$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: aM5o8InTQGhiR0y8qoT7QOClSx37ZhuAAF60ldpcOCc= Subject key identifier: 88:D3:4B:25:D8:9E:5A:E6:77:93:2C:C7:80:2D:5B:D9:39:1F:A8:01 Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 731381C0DDAB90F41CEA48BF171587A37ACAA7FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 019C Signing time: Fri 22 Nov 2024 01:21:12 +0000 Manifest this update: Fri 22 Nov 2024 01:16:12 +0000 Manifest next update: Mon 25 Nov 2024 08:52:12 +0000 Files and hashes: 1: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: 4Mipt1XYo4EWUAqCZzxtIw2BCKhu7p3oR4rDcAMmgx4=) 2: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: jAjDsxNi5OMMfPiq/hCZB/NfJ1N3Xkx3pSv87LiOuZM=) 3: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: TI3mp9veyUUFwxTxts4wdA8vnx54wx/NlZMkEL/vo6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:13:81:c0:dd:ab:90:f4:1c:ea:48:bf:17:15:87:a3:7a:ca:a7:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Nov 22 01:16:12 2024 GMT Not After : Nov 25 08:52:12 2024 GMT Subject: CN=88D34B25D89E5AE677932CC7802D5BD9391FA801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d2:02:a3:e8:06:7b:40:e5:4f:c4:fc:e2:4b: 79:df:6d:56:70:a7:c3:c0:20:a2:1a:96:82:8c:1a: 46:ed:a5:c8:6c:1d:4f:fd:2b:69:5b:7e:bf:de:35: 5e:75:cd:02:e6:5e:9b:f0:f7:66:0b:ee:cd:6e:c3: 46:6c:3f:b1:58:c2:20:f0:2c:6d:a8:0c:b0:fb:a3: 90:b8:7c:29:39:03:57:a7:cf:63:59:ac:55:3a:0c: 9e:4e:7e:fe:62:3c:e7:c2:5b:53:b6:7d:1c:b5:e2: 89:c9:2c:f1:0f:8e:35:08:a7:2b:48:c2:f9:70:f6: 45:9d:5a:27:ab:cc:d0:35:c2:3e:1a:3f:1f:7e:c0: ea:31:e4:4b:c8:6b:77:d0:07:bd:3e:2e:dd:63:30: 3b:81:f0:c3:c5:73:af:b1:9f:dc:8b:23:f7:ba:d5: d4:c7:29:fd:79:14:77:49:7b:d5:bc:82:aa:78:9a: 8e:be:39:08:4e:a9:48:6a:ec:07:30:0d:41:6c:17: 7d:48:41:91:fa:cc:38:02:5a:b8:d7:c6:07:ff:4a: e2:f6:a1:74:27:80:bc:0f:87:97:c5:89:74:8d:7b: 82:25:c8:60:48:e4:9b:26:b1:cd:9c:e9:af:50:64: 05:9a:b4:f7:f4:6e:de:0e:0e:dc:31:18:4d:75:4c: 88:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D3:4B:25:D8:9E:5A:E6:77:93:2C:C7:80:2D:5B:D9:39:1F:A8:01 X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0d:5d:f2:14:f7:a0:01:39:5a:64:5a:2a:72:f0:8b:dd:79: a7:b6:d5:64:64:c3:69:28:93:c8:4b:8c:48:7f:0d:38:63:ee: b2:d9:b2:cc:ac:ee:02:79:10:be:9a:1e:3a:22:5e:84:8b:fb: ec:80:08:87:aa:5c:ff:06:71:82:09:e2:1c:6d:df:6c:18:c4: ca:35:cd:09:a5:68:aa:12:0e:4b:c0:99:46:7d:ae:36:8e:57: 9f:68:d1:4a:fe:24:ed:51:10:b7:0b:51:82:b6:6d:2b:2e:c3: e2:f5:79:f4:f4:3b:f4:54:3f:60:ed:83:0e:aa:7c:cf:73:32: 0e:0f:a5:75:a1:15:d0:08:ee:9f:01:45:0e:6d:31:bf:36:54: 63:ac:9a:28:1a:ec:ea:d1:a3:85:03:0f:07:28:1e:4a:30:64: 4e:f5:56:d6:01:b9:dd:0e:8f:e8:a7:4b:e0:f4:19:14:36:7e: 28:75:b2:e6:65:56:5f:0c:90:d5:e7:dc:38:49:03:fe:a7:26: 9d:a0:da:ab:55:1e:21:95:47:a0:ff:bd:6b:71:88:f2:5f:50: 12:fd:ee:be:24:c8:d3:b1:87:9f:d0:40:32:e4:a9:3a:ee:61: 0e:38:30:99:a7:44:fa:7f:89:20:bf:5c:ba:31:69:eb:a8:fa: f9:1f:1c:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcxOBwN2rkPQc6ki/FxWHo3rKp/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNDExMjIwMTE2MTJaFw0yNDExMjUwODUyMTJaMDMxMTAvBgNV BAMTKDg4RDM0QjI1RDg5RTVBRTY3NzkzMkNDNzgwMkQ1QkQ5MzkxRkE4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo0gKj6AZ7QOVPxPziS3nfbVZw p8PAIKIaloKMGkbtpchsHU/9K2lbfr/eNV51zQLmXpvw92YL7s1uw0ZsP7FYwiDw LG2oDLD7o5C4fCk5A1enz2NZrFU6DJ5Ofv5iPOfCW1O2fRy14onJLPEPjjUIpytI wvlw9kWdWierzNA1wj4aPx9+wOox5EvIa3fQB70+Lt1jMDuB8MPFc6+xn9yLI/e6 1dTHKf15FHdJe9W8gqp4mo6+OQhOqUhq7AcwDUFsF31IQZH6zDgCWrjXxgf/SuL2 oXQngLwPh5fFiXSNe4IlyGBI5Jsmsc2c6a9QZAWatPf0bt4ODtwxGE11TIjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNNLJdieWuZ3kyzHgC1b2TkfqAEwHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUNXfIU96ABOVpkWipy8Ivdeae21WRkw2ko k8hLjEh/DThj7rLZssys7gJ5EL6aHjoiXoSL++yACIeqXP8GcYIJ4hxt32wYxMo1 zQmlaKoSDkvAmUZ9rjaOV59o0Ur+JO1RELcLUYK2bSsuw+L1efT0O/RUP2Dtgw6q fM9zMg4PpXWhFdAI7p8BRQ5tMb82VGOsmiga7OrRo4UDDwcoHkowZE71VtYBud0O j+inS+D0GRQ2fih1suZlVl8MkNXn3DhJA/6nJp2g2qtVHiGVR6D/vWtxiPJfUBL9 7r4kyNOxh5/QQDLkqTruYQ44MJmnRPp/iSC/XLoxaeuo+vkfHHg= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org