$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: iC+vm6CFFhD6ukArpG13UW7R/N47M8hpBXhfOMTiKCI= Subject key identifier: 4A:99:61:B1:3A:3A:C9:EB:0B:DD:4B:A6:8F:70:19:45:D9:59:19:B4 Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 471B3A0CD8EA603FB2B2564A04E623FD5E18E7E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: 42 Signing time: Sun 24 Nov 2024 01:31:41 +0000 Manifest this update: Sun 24 Nov 2024 01:26:41 +0000 Manifest next update: Wed 27 Nov 2024 04:31:41 +0000 Files and hashes: 1: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: lBoCpopR20EXVeAKaVsPq5t4eAocT152Di0oY/IG6io=) 2: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: jvsdF/y8332ZgUDKQXStnkRXp3omW4o6zwcpGwQvwdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:1b:3a:0c:d8:ea:60:3f:b2:b2:56:4a:04:e6:23:fd:5e:18:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Nov 24 01:26:41 2024 GMT Not After : Nov 27 04:31:41 2024 GMT Subject: CN=4A9961B13A3AC9EB0BDD4BA68F701945D95919B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:8b:d8:a3:5f:3e:37:6d:3a:8c:53:87:90: 39:73:a3:c8:7a:ad:f6:14:9b:43:ad:64:fd:ce:15: 92:cf:85:13:47:04:dd:f3:97:01:9f:55:7b:73:05: fc:5a:84:67:9a:cb:68:29:56:6c:c0:04:06:3e:7d: e8:09:23:8f:dd:0d:2d:e9:97:c4:aa:df:3c:23:eb: 90:2c:71:0d:91:31:02:7a:2b:df:67:bc:91:bb:0d: 22:a4:94:7a:aa:b0:8e:b5:1f:33:af:ea:88:48:a8: b7:1c:f4:f2:62:5f:da:0a:86:07:5a:57:ae:36:71: 9c:03:9d:4e:22:86:43:90:01:c5:e3:aa:80:37:00: 0c:46:7a:6c:8f:00:98:83:b5:7c:15:3e:94:06:a7: 3b:ae:dd:eb:da:87:83:a1:bd:ff:2e:be:be:55:de: 65:f4:34:f0:79:e4:8f:f6:72:1a:ab:af:b7:70:94: 68:40:83:14:52:d9:4c:c8:44:9f:9a:8c:9a:3b:64: 30:c2:5c:97:23:7c:43:c7:fd:94:20:c7:d8:31:8b: 56:6d:0b:5a:15:e1:64:d6:97:5f:20:7a:2f:3b:fb: 83:67:dd:c9:d4:96:40:6a:2e:8a:9a:ec:e5:52:90: 8f:27:2f:2a:d5:18:4d:f1:e4:b6:3d:c8:50:db:11: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:99:61:B1:3A:3A:C9:EB:0B:DD:4B:A6:8F:70:19:45:D9:59:19:B4 X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:61:62:e6:a2:79:1b:92:36:7e:95:06:27:67:85:69:c3:07: 06:b0:56:11:96:f7:3b:dd:03:35:22:0c:4d:7e:83:90:b4:42: 10:b3:e9:aa:c1:ef:dc:7a:50:e3:20:c8:97:33:fd:48:8c:6f: 81:ef:37:b2:a3:73:a9:d4:e3:ae:12:d9:41:a6:0b:21:41:e8: dd:b9:27:56:72:c1:f0:67:24:a2:7e:d3:6f:28:02:da:95:83: fa:cf:52:9c:bf:59:e6:3f:c5:88:f6:cf:f1:cb:d1:3c:14:29: 84:4d:49:75:1a:91:51:22:f5:c4:53:9c:e0:f2:14:01:77:48: c1:f7:b4:47:34:e8:0c:ba:74:40:1d:ba:79:8d:68:94:8a:a6: f8:9d:54:e4:e7:0e:ed:63:28:04:19:4c:bc:7b:b9:75:2c:b9: 9a:df:74:8c:c6:f2:6f:7d:68:e1:2e:8e:27:e6:bc:43:0d:29: 85:4a:33:f6:81:10:5b:fb:ab:4d:b2:d4:08:59:28:4d:5c:f4: 5c:69:55:33:49:84:14:2d:18:de:39:bd:b1:3d:1b:9f:b0:40: 1e:54:e7:c3:a1:a9:d6:91:bb:6d:2e:7b:23:c6:98:bf:47:90: 74:17:de:9d:12:8b:3c:91:8f:45:11:48:3b:a0:14:33:45:99: a1:9f:08:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxs6DNjqYD+yslZKBOYj/V4Y5+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNDExMjQwMTI2NDFaFw0yNDExMjcwNDMxNDFaMDMxMTAvBgNV BAMTKDRBOTk2MUIxM0EzQUM5RUIwQkRENEJBNjhGNzAxOTQ1RDk1OTE5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPIvYo18+N206jFOHkDlzo8h6 rfYUm0OtZP3OFZLPhRNHBN3zlwGfVXtzBfxahGeay2gpVmzABAY+fegJI4/dDS3p l8Sq3zwj65AscQ2RMQJ6K99nvJG7DSKklHqqsI61HzOv6ohIqLcc9PJiX9oKhgda V642cZwDnU4ihkOQAcXjqoA3AAxGemyPAJiDtXwVPpQGpzuu3evah4Ohvf8uvr5V 3mX0NPB55I/2chqrr7dwlGhAgxRS2UzIRJ+ajJo7ZDDCXJcjfEPH/ZQgx9gxi1Zt C1oV4WTWl18gei87+4Nn3cnUlkBqLoqa7OVSkI8nLyrVGE3x5LY9yFDbEdkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSplhsTo6yesL3Uumj3AZRdlZGbQwHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFhYuaieRuSNn6VBidnhWnDBwawVhGW9zvd AzUiDE1+g5C0QhCz6arB79x6UOMgyJcz/UiMb4HvN7Kjc6nU464S2UGmCyFB6N25 J1ZywfBnJKJ+028oAtqVg/rPUpy/WeY/xYj2z/HL0TwUKYRNSXUakVEi9cRTnODy FAF3SMH3tEc06Ay6dEAdunmNaJSKpvidVOTnDu1jKAQZTLx7uXUsuZrfdIzG8m99 aOEujifmvEMNKYVKM/aBEFv7q02y1AhZKE1c9FxpVTNJhBQtGN45vbE9G5+wQB5U 58OhqdaRu20ueyPGmL9HkHQX3p0SizyRj0URSDugFDNFmaGfCMc= -----END CERTIFICATE-----Generated at Sun Nov 24 02:34:15 2024 by rpki-client on console-fra.rpki-client.org