$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: u8v36rwnBNDvncUelSNUINicVqZ8WwvnQQHK2U9/e7U= Subject key identifier: 0A:25:63:10:45:67:1B:F4:17:EC:0F:AF:0E:DC:C2:D6:A0:D1:07:74 Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 76DA823E88AB29DB8A66F626C436B5A61C02784D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 0373 Signing time: Thu 21 Nov 2024 12:22:04 +0000 Manifest this update: Thu 21 Nov 2024 12:17:04 +0000 Manifest next update: Sun 24 Nov 2024 14:01:04 +0000 Files and hashes: 1: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: w1U60qcdJqGqgGejfw5qqfHMeYCjchzAjGjkoYQhMH8=) 2: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: cLHOzxac3RunFyykfxNBVhlrVdmMQ1S4ZVxPDRhvqkc=) 3: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: KlVfWP1Il3RN3ASw6Ya5TPYfRFfepbYfILbLkUXBAks=) 4: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: CZOT3Qe6u5gK3ZMkwDdMPzpBsT/hchoPycr1jT+sxpE=) 5: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 9QqvAfZSusq7TNTZjMNWZS+7iPHdwM0xe1dY5FOdfh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:da:82:3e:88:ab:29:db:8a:66:f6:26:c4:36:b5:a6:1c:02:78:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Nov 21 12:17:04 2024 GMT Not After : Nov 24 14:01:04 2024 GMT Subject: CN=0A25631045671BF417EC0FAF0EDCC2D6A0D10774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:7a:43:74:41:c3:83:0f:45:b5:ed:36:39: bb:bd:14:3a:8e:0d:14:5a:71:38:19:7a:6d:5d:cb: dc:83:8d:05:ee:64:07:f7:9c:a4:62:a2:2b:4d:97: 0c:a1:f1:f2:80:da:8c:39:22:67:1a:78:8c:cd:1e: 2c:e0:ae:5e:99:11:c2:4e:f8:56:d4:de:f2:96:16: 98:59:39:75:b6:42:40:ab:d9:0b:97:cb:3b:4a:a5: 38:96:c2:50:32:bf:24:b3:8f:bd:76:2d:f7:c6:c7: db:89:21:50:3c:13:9b:59:f6:10:b4:ba:b5:a9:f6: d9:3f:58:72:7a:3d:10:49:3d:ab:9d:19:e1:7d:47: 48:2d:42:d5:b9:a4:d8:e5:2f:c5:21:31:52:e4:43: a5:21:8d:06:9a:8a:17:55:a0:eb:74:c5:1d:ab:be: 78:06:30:75:91:9d:e8:a6:c8:ac:b7:99:80:32:64: ba:48:bb:25:15:73:c7:b3:e8:44:6d:ff:7d:1f:8c: b0:0d:12:2a:79:e5:2d:d3:d2:60:5f:37:ff:1d:81: f0:3c:70:db:a6:7a:c9:0f:44:7c:d9:f7:bf:c1:02: 70:a0:d0:ad:98:b2:fa:d0:7c:d7:28:cc:79:56:3d: 71:6d:46:bf:59:a6:5c:15:5e:37:c7:7b:ab:ae:2c: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:25:63:10:45:67:1B:F4:17:EC:0F:AF:0E:DC:C2:D6:A0:D1:07:74 X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3b:8c:23:7f:2b:63:3a:dd:41:5a:31:d0:e0:6c:bc:1a:b6: c9:ea:4a:49:7d:f8:0f:ba:36:8b:1c:fc:7f:ad:71:24:6f:78: 8b:36:85:b2:84:7f:5c:2a:c6:32:f5:69:d7:a9:1b:d9:fc:71: 4d:b3:15:a0:3a:e9:65:62:ba:60:55:0c:25:1c:d3:ef:4e:49: b0:26:b5:60:a2:a7:df:57:f5:ff:ac:a0:4c:88:01:52:4d:03: 57:02:33:f3:f3:f2:8e:85:d9:55:c6:ff:16:b0:7e:e2:5f:b0: 3c:c0:99:6c:74:21:94:20:41:6e:9a:e1:8c:c1:37:c5:cd:8b: 13:3a:b0:95:86:96:14:3c:c5:6f:31:75:5a:90:5d:01:f6:a5: d8:21:f1:16:40:9f:9e:95:c9:b0:3d:73:bb:0b:8d:41:9d:61: d0:9f:67:af:87:8c:5a:67:dd:9e:97:d7:e2:65:be:fa:44:f9: ad:a5:f9:9f:7b:37:0d:62:87:d3:a0:a8:d4:0c:a4:f6:5a:9a: 65:d9:ad:38:09:8a:7b:21:5b:a8:c0:8e:ca:38:f0:71:3c:15: ba:a2:a6:6a:13:60:45:12:0d:c1:4f:39:ef:73:60:24:6e:3b: 79:d4:67:d3:bf:2b:64:c7:32:97:2d:89:f8:90:62:6a:7b:65: 83:d5:1c:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtqCPoirKduKZvYmxDa1phwCeE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNDExMjExMjE3MDRaFw0yNDExMjQxNDAxMDRaMDMxMTAvBgNV BAMTKDBBMjU2MzEwNDU2NzFCRjQxN0VDMEZBRjBFRENDMkQ2QTBEMTA3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6npDdEHDgw9Fte02Obu9FDqO DRRacTgZem1dy9yDjQXuZAf3nKRioitNlwyh8fKA2ow5ImcaeIzNHizgrl6ZEcJO +FbU3vKWFphZOXW2QkCr2QuXyztKpTiWwlAyvySzj712LffGx9uJIVA8E5tZ9hC0 urWp9tk/WHJ6PRBJPaudGeF9R0gtQtW5pNjlL8UhMVLkQ6UhjQaaihdVoOt0xR2r vngGMHWRneimyKy3mYAyZLpIuyUVc8ez6ERt/30fjLANEip55S3T0mBfN/8dgfA8 cNumeskPRHzZ97/BAnCg0K2YsvrQfNcozHlWPXFtRr9ZplwVXjfHe6uuLLjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCiVjEEVnG/QX7A+vDtzC1qDRB3QwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABI7jCN/K2M63UFaMdDgbLwatsnqSkl9+A+6 Nosc/H+tcSRveIs2hbKEf1wqxjL1adepG9n8cU2zFaA66WViumBVDCUc0+9OSbAm tWCip99X9f+soEyIAVJNA1cCM/Pz8o6F2VXG/xawfuJfsDzAmWx0IZQgQW6a4YzB N8XNixM6sJWGlhQ8xW8xdVqQXQH2pdgh8RZAn56VybA9c7sLjUGdYdCfZ6+HjFpn 3Z6X1+JlvvpE+a2l+Z97Nw1ih9OgqNQMpPZammXZrTgJinshW6jAjso48HE8Fbqi pmoTYEUSDcFPOe9zYCRuO3nUZ9O/K2THMpctifiQYmp7ZYPVHFU= -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org