$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: FkTqKx8/HTuDR4MfL2Z5krkQ+yPdxbxbMbSj10Sokio= Subject key identifier: 4D:FA:FB:11:A1:BC:6C:F3:A5:47:E8:88:92:B5:02:85:49:F6:7C:06 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 5E551E33F0591A0516F363D861D35C053B1EAC99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 02AC Signing time: Mon 25 Nov 2024 13:21:52 +0000 Manifest this update: Mon 25 Nov 2024 13:16:52 +0000 Manifest next update: Thu 28 Nov 2024 20:34:52 +0000 Files and hashes: 1: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: nUVinFsoY0w+ulYAvUeNGakliI15G1kEe5kQEWg5wpI=) 2: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: bqytnnL4CWTJLNo6SQ6D1J9h/mJL4g2d1qPT/EGyEj8=) 3: 3230322e382e32382e302f32332d3234203d3e203435373234.roa (hash: sSIVVds29DdSz6bDkAmXoAzsFSMHOZ8P931vwDCn1ek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 20:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:55:1e:33:f0:59:1a:05:16:f3:63:d8:61:d3:5c:05:3b:1e:ac:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Nov 25 13:16:52 2024 GMT Not After : Nov 28 20:34:52 2024 GMT Subject: CN=4DFAFB11A1BC6CF3A547E88892B5028549F67C06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:42:dd:a1:d9:41:50:90:de:62:38:23:90: 47:fd:b1:db:37:11:5d:38:2d:6c:fb:fc:c0:33:55: ba:20:e4:52:20:a4:4f:8a:e2:35:ae:16:70:69:18: 9d:de:d4:42:bc:fb:ca:d2:98:52:fd:be:38:ff:d0: 03:ea:f4:1f:fa:61:30:a0:85:31:63:bf:c6:fb:32: 65:ef:4c:22:49:a7:69:c9:1b:61:a8:eb:55:39:85: 5d:75:05:7b:00:65:ca:b6:e5:02:bf:9a:9e:4f:dc: 83:1b:ec:e5:a5:5e:52:cf:e0:20:2f:97:b1:00:d4: 71:1d:2a:4d:3f:77:ad:65:fb:72:ed:e5:74:47:52: 6f:e1:89:1d:0f:17:10:94:6a:e9:dc:c2:bc:c1:1f: 01:62:a0:b7:ef:13:0b:b3:ca:1f:5b:12:0c:a1:e9: 45:51:78:20:14:0f:f2:d9:19:f4:b4:1a:7d:d5:f4: 20:b2:26:96:7f:e0:70:de:f8:46:50:3b:02:66:44: 93:e0:da:7b:13:9b:28:5b:63:48:8d:c7:0a:01:c5: bb:e6:29:0d:94:5a:85:0b:1b:93:cd:5e:1f:f0:10: ff:b5:51:c5:18:aa:e1:ce:e5:00:00:30:c1:47:f1: f1:8e:11:c6:0e:c7:87:b0:c7:fa:0c:a8:88:87:fa: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FA:FB:11:A1:BC:6C:F3:A5:47:E8:88:92:B5:02:85:49:F6:7C:06 X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2f:e7:47:90:36:72:a0:b6:1e:dd:d7:c8:8b:bd:76:db:13: 0d:86:cc:e4:93:10:7e:9f:5c:79:df:fd:a8:c0:f7:89:69:05: 91:19:4e:2a:2a:72:56:87:72:6b:f1:83:c0:08:0a:98:e4:a6: 32:ef:5e:b6:cc:f7:02:2f:83:b9:bf:69:e0:70:03:9a:61:3d: ea:f9:6c:6a:a7:f5:7f:39:87:d6:e4:0e:1d:6d:fe:a0:07:b6: 07:ba:b4:dd:6e:6c:a2:79:ce:8f:4b:df:b3:a3:1f:b9:52:a1: bc:59:fb:9f:61:f8:2b:9f:ed:e1:49:5b:ef:3d:31:8b:d7:e7: 2c:ae:79:5b:59:4b:3e:99:1c:ac:e8:fc:73:46:2a:48:e3:9c: 69:d5:4f:02:49:ad:d8:17:5d:b5:f4:d5:10:4b:5c:66:c3:72: 3b:2c:2f:c4:30:81:d2:18:c7:16:37:75:3a:de:51:7a:72:9a: c4:3a:53:3a:96:a9:ec:28:42:02:38:9b:32:ca:18:13:d1:f5: 40:01:e3:47:df:b8:ed:af:e1:43:80:bf:56:8a:c9:d8:a6:44: ff:52:e0:a7:1f:29:1a:a1:8f:73:f3:8c:2b:b7:ea:79:57:42: f9:fd:01:24:25:f6:2c:5c:3e:e3:1f:98:ea:36:7d:4d:26:d6: 84:69:8e:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlUeM/BZGgUW82PYYdNcBTserJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNDExMjUxMzE2NTJaFw0yNDExMjgyMDM0NTJaMDMxMTAvBgNV BAMTKDRERkFGQjExQTFCQzZDRjNBNTQ3RTg4ODkyQjUwMjg1NDlGNjdDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2n0LdodlBUJDeYjgjkEf9sds3 EV04LWz7/MAzVbog5FIgpE+K4jWuFnBpGJ3e1EK8+8rSmFL9vjj/0APq9B/6YTCg hTFjv8b7MmXvTCJJp2nJG2Go61U5hV11BXsAZcq25QK/mp5P3IMb7OWlXlLP4CAv l7EA1HEdKk0/d61l+3Lt5XRHUm/hiR0PFxCUauncwrzBHwFioLfvEwuzyh9bEgyh 6UVReCAUD/LZGfS0Gn3V9CCyJpZ/4HDe+EZQOwJmRJPg2nsTmyhbY0iNxwoBxbvm KQ2UWoULG5PNXh/wEP+1UcUYquHO5QAAMMFH8fGOEcYOx4ewx/oMqIiH+tkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTfr7EaG8bPOlR+iIkrUChUn2fAYwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQv50eQNnKgth7d18iLvXbbEw2GzOSTEH6f XHnf/ajA94lpBZEZTioqclaHcmvxg8AICpjkpjLvXrbM9wIvg7m/aeBwA5phPer5 bGqn9X85h9bkDh1t/qAHtge6tN1ubKJ5zo9L37OjH7lSobxZ+59h+Cuf7eFJW+89 MYvX5yyueVtZSz6ZHKzo/HNGKkjjnGnVTwJJrdgXXbX01RBLXGbDcjssL8QwgdIY xxY3dTreUXpymsQ6UzqWqewoQgI4mzLKGBPR9UAB40ffuO2v4UOAv1aKydimRP9S 4KcfKRqhj3PzjCu36nlXQvn9ASQl9ixcPuMfmOo2fU0m1oRpjkQ= -----END CERTIFICATE-----Generated at Mon Nov 25 15:49:32 2024 by rpki-client on console-ams.rpki-client.org