$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: dunCNdSoMGrC58UY+NKGB9Ely9lPxF4fafpDnwWhOBg= Subject key identifier: 6F:5F:C6:D7:E6:D7:07:E7:F6:2F:58:2E:6B:2C:3E:41:7D:F8:ED:E1 Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 60FD1B07EF3418A8FFA7C1279C98836DA361FE10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 028E Signing time: Thu 21 Nov 2024 12:31:53 +0000 Manifest this update: Thu 21 Nov 2024 12:26:53 +0000 Manifest next update: Sun 24 Nov 2024 18:46:53 +0000 Files and hashes: 1: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: 0iCYxPC31pPSAvbDWlSbOf4wUHd4K3IjBuNWnJfYJIE=) 2: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: EJNiZ5CP4NViKAT2AQrbTMiN3p2wBvG9Nimx2GtcP7I=) 3: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: lcK4yqx1wapun4O8ibyvZIDR3r6Yt8ucZYD7UkMp1ts=) 4: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: 2mf3MWd4Yf3DGipvibKgwCGflKjCe75JI3gRy14xu5A=) 5: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: wSSjfmJ9M8VAB9kra0wzMzhkO06nYoxmusWaDGkIVZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fd:1b:07:ef:34:18:a8:ff:a7:c1:27:9c:98:83:6d:a3:61:fe:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Nov 21 12:26:53 2024 GMT Not After : Nov 24 18:46:53 2024 GMT Subject: CN=6F5FC6D7E6D707E7F62F582E6B2C3E417DF8EDE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:f5:3c:38:7d:c5:af:82:3e:07:1b:37:f3: ae:f5:15:43:fb:25:2e:41:d7:a9:ea:3e:40:30:85: af:8a:80:98:5b:41:87:01:1e:5b:73:8f:6e:b1:b1: 44:b1:68:cf:42:a0:79:f2:8c:91:36:9c:54:d4:fe: 46:bf:1a:18:7b:90:52:20:8f:e9:5c:9f:97:59:23: c7:7a:c4:92:0e:ff:3a:29:26:90:5d:5a:dc:7a:f4: 46:ed:51:b8:79:72:2c:d7:da:4d:6c:2e:d2:1c:f5: 8d:6b:60:14:af:0d:5c:ab:ce:27:05:88:db:db:97: 52:34:10:3a:01:29:67:c8:de:52:95:6f:36:f0:85: 62:5f:ae:39:c3:d3:74:78:2f:fe:e9:d9:37:c5:0d: e0:84:bb:2d:5c:e2:d5:96:5e:f8:0d:c3:2b:43:80: 54:64:6e:df:75:bf:db:76:dd:44:ac:e1:86:05:88: 0f:e7:d3:59:ef:77:e0:dd:e6:61:d8:17:db:56:59: cf:0b:3c:33:0a:e5:d3:4c:d0:a3:a1:45:e3:88:2e: c8:e9:3a:d0:93:d0:c9:ff:5d:03:a0:b5:17:86:f2: 8e:44:f3:5d:82:ee:b7:35:b2:64:fc:00:1a:68:30: df:12:44:58:0d:da:f2:b3:1f:f9:cb:ca:28:0b:cd: c9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5F:C6:D7:E6:D7:07:E7:F6:2F:58:2E:6B:2C:3E:41:7D:F8:ED:E1 X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:46:0b:47:47:e6:64:8b:2d:32:4f:70:f5:77:8e:28:92:ad: 18:16:17:66:bb:e4:39:ca:8c:03:9c:bd:67:15:81:25:3a:0f: 87:a3:5e:e0:06:86:09:68:7c:fe:be:32:16:d1:5f:a1:fe:5f: a7:60:44:51:82:db:84:7b:8f:8d:1c:1a:fa:44:98:1c:6b:a6: 4c:d4:a2:b2:e4:49:4d:85:9d:77:12:4d:ce:37:d9:68:11:3c: e6:dd:25:20:d5:7b:f5:04:19:24:4d:c3:aa:09:65:58:9e:1c: 7f:22:8b:b9:7c:d1:dc:27:b7:75:98:36:a4:b8:d7:40:b0:c5: d1:5c:71:51:fc:02:9c:3e:cd:c7:15:bc:4a:d7:87:54:77:6c: 9d:13:8c:15:96:8b:33:65:8a:fb:ee:dc:51:d9:02:b5:8e:ea: d2:d6:97:de:0c:e7:fc:92:ce:ec:12:2d:5b:f0:77:d1:06:3e: c5:fd:af:94:12:c9:90:05:82:ac:17:64:fd:3f:c7:05:3c:7d: 25:2c:3a:f8:0d:a1:54:9d:7d:7e:31:94:8b:91:87:c0:a3:af: a7:92:19:64:44:aa:27:7a:d6:95:5e:c8:49:42:8e:9a:ce:0d: a5:86:e4:5b:e0:5e:8e:00:a7:67:1a:81:5d:60:8e:02:e8:a0: 37:2e:e4:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYP0bB+80GKj/p8EnnJiDbaNh/hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNDExMjExMjI2NTNaFw0yNDExMjQxODQ2NTNaMDMxMTAvBgNV BAMTKDZGNUZDNkQ3RTZENzA3RTdGNjJGNTgyRTZCMkMzRTQxN0RGOEVERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4x/U8OH3Fr4I+Bxs38671FUP7 JS5B16nqPkAwha+KgJhbQYcBHltzj26xsUSxaM9CoHnyjJE2nFTU/ka/Ghh7kFIg j+lcn5dZI8d6xJIO/zopJpBdWtx69EbtUbh5cizX2k1sLtIc9Y1rYBSvDVyrzicF iNvbl1I0EDoBKWfI3lKVbzbwhWJfrjnD03R4L/7p2TfFDeCEuy1c4tWWXvgNwytD gFRkbt91v9t23USs4YYFiA/n01nvd+Dd5mHYF9tWWc8LPDMK5dNM0KOhReOILsjp OtCT0Mn/XQOgtReG8o5E812C7rc1smT8ABpoMN8SRFgN2vKzH/nLyigLzcnnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb1/G1+bXB+f2L1guayw+QX347eEwHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVGC0dH5mSLLTJPcPV3jiiSrRgWF2a75DnK jAOcvWcVgSU6D4ejXuAGhglofP6+MhbRX6H+X6dgRFGC24R7j40cGvpEmBxrpkzU orLkSU2FnXcSTc432WgRPObdJSDVe/UEGSRNw6oJZVieHH8ii7l80dwnt3WYNqS4 10CwxdFccVH8Apw+zccVvErXh1R3bJ0TjBWWizNlivvu3FHZArWO6tLWl94M5/yS zuwSLVvwd9EGPsX9r5QSyZAFgqwXZP0/xwU8fSUsOvgNoVSdfX4xlIuRh8Cjr6eS GWREqid61pVeyElCjprODaWG5FvgXo4Ap2cagV1gjgLooDcu5I4= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org