$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: JS+0Pan5dfYI3bw/wLc5hcGGJIJD+1Xj6K3hfjrMhgU= Subject key identifier: E4:49:3E:02:A6:D7:64:3C:E3:7A:DF:BC:FD:54:5C:08:01:71:44:5D Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 7C3DB110CEA01736EB87F8929333334BEC8331AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: 55 Signing time: Thu 21 Nov 2024 22:21:01 +0000 Manifest this update: Thu 21 Nov 2024 22:16:01 +0000 Manifest next update: Sun 24 Nov 2024 22:35:01 +0000 Files and hashes: 1: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: Y+m2Bl48vTw4t4y4tReQgcKWvcufXi9T44E1mvRQBWY=) 2: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: X8Qmi+rZmoMMOgx/pmYhJCvz8V6uohIBbxYT/rjE3nM=) 3: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: QhFbGyf+fzMJepq9dcRUucI/sl2BiLaqJjOJSPUDFZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 22:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3d:b1:10:ce:a0:17:36:eb:87:f8:92:93:33:33:4b:ec:83:31:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Nov 21 22:16:01 2024 GMT Not After : Nov 24 22:35:01 2024 GMT Subject: CN=E4493E02A6D7643CE37ADFBCFD545C080171445D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:ae:b2:b9:30:82:92:ea:55:3a:90:98:ca: ea:fd:91:10:9d:4a:7d:f1:6f:85:3b:f8:17:0b:8c: 11:ca:1e:8e:4a:08:f2:58:38:d8:62:0c:82:79:3e: 37:5f:ea:af:4c:30:20:18:fb:90:e5:80:8e:7f:2a: 4e:3a:cf:ae:30:f7:f0:e4:85:ea:b8:af:71:bd:66: 1a:af:73:ad:01:59:fb:eb:d5:95:45:c0:4e:d2:13: dc:ed:1b:e7:d9:d6:54:5b:1d:7c:1a:0b:39:a2:0f: 1e:a6:1e:11:7b:90:e0:d9:15:e0:ac:5c:81:9d:26: 87:e3:05:e1:07:e9:c8:60:9b:72:d3:f5:fa:5f:43: 8f:ec:3d:02:11:9d:d0:ab:37:72:90:f3:4b:31:ec: d1:ea:58:75:92:a8:34:41:1c:d9:71:1b:17:1b:5d: a1:dc:ae:0d:be:9d:b3:37:f3:3e:28:b6:f6:2e:c0: fc:a4:6f:07:45:ce:4e:54:8b:72:14:20:07:70:ab: cc:94:af:d9:a3:29:e7:22:4d:19:94:de:bd:6a:7c: e4:29:3e:e0:00:9a:5e:6f:74:85:e7:68:c0:d4:47: 7c:b0:fc:98:18:5d:c8:63:3b:7f:38:76:cb:39:c2: 55:59:b8:e9:72:e4:41:d3:bd:f9:bd:ee:c0:1d:e3: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:49:3E:02:A6:D7:64:3C:E3:7A:DF:BC:FD:54:5C:08:01:71:44:5D X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:df:a8:7b:c9:ca:ea:da:e1:f4:e9:83:cf:6d:29:66:58:b8: ec:72:f3:b4:4c:f3:ef:93:61:13:bd:d9:3c:f9:71:9d:9b:b7: 0b:6f:2a:df:3c:43:12:28:49:dd:c4:c1:6c:47:8a:ca:1e:c7: 5a:bb:c8:3f:e8:7e:2c:94:15:6a:aa:01:e0:eb:af:15:75:c7: 79:44:68:b8:ca:c4:82:4a:35:54:82:ab:c1:f5:45:b7:22:b7: b1:7d:8a:da:6b:3a:bb:50:94:7a:5a:0e:43:0b:09:c2:d6:3e: 4a:73:e4:07:6e:f3:9d:e8:d1:98:38:22:2e:96:d4:be:70:b7: c3:14:f6:c5:35:e9:68:d6:f9:fe:87:bd:db:d3:ae:20:80:fa: c5:a8:a7:b5:aa:ad:65:0a:71:41:26:e0:16:1f:3a:e5:2e:91: 0b:b6:8e:55:af:d1:48:76:ce:53:c9:14:3a:42:48:42:44:c9: c9:6c:9e:9f:0a:b3:ba:3c:54:e4:8e:f9:6c:54:63:67:44:2f: 2e:11:c1:fb:1e:4d:cc:cc:0e:79:91:7a:98:29:e6:8e:72:8f: b2:83:18:c9:7a:1c:9e:71:86:06:f5:ee:7f:95:1b:4b:eb:b6: 30:6d:a6:d0:6b:79:bd:f6:bb:ba:37:22:e4:11:01:5c:2b:44: f1:09:b6:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfD2xEM6gFzbrh/iSkzMzS+yDMawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNDExMjEyMjE2MDFaFw0yNDExMjQyMjM1MDFaMDMxMTAvBgNV BAMTKEU0NDkzRTAyQTZENzY0M0NFMzdBREZCQ0ZENTQ1QzA4MDE3MTQ0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/66yuTCCkupVOpCYyur9kRCd Sn3xb4U7+BcLjBHKHo5KCPJYONhiDIJ5Pjdf6q9MMCAY+5DlgI5/Kk46z64w9/Dk heq4r3G9Zhqvc60BWfvr1ZVFwE7SE9ztG+fZ1lRbHXwaCzmiDx6mHhF7kODZFeCs XIGdJofjBeEH6chgm3LT9fpfQ4/sPQIRndCrN3KQ80sx7NHqWHWSqDRBHNlxGxcb XaHcrg2+nbM38z4otvYuwPykbwdFzk5Ui3IUIAdwq8yUr9mjKeciTRmU3r1qfOQp PuAAml5vdIXnaMDUR3yw/JgYXchjO384dss5wlVZuOly5EHTvfm97sAd47ypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Ek+AqbXZDzjet+8/VRcCAFxRF0wHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnfqHvJyura4fTpg89tKWZYuOxy87RM8++T YRO92Tz5cZ2btwtvKt88QxIoSd3EwWxHisoex1q7yD/ofiyUFWqqAeDrrxV1x3lE aLjKxIJKNVSCq8H1Rbcit7F9itprOrtQlHpaDkMLCcLWPkpz5Adu853o0Zg4Ii6W 1L5wt8MU9sU16WjW+f6HvdvTriCA+sWop7WqrWUKcUEm4BYfOuUukQu2jlWv0Uh2 zlPJFDpCSEJEyclsnp8Ks7o8VOSO+WxUY2dELy4RwfseTczMDnmRepgp5o5yj7KD GMl6HJ5xhgb17n+VG0vrtjBtptBreb32u7o3IuQRAVwrRPEJtrc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org