$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: TEKfJDEbgHmRBZ/YWlsSqRPvpcCWxJFiNHAlIpi4crg= Subject key identifier: D1:F5:04:4F:F7:BA:5E:DA:2A:39:DB:47:08:B2:31:34:AC:D3:BA:68 Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 3406B622D50CE46F47D7175146D90E0BFF142D27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: B4 Signing time: Fri 22 Nov 2024 01:51:15 +0000 Manifest this update: Fri 22 Nov 2024 01:46:15 +0000 Manifest next update: Mon 25 Nov 2024 10:55:15 +0000 Files and hashes: 1: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: TQUOGgnpygpm3E58lKQ0df5PgwIbrwKhVW+LboJlm4g=) 2: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: cmehz3unFDq/m/HSU3xfJVWnULqlAOmDCa2f/3f1n8Q=) 3: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: /YxIu3Fbva17zvDM2sZ6uNzXjk19j73oWUWb/mjyKyQ=) 4: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: ITLyFu1Ls0Ci12l43DmrSkBj5B2lVNQ/8Ynx9TiHrL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 10:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:06:b6:22:d5:0c:e4:6f:47:d7:17:51:46:d9:0e:0b:ff:14:2d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Nov 22 01:46:15 2024 GMT Not After : Nov 25 10:55:15 2024 GMT Subject: CN=D1F5044FF7BA5EDA2A39DB4708B23134ACD3BA68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:0e:c4:ba:e1:9a:18:df:4a:65:5a:1a:8a: 81:e5:76:ad:7d:27:3b:24:7e:c2:0b:30:2f:25:12: d8:71:94:54:3a:1d:ae:af:78:ac:3c:ac:31:ee:03: c8:1f:32:aa:9e:d1:96:37:f3:e9:92:06:4a:9d:27: 55:5a:63:28:39:f7:56:22:2a:7d:01:f1:0a:b5:a3: 9e:cf:76:ae:8b:68:1f:93:fb:5c:31:28:eb:0f:12: 38:b4:fc:f4:93:41:c0:2f:75:6c:c7:f9:77:82:0b: a0:13:8c:1b:c1:b0:91:59:87:18:4e:49:e2:b7:36: d7:44:bc:7e:d3:a1:2e:41:6d:10:ab:c2:db:9a:c0: b9:45:cb:fc:92:8f:66:50:6e:e7:3c:e8:08:62:c3: 16:46:71:1e:c0:99:f1:2d:b6:6d:2c:4a:46:e5:08: 6b:b7:5f:56:f8:e6:3a:06:66:97:46:78:d1:6a:3c: a5:4e:2c:0f:ee:bd:fc:55:f5:a1:64:7b:2b:10:7d: 95:74:00:92:bc:00:05:d6:75:77:4f:81:f7:fc:33: 1e:66:1d:8a:12:43:de:43:e4:92:d8:e7:0f:47:05: 0d:24:cd:2e:ba:06:8b:93:4e:c7:15:b7:a1:23:75: e8:de:88:50:f7:f9:a4:b8:c5:ab:3d:de:56:c2:13: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F5:04:4F:F7:BA:5E:DA:2A:39:DB:47:08:B2:31:34:AC:D3:BA:68 X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:45:5a:84:bd:b3:8b:7a:77:26:83:76:5b:7b:bc:3d:f9:e7: 19:d9:91:2f:f0:fb:2e:eb:e5:5d:a9:52:6f:9d:c8:bd:96:9f: ac:7d:93:4a:ab:2a:a9:ee:ba:e7:9c:a4:a2:13:23:3b:4b:92: bf:d1:2c:2c:d8:64:93:76:d9:69:be:20:d2:2f:94:41:56:45: 31:4c:28:04:9c:b7:18:43:73:87:1f:56:7a:82:b2:27:a0:80: ff:02:68:d7:d5:0d:1b:5d:17:fa:8c:ec:cb:d7:6b:0c:47:94: 90:7d:d7:8d:68:43:79:3a:cb:db:6d:6f:9a:25:f5:02:5c:f1: 95:ba:6c:79:9d:a1:30:b3:d3:73:ed:cd:ef:00:4e:44:4b:92: 9c:52:d1:3a:d6:49:e2:8f:dc:e1:9c:9d:52:5e:2d:bb:2a:ba: 09:e6:41:e2:d0:db:d5:ee:f9:62:22:27:b0:b9:03:0b:7c:49: 30:ed:55:58:16:09:be:94:c3:bc:20:aa:ec:ed:86:34:a6:60: 90:1f:1c:0f:f0:a4:a8:e7:36:a8:a5:19:e5:1f:d8:05:01:3a: 1f:b3:ea:ff:b5:9e:49:10:2d:b5:83:4e:e1:44:ef:39:e5:35: 40:b6:12:15:8f:4a:e5:e0:4f:cd:b2:55:c7:a2:23:a7:d6:b6: 0d:ba:d2:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNAa2ItUM5G9H1xdRRtkOC/8ULScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNDExMjIwMTQ2MTVaFw0yNDExMjUxMDU1MTVaMDMxMTAvBgNV BAMTKEQxRjUwNDRGRjdCQTVFREEyQTM5REI0NzA4QjIzMTM0QUNEM0JBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuQ7EuuGaGN9KZVoaioHldq19 JzskfsILMC8lEthxlFQ6Ha6veKw8rDHuA8gfMqqe0ZY38+mSBkqdJ1VaYyg591Yi Kn0B8Qq1o57Pdq6LaB+T+1wxKOsPEji0/PSTQcAvdWzH+XeCC6ATjBvBsJFZhxhO SeK3NtdEvH7ToS5BbRCrwtuawLlFy/ySj2ZQbuc86AhiwxZGcR7AmfEttm0sSkbl CGu3X1b45joGZpdGeNFqPKVOLA/uvfxV9aFkeysQfZV0AJK8AAXWdXdPgff8Mx5m HYoSQ95D5JLY5w9HBQ0kzS66BouTTscVt6EjdejeiFD3+aS4xas93lbCEz43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0fUET/e6XtoqOdtHCLIxNKzTumgwHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9FWoS9s4t6dyaDdlt7vD355xnZkS/w+y7r 5V2pUm+dyL2Wn6x9k0qrKqnuuuecpKITIztLkr/RLCzYZJN22Wm+INIvlEFWRTFM KASctxhDc4cfVnqCsieggP8CaNfVDRtdF/qM7MvXawxHlJB9141oQ3k6y9ttb5ol 9QJc8ZW6bHmdoTCz03Ptze8ATkRLkpxS0TrWSeKP3OGcnVJeLbsqugnmQeLQ29Xu +WIiJ7C5Awt8STDtVVgWCb6Uw7wgquzthjSmYJAfHA/wpKjnNqilGeUf2AUBOh+z 6v+1nkkQLbWDTuFE7znlNUC2EhWPSuXgT82yVceiI6fWtg260ho= -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org