$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: Y12Z+9y3McJ5s+KK+iookX2i5iUxfXEhg0/zjZvO8J8= Subject key identifier: C8:66:43:02:A8:7B:7D:62:ED:7D:82:EF:58:87:1A:A1:95:4C:0D:4C Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 54AF151BA6CF73574764F4A673F0DBADAD20ADA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: 23 Signing time: Mon 25 Nov 2024 12:41:31 +0000 Manifest this update: Mon 25 Nov 2024 12:36:31 +0000 Manifest next update: Thu 28 Nov 2024 20:48:31 +0000 Files and hashes: 1: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: nUQ2kayi0Rj4NqtUCpruCitWDh+npuC9WG+E5F+Bv9o=) 2: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: rvmmuygSDQqp3VTFfTdTUgUhuWy6VU7o/YE+GwA04qY=) 3: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: yY52GRBDCTIBbBioChoIZjcf7WJpZM8H21Gp86Mxl1w=) 4: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: 4cVYZh3C8hXn171P/RUENb8aKuR+2otEfieTHKUhFd4=) 5: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: 1nHw01smVx1ZOqDKUmuMmLHS8nfmS5SZFRiTVrT39OY=) 6: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: IoXihcWrLe60DlpQzVRAOXX3umofZd3ManAso30bXVY=) 7: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: bcKNAldjHqBfsv/Q+Ly6D1o3ohbtzg70IudkGUDipiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 20:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:af:15:1b:a6:cf:73:57:47:64:f4:a6:73:f0:db:ad:ad:20:ad:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Nov 25 12:36:31 2024 GMT Not After : Nov 28 20:48:31 2024 GMT Subject: CN=C8664302A87B7D62ED7D82EF58871AA1954C0D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:6d:cf:1f:11:bc:22:ef:be:83:86:63:a2: d0:02:6a:32:f3:eb:6e:89:b2:67:7a:6e:93:d6:ab: 8f:a6:57:e6:b8:a9:40:e2:d6:53:81:87:8b:7d:01: ba:f5:f8:4c:cf:08:50:d3:3b:98:e6:ab:f4:ec:e4: 94:09:5d:0c:5c:9c:39:b7:8d:0c:9c:31:bc:50:aa: ad:3c:0a:3e:52:b7:cb:f4:fa:ab:51:9d:d5:02:21: e8:eb:52:6f:93:9d:b7:0c:0a:ca:ac:a6:73:20:a9: e1:19:da:25:2d:d6:da:54:ba:5c:59:3b:8e:83:95: 44:91:0f:fb:ab:ef:bb:93:c3:0b:df:61:99:54:69: 1c:6b:f7:16:aa:ec:f6:c4:06:03:72:28:95:44:ad: c2:5b:3e:ae:97:9f:f2:9e:12:2c:ee:39:c5:85:52: f9:95:5c:85:8a:ac:6f:ed:ae:37:14:b3:61:27:30: 54:f4:c3:ce:ec:de:f4:89:86:35:44:0a:26:4d:47: 61:91:93:f9:86:d1:aa:6e:09:02:98:f3:ef:68:b2: b1:95:42:73:1d:e2:8e:14:46:34:d0:f6:e9:21:db: 4b:35:5b:9b:af:84:13:0d:46:a9:16:7d:ea:7d:31: ee:7d:91:5a:6a:d3:61:54:fd:73:52:9d:16:70:36: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:66:43:02:A8:7B:7D:62:ED:7D:82:EF:58:87:1A:A1:95:4C:0D:4C X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d7:43:b9:73:2e:ad:ae:86:4c:97:b0:71:91:08:7a:c0:6d: 62:05:eb:c2:53:18:bc:6f:23:17:15:01:18:1d:3d:21:96:d2: 59:95:f2:d8:01:e6:97:6b:6c:13:7a:ae:9b:74:06:44:30:f2: 99:0d:95:6b:e2:8d:63:a2:ba:a3:5e:15:83:4b:95:59:2e:0b: af:62:5e:61:b4:b3:e2:7c:9c:a8:f3:e2:48:08:de:68:9b:84: fe:b3:9a:52:6c:9c:da:d0:66:5a:0e:5a:2b:37:1e:60:a7:ee: ca:29:e0:b5:5a:8a:3f:2a:3f:b8:fc:80:e1:4a:87:cc:81:69: 6e:c3:cb:98:e4:44:5a:37:31:7f:5a:06:aa:86:6b:49:ee:83: e4:2f:22:d3:41:cf:58:f8:f5:d2:b4:af:be:91:90:d4:6e:53: 9d:e1:5e:2a:fa:d6:c1:31:25:0c:dc:9b:8e:df:e8:fb:af:72: 2f:1e:73:60:bc:66:0e:e5:e8:38:5a:89:61:76:5c:10:2b:56: 6a:96:fa:bf:1f:86:4d:c5:8f:ed:50:23:41:00:aa:25:f4:1c: 40:a7:d9:c7:f4:54:92:79:7f:2b:e5:6e:dc:db:bd:ce:5f:de: 9a:36:21:54:34:0d:b5:43:2c:cb:85:1a:3f:54:20:6b:dd:49: e0:bf:34:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVK8VG6bPc1dHZPSmc/Dbra0graAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNDExMjUxMjM2MzFaFw0yNDExMjgyMDQ4MzFaMDMxMTAvBgNV BAMTKEM4NjY0MzAyQTg3QjdENjJFRDdEODJFRjU4ODcxQUExOTU0QzBENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBW3PHxG8Iu++g4ZjotACajLz 626Jsmd6bpPWq4+mV+a4qUDi1lOBh4t9Abr1+EzPCFDTO5jmq/Ts5JQJXQxcnDm3 jQycMbxQqq08Cj5St8v0+qtRndUCIejrUm+TnbcMCsqspnMgqeEZ2iUt1tpUulxZ O46DlUSRD/ur77uTwwvfYZlUaRxr9xaq7PbEBgNyKJVErcJbPq6Xn/KeEizuOcWF UvmVXIWKrG/trjcUs2EnMFT0w87s3vSJhjVECiZNR2GRk/mG0apuCQKY8+9osrGV QnMd4o4URjTQ9ukh20s1W5uvhBMNRqkWfep9Me59kVpq02FU/XNSnRZwNq79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyGZDAqh7fWLtfYLvWIcaoZVMDUwwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnXQ7lzLq2uhkyXsHGRCHrAbWIF68JTGLxv IxcVARgdPSGW0lmV8tgB5pdrbBN6rpt0BkQw8pkNlWvijWOiuqNeFYNLlVkuC69i XmG0s+J8nKjz4kgI3mibhP6zmlJsnNrQZloOWis3HmCn7sop4LVaij8qP7j8gOFK h8yBaW7Dy5jkRFo3MX9aBqqGa0nug+QvItNBz1j49dK0r76RkNRuU53hXir61sEx JQzcm47f6Puvci8ec2C8Zg7l6DhaiWF2XBArVmqW+r8fhk3Fj+1QI0EAqiX0HECn 2cf0VJJ5fyvlbtzbvc5f3po2IVQ0DbVDLMuFGj9UIGvdSeC/NMI= -----END CERTIFICATE-----Generated at Mon Nov 25 15:49:32 2024 by rpki-client on console-ams.rpki-client.org