$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft File: FA86E23853549D2EF1D9F9C9222147A550E36A38.mft (raw, json) Hash identifier: 5XWLAB9qncObiqasJGqcludJhLISJyPxHF3Mnivnnps= Subject key identifier: F3:7E:A0:FC:3F:9A:2C:C9:E5:7F:3C:08:C9:F9:B5:2B:FB:BF:1F:7B Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Certificate serial: 6169D570270C1764DB2584E99C73F10E614F8FC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft Manifest number: 0145 Signing time: Sat 23 Nov 2024 21:40:45 +0000 Manifest this update: Sat 23 Nov 2024 21:35:45 +0000 Manifest next update: Wed 27 Nov 2024 07:38:45 +0000 Files and hashes: 1: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: Fnb9mHwnPNsfDMZ6cjv7vOerbkwh7TH6rJKXU74qPqY=) 2: FA86E23853549D2EF1D9F9C9222147A550E36A38.crl (hash: aEL/BEVX+s4XPU47AAOlbpKg8aoiRozp2KygPlyowK4=) 3: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: wAGGklCk4B1PY/Yk97FdUVDq0X8tOoPh5XLBtQglwEI=) 4: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: OWN6QS4tvhLLIWetZNv4iqkNCXq5fPQXYFc1C2JdOlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:69:d5:70:27:0c:17:64:db:25:84:e9:9c:73:f1:0e:61:4f:8f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Validity Not Before: Nov 23 21:35:45 2024 GMT Not After : Nov 27 07:38:45 2024 GMT Subject: CN=F37EA0FC3F9A2CC9E57F3C08C9F9B52BFBBF1F7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:23:1e:4c:35:a5:4f:34:76:df:30:3c:4d: ff:c6:92:1a:f4:5a:06:87:84:5b:a6:2a:17:ff:a3: 7f:12:b8:2c:49:ab:bb:d8:3d:b7:65:b3:dd:07:c6: be:87:aa:10:85:8c:4f:3e:2b:39:c2:9f:6d:5a:24: 07:7f:88:e7:63:29:2a:7d:80:1c:bf:c5:5d:37:6e: ad:b4:56:29:05:5b:78:07:25:df:f2:ce:4b:50:d8: f2:34:82:7c:49:5e:13:80:09:d2:d3:65:68:65:09: 76:d0:82:d9:13:34:d2:eb:d5:43:f3:b7:3d:64:e4: 28:3c:62:9b:44:0c:40:ab:4a:47:b9:3d:7b:0b:48: 50:55:ba:93:c3:a2:20:64:cc:1a:a3:ce:b8:53:aa: 7a:dc:3a:a0:aa:11:51:43:79:f6:a0:81:e4:04:5a: bc:4c:b6:85:4e:dd:8f:c5:01:3d:2d:f0:13:4e:7b: 20:8a:d6:2e:3f:98:c4:49:4c:7b:a4:a4:4e:c9:67: 7b:aa:a3:72:58:39:0e:0c:01:e1:f7:9a:35:e4:48: 63:73:a4:23:2c:5a:5c:c1:e7:71:02:cc:43:ef:48: d3:b8:dc:f6:cc:c5:54:51:de:6a:d7:6e:19:c5:f2: 36:c8:ed:09:f4:e6:e5:d4:d8:39:5d:08:03:e4:de: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7E:A0:FC:3F:9A:2C:C9:E5:7F:3C:08:C9:F9:B5:2B:FB:BF:1F:7B X509v3 Authority Key Identifier: keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:de:e3:c2:f9:3d:af:e8:3a:88:c2:1d:32:8a:31:48:e4:d0: 46:97:d8:a3:b0:78:b9:df:44:f3:5d:bb:a6:68:4b:fa:f7:81: d1:d7:82:17:41:84:a3:9a:8e:bc:23:61:d6:e0:16:0e:aa:22: 81:46:73:f1:c1:e6:4e:6d:ee:3a:be:18:38:db:97:e6:dc:76: 99:4d:dc:a3:68:cc:ed:5c:ae:fc:c7:db:bf:d8:e9:11:14:0a: 7a:03:9c:f8:5c:00:d5:5e:6c:b2:67:cf:26:d2:5a:42:22:79: 33:6e:91:36:cd:6f:68:b1:fe:fd:e6:ca:7f:a7:3a:6f:e1:da: 05:4a:25:61:a6:d1:02:65:d5:f8:03:36:e4:7b:c1:7c:cf:f1: ac:cd:06:9b:c6:6f:f7:d7:d5:52:b7:45:83:27:2b:64:6f:59: 47:e0:cf:21:d8:16:fe:ee:8a:61:a7:1b:11:1c:dd:c2:88:f2: 79:f9:cd:28:64:a5:f9:28:55:7e:0c:76:2b:3a:df:08:21:32: c9:19:af:b2:ab:19:a7:f4:37:6c:16:54:9a:06:9f:32:64:99: 08:69:fc:0d:bf:d4:60:1e:d5:55:99:ba:65:73:65:ac:54:d2: c3:58:3f:58:5e:10:6a:43:47:7f:e1:eb:30:e6:f2:c1:8c:4d: 30:0f:f3:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYWnVcCcMF2TbJYTpnHPxDmFPj8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1 MEUzNkEzODAeFw0yNDExMjMyMTM1NDVaFw0yNDExMjcwNzM4NDVaMDMxMTAvBgNV BAMTKEYzN0VBMEZDM0Y5QTJDQzlFNTdGM0MwOEM5RjlCNTJCRkJCRjFGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhCMeTDWlTzR23zA8Tf/Gkhr0 WgaHhFumKhf/o38SuCxJq7vYPbdls90Hxr6HqhCFjE8+KznCn21aJAd/iOdjKSp9 gBy/xV03bq20VikFW3gHJd/yzktQ2PI0gnxJXhOACdLTZWhlCXbQgtkTNNLr1UPz tz1k5Cg8YptEDECrSke5PXsLSFBVupPDoiBkzBqjzrhTqnrcOqCqEVFDefaggeQE WrxMtoVO3Y/FAT0t8BNOeyCK1i4/mMRJTHukpE7JZ3uqo3JYOQ4MAeH3mjXkSGNz pCMsWlzB53ECzEPvSNO43PbMxVRR3mrXbhnF8jbI7Qn05uXU2DldCAPk3i0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU836g/D+aLMnlfzwIyfm1K/u/H3swHwYDVR0j BBgwFoAU+obiOFNUnS7x2fnJIiFHpVDjajgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTA0NzkzYy1jMjA5LTQ2OWEtOGUzYy1lYjNmNWE4Mzg2M2YvMC9GQTg2RTIzODUz NTQ5RDJFRjFEOUY5QzkyMjIxNDdBNTUwRTM2QTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1MEUz NkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3 QTU1MEUzNkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7e48L5Pa/oOojCHTKKMUjk0EaX2KOweLnf RPNdu6ZoS/r3gdHXghdBhKOajrwjYdbgFg6qIoFGc/HB5k5t7jq+GDjbl+bcdplN 3KNozO1crvzH27/Y6REUCnoDnPhcANVebLJnzybSWkIieTNukTbNb2ix/v3myn+n Om/h2gVKJWGm0QJl1fgDNuR7wXzP8azNBpvGb/fX1VK3RYMnK2RvWUfgzyHYFv7u imGnGxEc3cKI8nn5zShkpfkoVX4Mdis63wghMskZr7KrGaf0N2wWVJoGnzJkmQhp /A2/1GAe1VWZumVzZaxU0sNYP1heEGpDR3/h6zDm8sGMTTAP82M= -----END CERTIFICATE-----Generated at Sat Nov 23 22:30:29 2024 by rpki-client on console-ams.rpki-client.org