$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: DHL1ZSMO7ap5Lpbs/gfelDn6Aea+oSlJrJ4PWnYVmno= Subject key identifier: 93:FC:F6:76:4D:C0:39:54:74:0C:6C:92:69:4B:31:ED:9C:4E:9B:5C Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 05FCF972658D78BA4E87FE9BBE24CA444C024E56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 0484 Signing time: Fri 22 Nov 2024 12:10:46 +0000 Manifest this update: Fri 22 Nov 2024 12:05:46 +0000 Manifest next update: Mon 25 Nov 2024 13:25:46 +0000 Files and hashes: 1: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: r7rkQmAorpaA2HQiF7v1k+siSmXYdSBe2smRZcsSuIo=) 2: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: v/wNC11/mGa67gP20vk9bZW53k2FAuEzkngEjF9WCOs=) 3: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 7J0oFyysipA3qHhTtoXbnDFHuiZkIxXPeZGfLnkl0e4=) 4: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: R0NLF4Ov1wAGeHFAFhKyGtvsypexoChl/jl0cHH5TqA=) 5: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: 5AIB57vLi9J/oP+q1ZAP4wDNniG6tQuyhD+ho14BIek=) 6: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: sckkCjMHs7WsRB95RCqI2G0Z8CclzEEJ3tVAHrA+aMM=) 7: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: P7RUWY6qH7oEO1y5dEH1xpvQBN+949irjZIivcgB6do=) 8: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: htS/mOXNz8fNjrYCraLvtDOWNvj77Vu5R0ubwkx6Y70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 13:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:fc:f9:72:65:8d:78:ba:4e:87:fe:9b:be:24:ca:44:4c:02:4e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Nov 22 12:05:46 2024 GMT Not After : Nov 25 13:25:46 2024 GMT Subject: CN=93FCF6764DC03954740C6C92694B31ED9C4E9B5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:8d:18:cb:eb:bd:ee:ed:69:6d:77:a1:27: 20:26:95:08:d6:19:df:85:cf:53:97:25:c1:35:ab: 5b:42:47:07:03:23:33:95:d1:1f:8a:60:a9:d6:fa: 46:80:5c:43:a8:a3:87:64:a8:94:8b:cd:97:10:9a: e1:d7:3d:99:86:05:8f:b9:9c:27:0f:0c:a8:2f:75: 06:a3:ee:7b:c4:49:75:65:45:82:e3:82:0d:03:73: da:c0:80:f4:55:f8:68:0a:f1:db:da:b3:d5:66:6c: 44:a1:54:43:a0:85:89:4e:27:bc:19:d8:67:99:2f: bb:78:c1:72:ce:e0:71:87:00:c9:62:6b:8c:2a:57: b6:5d:c3:9a:9b:32:48:85:d6:5a:6e:2e:0a:bc:11: db:41:fe:53:31:86:be:e1:f5:13:46:af:dd:92:8f: a0:d6:30:06:22:34:d3:be:93:3c:e0:6b:ab:b2:92: ed:2d:15:ef:c3:30:23:f1:37:13:fa:68:47:9b:73: 32:48:05:a8:aa:82:db:9d:38:2e:52:fb:62:91:07: 5d:74:ef:25:31:be:d3:84:14:cf:16:b1:4c:45:e8: f6:06:cc:e6:e5:93:12:52:12:04:85:4b:9d:97:7e: c8:62:91:ec:36:f9:17:23:c3:c3:9c:6d:3a:15:32: 9a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FC:F6:76:4D:C0:39:54:74:0C:6C:92:69:4B:31:ED:9C:4E:9B:5C X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d3:2f:81:96:47:0d:97:e6:09:e1:d9:c3:58:6a:3c:14:4a: 2f:fc:b6:1f:aa:3f:bd:b0:22:a7:c7:53:87:12:ec:93:71:d0: 18:27:79:b1:b2:66:31:c3:f0:55:be:89:5f:ca:01:f6:4c:77: ec:96:6c:22:4b:00:db:0d:5e:30:9b:ea:76:a3:30:1f:e4:4e: 2a:df:7f:f5:a7:ba:44:c1:dd:4a:93:ed:a7:0d:e1:b1:c2:16: bf:29:40:1e:d1:de:ab:60:69:72:0c:e9:39:8b:cf:6c:71:29: fc:13:e2:82:1e:25:a0:54:ec:44:b0:b7:ea:e8:98:4c:4d:5b: 21:b6:61:be:70:25:57:05:f1:e2:2d:4d:0d:fc:cc:ae:e3:a3: a6:82:c2:ab:04:03:1d:e1:7a:95:e2:ac:89:f1:f9:ee:61:54: aa:55:73:0a:06:0a:37:81:67:73:1b:8f:82:14:8b:dd:cb:75: 44:61:7e:62:8b:44:19:55:77:27:4e:58:17:39:31:f6:c2:82: 98:17:7c:dd:73:d2:47:e2:a5:9f:2c:83:44:35:28:c9:cd:c6: a9:c1:c6:2e:83:0c:5e:29:39:d9:76:df:8e:0e:ba:2d:14:48: c3:28:8a:35:57:37:8d:f3:c4:15:bd:5f:f8:4c:f9:37:ea:b9: e7:dc:b4:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfz5cmWNeLpOh/6bviTKREwCTlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNDExMjIxMjA1NDZaFw0yNDExMjUxMzI1NDZaMDMxMTAvBgNV BAMTKDkzRkNGNjc2NERDMDM5NTQ3NDBDNkM5MjY5NEIzMUVEOUM0RTlCNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/OY0Yy+u97u1pbXehJyAmlQjW Gd+Fz1OXJcE1q1tCRwcDIzOV0R+KYKnW+kaAXEOoo4dkqJSLzZcQmuHXPZmGBY+5 nCcPDKgvdQaj7nvESXVlRYLjgg0Dc9rAgPRV+GgK8dvas9VmbEShVEOghYlOJ7wZ 2GeZL7t4wXLO4HGHAMlia4wqV7Zdw5qbMkiF1lpuLgq8EdtB/lMxhr7h9RNGr92S j6DWMAYiNNO+kzzga6uyku0tFe/DMCPxNxP6aEebczJIBaiqgtudOC5S+2KRB110 7yUxvtOEFM8WsUxF6PYGzOblkxJSEgSFS52Xfshikew2+Rcjw8OcbToVMporAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/z2dk3AOVR0DGySaUsx7ZxOm1wwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbTL4GWRw2X5gnh2cNYajwUSi/8th+qP72w IqfHU4cS7JNx0BgnebGyZjHD8FW+iV/KAfZMd+yWbCJLANsNXjCb6najMB/kTirf f/WnukTB3UqT7acN4bHCFr8pQB7R3qtgaXIM6TmLz2xxKfwT4oIeJaBU7ESwt+ro mExNWyG2Yb5wJVcF8eItTQ38zK7jo6aCwqsEAx3hepXirInx+e5hVKpVcwoGCjeB Z3Mbj4IUi93LdURhfmKLRBlVdydOWBc5MfbCgpgXfN1z0kfipZ8sg0Q1KMnNxqnB xi6DDF4pOdl2344Oui0USMMoijVXN43zxBW9X/hM+TfquefctG4= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org