$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: haMCd7JKAIH61opgjae7OlimJRU4hVCVFIl/oM1wCmc= Subject key identifier: B9:28:24:44:99:96:F4:4B:F3:11:FE:6E:3B:D1:B9:64:F6:C6:26:2A Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 5C059DCA793B798FCFFED4B865192392686EF379 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 03CE Signing time: Sat 23 Nov 2024 05:51:28 +0000 Manifest this update: Sat 23 Nov 2024 05:46:28 +0000 Manifest next update: Tue 26 Nov 2024 13:23:28 +0000 Files and hashes: 1: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: EKn5uM+MkBaqtjDpMQRe7GQThv+kPugl1u46fwmpTmM=) 2: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=) 3: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=) 4: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: Zji/0UaLcvM2VnJ9DH6I21Ki/YHQtVpW9elQ9fkkxiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 05:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:05:9d:ca:79:3b:79:8f:cf:fe:d4:b8:65:19:23:92:68:6e:f3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Nov 23 05:46:28 2024 GMT Not After : Nov 26 13:23:28 2024 GMT Subject: CN=B92824449996F44BF311FE6E3BD1B964F6C6262A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:7e:dd:25:c0:50:bc:d4:f9:f2:2a:e3:a9: 1d:e0:b7:23:1d:a3:37:58:0d:d8:3f:d0:81:74:b5: 9d:a0:b5:67:bc:db:f2:97:00:c8:37:70:73:57:c4: af:0a:06:ad:a2:1f:f0:c1:c0:0c:d4:3a:cd:40:6d: 9a:61:f6:bd:c7:8c:4a:94:d2:1e:c4:9e:f8:01:03: f3:a3:c4:bb:ab:4e:43:bf:60:06:35:d6:7e:59:31: 0b:86:35:d9:1a:7a:c8:51:0e:40:89:32:40:71:bb: 75:08:04:02:79:9a:d5:65:bf:16:2b:7e:cb:2c:0d: 8d:e0:c3:aa:0e:30:eb:1f:06:60:75:a2:6e:e6:a4: 89:70:35:49:f3:2e:e9:52:fe:f6:48:14:ff:b5:ee: 4a:7f:b6:95:ae:d9:d9:9b:4e:52:ec:1c:6a:b3:cc: b7:14:7d:71:74:06:21:75:21:a0:12:62:eb:df:0d: 95:26:0b:18:9e:27:47:44:ee:d7:38:b8:73:d8:8a: 1e:1a:cc:c6:d9:77:cb:1d:1a:dd:e7:37:a2:05:f4: 17:e3:e5:3b:3a:71:c1:1e:91:cf:da:a6:f8:96:dd: b3:d7:8a:98:07:56:3b:55:2a:89:9c:83:b2:bd:1a: a1:a2:b9:12:00:9a:0c:45:37:fa:6d:e4:57:72:c3: 00:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:28:24:44:99:96:F4:4B:F3:11:FE:6E:3B:D1:B9:64:F6:C6:26:2A X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6d:7d:bd:b8:e6:c6:b4:a4:42:bf:77:dd:d4:78:40:c6:70: 74:29:b0:93:c3:be:ad:39:20:e3:66:e6:30:7f:cb:b6:30:dc: e5:b8:0e:8b:ca:a2:6e:84:0d:2e:cf:94:8d:6b:66:f3:ca:5a: c7:4f:21:83:39:e2:ab:67:78:ea:d8:1d:64:2b:e2:ef:85:0a: f6:67:51:7c:ce:5e:ba:60:4a:bb:83:e8:14:1f:90:07:bc:59: 02:7f:7c:e0:0c:7c:6e:96:76:f1:4b:31:64:db:ab:64:a0:e7: d5:4a:0a:69:e8:d3:c4:80:47:e0:4d:ba:2c:14:bd:16:bc:48: 8e:a5:55:35:eb:bd:6e:a5:14:8a:af:02:a9:00:94:44:37:3b: 48:bc:44:8b:22:c8:56:bc:91:4a:a6:ed:ba:33:64:4f:8f:24: 50:33:3d:e0:b2:d4:e1:79:90:3b:e3:2b:f6:51:97:47:73:f2: 34:ad:5e:01:bc:01:cd:ca:6b:4f:5e:77:e5:a7:ad:7d:31:c0: 23:fe:e3:a2:d0:4b:89:51:bc:17:16:e0:62:bf:8f:28:ba:4a: b3:0a:03:d0:cb:d1:b9:e0:fe:2d:3f:db:47:75:f2:28:7c:62: a5:c1:49:57:f7:5b:43:82:2e:61:cd:91:86:fd:7f:a9:02:6c: 5f:5d:b3:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAWdynk7eY/P/tS4ZRkjkmhu83kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNDExMjMwNTQ2MjhaFw0yNDExMjYxMzIzMjhaMDMxMTAvBgNV BAMTKEI5MjgyNDQ0OTk5NkY0NEJGMzExRkU2RTNCRDFCOTY0RjZDNjI2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kn7dJcBQvNT58irjqR3gtyMd ozdYDdg/0IF0tZ2gtWe82/KXAMg3cHNXxK8KBq2iH/DBwAzUOs1AbZph9r3HjEqU 0h7EnvgBA/OjxLurTkO/YAY11n5ZMQuGNdkaeshRDkCJMkBxu3UIBAJ5mtVlvxYr fsssDY3gw6oOMOsfBmB1om7mpIlwNUnzLulS/vZIFP+17kp/tpWu2dmbTlLsHGqz zLcUfXF0BiF1IaASYuvfDZUmCxieJ0dE7tc4uHPYih4azMbZd8sdGt3nN6IF9Bfj 5Ts6ccEekc/apviW3bPXipgHVjtVKomcg7K9GqGiuRIAmgxFN/pt5FdywwCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuSgkRJmW9EvzEf5uO9G5ZPbGJiowHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJtfb245sa0pEK/d93UeEDGcHQpsJPDvq05 IONm5jB/y7Yw3OW4DovKom6EDS7PlI1rZvPKWsdPIYM54qtneOrYHWQr4u+FCvZn UXzOXrpgSruD6BQfkAe8WQJ/fOAMfG6WdvFLMWTbq2Sg59VKCmno08SAR+BNuiwU vRa8SI6lVTXrvW6lFIqvAqkAlEQ3O0i8RIsiyFa8kUqm7bozZE+PJFAzPeCy1OF5 kDvjK/ZRl0dz8jStXgG8Ac3Ka09ed+WnrX0xwCP+46LQS4lRvBcW4GK/jyi6SrMK A9DL0bng/i0/20d18ih8YqXBSVf3W0OCLmHNkYb9f6kCbF9ds94= -----END CERTIFICATE-----Generated at Sat Nov 23 07:43:26 2024 by rpki-client on console-ams.rpki-client.org