$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: 7EY8RqW/XUanfgwLVpvoJdlbsaoykAB5q2lHR2dgn80= Subject key identifier: FB:9D:4D:21:84:C0:05:49:0A:F6:D7:36:1D:94:92:B8:16:CA:3B:0A Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 4E4764196FCB8A869AE5D1F40A4D28B905227D87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 048A Signing time: Mon 25 Nov 2024 01:41:42 +0000 Manifest this update: Mon 25 Nov 2024 01:36:42 +0000 Manifest next update: Thu 28 Nov 2024 03:24:42 +0000 Files and hashes: 1: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: FmFK0HCMSLt7SyGKtb9ztPHc3ssDI+Z3SQRwQMgog5Q=) 2: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: WkL3Fq7YzIPLwAM8251ws5xkvJ1bMxZXtvKhrLDS9+0=) 3: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: L7xlQSMRW8992zD5GKgUVfmbm2CWCHA326rlGEHghKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:47:64:19:6f:cb:8a:86:9a:e5:d1:f4:0a:4d:28:b9:05:22:7d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Nov 25 01:36:42 2024 GMT Not After : Nov 28 03:24:42 2024 GMT Subject: CN=FB9D4D2184C005490AF6D7361D9492B816CA3B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:5a:20:a9:d2:0e:58:56:86:75:d6:4e:5a: 36:5e:58:28:a7:18:f6:45:93:78:f5:d1:41:de:cc: c1:53:68:ef:f4:52:fe:d1:03:35:0a:54:1b:97:d2: 95:38:83:8d:80:9a:1a:92:6e:05:31:56:a1:88:ec: 67:9f:8e:86:a3:04:58:bc:86:1a:c7:09:9e:8e:48: db:02:35:b2:4e:02:85:a3:34:f9:d8:3e:de:77:ef: a0:8b:91:ce:d9:b4:10:18:92:cf:c8:a7:3a:57:78: da:ec:e7:de:09:b3:bd:1d:35:6d:55:da:71:d5:b2: a1:9b:9b:19:9c:15:22:a1:84:3f:3f:da:3f:b1:dc: 48:c6:dd:3b:08:a7:9c:e9:82:bc:88:5a:6f:04:4e: 64:dc:8a:46:29:1a:cc:a6:66:24:bc:95:74:81:d0: 2e:ad:0f:6b:b0:9e:bc:36:b3:5d:a6:35:b8:57:ce: c9:da:55:af:df:7c:5b:25:b0:c2:0e:3c:b8:25:98: d0:b4:9d:c2:c4:4b:09:81:76:a2:1b:ab:4d:d2:a9: dc:1c:18:c3:cd:9f:aa:ed:90:cb:a1:15:f1:de:4b: df:46:35:7a:68:27:b7:af:4d:e6:48:92:50:c4:5e: f6:27:5f:9b:15:41:4c:f3:01:ad:14:53:b4:63:2f: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9D:4D:21:84:C0:05:49:0A:F6:D7:36:1D:94:92:B8:16:CA:3B:0A X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:f9:b6:fc:a1:88:0d:73:31:7a:d8:ef:c3:2e:62:b9:c6:97: 45:a4:7a:8e:69:c7:da:b1:50:b4:1d:19:3b:6b:61:3d:af:31: 3d:18:95:2f:38:6d:8e:aa:2b:cc:26:9e:50:d6:a0:2b:cc:dc: 77:80:30:04:29:ba:4e:85:5e:42:24:eb:20:7c:6a:18:b6:88: 69:cd:d8:ae:3f:90:32:23:1d:de:f6:bf:2f:4a:1c:98:a9:78: 2d:b3:a2:a7:2d:6a:34:d5:4d:44:cd:2e:9b:32:5e:7c:dd:d1: a6:30:29:00:f4:73:55:ae:c5:61:88:02:b5:a8:27:cf:3f:76: 50:a9:e0:38:4f:44:42:26:50:2a:28:e4:8d:81:70:89:fa:4b: 21:2f:2f:3c:03:d4:3e:9e:34:55:ec:71:bf:b7:34:ad:4e:41: 05:42:12:cb:f0:4d:ae:2a:a2:2b:4f:dd:c7:10:71:d1:ba:9c: 17:97:7e:60:a6:9e:4d:41:cd:fa:95:c8:86:ad:3f:d0:84:8d: 22:b6:f0:9b:fd:c3:14:bd:18:91:51:b9:90:5a:23:b9:40:09: f5:ba:c3:de:0a:64:11:98:32:13:9a:1a:05:ac:3d:e0:80:73: ea:83:85:15:ef:ea:87:26:d0:df:13:59:83:3d:84:06:77:e2: 2e:b5:69:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTkdkGW/Lioaa5dH0Ck0ouQUifYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNDExMjUwMTM2NDJaFw0yNDExMjgwMzI0NDJaMDMxMTAvBgNV BAMTKEZCOUQ0RDIxODRDMDA1NDkwQUY2RDczNjFEOTQ5MkI4MTZDQTNCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC211ogqdIOWFaGddZOWjZeWCin GPZFk3j10UHezMFTaO/0Uv7RAzUKVBuX0pU4g42AmhqSbgUxVqGI7GefjoajBFi8 hhrHCZ6OSNsCNbJOAoWjNPnYPt5376CLkc7ZtBAYks/IpzpXeNrs594Js70dNW1V 2nHVsqGbmxmcFSKhhD8/2j+x3EjG3TsIp5zpgryIWm8ETmTcikYpGsymZiS8lXSB 0C6tD2uwnrw2s12mNbhXzsnaVa/ffFslsMIOPLglmNC0ncLESwmBdqIbq03Sqdwc GMPNn6rtkMuhFfHeS99GNXpoJ7evTeZIklDEXvYnX5sVQUzzAa0UU7RjL8zvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+51NIYTABUkK9tc2HZSSuBbKOwowHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMv5tvyhiA1zMXrY78MuYrnGl0Wkeo5px9qx ULQdGTtrYT2vMT0YlS84bY6qK8wmnlDWoCvM3HeAMAQpuk6FXkIk6yB8ahi2iGnN 2K4/kDIjHd72vy9KHJipeC2zoqctajTVTUTNLpsyXnzd0aYwKQD0c1WuxWGIArWo J88/dlCp4DhPREImUCoo5I2BcIn6SyEvLzwD1D6eNFXscb+3NK1OQQVCEsvwTa4q oitP3ccQcdG6nBeXfmCmnk1BzfqVyIatP9CEjSK28Jv9wxS9GJFRuZBaI7lACfW6 w94KZBGYMhOaGgWsPeCAc+qDhRXv6ocm0N8TWYM9hAZ34i61aW8= -----END CERTIFICATE-----Generated at Mon Nov 25 02:56:53 2024 by rpki-client on console-fra.rpki-client.org