$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: J6iRUxGv8LEltJXgC5/5tUYa+ANdQm8JV0S8P59FAZc= Subject key identifier: DF:9F:0D:71:3C:FF:91:77:8C:56:3C:C8:45:80:82:71:EB:36:34:2D Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 0FE2D496E9EDED2C308335E1AA4BF5AB5F96B31D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 0336 Signing time: Sun 24 Nov 2024 08:42:19 +0000 Manifest this update: Sun 24 Nov 2024 08:37:19 +0000 Manifest next update: Wed 27 Nov 2024 15:36:19 +0000 Files and hashes: 1: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: Ewq1v4ZwxesrmJuu5MmdIZlmBhkXCQ1KFzaSlu1f3ks=) 2: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: JnOxemxwexBbj8NBQrBW/3+8uKN26K6LekpTYkqhJf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e2:d4:96:e9:ed:ed:2c:30:83:35:e1:aa:4b:f5:ab:5f:96:b3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Nov 24 08:37:19 2024 GMT Not After : Nov 27 15:36:19 2024 GMT Subject: CN=DF9F0D713CFF91778C563CC845808271EB36342D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:53:e6:cd:81:fd:28:01:73:5f:5f:05:b3: bd:ce:2f:b0:4a:f9:79:cc:96:18:c2:95:96:3b:fa: 23:a7:98:06:1c:bf:72:3f:ef:5b:96:dd:d5:25:36: f7:42:08:19:3a:dd:3a:1b:24:e4:07:ff:7d:c8:92: 6c:99:33:d5:71:ad:ed:d8:f5:3f:1a:c6:97:28:dd: b2:38:69:0c:54:8a:13:f0:a7:84:45:91:83:a0:51: 38:53:ad:c7:4b:3a:4b:13:d3:d6:ad:a4:34:2f:46: fb:2e:24:86:5e:3e:6a:5a:22:16:9e:38:08:ed:d3: ed:64:6a:e3:96:2d:9f:7c:1e:53:c4:8b:2b:70:87: b5:d8:e3:ff:85:d2:80:5b:ce:c0:0a:fd:e8:45:36: f0:1c:71:63:90:fe:0b:21:6d:5e:e4:a6:31:61:14: ec:f0:af:e4:55:1e:e7:58:b2:59:22:e6:0b:91:b6: 95:a4:50:f1:6b:fe:71:2a:7a:a3:12:cb:bf:9b:22: 9a:61:65:a6:f3:ee:82:99:61:a6:de:51:d2:a4:91: 6a:f0:a8:9d:ea:49:73:44:f3:9b:d9:fe:bd:a9:f9: e0:e5:bb:e9:d8:01:34:8f:95:01:73:81:1c:c1:11: 92:66:34:ff:cf:cd:3b:02:55:47:66:ac:41:38:e7: 7d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9F:0D:71:3C:FF:91:77:8C:56:3C:C8:45:80:82:71:EB:36:34:2D X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e6:e1:58:46:9d:49:0a:9e:30:73:72:c6:2b:82:2b:ee:63: ab:ec:15:5f:39:41:25:28:30:23:fc:6d:f8:5c:a4:87:c1:f6: 66:3f:02:ab:e9:84:d3:24:1a:82:1b:5c:b9:63:c3:cf:ae:b3: f7:03:79:74:74:3e:c3:5f:c1:ac:c0:4a:98:f9:be:56:ee:38: da:2a:07:80:02:90:a4:1a:76:ad:72:85:72:43:80:5e:42:82: c5:1f:8f:07:fd:ca:2e:e2:2a:71:a5:b2:e1:78:97:e1:88:55: fd:ad:90:5d:ae:d8:a5:3b:e5:1a:75:20:e7:59:5a:5d:74:af: 80:75:01:d0:f8:92:bd:7a:a3:71:c1:39:55:a9:cd:fc:90:99: 0d:03:28:7b:84:73:e7:4c:91:f4:89:e6:00:d4:16:81:79:8b: 10:f3:36:d9:aa:9b:ee:99:ab:0e:77:05:dc:3f:7f:41:d2:1a: 23:a9:3d:80:04:5c:b9:6c:34:ec:e1:22:c2:be:4b:5e:55:cf: ad:24:bb:20:10:89:a6:8e:f3:50:70:f0:73:9f:02:00:09:25: 72:f6:bb:a7:ff:42:e3:37:08:24:a4:63:53:af:17:b7:83:a4: ad:aa:03:5e:a4:08:9e:28:3d:33:72:2c:ce:8f:9e:b5:cd:de: 44:c5:20:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+LUlunt7SwwgzXhqkv1q1+Wsx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNDExMjQwODM3MTlaFw0yNDExMjcxNTM2MTlaMDMxMTAvBgNV BAMTKERGOUYwRDcxM0NGRjkxNzc4QzU2M0NDODQ1ODA4MjcxRUIzNjM0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5lPmzYH9KAFzX18Fs73OL7BK +XnMlhjClZY7+iOnmAYcv3I/71uW3dUlNvdCCBk63TobJOQH/33IkmyZM9Vxre3Y 9T8axpco3bI4aQxUihPwp4RFkYOgUThTrcdLOksT09atpDQvRvsuJIZePmpaIhae OAjt0+1kauOWLZ98HlPEiytwh7XY4/+F0oBbzsAK/ehFNvAccWOQ/gshbV7kpjFh FOzwr+RVHudYslki5guRtpWkUPFr/nEqeqMSy7+bIpphZabz7oKZYabeUdKkkWrw qJ3qSXNE85vZ/r2p+eDlu+nYATSPlQFzgRzBEZJmNP/PzTsCVUdmrEE4533nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU358NcTz/kXeMVjzIRYCCces2NC0wHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLm4VhGnUkKnjBzcsYrgivuY6vsFV85QSUo MCP8bfhcpIfB9mY/AqvphNMkGoIbXLljw8+us/cDeXR0PsNfwazASpj5vlbuONoq B4ACkKQadq1yhXJDgF5CgsUfjwf9yi7iKnGlsuF4l+GIVf2tkF2u2KU75Rp1IOdZ Wl10r4B1AdD4kr16o3HBOVWpzfyQmQ0DKHuEc+dMkfSJ5gDUFoF5ixDzNtmqm+6Z qw53Bdw/f0HSGiOpPYAEXLlsNOzhIsK+S15Vz60kuyAQiaaO81Bw8HOfAgAJJXL2 u6f/QuM3CCSkY1OvF7eDpK2qA16kCJ4oPTNyLM6PnrXN3kTFIA0= -----END CERTIFICATE-----Generated at Sun Nov 24 09:53:16 2024 by rpki-client on console-ams.rpki-client.org