$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: NcgO/W6IwQAEsj5hMcoRsFZ3hwehLRfOiYgR/zGiFxk= Subject key identifier: 68:A2:AB:C3:24:20:3A:F9:07:AD:79:56:C0:E5:5D:F2:6C:28:10:02 Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 143CB9A20C3B9E43F3D10E307DB60BD2F562DAE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 0410 Signing time: Fri 22 Nov 2024 07:21:05 +0000 Manifest this update: Fri 22 Nov 2024 07:16:05 +0000 Manifest next update: Mon 25 Nov 2024 10:12:05 +0000 Files and hashes: 1: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 486gYpHFPIGrMV4cst/8HcDYBuujcWoRBQU44C89Iu0=) 2: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: yYHjfDA0pUyB1bAzL1BywsJCdA6Gx6Nf94TD999IFOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3c:b9:a2:0c:3b:9e:43:f3:d1:0e:30:7d:b6:0b:d2:f5:62:da:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Nov 22 07:16:05 2024 GMT Not After : Nov 25 10:12:05 2024 GMT Subject: CN=68A2ABC324203AF907AD7956C0E55DF26C281002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bd:04:fa:b1:4d:6e:6b:71:ea:80:45:c0:92: 1d:73:2e:53:37:82:c7:94:63:a4:e9:56:6e:c4:f7: 6c:7e:3d:5d:49:c9:d5:26:0f:38:9e:06:85:68:09: 48:d8:2f:a6:1c:4d:f9:17:e6:9d:ab:1f:77:66:56: b1:ff:a6:21:6e:73:c8:ea:e1:1d:58:f5:a8:11:91: d8:df:74:23:83:4c:55:fc:6c:38:1b:41:e4:33:e2: da:93:5d:25:5e:ca:20:e8:bd:07:12:a6:ed:3d:fe: c2:3d:8a:63:a1:5b:95:36:57:d5:42:a1:68:df:11: bb:93:67:a8:ef:29:8e:7e:c2:77:57:cb:9b:3e:10: e0:08:06:5a:b2:b5:e1:27:bc:2d:ef:44:ee:7d:09: 2d:45:c8:46:bb:3f:69:3a:1f:7a:51:15:50:35:04: 5f:31:a8:29:50:bc:51:e9:35:48:bc:3f:40:f9:49: ee:f0:2f:d2:90:63:4f:c2:1f:0b:51:d4:ca:4a:37: e8:5f:d6:aa:93:64:3c:3e:ff:e0:c8:ba:30:69:e0: 16:e4:33:e2:87:ad:02:2d:ae:56:e7:d6:60:9d:54: 03:61:ef:e1:b9:3c:a8:b8:b7:75:70:3f:35:ef:2f: 55:2c:c5:15:99:c9:73:a4:cb:db:d0:d0:01:9b:a2: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:AB:C3:24:20:3A:F9:07:AD:79:56:C0:E5:5D:F2:6C:28:10:02 X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:59:52:f6:aa:a3:dc:af:54:27:fe:ef:d7:05:ff:f8:b9:a3: 89:d2:56:3a:45:4f:9b:41:77:cd:08:c6:de:d9:07:d8:ef:47: 7a:1c:fd:ff:44:b4:e0:c2:06:b5:12:10:e2:c8:4e:32:db:ce: 98:6c:37:88:68:be:20:e2:6c:06:aa:e3:9d:ad:9b:b7:da:54: 53:ca:5b:2d:08:6c:93:6c:75:b5:a0:79:10:f6:76:43:8f:32: 68:3f:ac:5e:9e:2d:a2:83:22:8c:ef:ac:c8:80:15:bb:c8:6e: 58:cb:6b:96:6a:e1:bf:c3:8a:e8:8b:80:94:7d:70:2c:b7:83: 55:a8:a7:d4:97:b8:ea:af:8d:c1:ca:98:8f:d6:22:01:04:eb: d6:e6:ec:9b:8c:34:3f:63:93:90:af:6d:e0:76:48:98:ee:4f: 11:36:b6:ee:69:58:b8:cc:02:31:4f:1e:b6:ba:7e:56:dd:e8: 81:10:19:9d:e1:c7:84:e6:54:7a:f7:9e:cf:64:10:52:01:15: 5d:93:7a:8a:c7:c8:4e:18:ae:35:76:53:02:e6:66:d4:27:c3: a5:a8:7b:d5:a0:2e:a9:e7:e6:9b:9f:e5:13:a6:68:51:bb:0a: b5:18:e1:03:9e:d8:7a:fa:26:4a:de:c9:7e:ae:07:73:44:14: 18:ca:f1:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDy5ogw7nkPz0Q4wfbYL0vVi2uIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNDExMjIwNzE2MDVaFw0yNDExMjUxMDEyMDVaMDMxMTAvBgNV BAMTKDY4QTJBQkMzMjQyMDNBRjkwN0FENzk1NkMwRTU1REYyNkMyODEwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbvQT6sU1ua3HqgEXAkh1zLlM3 gseUY6TpVm7E92x+PV1JydUmDzieBoVoCUjYL6YcTfkX5p2rH3dmVrH/piFuc8jq 4R1Y9agRkdjfdCODTFX8bDgbQeQz4tqTXSVeyiDovQcSpu09/sI9imOhW5U2V9VC oWjfEbuTZ6jvKY5+wndXy5s+EOAIBlqyteEnvC3vRO59CS1FyEa7P2k6H3pRFVA1 BF8xqClQvFHpNUi8P0D5Se7wL9KQY0/CHwtR1MpKN+hf1qqTZDw+/+DIujBp4Bbk M+KHrQItrlbn1mCdVANh7+G5PKi4t3VwPzXvL1UsxRWZyXOky9vQ0AGbotHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaKKrwyQgOvkHrXlWwOVd8mwoEAIwHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBZUvaqo9yvVCf+79cF//i5o4nSVjpFT5tB d80Ixt7ZB9jvR3oc/f9EtODCBrUSEOLITjLbzphsN4hoviDibAaq452tm7faVFPK Wy0IbJNsdbWgeRD2dkOPMmg/rF6eLaKDIozvrMiAFbvIbljLa5Zq4b/DiuiLgJR9 cCy3g1Wop9SXuOqvjcHKmI/WIgEE69bm7JuMND9jk5CvbeB2SJjuTxE2tu5pWLjM AjFPHra6flbd6IEQGZ3hx4TmVHr3ns9kEFIBFV2TeorHyE4YrjV2UwLmZtQnw6Wo e9WgLqnn5puf5ROmaFG7CrUY4QOe2Hr6JkreyX6uB3NEFBjK8Z0= -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:04 2024 by rpki-client on console-fra.rpki-client.org