$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: TCrXnQFcL12XUQ6d80Jr7uPvL2a3d8DK141jC5Vt6Ig= Subject key identifier: C5:27:67:81:25:89:FF:E0:12:59:0D:C4:97:A0:05:5C:FC:05:3D:72 Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 504A9C5375D54C1FA46E296308A4F7D5495BD57D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: 40 Signing time: Fri 22 Nov 2024 09:11:07 +0000 Manifest this update: Fri 22 Nov 2024 09:06:07 +0000 Manifest next update: Mon 25 Nov 2024 19:51:07 +0000 Files and hashes: 1: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: J55kQHMO+Zd8tUd1x/DC1ZrPlyNBx1LNMyMME0jdVQw=) 2: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: vGLpfKIC2JpHpfBBN1Zoxmgt1eG0u0VH3wpQ06OR2wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4a:9c:53:75:d5:4c:1f:a4:6e:29:63:08:a4:f7:d5:49:5b:d5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Nov 22 09:06:07 2024 GMT Not After : Nov 25 19:51:07 2024 GMT Subject: CN=C52767812589FFE012590DC497A0055CFC053D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:14:de:83:f0:f3:aa:02:67:2a:7f:eb:0e:ce: 4b:fd:a9:eb:0f:1b:ba:b8:67:d5:31:da:d9:4b:d3: 86:0a:45:61:5e:c8:f9:3f:63:66:07:8c:0e:81:30: 58:0f:63:02:62:e3:ae:b1:00:59:25:e6:aa:50:06: 22:0b:7b:13:bf:8e:33:be:6a:41:f1:e7:12:6f:ad: e3:0c:b6:ce:ef:5f:9e:8e:d7:54:50:90:59:c2:42: 5e:08:5d:26:30:c4:4a:07:d5:91:24:d9:5e:55:64: 1f:74:7f:43:4e:e2:6d:2e:3d:a0:53:23:44:53:f5: 92:30:15:d6:12:07:76:6f:cc:75:03:1e:90:35:01: dc:ce:db:8a:28:a9:a6:6f:15:1a:bb:6b:59:9c:1a: 28:63:a4:dc:26:64:cf:19:97:55:52:1c:71:3d:8c: 67:ff:eb:c9:13:69:5d:26:74:35:3b:57:10:a7:77: 2e:1e:37:4c:a5:aa:80:a5:d0:69:94:4e:f8:33:7e: 33:0a:ec:08:2b:30:9b:47:ff:40:7a:65:66:a9:46: 8d:de:f3:fb:2b:44:a6:57:bb:f3:01:5b:49:55:64: 36:46:fb:b4:e7:7d:45:41:7f:fa:60:dd:8c:6f:43: 04:95:c0:e1:ec:e2:ca:e9:01:ca:ea:f4:fd:22:27: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:27:67:81:25:89:FF:E0:12:59:0D:C4:97:A0:05:5C:FC:05:3D:72 X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:91:4f:b5:80:67:ad:75:90:06:d6:c8:42:15:85:7a:05:0b: 1b:b8:26:5c:f1:08:25:5c:49:32:12:10:59:bc:b2:73:28:3d: 14:b4:74:a8:22:ae:b8:67:37:65:e0:c6:ad:92:18:26:ee:47: c7:a6:ca:1c:03:4f:61:7d:3f:48:1c:81:f9:f4:5a:08:bb:48: 86:7b:40:00:58:eb:88:78:cc:3c:f3:f9:2b:2c:b3:03:2e:2e: e3:77:a5:26:06:fd:20:d4:ed:88:0d:95:65:05:e7:e1:41:24: e9:cc:f4:22:6a:41:28:3d:c8:75:8e:2a:ca:41:a1:20:1f:5d: a6:0c:59:7d:18:8f:39:69:ad:b7:24:93:c6:6c:52:70:7f:a9: 98:ab:a1:9a:24:be:5c:de:7c:6f:df:0e:ec:4e:98:94:e8:ae: c8:e9:b4:4f:32:8d:7b:0f:db:7a:8b:f2:a7:95:c4:2e:55:77: 6f:98:b6:fa:25:1e:20:88:8b:8b:59:8b:99:12:6b:96:3b:73: 4b:ad:b5:83:a4:ab:fc:dc:15:b9:11:80:ef:38:9e:b1:fe:17: f8:5f:7d:c8:88:9f:10:ec:25:26:3b:b9:25:09:66:2e:a5:00: 42:f6:47:8e:47:48:33:3c:96:9e:4b:af:58:80:fb:fb:0f:5d: af:23:eb:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUEqcU3XVTB+kbiljCKT31Ulb1X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNDExMjIwOTA2MDdaFw0yNDExMjUxOTUxMDdaMDMxMTAvBgNV BAMTKEM1Mjc2NzgxMjU4OUZGRTAxMjU5MERDNDk3QTAwNTVDRkMwNTNENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuFN6D8POqAmcqf+sOzkv9qesP G7q4Z9Ux2tlL04YKRWFeyPk/Y2YHjA6BMFgPYwJi466xAFkl5qpQBiILexO/jjO+ akHx5xJvreMMts7vX56O11RQkFnCQl4IXSYwxEoH1ZEk2V5VZB90f0NO4m0uPaBT I0RT9ZIwFdYSB3ZvzHUDHpA1AdzO24ooqaZvFRq7a1mcGihjpNwmZM8Zl1VSHHE9 jGf/68kTaV0mdDU7VxCndy4eN0ylqoCl0GmUTvgzfjMK7AgrMJtH/0B6ZWapRo3e 8/srRKZXu/MBW0lVZDZG+7TnfUVBf/pg3YxvQwSVwOHs4srpAcrq9P0iJ+KNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxSdngSWJ/+ASWQ3El6AFXPwFPXIwHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeRT7WAZ611kAbWyEIVhXoFCxu4JlzxCCVc STISEFm8snMoPRS0dKgirrhnN2Xgxq2SGCbuR8emyhwDT2F9P0gcgfn0Wgi7SIZ7 QABY64h4zDzz+SssswMuLuN3pSYG/SDU7YgNlWUF5+FBJOnM9CJqQSg9yHWOKspB oSAfXaYMWX0Yjzlprbckk8ZsUnB/qZiroZokvlzefG/fDuxOmJTorsjptE8yjXsP 23qL8qeVxC5Vd2+YtvolHiCIi4tZi5kSa5Y7c0uttYOkq/zcFbkRgO84nrH+F/hf fciInxDsJSY7uSUJZi6lAEL2R45HSDM8lp5Lr1iA+/sPXa8j614= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org