$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: RQ+LXrJFZDQCUP1B0GYhPqwe0pdmLhP3fA2obpm74Uc= Subject key identifier: 11:C4:FE:4C:CA:25:92:5A:BB:08:24:E2:49:CE:9E:C3:73:96:D9:8D Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 2FF5172E1AD7115D0681A0A0C36467E3D32D4F99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: 19 Signing time: Mon 25 Nov 2024 07:11:59 +0000 Manifest this update: Mon 25 Nov 2024 07:06:59 +0000 Manifest next update: Thu 28 Nov 2024 14:35:59 +0000 Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: JTzBC/tUY4YKAC/+r+uXmWAv3T2JRL+s5BpODc7IPU4=) 2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: /2/aGmGUHvyKK7WNmuKzAj0cNzsdhjisomKkikn2mP8=) 3: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: 3LLA+VM6Di67AGE0gXj7/cYaljBCb0K2mxXrRVHI+gk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 08:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f5:17:2e:1a:d7:11:5d:06:81:a0:a0:c3:64:67:e3:d3:2d:4f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Nov 25 07:06:59 2024 GMT Not After : Nov 28 14:35:59 2024 GMT Subject: CN=11C4FE4CCA25925ABB0824E249CE9EC37396D98D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:bf:fc:a0:30:6e:50:6b:27:22:a2:00:dc: 35:d5:a7:89:d8:44:3e:33:4b:04:0d:97:a8:e8:4d: 68:93:5a:ef:e5:bd:7a:b9:06:2e:57:71:0a:84:6b: 87:58:20:d1:c9:d6:02:94:40:4c:bf:f4:a1:8f:13: 27:81:8d:84:77:9a:7f:0e:f2:ab:9e:85:51:1a:d9: 3e:28:84:24:a6:fa:6f:f2:24:07:71:f5:f0:2c:8b: 7e:a6:00:ea:97:ec:53:28:49:e5:f9:f1:2b:ff:d1: 11:b9:64:ee:7f:92:7d:f6:95:7e:b2:c6:e5:0b:56: 3c:78:1a:e5:46:ea:fa:43:a5:38:4e:98:5f:f4:5b: ce:b5:4e:5f:df:17:0e:0c:46:93:1e:7a:00:3b:13: 6f:3d:0c:77:eb:ab:d9:81:8a:1f:d3:85:81:b6:d4: 01:db:af:2c:40:e6:26:b0:cd:4c:5d:88:64:cc:35: 93:df:3b:6f:76:7f:8f:05:ba:36:b5:a1:44:7a:00: e7:f6:00:b9:95:df:75:b2:0b:8f:88:01:7a:4f:bc: 83:63:55:d6:47:53:58:5e:e4:61:4b:d4:a4:48:ae: 11:d8:70:49:dd:b8:48:41:86:a7:3b:50:1a:20:00: f5:43:ef:63:a4:c1:cf:f1:08:9f:36:35:42:7a:56: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C4:FE:4C:CA:25:92:5A:BB:08:24:E2:49:CE:9E:C3:73:96:D9:8D X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fc:57:5f:3a:00:af:f4:35:38:6a:03:11:8b:c7:5f:86:4d: 50:4a:05:64:4b:d7:2c:38:8b:1b:83:60:90:0c:ad:d9:66:c3: ac:2c:68:0b:6a:40:8f:d4:4c:c6:4b:8e:37:11:ff:af:35:e4: ab:01:77:f0:0d:4b:ee:4b:83:6a:af:b3:25:f3:75:3e:48:62: 15:ee:c9:34:55:be:24:4b:5b:53:d5:74:27:17:14:44:a7:8e: d9:31:0f:bf:0d:ed:77:38:1a:06:13:57:ce:8e:d4:b2:9b:a5: aa:6d:88:e5:d2:ed:7c:71:ca:88:55:42:e2:64:96:58:ef:3e: 22:e9:d5:b4:2a:59:ad:e6:a6:c5:f4:46:73:c7:3e:18:a1:4c: d6:00:b0:2c:cf:be:1d:86:d2:69:5a:f0:d5:ec:52:96:4c:5c: 4c:b5:22:7f:8d:7a:80:a1:10:84:c7:e0:b9:26:cf:58:38:35: 21:dc:c7:dc:a3:84:65:ea:7b:5d:1c:a9:25:b1:56:d8:83:90: 2d:b3:cd:67:35:72:5c:fb:53:93:07:8c:ee:fa:5d:2f:e2:ce: c6:10:ea:1c:80:2b:b2:3a:e3:e4:fb:05:4b:07:56:84:74:79: 94:b1:04:1b:20:61:e0:64:78:41:e0:cd:85:0b:c6:d7:65:0f: 7c:20:d2:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL/UXLhrXEV0GgaCgw2Rn49MtT5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNDExMjUwNzA2NTlaFw0yNDExMjgxNDM1NTlaMDMxMTAvBgNV BAMTKDExQzRGRTRDQ0EyNTkyNUFCQjA4MjRFMjQ5Q0U5RUMzNzM5NkQ5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ+L/8oDBuUGsnIqIA3DXVp4nY RD4zSwQNl6joTWiTWu/lvXq5Bi5XcQqEa4dYINHJ1gKUQEy/9KGPEyeBjYR3mn8O 8quehVEa2T4ohCSm+m/yJAdx9fAsi36mAOqX7FMoSeX58Sv/0RG5ZO5/kn32lX6y xuULVjx4GuVG6vpDpThOmF/0W861Tl/fFw4MRpMeegA7E289DHfrq9mBih/ThYG2 1AHbryxA5iawzUxdiGTMNZPfO292f48Fuja1oUR6AOf2ALmV33WyC4+IAXpPvINj VdZHU1he5GFL1KRIrhHYcEnduEhBhqc7UBogAPVD72Okwc/xCJ82NUJ6VhILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEcT+TMolklq7CCTiSc6ew3OW2Y0wHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHP8V186AK/0NThqAxGLx1+GTVBKBWRL1yw4 ixuDYJAMrdlmw6wsaAtqQI/UTMZLjjcR/6815KsBd/ANS+5Lg2qvsyXzdT5IYhXu yTRVviRLW1PVdCcXFESnjtkxD78N7Xc4GgYTV86O1LKbpaptiOXS7XxxyohVQuJk lljvPiLp1bQqWa3mpsX0RnPHPhihTNYAsCzPvh2G0mla8NXsUpZMXEy1In+NeoCh EITH4Lkmz1g4NSHcx9yjhGXqe10cqSWxVtiDkC2zzWc1clz7U5MHjO76XS/izsYQ 6hyAK7I64+T7BUsHVoR0eZSxBBsgYeBkeEHgzYULxtdlD3wg0nk= -----END CERTIFICATE-----Generated at Mon Nov 25 09:00:39 2024 by rpki-client on console-fra.rpki-client.org