$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: /x6iJw/67yhCuax9ckVJnNz8VsEbKYmxMctbPd+elig= Subject key identifier: 3F:92:C8:C1:E8:B2:5B:1D:A4:51:00:43:1D:B6:61:40:B7:A9:3C:13 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 5B8D7492B3CE257925C64837550ABFED7C984E22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 0112 Signing time: Fri 22 Nov 2024 17:01:45 +0000 Manifest this update: Fri 22 Nov 2024 16:56:45 +0000 Manifest next update: Mon 25 Nov 2024 18:52:45 +0000 Files and hashes: 1: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: jCig+hn3QKp3Ujwgup1WTWWUat/bt5TgFSQX6AvuGtA=) 2: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: tFfbE+cZyi+YgTmHklD3X/Dz1Mauwcak6IwwHxYX3r4=) 3: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: 2lCzNVvIcTE0lBTafXNujJgVMtqeOdE/9EuiimQhDBw=) 4: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: gnloxyzy+BjMMSb25i/9FjSca8hdqbTZ26gmHJTl0ic=) 5: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: T8JVoyiBSoRD/8TMk4a3DmUon8APuxT+fmcE+BsJ2zI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:8d:74:92:b3:ce:25:79:25:c6:48:37:55:0a:bf:ed:7c:98:4e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Nov 22 16:56:45 2024 GMT Not After : Nov 25 18:52:45 2024 GMT Subject: CN=3F92C8C1E8B25B1DA45100431DB66140B7A93C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:51:91:75:ac:83:93:47:49:cd:93:08:cb:a9: 35:3f:19:a2:ee:25:72:35:c9:23:2a:a6:52:e4:4d: 6b:b3:22:06:13:ba:91:e7:2e:57:82:72:10:05:38: 10:4a:17:16:33:bb:c6:62:72:cb:7d:f4:c5:4f:2b: d7:63:92:dc:41:e0:0a:0d:7e:72:6a:5a:92:fd:f0: 56:0d:51:62:70:e8:1f:a8:23:bc:d8:ce:ad:74:2d: 47:56:b5:d8:73:03:a4:ca:c2:c9:62:46:d7:6f:d7: 70:9b:63:de:33:85:12:ed:87:3f:13:d9:c6:28:6a: 06:29:70:e1:54:c3:60:21:f6:b8:a2:94:30:6c:01: 57:00:a3:ef:e9:02:e6:5f:08:5e:fc:c2:47:8a:7b: e5:d8:fd:86:77:f5:ed:dd:8e:07:68:3f:ac:4a:a8: 27:47:bc:b9:f4:58:0f:96:f3:17:42:d3:82:7b:9e: 73:1b:00:7c:e6:02:c5:29:16:cb:19:76:d5:65:7f: 56:f6:aa:40:72:7a:98:cd:52:e6:80:c4:cb:e1:f9: 83:37:23:06:ef:a6:ec:c0:59:c6:e9:c9:51:f5:3f: d2:31:90:8c:a9:98:95:8c:8f:c5:05:c8:c2:42:02: a9:86:37:e7:e8:48:7c:17:da:d0:fe:54:9b:f0:27: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:92:C8:C1:E8:B2:5B:1D:A4:51:00:43:1D:B6:61:40:B7:A9:3C:13 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:56:38:e1:31:1b:df:07:0f:05:c1:4f:0f:ee:9e:a6:01:19: 71:6d:38:6f:75:c3:02:8d:27:ae:74:4a:fd:ab:36:00:db:ee: 5a:53:4b:68:22:c1:be:11:f8:05:9c:f5:13:59:e3:bf:77:fa: 70:31:16:b8:ec:1d:09:65:ce:e4:c4:ae:c4:3c:8c:bc:c3:0a: 42:2c:6b:b5:6e:ef:de:77:6b:de:53:e3:fa:98:43:47:72:96: 71:70:8d:b5:0d:4f:50:ff:98:08:8c:4c:9e:0f:1e:cc:1f:8c: 19:88:ed:ba:1c:42:97:08:2c:95:60:f6:95:46:a7:02:af:57: 77:5b:e5:96:1b:82:ff:13:4e:1d:8a:fe:ab:1b:e4:dd:1d:d5: 8f:91:e0:4c:e7:5c:4b:4d:a3:b7:c9:a0:98:cd:21:60:17:c5: 99:bc:96:0e:e8:67:bf:81:ef:08:93:b4:d2:ed:43:33:a1:66: 5c:7a:8b:78:eb:5e:b6:fc:0b:f2:6d:45:13:09:c6:79:ba:e6: 72:b8:84:0f:85:24:58:5f:53:6d:f4:9c:13:c6:71:0a:ee:d5: 62:9a:b6:5b:fd:dc:f5:1c:ff:e4:8f:35:92:25:d0:48:0a:28: bd:59:87:66:0c:cc:92:9a:b4:5b:6f:58:89:a9:13:75:2e:9c: 65:9d:19:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW410krPOJXklxkg3VQq/7XyYTiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNDExMjIxNjU2NDVaFw0yNDExMjUxODUyNDVaMDMxMTAvBgNV BAMTKDNGOTJDOEMxRThCMjVCMURBNDUxMDA0MzFEQjY2MTQwQjdBOTNDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1UZF1rIOTR0nNkwjLqTU/GaLu JXI1ySMqplLkTWuzIgYTupHnLleCchAFOBBKFxYzu8Zicst99MVPK9djktxB4AoN fnJqWpL98FYNUWJw6B+oI7zYzq10LUdWtdhzA6TKwsliRtdv13CbY94zhRLthz8T 2cYoagYpcOFUw2Ah9riilDBsAVcAo+/pAuZfCF78wkeKe+XY/YZ39e3djgdoP6xK qCdHvLn0WA+W8xdC04J7nnMbAHzmAsUpFssZdtVlf1b2qkByepjNUuaAxMvh+YM3 IwbvpuzAWcbpyVH1P9IxkIypmJWMj8UFyMJCAqmGN+foSHwX2tD+VJvwJwDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP5LIweiyWx2kUQBDHbZhQLepPBMwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZWOOExG98HDwXBTw/unqYBGXFtOG91wwKN J650Sv2rNgDb7lpTS2giwb4R+AWc9RNZ4793+nAxFrjsHQllzuTErsQ8jLzDCkIs a7Vu7953a95T4/qYQ0dylnFwjbUNT1D/mAiMTJ4PHswfjBmI7bocQpcILJVg9pVG pwKvV3db5ZYbgv8TTh2K/qsb5N0d1Y+R4EznXEtNo7fJoJjNIWAXxZm8lg7oZ7+B 7wiTtNLtQzOhZlx6i3jrXrb8C/JtRRMJxnm65nK4hA+FJFhfU230nBPGcQru1WKa tlv93PUc/+SPNZIl0EgKKL1Zh2YMzJKatFtvWImpE3UunGWdGZY= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:55 2024 by rpki-client on console-ams.rpki-client.org