$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: tKFeqoWZzlfX+qqarsdynPpr9EMn2gOEgzp+160hEI0= Subject key identifier: 69:0F:0F:02:0F:97:8A:D7:5A:C2:20:4C:FB:E5:B2:02:EF:FE:3A:D7 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 6BBE401283C1FB1CEE5C5B10C862F02C8E4D59A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 011B Signing time: Wed 20 Nov 2024 06:51:02 +0000 Manifest this update: Wed 20 Nov 2024 06:46:02 +0000 Manifest next update: Sat 23 Nov 2024 16:41:02 +0000 Files and hashes: 1: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: nPW+YMTLPwGTHT1u0MTblGYNBPn5dXff40CoeEB4Ckk=) 2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Juqtcnw5dFFu5T73BMr7UKHzv1aKbgUnoCmnBMU/IDI=) 3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: xadTEIHtejR8XFJ0UP4dte8N2PBaecP1Ye7ZglYgbxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 10:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:be:40:12:83:c1:fb:1c:ee:5c:5b:10:c8:62:f0:2c:8e:4d:59:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Nov 20 06:46:02 2024 GMT Not After : Nov 23 16:41:02 2024 GMT Subject: CN=690F0F020F978AD75AC2204CFBE5B202EFFE3AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:ec:a6:cc:54:e5:62:1a:e1:8a:ae:11:ba: f3:72:89:ef:85:04:ca:d8:67:57:5b:fa:44:86:27: 72:3a:b1:fb:e5:41:33:6f:de:20:a6:30:97:b9:e9: 6f:17:ee:34:fc:b2:58:dd:81:de:09:01:37:ac:76: 3d:a1:6f:21:8d:00:b2:96:c8:31:e7:8b:f2:5c:ff: 43:5c:0a:6b:02:97:9d:24:37:7f:53:d9:06:4c:41: 9c:9d:cb:d8:2a:16:93:27:6d:0c:2a:ab:1d:ea:8c: 1e:47:c6:b1:54:e7:ab:cb:75:b0:c7:5f:96:5d:4f: 1a:49:3e:60:81:1c:49:5f:93:97:05:58:70:fc:d7: 42:1b:a9:52:04:d7:1b:b6:b2:d4:bd:04:42:f0:3e: af:04:79:78:f9:87:dc:1b:ff:45:51:07:0c:4f:05: eb:25:48:d5:d4:c7:b7:ac:53:e8:a2:87:3f:c9:86: 65:d4:b5:bb:ce:b7:91:34:54:28:a5:e4:38:30:2f: 4e:b9:d6:6f:47:7a:0c:4f:37:4a:46:d2:73:e2:88: b4:24:7b:e6:f8:e4:1a:18:0c:79:f6:79:86:41:bf: 86:7e:9b:c9:ab:8b:fc:b4:f1:54:14:a3:91:0f:5d: 6b:ee:e0:6a:e3:a6:d6:12:d3:62:e5:ca:65:65:49: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0F:0F:02:0F:97:8A:D7:5A:C2:20:4C:FB:E5:B2:02:EF:FE:3A:D7 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0f:ae:12:a9:08:4f:ee:56:5b:78:5e:94:b5:c8:6f:67:09: 93:ae:f3:45:2d:7b:74:84:2b:21:6e:65:0d:9c:4a:72:e1:51: 2c:d1:c0:04:be:e4:fe:97:7c:41:7b:8d:37:b4:28:89:73:71: 9a:ad:37:bc:28:ef:c0:88:70:98:0c:76:df:c7:bf:5f:44:76: 91:18:67:25:ea:4b:f9:34:e0:39:14:7f:8b:9b:6d:76:c5:7f: fb:b6:37:e4:7a:01:3d:10:aa:84:07:5e:bd:9f:54:35:78:7f: 60:9d:c1:71:d6:43:1a:7f:2c:8b:a7:2b:c4:ad:53:a6:ff:08: 32:7c:d9:2a:fa:54:b4:cb:b1:55:5e:7b:8c:c7:0a:be:6a:ab: 33:56:d3:91:fe:28:dd:51:0a:f8:ad:01:39:71:ed:fa:26:03: b1:59:ae:1b:c3:70:d4:37:e8:e4:ef:24:e9:15:0b:85:e6:c1: 87:f7:61:b3:21:99:9a:6c:85:6b:df:5a:e6:b4:78:5c:c9:c9: 53:28:9a:73:de:0b:42:02:e3:d2:f7:c3:69:42:5d:33:da:4f: 16:4b:ae:3b:88:66:b0:71:ae:0b:2f:3e:88:3a:97:5e:a6:69: 3e:ba:67:2b:94:9c:0d:78:24:6c:8a:ae:5c:f0:d7:e9:10:ce: 5f:0d:ee:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa75AEoPB+xzuXFsQyGLwLI5NWaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNDExMjAwNjQ2MDJaFw0yNDExMjMxNjQxMDJaMDMxMTAvBgNV BAMTKDY5MEYwRjAyMEY5NzhBRDc1QUMyMjA0Q0ZCRTVCMjAyRUZGRTNBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhuymzFTlYhrhiq4RuvNyie+F BMrYZ1db+kSGJ3I6sfvlQTNv3iCmMJe56W8X7jT8sljdgd4JATesdj2hbyGNALKW yDHni/Jc/0NcCmsCl50kN39T2QZMQZydy9gqFpMnbQwqqx3qjB5HxrFU56vLdbDH X5ZdTxpJPmCBHElfk5cFWHD810IbqVIE1xu2stS9BELwPq8EeXj5h9wb/0VRBwxP BeslSNXUx7esU+iihz/JhmXUtbvOt5E0VCil5DgwL0651m9HegxPN0pG0nPiiLQk e+b45BoYDHn2eYZBv4Z+m8mri/y08VQUo5EPXWvu4GrjptYS02LlymVlSd/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaQ8PAg+XitdawiBM++WyAu/+OtcwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkPrhKpCE/uVlt4XpS1yG9nCZOu80Ute3SE KyFuZQ2cSnLhUSzRwAS+5P6XfEF7jTe0KIlzcZqtN7wo78CIcJgMdt/Hv19EdpEY ZyXqS/k04DkUf4ubbXbFf/u2N+R6AT0QqoQHXr2fVDV4f2CdwXHWQxp/LIunK8St U6b/CDJ82Sr6VLTLsVVee4zHCr5qqzNW05H+KN1RCvitATlx7fomA7FZrhvDcNQ3 6OTvJOkVC4XmwYf3YbMhmZpshWvfWua0eFzJyVMomnPeC0IC49L3w2lCXTPaTxZL rjuIZrBxrgsvPog6l16maT66ZyuUnA14JGyKrlzw1+kQzl8N7o4= -----END CERTIFICATE-----Generated at Wed Nov 20 08:52:57 2024 by rpki-client on console-ams.rpki-client.org