$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: qNGogDoRpp0CHZDNqAN9UPkx+XJCjhif6oWCjAIccRY= Subject key identifier: AB:82:98:F2:10:FC:5E:E0:99:0F:AE:6E:FA:93:C9:57:C4:C9:3C:A9 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 704E205CB04250A940AE4F8885354A76BBDD1F30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 0490 Signing time: Thu 21 Nov 2024 12:30:48 +0000 Manifest this update: Thu 21 Nov 2024 12:25:47 +0000 Manifest next update: Mon 25 Nov 2024 00:18:47 +0000 Files and hashes: 1: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: KWSgHgZClp8YjegeNRSLmwVyqVb/8xYr5v7+Yrd/Vpo=) 2: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: 6VvUeeYmeg0MUVwO0RVdxIyOm9cMNJa+Tm3PYxp1CF4=) 3: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: EPr1m1oc2Rzl9xcRxX22+vQEOjWBX+SbMde4cfWhYjU=) 4: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: xnVqMNDw8RnJA74jU6fV2VQmkA1mltf/2nKj9MJxvXY=) 5: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: bACh/xBiu9uyeY9yNKlr4VXrCOf1RVYc2MUC47xloUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4e:20:5c:b0:42:50:a9:40:ae:4f:88:85:35:4a:76:bb:dd:1f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Nov 21 12:25:47 2024 GMT Not After : Nov 25 00:18:47 2024 GMT Subject: CN=AB8298F210FC5EE0990FAE6EFA93C957C4C93CA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:67:e3:81:44:5b:e1:1a:db:a3:f6:4f:53: 5b:a3:b1:30:ee:20:4a:a7:40:38:06:34:1f:f2:c6: ad:e8:c2:90:f4:d4:06:be:ec:55:22:48:20:62:ba: db:cf:bd:26:da:63:7a:8a:1d:e4:d2:48:5b:84:1c: f5:4b:0d:e8:3a:fc:29:e1:bc:b3:d8:d4:86:fd:cf: a2:c4:8b:c7:49:ef:9f:89:be:c0:ea:2f:50:d4:8f: 40:7b:dd:70:16:5d:8d:f7:23:2d:03:36:dc:0d:e3: 08:74:bd:cd:84:2d:c9:a0:29:c8:02:7a:f5:e4:89: 17:8c:d9:00:ec:16:bf:de:6a:ce:74:34:97:ae:28: 83:0d:88:82:68:73:95:31:c7:1d:e9:1e:69:01:30: 5c:11:b3:a2:09:73:94:d5:ae:e7:b3:98:b8:d4:45: b0:3f:79:55:27:9f:b9:30:6e:eb:5f:d6:b4:66:12: ae:f2:9c:93:70:c0:b3:69:d6:b8:fe:eb:76:f1:56: bd:27:da:9e:23:50:37:f2:27:89:96:ad:d7:89:13: cd:e0:45:eb:e8:a6:fb:90:51:a2:e0:d0:92:a7:c0: 07:9c:15:cf:64:d7:0c:00:5b:de:8e:f8:a1:dc:9a: ac:c9:39:1c:13:5e:c9:7e:56:23:48:49:d1:10:8e: f2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:82:98:F2:10:FC:5E:E0:99:0F:AE:6E:FA:93:C9:57:C4:C9:3C:A9 X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e3:ec:6f:b5:78:6d:61:9a:5d:a1:fb:2d:02:ae:e5:c3:1a: ea:23:34:42:ff:b6:74:d7:98:58:be:61:7a:95:95:65:ae:76: fc:64:1f:2a:ab:97:7b:ca:fb:27:d9:05:b7:e3:2d:c9:c3:8d: 23:42:9d:9e:65:60:7c:33:38:ce:89:bb:71:d1:21:a5:51:6a: db:7d:eb:96:65:90:b8:24:46:d5:33:55:58:9a:43:5e:ee:07: 81:06:e3:1f:c7:f1:6c:22:bb:70:7c:2d:a6:ee:40:0b:e6:14: ec:bc:3f:fa:82:13:ca:19:81:94:d1:9b:de:e1:94:87:c0:4c: bc:bf:00:0d:62:f6:ae:d8:c6:77:5d:f7:3e:ed:ee:40:26:1d: 90:64:b6:8f:84:77:d7:3a:b8:25:a1:82:7f:69:42:20:3e:cd: fa:78:45:38:4d:5b:fa:5e:9b:b9:c7:43:9c:61:ae:db:a1:ae: dd:18:9e:d4:e8:19:f9:36:9d:01:42:7a:9e:f7:84:7e:0c:61: 9b:c3:d3:a7:75:7d:b8:95:1f:d3:65:a8:d7:e6:cc:18:18:9c: 02:d5:9f:91:83:27:4b:1e:53:10:ac:1b:54:0b:07:b9:12:1a: 0c:d8:b0:35:ad:5f:5e:a4:51:9b:83:f3:ae:82:55:c3:81:d4: c5:c3:00:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcE4gXLBCUKlArk+IhTVKdrvdHzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNDExMjExMjI1NDdaFw0yNDExMjUwMDE4NDdaMDMxMTAvBgNV BAMTKEFCODI5OEYyMTBGQzVFRTA5OTBGQUU2RUZBOTNDOTU3QzRDOTNDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJmfjgURb4Rrbo/ZPU1ujsTDu IEqnQDgGNB/yxq3owpD01Aa+7FUiSCBiutvPvSbaY3qKHeTSSFuEHPVLDeg6/Cnh vLPY1Ib9z6LEi8dJ75+JvsDqL1DUj0B73XAWXY33Iy0DNtwN4wh0vc2ELcmgKcgC evXkiReM2QDsFr/eas50NJeuKIMNiIJoc5Uxxx3pHmkBMFwRs6IJc5TVruezmLjU RbA/eVUnn7kwbutf1rRmEq7ynJNwwLNp1rj+63bxVr0n2p4jUDfyJ4mWrdeJE83g RevopvuQUaLg0JKnwAecFc9k1wwAW96O+KHcmqzJORwTXsl+ViNISdEQjvJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq4KY8hD8XuCZD65u+pPJV8TJPKkwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfj7G+1eG1hml2h+y0CruXDGuojNEL/tnTX mFi+YXqVlWWudvxkHyqrl3vK+yfZBbfjLcnDjSNCnZ5lYHwzOM6Ju3HRIaVRatt9 65ZlkLgkRtUzVViaQ17uB4EG4x/H8Wwiu3B8LabuQAvmFOy8P/qCE8oZgZTRm97h lIfATLy/AA1i9q7Yxndd9z7t7kAmHZBkto+Ed9c6uCWhgn9pQiA+zfp4RThNW/pe m7nHQ5xhrtuhrt0YntToGfk2nQFCep73hH4MYZvD06d1fbiVH9NlqNfmzBgYnALV n5GDJ0seUxCsG1QLB7kSGgzYsDWtX16kUZuD866CVcOB1MXDADw= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org