$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: 4KrEAHgUIuDrZCr+cPG+5MfNGGy3nixqQThBwlV+3cs= Subject key identifier: 32:87:CC:62:85:BA:0E:CF:33:93:71:AD:4D:CB:A6:AB:7E:6A:E8:D7 Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 6C487C341DBB75B65B6B2B22ABDAE95282117FB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 02AF Signing time: Thu 21 Nov 2024 12:21:14 +0000 Manifest this update: Thu 21 Nov 2024 12:16:14 +0000 Manifest next update: Sun 24 Nov 2024 12:28:14 +0000 Files and hashes: 1: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: 2r49HejschkI8uCgnhzz0HrdiLew+/o3swmQZbt4TuQ=) 2: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 583fCmP3etiTrbOSzBAay1dcbZS7/0Ktohr7FAmuse4=) 3: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: NqnaoUff0mb/PaAApaFd35D+2QLuh2rweUqESvnuR9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:48:7c:34:1d:bb:75:b6:5b:6b:2b:22:ab:da:e9:52:82:11:7f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Nov 21 12:16:14 2024 GMT Not After : Nov 24 12:28:14 2024 GMT Subject: CN=3287CC6285BA0ECF339371AD4DCBA6AB7E6AE8D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:9f:9a:e7:66:6e:3c:8b:6a:c1:ea:64:38: 19:6b:8e:74:23:21:27:39:13:17:37:03:f5:10:07: e1:a4:ad:67:21:0f:44:d1:6d:42:27:38:d6:c3:4f: d4:7e:1e:b4:b7:c7:e7:a7:ac:ca:5b:bf:6d:f2:37: 41:4c:03:fe:31:70:d2:50:cd:4f:aa:ac:77:13:37: 30:b2:db:8e:34:af:a7:bc:d3:06:ed:6c:19:a5:0b: c7:b6:28:30:a6:fb:5a:19:9a:08:dd:74:8d:55:4e: 8f:62:30:9c:fb:23:57:ec:35:77:42:22:52:3e:e0: e2:b7:56:7e:ad:fd:2f:b3:3a:3e:f8:b0:0e:65:af: 5e:39:bc:14:49:49:cc:24:28:91:78:06:0b:30:0d: 8e:4b:2a:fd:08:da:77:28:df:6a:53:25:18:97:86: c2:6b:69:71:a8:a5:cc:da:e1:b3:95:20:29:66:8d: 81:b8:f6:c6:9c:01:27:18:d3:9b:19:c1:58:a6:d6: d1:86:61:78:dd:6c:0f:e5:4c:ab:08:44:c4:43:a1: 4d:f7:90:07:9f:2f:aa:b6:2f:ec:84:c6:4a:96:bc: 7c:d3:5b:2f:31:2c:e8:b7:55:5a:7f:eb:bc:4c:f7: 4f:3e:61:07:d1:cb:8b:ea:85:27:09:ab:0f:b5:c6: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:87:CC:62:85:BA:0E:CF:33:93:71:AD:4D:CB:A6:AB:7E:6A:E8:D7 X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8d:03:5a:70:54:1b:5f:b9:60:31:20:31:75:26:07:1c:90: 05:d5:92:89:e6:45:21:47:31:61:4e:62:0e:1c:43:89:c7:70: 9e:f3:88:03:b9:2f:1f:61:29:72:1c:4d:73:95:27:63:a8:46: 5c:30:fa:28:14:c6:3f:5b:25:60:6a:3a:c0:90:46:aa:11:82: d6:56:66:dc:f8:38:97:ad:d9:31:58:60:43:27:c7:03:c7:92: 73:cc:75:f7:22:e0:25:5d:06:ac:62:44:56:9b:1e:32:14:ef: d7:54:f5:b8:c7:7b:7d:36:a1:f7:39:b7:fa:cf:05:1b:58:63: bb:f3:89:3e:00:f7:31:89:bc:e5:1d:9f:99:e9:aa:d2:dd:60: 5f:de:79:f7:02:ef:09:b1:23:38:90:34:97:86:fc:a5:57:9f: 80:f1:7d:87:91:88:fa:80:31:1a:8a:ba:dd:de:27:c9:d5:56: 09:9b:ff:03:4d:4b:b6:7c:23:9a:14:66:d1:27:f7:c4:3d:56: 40:8b:4f:4d:3b:6e:85:84:ec:48:9e:dc:f0:6d:28:da:d6:4b: 2c:15:c3:8c:a4:64:10:f8:67:23:0c:2f:fa:f8:04:42:d5:ee: 23:93:a4:7d:94:4a:ba:6c:14:6f:4f:c1:b2:e4:61:e0:b9:33: 5d:62:6e:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEh8NB27dbZbaysiq9rpUoIRf7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNDExMjExMjE2MTRaFw0yNDExMjQxMjI4MTRaMDMxMTAvBgNV BAMTKDMyODdDQzYyODVCQTBFQ0YzMzkzNzFBRDREQ0JBNkFCN0U2QUU4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSZ+a52ZuPItqwepkOBlrjnQj ISc5Exc3A/UQB+GkrWchD0TRbUInONbDT9R+HrS3x+enrMpbv23yN0FMA/4xcNJQ zU+qrHcTNzCy2440r6e80wbtbBmlC8e2KDCm+1oZmgjddI1VTo9iMJz7I1fsNXdC IlI+4OK3Vn6t/S+zOj74sA5lr145vBRJScwkKJF4BgswDY5LKv0I2nco32pTJRiX hsJraXGopcza4bOVIClmjYG49sacAScY05sZwVim1tGGYXjdbA/lTKsIRMRDoU33 kAefL6q2L+yExkqWvHzTWy8xLOi3VVp/67xM908+YQfRy4vqhScJqw+1xo0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMofMYoW6Ds8zk3GtTcumq35q6NcwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6NA1pwVBtfuWAxIDF1JgcckAXVkonmRSFH MWFOYg4cQ4nHcJ7ziAO5Lx9hKXIcTXOVJ2OoRlww+igUxj9bJWBqOsCQRqoRgtZW Ztz4OJet2TFYYEMnxwPHknPMdfci4CVdBqxiRFabHjIU79dU9bjHe302ofc5t/rP BRtYY7vziT4A9zGJvOUdn5npqtLdYF/eefcC7wmxIziQNJeG/KVXn4DxfYeRiPqA MRqKut3eJ8nVVgmb/wNNS7Z8I5oUZtEn98Q9VkCLT007boWE7Eie3PBtKNrWSywV w4ykZBD4ZyMML/r4BELV7iOTpH2USrpsFG9PwbLkYeC5M11ibqE= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org