$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json) Hash identifier: SP6bx2g5Bl2vh+mJqqnKhthYM1Yw9t9yv28lL7DEz6g= Subject key identifier: 7C:76:CB:83:A6:88:4E:73:90:87:84:EA:42:97:EA:C5:C8:0F:9A:C9 Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 1780392BA6B57631414CF53E1F19B4002F7160F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft Manifest number: 0490 Signing time: Sat 23 Nov 2024 17:01:38 +0000 Manifest this update: Sat 23 Nov 2024 16:56:38 +0000 Manifest next update: Tue 26 Nov 2024 21:38:38 +0000 Files and hashes: 1: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: NloRN/KvVOfP2gOHZv5SKsFWw6tMgshmag0wYmz9lTQ=) 2: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: eQag8HLHZu1kiCQwBVORmEZkcS9c5Ry+vEgpFVk0Re8=) 3: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: gglX1Ue7msHCOwrGTgIXx/95UkxFKDwgs3VTDwnAgLA=) 4: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: m/65e9cOFT5GxdbAl14pYw1g3WDPcrPd8V2NoqzZ7g4=) 5: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: M35VYTaoy9DbL5gS4/+PdE8kAMYccXnknFRl6GIQES0=) 6: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: EGergzWDAprJ0pWqTKnjEV/FMMwX4Eg9ePrJ+3sYH/g=) 7: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: 77Uaq405aecCjRZ1hW4Q+EEazhfZI1UiNjat3IG/Q8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:80:39:2b:a6:b5:76:31:41:4c:f5:3e:1f:19:b4:00:2f:71:60:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Nov 23 16:56:38 2024 GMT Not After : Nov 26 21:38:38 2024 GMT Subject: CN=7C76CB83A6884E73908784EA4297EAC5C80F9AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:c9:37:81:8e:be:20:ba:68:56:3b:5b:58: db:d7:c3:e8:64:4c:93:44:88:cd:d9:5f:a3:c2:2b: a4:57:fc:41:11:a2:17:fb:4b:a2:4f:74:ed:5f:44: d9:37:5b:12:3f:27:29:9d:17:d1:56:76:2e:a1:4f: dd:c8:2a:7e:6f:50:b4:2e:e2:4c:3e:78:8b:8b:38: 90:66:59:6b:79:60:8c:da:9a:f6:23:59:52:c4:d6: a6:7e:c0:d8:77:94:ba:a2:01:b3:d9:d3:3c:ef:11: a8:47:c3:c6:96:9c:0f:77:63:be:c9:5f:41:dd:c8: 3b:c4:2e:37:bc:cf:57:2a:cf:4f:be:17:3a:3f:da: 42:b8:ae:57:34:5a:18:cc:97:05:d9:ea:a6:71:4d: 6f:17:a4:df:78:72:44:f1:da:8e:31:35:9a:aa:64: 61:f7:1b:a9:d2:d0:f7:36:b8:74:c9:2d:ae:e7:9d: f7:6e:81:19:74:91:ff:da:31:ef:2c:29:df:bc:10: 48:f9:8f:c6:ec:5f:04:23:00:96:b7:67:9d:18:39: b8:3c:5c:38:32:06:b1:5c:87:7c:34:1e:26:11:cd: e5:7d:00:98:fc:43:37:d4:58:14:e2:33:04:db:05: 64:1b:31:38:c0:e6:96:e9:4c:5c:e6:bb:fb:10:52: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:76:CB:83:A6:88:4E:73:90:87:84:EA:42:97:EA:C5:C8:0F:9A:C9 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:35:14:a7:5e:f7:ef:80:c1:89:9a:95:d5:db:23:e1:e9:72: 4c:0e:24:d5:fa:8a:e1:c8:4f:69:61:4a:7a:f3:31:a8:81:4c: f0:ec:be:16:58:ec:37:7e:a3:71:26:56:92:d2:14:bc:ca:6a: a2:8b:42:a1:86:ed:f8:bf:1f:ea:95:d5:2a:de:23:53:d9:b1: cc:31:76:24:07:6e:29:24:13:4c:ee:fd:e6:6b:e1:a2:7c:f0: b4:34:89:e4:70:e7:a0:aa:2f:81:50:0f:e9:79:fa:27:0b:70: d2:9a:b3:b9:18:cf:68:fd:f3:6f:21:23:34:84:12:ee:2f:ae: d1:36:04:e8:c8:88:74:56:e9:04:23:e1:8b:72:c6:9b:ab:49: 1a:79:f4:10:7e:de:fa:8a:7f:97:26:a7:6d:b5:46:35:c6:de: b7:84:43:17:40:70:d9:31:42:42:19:f6:1f:a4:46:79:61:ca: 4a:ec:5e:55:2e:c6:f1:c9:ae:8f:aa:ee:71:c1:d2:3d:8d:9d: 51:f4:82:75:85:79:4c:e3:0a:5e:f5:73:83:5f:b8:c0:0b:58: 98:f7:93:fb:67:98:ce:5d:60:3e:ec:a1:dc:40:ad:3b:61:7a: 55:c8:e3:8a:e3:5f:d5:64:cc:de:85:a0:25:d4:d5:cf:4b:b2: 4c:76:e8:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4A5K6a1djFBTPU+Hxm0AC9xYPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNDExMjMxNjU2MzhaFw0yNDExMjYyMTM4MzhaMDMxMTAvBgNV BAMTKDdDNzZDQjgzQTY4ODRFNzM5MDg3ODRFQTQyOTdFQUM1QzgwRjlBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbck3gY6+ILpoVjtbWNvXw+hk TJNEiM3ZX6PCK6RX/EERohf7S6JPdO1fRNk3WxI/JymdF9FWdi6hT93IKn5vULQu 4kw+eIuLOJBmWWt5YIzamvYjWVLE1qZ+wNh3lLqiAbPZ0zzvEahHw8aWnA93Y77J X0HdyDvELje8z1cqz0++Fzo/2kK4rlc0WhjMlwXZ6qZxTW8XpN94ckTx2o4xNZqq ZGH3G6nS0Pc2uHTJLa7nnfdugRl0kf/aMe8sKd+8EEj5j8bsXwQjAJa3Z50YObg8 XDgyBrFch3w0HiYRzeV9AJj8QzfUWBTiMwTbBWQbMTjA5pbpTFzmu/sQUoOzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfHbLg6aITnOQh4TqQpfqxcgPmskwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUz N0NEQTY2MkM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMc1FKde9++AwYmaldXbI+HpckwOJNX6iuHI T2lhSnrzMaiBTPDsvhZY7Dd+o3EmVpLSFLzKaqKLQqGG7fi/H+qV1SreI1PZscwx diQHbikkE0zu/eZr4aJ88LQ0ieRw56CqL4FQD+l5+icLcNKas7kYz2j9828hIzSE Eu4vrtE2BOjIiHRW6QQj4YtyxpurSRp59BB+3vqKf5cmp221RjXG3reEQxdAcNkx QkIZ9h+kRnlhykrsXlUuxvHJro+q7nHB0j2NnVH0gnWFeUzjCl71c4NfuMALWJj3 k/tnmM5dYD7sodxArTthelXI44rjX9VkzN6FoCXU1c9Lskx26Bo= -----END CERTIFICATE-----Generated at Sat Nov 23 18:47:51 2024 by rpki-client on console-fra.rpki-client.org