$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: zHNHITELjG9uv6Q7Qdy66ePjdhxLb3pCnCaDOdpc4dk= Subject key identifier: 2A:F5:4F:A1:08:29:80:5D:10:7A:16:28:82:47:0E:84:C1:24:77:2A Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 614158FAE31C028787BAAD41367CAAF9985DD936 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: 22 Signing time: Mon 25 Nov 2024 08:11:32 +0000 Manifest this update: Mon 25 Nov 2024 08:06:32 +0000 Manifest next update: Thu 28 Nov 2024 08:29:32 +0000 Files and hashes: 1: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: CFUPD+5VevYKSpAUr4/yA/IYEJr/9pewXF0HRLkN4A0=) 2: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: tGDYZbZFfyUoLXzylO+/DvmkP5V0ufi3ajLXIvohhx8=) 3: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: sllY0MO2bvTXP7DsLW4r8etsfROc3Fb1Mw9q/gIoquw=) 4: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: lhB3pO2JkMAJtQ5Oday4j/dSwCn2fIqeR0/VOPmin9U=) 5: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: bN9NbqyRu4lQ+Okmxo+MD9ITEKt3VwrIkrq6ODkSbg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 08:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:41:58:fa:e3:1c:02:87:87:ba:ad:41:36:7c:aa:f9:98:5d:d9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Nov 25 08:06:32 2024 GMT Not After : Nov 28 08:29:32 2024 GMT Subject: CN=2AF54FA10829805D107A162882470E84C124772A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:9a:ba:44:9c:ef:8f:b9:09:f0:49:45:c0: 5d:4d:09:cc:b3:de:3d:95:0d:f2:f9:b3:b8:ea:74: 23:97:44:85:e3:0e:52:cd:86:3c:e5:3a:25:d1:d2: b4:7c:d8:59:2c:b3:b7:a1:0a:ef:ab:cd:d5:1b:9a: 17:c3:cb:ea:47:8f:63:96:b9:37:58:01:3e:35:ef: 40:27:45:9b:e0:3c:fa:fd:6f:68:0c:64:a2:54:f2: 09:80:2b:bb:02:47:db:b1:33:f2:15:e2:d2:db:11: af:55:4f:bc:3d:cf:89:4f:ad:8c:30:ca:55:0a:78: a2:22:5a:8e:cb:e5:7d:ff:6a:e1:18:e0:45:3b:4f: 54:f1:8f:e6:1c:0f:26:8a:b2:c8:48:b9:6e:02:d3: e8:ad:14:07:04:9d:4f:05:cb:24:04:96:9d:15:d1: 7c:c7:61:23:18:1b:fa:ab:40:6b:cb:3f:cc:e7:23: a0:3e:3d:65:04:03:7e:18:9f:8d:3b:1c:4a:54:4a: 2b:9d:5b:84:18:77:78:53:e5:ff:37:35:18:ff:63: 7f:2e:5a:9a:a2:b1:41:db:ff:ba:e0:d0:eb:2b:db: 26:c1:40:2c:c0:7e:d6:30:ee:fe:62:c5:1d:19:83: 15:48:0a:1f:7f:d4:ed:f7:30:a8:54:fe:b3:98:66: e7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F5:4F:A1:08:29:80:5D:10:7A:16:28:82:47:0E:84:C1:24:77:2A X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f8:47:da:66:14:ff:70:a6:00:10:94:98:e1:87:dd:b4:55: b6:34:3f:13:e0:3a:f6:60:3c:5d:88:bd:c2:e6:b0:e8:71:18: e3:fc:07:2d:e4:8b:ff:68:fe:3d:e2:ce:74:6c:5c:62:d0:9a: 56:4c:65:33:2c:dd:cc:3d:cf:a4:17:32:ab:91:11:97:33:8d: 4e:20:7b:c1:f3:83:5f:da:90:c1:67:d1:c1:f9:d0:d8:75:0d: 46:c8:44:79:30:b5:0c:5b:ae:35:57:8d:28:dc:a2:ed:89:b6: 0d:0b:9d:fa:b9:4f:8e:23:a9:89:e3:6c:82:42:28:b9:be:a0: 6f:71:18:fe:e8:45:f0:4e:61:20:06:88:7c:11:1d:21:5c:f2: 4f:31:e5:88:93:93:62:ed:6b:ff:1a:45:66:4f:0d:b7:cb:58: c3:f2:f3:5c:66:0d:70:19:61:cd:d0:3f:a2:94:60:23:7d:4e: b5:12:0f:bd:51:20:87:ed:89:a8:fc:f1:94:d6:f0:b8:75:30: a4:af:8b:46:f3:8e:e3:8a:e6:7c:e9:d8:44:91:79:da:4d:08: 1d:66:f4:56:e3:12:96:60:c2:30:a3:68:a5:d0:2a:de:b6:28: 38:93:91:9b:83:86:c8:9b:73:10:5c:13:f3:ac:72:1e:50:47: fc:c7:14:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUFY+uMcAoeHuq1BNnyq+Zhd2TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNDExMjUwODA2MzJaFw0yNDExMjgwODI5MzJaMDMxMTAvBgNV BAMTKDJBRjU0RkExMDgyOTgwNUQxMDdBMTYyODgyNDcwRTg0QzEyNDc3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3Jq6RJzvj7kJ8ElFwF1NCcyz 3j2VDfL5s7jqdCOXRIXjDlLNhjzlOiXR0rR82Fkss7ehCu+rzdUbmhfDy+pHj2OW uTdYAT4170AnRZvgPPr9b2gMZKJU8gmAK7sCR9uxM/IV4tLbEa9VT7w9z4lPrYww ylUKeKIiWo7L5X3/auEY4EU7T1Txj+YcDyaKsshIuW4C0+itFAcEnU8FyyQElp0V 0XzHYSMYG/qrQGvLP8znI6A+PWUEA34Yn407HEpUSiudW4QYd3hT5f83NRj/Y38u WpqisUHb/7rg0Osr2ybBQCzAftYw7v5ixR0ZgxVICh9/1O33MKhU/rOYZuebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKvVPoQgpgF0QehYogkcOhMEkdyowHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP4R9pmFP9wpgAQlJjhh920VbY0PxPgOvZg PF2IvcLmsOhxGOP8By3ki/9o/j3iznRsXGLQmlZMZTMs3cw9z6QXMquREZczjU4g e8Hzg1/akMFn0cH50Nh1DUbIRHkwtQxbrjVXjSjcou2Jtg0Lnfq5T44jqYnjbIJC KLm+oG9xGP7oRfBOYSAGiHwRHSFc8k8x5YiTk2Lta/8aRWZPDbfLWMPy81xmDXAZ Yc3QP6KUYCN9TrUSD71RIIftiaj88ZTW8Lh1MKSvi0bzjuOK5nzp2ESRedpNCB1m 9FbjEpZgwjCjaKXQKt62KDiTkZuDhsibcxBcE/Osch5QR/zHFFo= -----END CERTIFICATE-----Generated at Mon Nov 25 09:00:39 2024 by rpki-client on console-fra.rpki-client.org