$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: lA1ZIYwCfemHtKW2jsY9PvwZ0E68t5jI8Df6Z2mdsKo= Subject key identifier: EE:CF:2F:23:34:8C:08:65:78:B2:34:0F:3A:AB:E8:E4:AC:64:F9:ED Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 597B3DA52D423F779A9246CF86E2B8FEFFC63414 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: 39 Signing time: Thu 21 Nov 2024 12:21:29 +0000 Manifest this update: Thu 21 Nov 2024 12:16:29 +0000 Manifest next update: Sun 24 Nov 2024 18:43:29 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: 3vGT588I0QVV/sCRiOtRSKMKdrf4JVct9iPV7wFvL6o=) 2: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: G5Lt7ofgiBbheQpOKpDQm/vAI2ENEXHX0akQaZQul+M=) 3: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: qmcuoQswPf+QFvs3385xW2BmFD8fV2DaQGSSFxpeEbc=) 4: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: AXGEppwKEnj8pzoDY2hiI66PJ1bCCf9npLO9Neh2WCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7b:3d:a5:2d:42:3f:77:9a:92:46:cf:86:e2:b8:fe:ff:c6:34:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Nov 21 12:16:29 2024 GMT Not After : Nov 24 18:43:29 2024 GMT Subject: CN=EECF2F23348C086578B2340F3AABE8E4AC64F9ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:a3:5c:f0:77:4b:92:09:fb:23:1a:3c:7f: e2:42:8d:bf:43:f7:b3:fd:e9:ca:b2:27:5c:7a:95: 02:a2:11:3a:e9:c1:c8:5a:27:1f:0d:65:71:65:13: 27:83:c6:2a:3f:9a:3c:46:23:d8:5d:d2:74:f7:78: 67:da:03:ce:82:17:73:7a:98:81:4e:2c:53:66:10: 08:1e:db:2c:db:f9:55:b8:76:9d:1f:a5:a4:2a:35: 20:10:11:9c:60:6e:6e:a4:a3:03:1c:3c:62:83:ec: db:b0:af:a3:f6:49:b8:1d:6e:34:1b:16:85:e8:b9: 27:c6:de:a8:19:df:5f:bb:71:c0:6c:dd:bf:84:7c: d9:3e:f2:2a:1f:70:f4:44:9b:4b:bb:26:f3:b2:8c: 93:cd:22:1f:9d:21:a8:f9:16:6b:bd:0c:1b:63:f5: 4c:f5:e7:d9:21:07:f0:f2:e4:03:b7:5e:d6:41:47: 4b:00:a3:05:bd:11:76:72:89:95:9b:fb:63:69:5b: 63:7b:ec:67:34:53:3c:03:97:e4:41:ba:fc:61:c8: b4:5d:dd:81:dc:f9:7e:3e:56:ca:bd:0d:90:0e:9c: 77:db:72:b2:06:d5:b7:34:d3:f7:44:32:4f:c1:34: 2d:ca:18:40:83:45:69:ad:c8:b6:b6:d9:25:6a:27: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CF:2F:23:34:8C:08:65:78:B2:34:0F:3A:AB:E8:E4:AC:64:F9:ED X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f0:6f:3c:47:f4:e9:50:ea:46:f0:98:b3:4e:50:54:ee:37: 08:d5:00:05:82:ef:0f:f2:ee:14:e9:1c:f2:16:26:00:c7:f9: e7:dc:45:84:36:e5:97:fb:57:12:1c:72:64:19:e4:04:f3:6a: dd:a7:b7:1a:d8:23:b7:24:fc:57:4e:c7:93:98:ad:f2:87:c2: 1e:79:35:63:2d:f8:fa:72:ba:5e:ef:74:3d:58:3b:f5:68:4a: a6:eb:06:97:65:03:97:e0:0a:46:26:72:e3:a2:54:a2:1e:ad: e8:fa:d3:72:2d:2a:d0:22:56:94:77:20:98:b0:c6:60:d6:81: e1:7d:d5:b9:1f:c7:a5:32:c5:9d:4a:b8:b7:0c:7d:36:49:bd: 23:50:aa:ed:46:95:be:53:29:78:09:0e:e8:ef:26:8f:15:ef: d4:c5:71:7a:e1:1c:3b:92:1b:e7:b0:ff:80:a9:8d:85:b2:6b: 5b:1a:54:80:b9:5d:ff:a4:59:f0:d4:f2:75:c5:7b:0e:f3:33: 6d:69:71:1d:b1:90:c6:4a:c1:38:46:51:8a:1f:3d:18:d0:b3: 50:c7:79:3e:dc:9d:4e:a3:9c:e6:88:ec:81:8c:f5:10:e9:19: a7:fc:dd:eb:f6:3f:72:3d:ed:98:9f:a2:05:b4:eb:74:0f:ca: 2b:1c:cf:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXs9pS1CP3eakkbPhuK4/v/GNBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNDExMjExMjE2MjlaFw0yNDExMjQxODQzMjlaMDMxMTAvBgNV BAMTKEVFQ0YyRjIzMzQ4QzA4NjU3OEIyMzQwRjNBQUJFOEU0QUM2NEY5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTqNc8HdLkgn7Ixo8f+JCjb9D 97P96cqyJ1x6lQKiETrpwchaJx8NZXFlEyeDxio/mjxGI9hd0nT3eGfaA86CF3N6 mIFOLFNmEAge2yzb+VW4dp0fpaQqNSAQEZxgbm6kowMcPGKD7Nuwr6P2SbgdbjQb FoXouSfG3qgZ31+7ccBs3b+EfNk+8iofcPREm0u7JvOyjJPNIh+dIaj5Fmu9DBtj 9Uz159khB/Dy5AO3XtZBR0sAowW9EXZyiZWb+2NpW2N77Gc0UzwDl+RBuvxhyLRd 3YHc+X4+Vsq9DZAOnHfbcrIG1bc00/dEMk/BNC3KGECDRWmtyLa22SVqJ/wLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7s8vIzSMCGV4sjQPOqvo5Kxk+e0wHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnwbzxH9OlQ6kbwmLNOUFTuNwjVAAWC7w/y 7hTpHPIWJgDH+efcRYQ25Zf7VxIccmQZ5ATzat2ntxrYI7ck/FdOx5OYrfKHwh55 NWMt+Ppyul7vdD1YO/VoSqbrBpdlA5fgCkYmcuOiVKIerej603ItKtAiVpR3IJiw xmDWgeF91bkfx6UyxZ1KuLcMfTZJvSNQqu1Glb5TKXgJDujvJo8V79TFcXrhHDuS G+ew/4CpjYWya1saVIC5Xf+kWfDU8nXFew7zM21pcR2xkMZKwThGUYofPRjQs1DH eT7cnU6jnOaI7IGM9RDpGaf83ev2P3I97ZifogW063QPyiscz78= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org