$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: wibui3TVN6AbAoHebdYgJ6ip/k817oW3Hq8vxoJdUOw= Subject key identifier: 80:36:DF:C8:F8:13:42:5E:80:5D:FC:E6:BD:70:1C:AA:C6:7F:D4:20 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 60C810D92C04232168992851815754E249075D3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 0290 Signing time: Fri 22 Nov 2024 09:52:05 +0000 Manifest this update: Fri 22 Nov 2024 09:47:05 +0000 Manifest next update: Mon 25 Nov 2024 18:21:05 +0000 Files and hashes: 1: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: IMm6CCSm6745f06rpuxAhuRN6fVIJUbPiGSK0gcfms4=) 2: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: 3wV7JYZqct4lW+OJQcP28inNso91A32mpkhf1oPN8EU=) 3: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: CSWgjUvsmFAUoxn+c8cQjQuQW7eYcbWtJrqUbfz/Tn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c8:10:d9:2c:04:23:21:68:99:28:51:81:57:54:e2:49:07:5d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Nov 22 09:47:05 2024 GMT Not After : Nov 25 18:21:05 2024 GMT Subject: CN=8036DFC8F813425E805DFCE6BD701CAAC67FD420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:1e:db:fe:f3:d4:63:75:12:14:dc:79:67: 01:fb:ae:8c:9e:3a:a4:9a:b1:b1:98:a9:72:47:d2: ef:7f:37:29:c2:89:6e:21:9a:90:da:fb:40:ee:b1: 0c:32:d3:44:68:f9:3f:52:7f:b9:fd:d6:65:04:76: e1:c1:09:05:d9:9b:78:79:10:69:2c:d1:83:c5:28: ed:0b:09:01:d4:59:24:4c:72:2a:34:b1:80:37:ae: 3f:d6:9c:c0:30:69:3f:d3:88:62:a1:25:79:ee:ce: 9e:33:c4:e5:11:c2:bf:13:1f:ad:45:a1:47:83:3c: f4:8c:fa:fd:4a:fe:31:ef:3c:60:af:e4:3c:b7:20: fa:f2:47:ee:cc:dd:49:d2:42:84:1f:21:d1:9f:e1: 2b:7d:1b:84:64:6b:a0:af:55:39:fa:30:de:b1:7c: fb:a0:d3:dc:c3:01:64:fb:9c:c4:3c:3f:4d:06:5e: b9:2a:d5:c1:1a:6c:a3:a9:30:35:57:d7:35:3e:da: b8:ee:ad:c3:85:f1:99:6f:42:1c:17:4d:57:50:6c: 4d:26:e3:ae:db:cc:ba:65:b0:0e:e0:39:e6:dd:32: 89:27:22:1a:c0:e3:92:2e:3e:76:d6:96:41:a4:77: 8c:3a:b9:cb:32:6d:23:6b:bb:f0:db:c5:15:e9:c2: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:36:DF:C8:F8:13:42:5E:80:5D:FC:E6:BD:70:1C:AA:C6:7F:D4:20 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:52:60:08:f7:7d:3c:9c:2d:dc:36:b1:b1:99:10:c1:df:35: 93:c8:32:68:42:8d:8a:11:ee:21:e5:28:dd:cc:1c:fb:a0:ed: c4:fc:d3:59:6d:4c:66:90:73:19:70:f0:11:a6:1b:6e:5f:1e: a7:15:61:d2:46:f1:a6:ab:2d:5e:05:84:4f:6e:16:fe:0b:8e: ae:7e:aa:b4:bf:34:75:61:1b:37:f5:2a:48:57:17:7e:6b:a7: c1:41:7f:c1:01:9f:f2:11:1c:07:0c:10:dc:3d:15:ef:e5:6b: 00:e3:11:1d:4f:37:29:cd:12:36:97:5f:5f:2e:a6:38:33:a6: 69:f5:02:d8:5e:d9:5c:9b:64:ad:a0:50:7b:2e:e6:d6:dc:ef: 43:c2:ee:f5:3d:e8:0a:b8:4b:a6:8f:49:f1:ab:44:85:54:e9: cf:16:3b:40:9c:d4:1c:2c:99:c7:16:40:12:e5:d7:54:22:85: 82:f7:ad:79:e4:6d:1e:a0:3b:e6:3d:3f:2f:0e:cc:b2:6f:53: c0:8c:e0:bf:bd:60:a4:33:7a:32:67:ef:47:ec:fe:1b:b1:35: aa:02:88:b6:77:92:81:0b:d1:ac:75:53:dc:d8:98:d4:a9:c4: 99:bb:d3:ae:e2:f9:4a:e2:b3:5b:7d:f6:34:94:37:89:46:3b: b7:56:c2:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMgQ2SwEIyFomShRgVdU4kkHXT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNDExMjIwOTQ3MDVaFw0yNDExMjUxODIxMDVaMDMxMTAvBgNV BAMTKDgwMzZERkM4RjgxMzQyNUU4MDVERkNFNkJENzAxQ0FBQzY3RkQ0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Rx7b/vPUY3USFNx5ZwH7roye OqSasbGYqXJH0u9/NynCiW4hmpDa+0DusQwy00Ro+T9Sf7n91mUEduHBCQXZm3h5 EGks0YPFKO0LCQHUWSRMcio0sYA3rj/WnMAwaT/TiGKhJXnuzp4zxOURwr8TH61F oUeDPPSM+v1K/jHvPGCv5Dy3IPryR+7M3UnSQoQfIdGf4St9G4Rka6CvVTn6MN6x fPug09zDAWT7nMQ8P00GXrkq1cEabKOpMDVX1zU+2rjurcOF8ZlvQhwXTVdQbE0m 467bzLplsA7gOebdMoknIhrA45IuPnbWlkGkd4w6ucsybSNru/DbxRXpwl3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDbfyPgTQl6AXfzmvXAcqsZ/1CAwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVSYAj3fTycLdw2sbGZEMHfNZPIMmhCjYoR 7iHlKN3MHPug7cT801ltTGaQcxlw8BGmG25fHqcVYdJG8aarLV4FhE9uFv4Ljq5+ qrS/NHVhGzf1KkhXF35rp8FBf8EBn/IRHAcMENw9Fe/lawDjER1PNynNEjaXX18u pjgzpmn1Athe2VybZK2gUHsu5tbc70PC7vU96Aq4S6aPSfGrRIVU6c8WO0Cc1Bws mccWQBLl11QihYL3rXnkbR6gO+Y9Py8OzLJvU8CM4L+9YKQzejJn70fs/huxNaoC iLZ3koEL0ax1U9zYmNSpxJm7067i+Uris1t99jSUN4lGO7dWwpc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org