$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: x4iUDCYvBK/kylXJ5NUKGYcoDbcYofjwsPnLi2GFvM0= Subject key identifier: 32:2C:88:8C:10:DC:A9:F7:35:7D:46:FD:7B:28:C1:70:28:1B:5E:90 Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 3BE801006954B7C31418EC64EE874B159DD6EEE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 0485 Signing time: Mon 25 Nov 2024 17:30:36 +0000 Manifest this update: Mon 25 Nov 2024 17:25:36 +0000 Manifest next update: Thu 28 Nov 2024 19:18:36 +0000 Files and hashes: 1: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: XsaQ/U9Kr9yLnjasE2URoVoOaYVUiblHMtA00VDq9jU=) 2: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: g5xw1FE6htb/POnNtcobAWNKGzzdBwdYRHRRb9zZoKM=) 3: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: +LS92/38S+GEJLQe/V0RnEU62OGm6FYXPtGt11Ugeac=) 4: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: +PraNjMo7UJUfRvMuuMh94X99iB0d3sDtRSjaFBvobw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e8:01:00:69:54:b7:c3:14:18:ec:64:ee:87:4b:15:9d:d6:ee:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Nov 25 17:25:36 2024 GMT Not After : Nov 28 19:18:36 2024 GMT Subject: CN=322C888C10DCA9F7357D46FD7B28C170281B5E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:20:ea:77:21:7c:37:0b:95:24:32:c3:b1: 0c:f8:e0:4e:91:72:71:77:12:1c:10:f6:22:a1:d5: 16:9b:33:64:de:dd:61:c4:3f:a6:c7:6b:ab:a8:01: fd:c8:f7:3c:0f:90:bc:1e:41:dd:ea:0e:fc:e2:40: 18:ee:c0:a2:c9:79:66:f0:78:00:df:e0:c4:5b:bc: e2:0b:8b:73:bb:12:5e:2e:4d:bc:36:10:5e:08:f4: cc:5e:52:c0:18:48:72:12:2c:50:c4:51:50:15:5e: a9:f5:9c:c4:90:d8:e9:d0:e1:37:2e:16:65:26:6d: cf:ad:06:bc:1e:6b:d4:c2:f6:38:8c:3e:b0:0f:f8: 7f:77:24:c3:a2:84:96:0b:b8:a2:31:da:4d:ec:01: 71:08:1c:14:e8:cd:bb:3d:c4:9c:2a:19:4c:c4:9d: 83:06:69:19:b2:04:7d:28:2f:1e:1a:96:5a:4e:8c: a8:d4:a6:6a:83:41:bc:f2:15:88:fc:a0:14:fa:81: 4c:1e:07:20:55:3b:0d:e1:de:f6:15:d9:6c:90:0b: d8:7a:38:5d:06:a5:a3:e1:c8:3e:b9:45:2d:7f:f5: 4c:14:51:36:00:67:61:38:5b:43:c0:10:10:55:a4: ac:1f:ec:ae:35:ea:30:8f:cd:09:9a:4b:16:0f:b5: b5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2C:88:8C:10:DC:A9:F7:35:7D:46:FD:7B:28:C1:70:28:1B:5E:90 X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f7:09:7b:47:b8:5b:a6:e2:7c:7d:fd:3a:ae:64:65:50:94: dc:8c:e8:31:3d:51:f1:06:6b:1e:06:b0:2b:c1:48:2c:66:e7: 37:66:f9:6a:34:3b:ab:81:0c:a8:f2:32:68:84:ae:69:30:d4: ca:24:7a:c2:1d:58:81:b3:a3:5c:78:c5:f3:ca:29:21:e5:46: b4:d2:74:45:69:44:f2:d4:09:1b:f6:28:bf:7e:f4:d5:02:eb: 06:3c:23:4e:a8:3c:f6:33:0a:0f:46:4e:df:63:32:b2:6f:f4: ef:5d:26:e5:df:69:82:95:49:9a:b6:50:7a:07:b3:bc:f4:29: 95:97:f6:a8:cf:71:d9:e0:0e:87:80:6f:7b:46:30:7d:ef:a0: 46:e3:b8:02:f0:e3:f0:3b:ce:c6:ae:8c:43:f5:20:f4:37:93: 80:6f:4f:67:3f:69:1b:2c:aa:f3:f3:53:f4:f2:1f:cc:a9:d2: 6c:8e:ba:8e:73:30:52:d1:57:99:d3:f9:39:6e:57:58:ec:fa: 0f:04:a9:e0:c3:1c:ef:f4:e5:41:1e:0f:8c:21:44:a5:cc:67: 9a:33:32:36:0f:d3:60:7b:36:0d:79:66:a9:5a:0f:19:89:48: 4f:e7:4f:3d:3e:42:ec:5d:73:9f:0c:61:6f:75:dd:d1:93:a4: 71:78:6a:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+gBAGlUt8MUGOxk7odLFZ3W7uQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNDExMjUxNzI1MzZaFw0yNDExMjgxOTE4MzZaMDMxMTAvBgNV BAMTKDMyMkM4ODhDMTBEQ0E5RjczNTdENDZGRDdCMjhDMTcwMjgxQjVFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNyDqdyF8NwuVJDLDsQz44E6R cnF3EhwQ9iKh1RabM2Te3WHEP6bHa6uoAf3I9zwPkLweQd3qDvziQBjuwKLJeWbw eADf4MRbvOILi3O7El4uTbw2EF4I9MxeUsAYSHISLFDEUVAVXqn1nMSQ2OnQ4Tcu FmUmbc+tBrwea9TC9jiMPrAP+H93JMOihJYLuKIx2k3sAXEIHBTozbs9xJwqGUzE nYMGaRmyBH0oLx4allpOjKjUpmqDQbzyFYj8oBT6gUweByBVOw3h3vYV2WyQC9h6 OF0GpaPhyD65RS1/9UwUUTYAZ2E4W0PAEBBVpKwf7K416jCPzQmaSxYPtbV7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMiyIjBDcqfc1fUb9eyjBcCgbXpAwHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX3CXtHuFum4nx9/TquZGVQlNyM6DE9UfEG ax4GsCvBSCxm5zdm+Wo0O6uBDKjyMmiErmkw1MokesIdWIGzo1x4xfPKKSHlRrTS dEVpRPLUCRv2KL9+9NUC6wY8I06oPPYzCg9GTt9jMrJv9O9dJuXfaYKVSZq2UHoH s7z0KZWX9qjPcdngDoeAb3tGMH3voEbjuALw4/A7zsaujEP1IPQ3k4BvT2c/aRss qvPzU/TyH8yp0myOuo5zMFLRV5nT+TluV1js+g8EqeDDHO/05UEeD4whRKXMZ5oz MjYP02B7Ng15ZqlaDxmJSE/nTz0+Quxdc58MYW913dGTpHF4aq4= -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:15 2024 by rpki-client on console-fra.rpki-client.org