$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: FYy+GDGyk/Yr78U0p8pXhOMXZBRyTUN7QDp+Qd+wRzA= Subject key identifier: 88:F8:CF:F5:77:0B:E5:CE:89:3C:46:D7:03:43:63:11:2B:68:8C:31 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 47B5D731F4D872C8AB996149AD1DE86489BF6F47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 0187 Signing time: Wed 20 Nov 2024 19:50:42 +0000 Manifest this update: Wed 20 Nov 2024 19:45:42 +0000 Manifest next update: Sat 23 Nov 2024 20:14:42 +0000 Files and hashes: 1: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: jRvjNPw/ZxzPkFc3sQeaNLKo3ENvTo+cZERt4gNCdq0=) 2: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: AmHJFHsszfR+VmsJ9mannb8tDYGunHNd4ENOu+hneBU=) 3: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Z9jqS/MlHQNDz3+c7nvwuggXOFxbjd7WNaFGduuQIn0=) 4: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: RrKOpTzYJ3IFEMD/6iY5TFfo3HvIs5E+ZE/1N3j2zJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 20:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b5:d7:31:f4:d8:72:c8:ab:99:61:49:ad:1d:e8:64:89:bf:6f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Nov 20 19:45:42 2024 GMT Not After : Nov 23 20:14:42 2024 GMT Subject: CN=88F8CFF5770BE5CE893C46D7034363112B688C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:20:e0:86:7f:1c:a6:24:2a:27:58:17:ab: 45:64:65:29:a8:9d:50:aa:1c:9e:b5:b4:24:ff:c8: 13:4e:28:60:c5:27:21:ac:f3:37:2a:f4:7a:9d:0e: 32:c2:02:29:b1:f0:5d:1a:ea:24:0b:bb:fc:4d:4b: 60:e4:3f:15:4c:45:d8:64:ef:a2:d9:fd:cc:a6:0c: fb:5c:b4:2d:d3:e1:b5:00:40:29:22:80:3d:cc:4c: df:aa:4f:ad:19:19:09:e8:ba:e0:5e:e0:e2:a3:63: c0:40:7f:11:e9:2e:80:e0:db:17:cf:f9:53:c4:c7: 67:56:5b:4e:ad:15:6b:10:5f:72:2d:95:da:53:66: 47:81:74:3d:56:c6:f2:4b:89:5e:d3:ba:2b:39:f0: f7:69:e2:0f:2b:25:c6:65:00:97:a5:04:cc:09:2b: ce:bd:c8:e6:0c:f9:15:6c:f5:72:c7:26:24:3e:57: b6:6c:da:7e:9a:81:84:9b:b0:f3:25:0e:77:9a:51: d2:dd:ea:d4:37:cf:55:e0:e6:36:0b:81:00:3e:de: b2:fa:1f:60:75:e9:74:73:d6:50:bf:6c:b6:9a:fc: 6b:7b:b3:e5:d2:4e:f8:93:47:39:4e:8e:b5:37:0c: 17:77:ba:5d:5f:39:98:88:42:7d:bf:22:65:4c:6f: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F8:CF:F5:77:0B:E5:CE:89:3C:46:D7:03:43:63:11:2B:68:8C:31 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2e:35:67:ec:4e:4a:d7:2d:4d:b5:04:a3:8f:9e:25:8f:c2: 36:72:cc:9c:cc:99:30:9e:34:73:6f:af:16:80:3b:02:5c:bf: 5e:8a:ac:63:2a:87:8a:03:c3:e7:cc:1d:a3:8b:6b:57:d8:fe: 0c:68:e2:84:3a:09:92:35:b8:25:bf:a1:ed:c3:1b:d2:38:53: 97:9d:93:01:c9:ac:aa:b9:04:9e:eb:fe:ef:fc:4f:9d:f0:25: 93:58:c7:42:52:db:0c:35:38:f5:e3:b7:c4:cd:93:ed:fe:b5: 0a:ea:cc:24:c8:49:1f:d1:11:cc:56:1a:5b:70:6a:17:6e:4c: 3e:eb:fe:c6:0e:49:53:63:7d:67:90:8d:69:99:f3:a7:36:b5: 3d:7b:75:bf:fe:47:69:fd:50:87:05:fb:d2:79:5e:5e:90:b5: bc:7d:d3:98:e6:27:6e:ab:85:7a:52:01:b3:8b:21:67:17:d3: c8:b3:26:c1:36:9e:e8:22:8a:2a:c7:bf:49:12:ef:2e:0e:f1: a4:2e:9e:21:57:fc:c0:1e:74:b8:2a:c3:3b:e4:40:8b:7c:36: d6:c5:ca:27:d7:94:96:c7:fa:32:9f:23:e5:5c:1e:85:78:5e: 0d:2a:6e:a8:99:d8:54:b0:0c:de:17:43:4a:8d:54:09:f8:a0: 90:8d:c3:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7XXMfTYcsirmWFJrR3oZIm/b0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNDExMjAxOTQ1NDJaFw0yNDExMjMyMDE0NDJaMDMxMTAvBgNV BAMTKDg4RjhDRkY1NzcwQkU1Q0U4OTNDNDZENzAzNDM2MzExMkI2ODhDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOCDghn8cpiQqJ1gXq0VkZSmo nVCqHJ61tCT/yBNOKGDFJyGs8zcq9HqdDjLCAimx8F0a6iQLu/xNS2DkPxVMRdhk 76LZ/cymDPtctC3T4bUAQCkigD3MTN+qT60ZGQnouuBe4OKjY8BAfxHpLoDg2xfP +VPEx2dWW06tFWsQX3ItldpTZkeBdD1WxvJLiV7Tuis58Pdp4g8rJcZlAJelBMwJ K869yOYM+RVs9XLHJiQ+V7Zs2n6agYSbsPMlDneaUdLd6tQ3z1Xg5jYLgQA+3rL6 H2B16XRz1lC/bLaa/Gt7s+XSTviTRzlOjrU3DBd3ul1fOZiIQn2/ImVMb2UDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiPjP9XcL5c6JPEbXA0NjEStojDEwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkuNWfsTkrXLU21BKOPniWPwjZyzJzMmTCe NHNvrxaAOwJcv16KrGMqh4oDw+fMHaOLa1fY/gxo4oQ6CZI1uCW/oe3DG9I4U5ed kwHJrKq5BJ7r/u/8T53wJZNYx0JS2ww1OPXjt8TNk+3+tQrqzCTISR/REcxWGltw ahduTD7r/sYOSVNjfWeQjWmZ86c2tT17db/+R2n9UIcF+9J5Xl6Qtbx905jmJ26r hXpSAbOLIWcX08izJsE2nugiiirHv0kS7y4O8aQuniFX/MAedLgqwzvkQIt8NtbF yifXlJbH+jKfI+VcHoV4Xg0qbqiZ2FSwDN4XQ0qNVAn4oJCNw/s= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org