 10:42:39 2024 by rpki-client on console-ams.rpki-client.org