$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft File: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft (raw, json) Hash identifier: R20TXCzFvY3YGR7FJb6OoimfQfPnZOLcOVqhXOf+MJI= Subject key identifier: C3:EA:98:90:5A:96:E7:BC:E8:4A:16:47:B7:D7:EA:80:9B:CB:F3:F0 Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Certificate serial: 4D105E2AB3F40CABF54613ED8A6AF1EF90E78D6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft Manifest number: 0494 Signing time: Fri 22 Nov 2024 23:31:24 +0000 Manifest this update: Fri 22 Nov 2024 23:26:24 +0000 Manifest next update: Tue 26 Nov 2024 03:29:24 +0000 Files and hashes: 1: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: Rrqdw9OPSaMzJqqbJeil51yS0Dp8UexGZcFlKd3Gk5M=) 2: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: rPr5z+FLHw5K05AtTYvasv5Kj2s12fni5q+BH3ebdhc=) 3: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: ngQAnXClgSB5QjJcQgS8jYjCfldqavE1VdARG5KiIeU=) 4: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: 30qxcBNGXbPKjPzSGFvg4MhstUTk+wFXbUeAZJ6OvH8=) 5: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: CwXU9VaKpcKaIL0+cwM5Fjr5bkAAawnd7hCNC9U00Bg=) 6: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: 4JNXGbFSJKtM5CgL+QrVp+IPBcHdXzt9z515t4i/+vk=) 7: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl (hash: zxL1O66mbJBgPah46uLGffxxhReSfYcCNesQOXT7mkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 03:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:10:5e:2a:b3:f4:0c:ab:f5:46:13:ed:8a:6a:f1:ef:90:e7:8d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Validity Not Before: Nov 22 23:26:24 2024 GMT Not After : Nov 26 03:29:24 2024 GMT Subject: CN=C3EA98905A96E7BCE84A1647B7D7EA809BCBF3F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:8d:5f:8c:b9:c9:88:31:ff:ea:1c:00:c5: 00:71:e3:4a:09:6b:25:90:fb:4c:12:81:de:06:88: 2e:d3:42:98:04:c6:ec:c6:db:91:8b:c7:39:e1:d4: 2d:4a:3f:f9:99:54:bd:94:eb:f5:1b:3f:9c:30:34: 93:4b:08:dc:17:76:c0:4a:8d:73:7b:1e:fe:b9:dd: f6:7d:2a:0a:15:29:55:a7:27:32:66:3d:3c:34:29: d8:c0:89:b8:44:41:3e:14:e0:3e:26:61:a5:9e:00: 4b:a6:ea:28:bf:8b:7e:58:d8:e1:d3:ad:1c:b6:5e: 7e:61:d8:df:a5:cd:09:c4:4d:18:55:39:e4:55:f0: fc:5b:58:f4:ca:97:a4:0d:18:01:6f:43:a2:72:fc: 29:3b:fb:c5:45:11:60:90:82:9a:ed:5a:63:f7:20: df:32:d9:62:af:d9:1a:ec:a1:b1:fe:62:9b:b5:55: a6:75:74:eb:06:0f:95:9d:bf:bf:df:e8:f9:51:93: e8:07:17:7d:b9:12:c1:aa:b4:e7:6d:e5:f8:57:34: 2f:f4:24:a1:5d:5f:04:3d:d5:dc:3a:06:b0:b1:af: 0c:9b:49:4f:5e:cd:f3:0e:e8:10:8a:df:15:3f:49: 41:5d:66:4c:7b:23:4c:9b:34:fb:32:d7:a0:85:55: 4e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EA:98:90:5A:96:E7:BC:E8:4A:16:47:B7:D7:EA:80:9B:CB:F3:F0 X509v3 Authority Key Identifier: keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b2:2b:0d:30:f7:41:14:50:ea:6e:8d:ee:88:5c:02:d7:e4: f3:b0:cb:f4:0b:da:27:ca:b9:3b:e8:01:ff:19:33:bf:da:3f: 82:c4:73:12:ac:46:a0:71:8a:a4:c0:29:33:db:ad:e2:a6:e9: ee:ec:de:27:09:68:d9:da:a4:38:aa:2c:d6:ad:8c:79:d2:ef: f9:06:b1:bc:45:1f:e7:ec:09:0c:8d:2f:c4:6a:22:ed:50:07: ee:d1:01:98:46:cd:df:83:5a:5f:48:aa:23:ec:d8:25:14:74: 07:6c:a1:64:25:6b:b1:66:ca:40:37:4e:fc:16:3b:b4:df:71: f9:07:94:5f:d5:ce:20:ee:ba:43:3d:82:c6:e5:f0:07:cd:6b: cd:56:ad:0d:2d:84:13:e3:14:c6:ca:80:13:87:53:04:2d:b3: ee:72:4b:85:1a:65:e8:10:80:26:cd:1b:ba:8d:5c:0a:31:c5: 59:cf:fd:d8:45:56:8e:78:d9:34:98:9f:12:b3:0e:4f:f8:e5: 64:5f:4e:4d:13:e5:1e:8a:8f:db:9a:88:0d:25:12:cc:89:46: 5d:9d:4e:be:a5:55:4d:e6:7f:ca:59:73:ce:26:3d:18:f1:df: 18:db:f3:be:e1:bf:f2:a6:a2:82:ac:98:75:fa:d6:7c:14:94: 7a:8b:62:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRBeKrP0DKv1RhPtimrx75DnjW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4 NkNGNTgyRjAeFw0yNDExMjIyMzI2MjRaFw0yNDExMjYwMzI5MjRaMDMxMTAvBgNV BAMTKEMzRUE5ODkwNUE5NkU3QkNFODRBMTY0N0I3RDdFQTgwOUJDQkYzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQo1fjLnJiDH/6hwAxQBx40oJ ayWQ+0wSgd4GiC7TQpgExuzG25GLxznh1C1KP/mZVL2U6/UbP5wwNJNLCNwXdsBK jXN7Hv653fZ9KgoVKVWnJzJmPTw0KdjAibhEQT4U4D4mYaWeAEum6ii/i35Y2OHT rRy2Xn5h2N+lzQnETRhVOeRV8PxbWPTKl6QNGAFvQ6Jy/Ck7+8VFEWCQgprtWmP3 IN8y2WKv2RrsobH+Ypu1VaZ1dOsGD5Wdv7/f6PlRk+gHF325EsGqtOdt5fhXNC/0 JKFdXwQ91dw6BrCxrwybSU9ezfMO6BCK3xU/SUFdZkx7I0ybNPsy16CFVU5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+qYkFqW57zoShZHt9fqgJvL8/AwHwYDVR0j BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG NTgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2 QTE4NkNGNTgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWyKw0w90EUUOpuje6IXALX5POwy/QL2ifK uTvoAf8ZM7/aP4LEcxKsRqBxiqTAKTPbreKm6e7s3icJaNnapDiqLNatjHnS7/kG sbxFH+fsCQyNL8RqIu1QB+7RAZhGzd+DWl9IqiPs2CUUdAdsoWQla7FmykA3TvwW O7TfcfkHlF/VziDuukM9gsbl8AfNa81WrQ0thBPjFMbKgBOHUwQts+5yS4UaZegQ gCbNG7qNXAoxxVnP/dhFVo542TSYnxKzDk/45WRfTk0T5R6Kj9uaiA0lEsyJRl2d Tr6lVU3mf8pZc84mPRjx3xjb877hv/KmooKsmHX61nwUlHqLYgs= -----END CERTIFICATE-----Generated at Sat Nov 23 00:48:00 2024 by rpki-client on console-fra.rpki-client.org