$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: fcZwySfIMKPSY5BphefBc+YOxfedVrimh2g5fvJPrE0= Subject key identifier: 41:1E:4D:1C:4F:25:06:09:1E:B6:5D:4F:6E:21:5A:82:7D:11:E1:33 Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 637DA0573C9AD18D532ECF1F36F9157DE3E24ABB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: 4E Signing time: Fri 22 Nov 2024 11:40:00 +0000 Manifest this update: Fri 22 Nov 2024 11:35:00 +0000 Manifest next update: Mon 25 Nov 2024 23:35:00 +0000 Files and hashes: 1: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: tRLVfcKBmiUIv9ZGpnjVjMqzI/6yVP6tuteSu4rx8Uw=) 2: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: cZvvm1jFJO1iKW/kISi5Z7WDLujFr6Mz18UDWGJxQII=) 3: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: QR99bpkNi6RTuao/nP6wZnGnAu8oh/o8GpHp0qj3Yxs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7d:a0:57:3c:9a:d1:8d:53:2e:cf:1f:36:f9:15:7d:e3:e2:4a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Nov 22 11:35:00 2024 GMT Not After : Nov 25 23:35:00 2024 GMT Subject: CN=411E4D1C4F2506091EB65D4F6E215A827D11E133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:6a:23:52:25:a3:53:e7:7f:94:c5:f1:8e: e2:c4:5e:96:60:4f:f8:fe:10:92:2c:c6:9f:6b:31: 52:0e:78:09:e8:a8:b0:1f:24:6c:60:e8:97:f6:b0: 61:1c:84:3c:70:84:71:4d:43:dd:70:a5:df:cf:25: a1:7f:e0:3a:bc:95:60:2b:48:b0:f6:9d:a8:d3:0f: 2e:2b:4d:0f:67:34:7d:90:e0:4e:00:56:01:de:38: a3:88:34:ff:9e:46:35:d3:e2:0a:e9:cc:14:20:c6: dc:c5:8a:b9:73:3c:b9:ee:e8:3f:52:e3:5c:d4:c4: 8a:39:e4:3d:c2:78:a3:55:75:21:d8:d8:8b:b9:ad: ae:1b:78:90:d1:8a:48:92:fb:45:df:7a:34:96:cc: e0:9d:c1:e5:a4:fe:7b:3a:9c:cc:e8:cc:55:07:27: 88:32:0f:28:d5:6a:e5:49:af:7f:c6:a8:32:ad:f1: 6d:ee:9d:51:e0:80:d4:73:57:2e:93:24:63:80:a4: f6:a6:26:7c:a6:e2:8b:9c:63:04:bf:69:5d:16:2d: 0c:aa:49:50:12:06:eb:3e:77:94:8d:90:bf:74:27: 1d:68:33:2c:15:15:96:71:b4:62:97:95:a8:f9:72: cb:f2:86:20:58:16:01:11:17:4b:31:40:56:76:e6: 67:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1E:4D:1C:4F:25:06:09:1E:B6:5D:4F:6E:21:5A:82:7D:11:E1:33 X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:96:8d:b9:58:1a:89:f4:8a:c9:78:18:b3:87:2c:88:5d:48: 42:6c:fe:44:0a:19:f4:d3:1e:f4:6e:52:30:71:d2:9b:78:6f: 60:f5:f3:f8:01:37:54:11:50:49:9a:d9:b3:b3:57:9d:16:c9: 45:30:c3:72:a8:60:53:ca:8f:c9:d3:e2:9a:6f:19:99:e9:d0: 2a:bb:4c:14:c3:35:a4:d8:98:0f:8c:3f:5c:ff:64:47:02:d4: 48:51:03:bc:2d:3b:78:ab:d2:98:d2:a9:49:fa:12:ef:fc:9a: da:eb:f1:24:df:a8:87:aa:c9:be:52:00:1f:b3:33:69:db:9a: b8:18:81:58:39:d4:64:4b:3c:88:b8:cd:8f:0b:8d:7f:db:f1: d7:60:38:8e:ed:8a:95:57:5a:dd:e6:97:20:c5:e9:2b:2b:ce: a8:10:ad:d8:16:ce:64:be:4a:70:87:29:b8:d6:3d:da:b3:83: 92:90:89:f3:da:0b:aa:df:4c:e3:a2:23:4f:06:f6:c0:4e:52: 23:0d:fe:3a:da:67:9e:6f:49:4a:a1:3e:08:fe:19:0d:4a:c9: b1:98:57:db:81:fe:3d:23:b1:f2:60:66:03:88:60:25:10:1d: a9:30:4e:cb:0e:e5:28:88:12:6d:12:9e:01:e4:fc:29:83:58: 82:05:2b:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY32gVzya0Y1TLs8fNvkVfePiSrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNDExMjIxMTM1MDBaFw0yNDExMjUyMzM1MDBaMDMxMTAvBgNV BAMTKDQxMUU0RDFDNEYyNTA2MDkxRUI2NUQ0RjZFMjE1QTgyN0QxMUUxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/mojUiWjU+d/lMXxjuLEXpZg T/j+EJIsxp9rMVIOeAnoqLAfJGxg6Jf2sGEchDxwhHFNQ91wpd/PJaF/4Dq8lWAr SLD2najTDy4rTQ9nNH2Q4E4AVgHeOKOINP+eRjXT4grpzBQgxtzFirlzPLnu6D9S 41zUxIo55D3CeKNVdSHY2Iu5ra4beJDRikiS+0XfejSWzOCdweWk/ns6nMzozFUH J4gyDyjVauVJr3/GqDKt8W3unVHggNRzVy6TJGOApPamJnym4oucYwS/aV0WLQyq SVASBus+d5SNkL90Jx1oMywVFZZxtGKXlaj5csvyhiBYFgERF0sxQFZ25mdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQR5NHE8lBgketl1PbiFagn0R4TMwHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGWjblYGon0isl4GLOHLIhdSEJs/kQKGfTT HvRuUjBx0pt4b2D18/gBN1QRUEma2bOzV50WyUUww3KoYFPKj8nT4ppvGZnp0Cq7 TBTDNaTYmA+MP1z/ZEcC1EhRA7wtO3ir0pjSqUn6Eu/8mtrr8STfqIeqyb5SAB+z M2nbmrgYgVg51GRLPIi4zY8LjX/b8ddgOI7tipVXWt3mlyDF6SsrzqgQrdgWzmS+ SnCHKbjWPdqzg5KQifPaC6rfTOOiI08G9sBOUiMN/jraZ55vSUqhPgj+GQ1KybGY V9uB/j0jsfJgZgOIYCUQHakwTssO5SiIEm0SngHk/CmDWIIFKyY= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org