$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft File: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json) Hash identifier: v3O4B3y6f4c4b4X4SVGDt+P2OXGRQWEfhTLe9YuotHQ= Subject key identifier: 42:2A:C1:6B:03:6C:2E:24:BD:D5:F2:B0:26:F8:B6:7B:B0:43:0C:F9 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 7BCF4E3F20C368455275CC1B2ABB9187F50717CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft Manifest number: 66 Signing time: Fri 22 Nov 2024 15:11:39 +0000 Manifest this update: Fri 22 Nov 2024 15:06:39 +0000 Manifest next update: Mon 25 Nov 2024 19:25:39 +0000 Files and hashes: 1: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: 0+EzwHsPjCbV8QJ6bq8ccNZiZucHK/n8MBUE8T98GMc=) 2: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: C4RD7yWpQLN/zIKEeL7gOdqXppRBKPVIwhC99j3g7Cg=) 3: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: sZlo9f1EsLMeYktfV+ZGzFa0M9EDgUgsMgX5pnPF/LY=) 4: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: Kv9XshcpB7TZvzMgSiRNinGPZ8vMcr00PAHAYOovTjc=) 5: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: 83nhHmHwP+GjlXSyh7L16KZaxHdpQ1noRI9N6mSZt+E=) 6: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: 3YmVYCRoqYFKWuEsCMHpjQbrzfUppnYkdN1P8sml9nk=) 7: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: 7qEjAjUFiWqBvcA5GMDDhsXXG6kET5FTGMHuOPqibCA=) 8: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: nEfFT0wh2/O+65J6AAun5DCt3rcacULUOhZBBgFYKyQ=) 9: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: i5zly9PaOc7kAYF2TnzC/Z1Eo88r/IPlotZqEKYct7w=) 10: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: KjMxjvExxv5WM0e+RcleaNj9WGu1qc5KM8bCCHJf5mE=) 11: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 5fow4ijKoI1KVvcf6YC/HJbpKTVGon96DwXzzm6+a+4=) 12: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: 5QmBgtR4oxoWyv+pDSaUBxvCGSef+sF2loWrmoll8N4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cf:4e:3f:20:c3:68:45:52:75:cc:1b:2a:bb:91:87:f5:07:17:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Nov 22 15:06:39 2024 GMT Not After : Nov 25 19:25:39 2024 GMT Subject: CN=422AC16B036C2E24BDD5F2B026F8B67BB0430CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:73:e1:65:4b:dc:f8:18:d7:7b:90:0f:e9: b4:cd:07:9c:95:9d:86:8a:d8:5e:cf:4e:f1:8e:eb: 38:7a:b4:c7:00:fc:0b:48:2f:a2:52:96:e4:1a:ac: 25:c0:bb:26:f0:02:02:5c:81:42:84:10:51:34:d1: 0c:48:e5:69:5a:f4:3f:5c:f1:52:cb:f5:86:69:fc: 6a:a3:6b:16:cd:a3:22:b8:91:87:97:a2:2c:f2:64: c8:e6:c7:93:7b:c7:ee:dd:d9:9e:8c:b0:47:68:a2: 8e:92:55:72:1a:06:85:64:1f:2e:c5:2e:d0:5d:98: 15:d3:ec:2b:25:a4:91:b5:1e:6a:40:af:4a:00:e7: 1d:e0:5a:d4:a3:48:63:f3:4b:a2:24:fe:59:51:0d: b4:ae:b1:da:13:da:d1:9c:54:85:0d:aa:11:39:f2: ce:a1:68:55:17:77:60:65:29:a0:25:cc:7e:d0:b6: fb:08:6f:56:f7:a5:51:d2:de:19:3c:30:e6:57:93: bb:cb:f3:ca:78:91:b0:58:03:58:36:1b:a8:38:90: b3:aa:f2:95:a9:37:a0:d7:14:9b:af:46:bf:26:73: da:23:47:3c:10:de:03:fb:50:ea:cc:4d:b2:9c:a1: 83:26:99:65:4d:8c:19:6f:41:28:3e:6d:65:60:9c: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2A:C1:6B:03:6C:2E:24:BD:D5:F2:B0:26:F8:B6:7B:B0:43:0C:F9 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:48:25:38:9e:58:4c:72:ab:6d:bf:54:29:a1:b7:7d:7b:5a: c5:d0:d3:09:09:8a:34:7e:61:01:0c:99:8a:03:63:99:24:10: d7:4d:fe:28:27:99:28:4f:61:03:99:3c:19:ed:15:04:12:02: 8b:b1:29:35:1a:1a:34:9a:9a:d0:62:9e:24:07:c7:79:fa:67: 3d:d7:ce:f6:4f:c0:1e:d2:d6:58:de:7f:31:ef:77:86:16:7d: 25:21:50:76:0d:7d:42:07:29:52:a7:32:61:54:ce:81:76:e5: 27:26:48:69:1e:78:92:40:6d:77:e7:61:ff:16:e3:49:4a:0e: 9a:9e:2c:ec:e9:0f:83:ba:55:88:57:35:9c:c0:18:ac:86:c0: a2:21:d9:9c:21:13:b5:b3:5a:81:1e:f6:af:fe:19:bb:0a:09: 84:fa:54:bf:95:f7:95:f1:05:44:8d:6f:5e:e8:c9:aa:ce:28: f8:2e:0c:c2:91:49:d6:e4:0f:52:fe:7f:4b:e5:b6:61:01:bb: 64:6c:0f:77:a1:04:25:d1:58:74:c0:75:b7:5e:bb:4d:6a:97: 2d:00:d2:6a:ed:99:bd:ca:5c:fe:f4:74:69:c4:98:07:c2:79: 91:3a:3f:71:55:d9:d1:80:6f:88:7b:db:c2:79:cf:f9:08:11: 7b:cb:f6:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe89OPyDDaEVSdcwbKruRh/UHF8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNDExMjIxNTA2MzlaFw0yNDExMjUxOTI1MzlaMDMxMTAvBgNV BAMTKDQyMkFDMTZCMDM2QzJFMjRCREQ1RjJCMDI2RjhCNjdCQjA0MzBDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY4XPhZUvc+BjXe5AP6bTNB5yV nYaK2F7PTvGO6zh6tMcA/AtIL6JSluQarCXAuybwAgJcgUKEEFE00QxI5Wla9D9c 8VLL9YZp/GqjaxbNoyK4kYeXoizyZMjmx5N7x+7d2Z6MsEdooo6SVXIaBoVkHy7F LtBdmBXT7CslpJG1HmpAr0oA5x3gWtSjSGPzS6Ik/llRDbSusdoT2tGcVIUNqhE5 8s6haFUXd2BlKaAlzH7QtvsIb1b3pVHS3hk8MOZXk7vL88p4kbBYA1g2G6g4kLOq 8pWpN6DXFJuvRr8mc9ojRzwQ3gP7UOrMTbKcoYMmmWVNjBlvQSg+bWVgnOChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQirBawNsLiS91fKwJvi2e7BDDPkwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I2M2Y3NzEtYTk1Zi00YjUzLTg3 YmMtOGJmZjUwNGRhMWY0LzAvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0 REZDMTIwMjg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZIJTieWExyq22/VCmht317WsXQ0wkJijR+ YQEMmYoDY5kkENdN/ignmShPYQOZPBntFQQSAouxKTUaGjSamtBiniQHx3n6Zz3X zvZPwB7S1ljefzHvd4YWfSUhUHYNfUIHKVKnMmFUzoF25ScmSGkeeJJAbXfnYf8W 40lKDpqeLOzpD4O6VYhXNZzAGKyGwKIh2ZwhE7WzWoEe9q/+GbsKCYT6VL+V95Xx BUSNb17oyarOKPguDMKRSdbkD1L+f0vltmEBu2RsD3ehBCXRWHTAdbdeu01qly0A 0mrtmb3KXP70dGnEmAfCeZE6P3FV2dGAb4h728J5z/kIEXvL9k4= -----END CERTIFICATE-----Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org