$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: QNGuDkzYn9KgRRexWgU/RAcs0RBMJG0Y7DjQlPhusks= Subject key identifier: 9F:78:D4:F1:9F:F6:35:CF:37:ED:A5:BB:AA:1D:02:88:6A:7A:1A:F7 Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 0BA9CD833074BD2D33AB186F05136A0696798CB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 018B Signing time: Fri 22 Nov 2024 15:51:37 +0000 Manifest this update: Fri 22 Nov 2024 15:46:37 +0000 Manifest next update: Mon 25 Nov 2024 19:34:37 +0000 Files and hashes: 1: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: CLSBTLY4hZy35zsRj43+EEkpH15aQ7qv2A+Gyj8I8c0=) 2: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: ph3uYTlFMX1BFRHHGEZlKMgJ6csPlVRgtyfF036CKIk=) 3: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: zR665DTyJA/CfbJT9XZ1rRiLHbhOu+eqALD6NRCm228=) 4: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: dehqxFCHBrMds+ZiAeLPjrR/fRS6PqqqAhfp9EkpWIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a9:cd:83:30:74:bd:2d:33:ab:18:6f:05:13:6a:06:96:79:8c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: Nov 22 15:46:37 2024 GMT Not After : Nov 25 19:34:37 2024 GMT Subject: CN=9F78D4F19FF635CF37EDA5BBAA1D02886A7A1AF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:3c:ad:22:41:12:77:8c:3a:7a:fd:31:2e: ec:c0:62:55:8e:57:36:bc:13:dd:1f:ba:16:1e:71: cb:02:f3:4d:c9:20:54:bf:ef:6d:29:a9:66:a7:7f: 14:83:d2:a3:0b:78:3c:c2:e2:a8:91:2e:dc:27:cf: ce:67:c3:77:eb:b1:77:ee:57:0f:f6:cc:73:3e:14: a9:35:51:e6:47:2b:65:57:c1:84:29:39:48:b0:8f: 2b:89:22:8d:96:6d:ba:97:1a:6f:de:fe:fa:b5:8f: c8:dd:da:be:9e:b2:73:29:5e:e1:1c:0b:74:5f:e5: f7:49:08:54:6f:13:8c:ab:2a:84:67:6d:b7:d0:23: db:0c:27:19:fd:f8:ff:97:e6:4c:8c:8a:5c:29:67: 6d:51:ec:5f:b9:e6:71:71:d1:73:da:cd:5b:26:a0: cb:9a:a4:0e:99:b5:d1:ed:fa:85:fb:26:3e:e3:ab: df:09:c8:c4:5c:e8:14:a9:cf:e5:ed:08:68:7f:cf: 40:0a:11:97:4b:02:b3:86:8f:2b:1e:62:f2:6e:1c: 08:df:2f:87:f5:4f:08:53:1c:ae:b3:f0:f6:6a:c6: 46:40:43:57:8e:71:05:39:87:41:07:3e:81:3a:ad: bb:f8:09:e7:90:3e:e8:60:bf:31:aa:a3:1d:84:72: 14:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:78:D4:F1:9F:F6:35:CF:37:ED:A5:BB:AA:1D:02:88:6A:7A:1A:F7 X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d6:93:0e:74:a8:d4:1d:b1:a3:eb:87:c0:b0:11:6e:b1:58: a6:56:47:dd:ad:54:9c:bf:1a:2f:57:70:3b:3b:64:a8:d2:ac: 1a:50:43:24:16:2c:e4:5b:64:b4:af:3a:5f:40:5d:14:77:c6: eb:95:5a:80:4b:5d:78:08:ea:4c:6f:02:ff:b7:0d:a2:e5:4a: 9b:e9:8d:cf:5f:f6:ea:cd:c9:30:e3:dc:bd:50:af:97:e6:b2: ec:17:9c:17:1f:e5:9c:60:30:08:3b:44:0f:6d:f2:1a:a4:05: 95:77:c2:85:16:31:ab:0b:da:0e:fb:56:e4:e8:c7:a0:54:c2: 06:f8:48:2c:02:23:5e:54:ae:0b:78:41:61:df:92:1d:5c:b0: e6:d6:c4:db:58:8e:cf:d0:9c:2b:58:47:ef:78:dc:ae:a9:65: 16:42:4c:af:fb:f9:24:50:42:08:a0:cd:55:9b:c8:a5:4b:64: 3e:d1:a2:87:25:2e:d4:77:71:f6:89:01:58:d5:39:d7:2f:90: e3:73:ed:00:2e:d3:9f:59:a4:3d:aa:b0:ce:ca:78:da:e4:3d: d3:ee:66:ec:7b:a9:7e:24:ed:8a:2a:02:c4:44:60:25:eb:c3: 33:ca:62:0b:c1:b8:c6:d8:64:4d:62:be:be:12:5b:ab:c3:75: 81:98:26:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC6nNgzB0vS0zqxhvBRNqBpZ5jLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNDExMjIxNTQ2MzdaFw0yNDExMjUxOTM0MzdaMDMxMTAvBgNV BAMTKDlGNzhENEYxOUZGNjM1Q0YzN0VEQTVCQkFBMUQwMjg4NkE3QTFBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKzytIkESd4w6ev0xLuzAYlWO Vza8E90fuhYeccsC803JIFS/720pqWanfxSD0qMLeDzC4qiRLtwnz85nw3frsXfu Vw/2zHM+FKk1UeZHK2VXwYQpOUiwjyuJIo2WbbqXGm/e/vq1j8jd2r6esnMpXuEc C3Rf5fdJCFRvE4yrKoRnbbfQI9sMJxn9+P+X5kyMilwpZ21R7F+55nFx0XPazVsm oMuapA6ZtdHt+oX7Jj7jq98JyMRc6BSpz+XtCGh/z0AKEZdLArOGjyseYvJuHAjf L4f1TwhTHK6z8PZqxkZAQ1eOcQU5h0EHPoE6rbv4CeeQPuhgvzGqox2EchQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn3jU8Z/2Nc837aW7qh0CiGp6GvcwHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzWkw50qNQdsaPrh8CwEW6xWKZWR92tVJy/ Gi9XcDs7ZKjSrBpQQyQWLORbZLSvOl9AXRR3xuuVWoBLXXgI6kxvAv+3DaLlSpvp jc9f9urNyTDj3L1Qr5fmsuwXnBcf5ZxgMAg7RA9t8hqkBZV3woUWMasL2g77VuTo x6BUwgb4SCwCI15Urgt4QWHfkh1csObWxNtYjs/QnCtYR+943K6pZRZCTK/7+SRQ QgigzVWbyKVLZD7RooclLtR3cfaJAVjVOdcvkONz7QAu059ZpD2qsM7KeNrkPdPu Zux7qX4k7YoqAsREYCXrwzPKYgvBuMbYZE1ivr4SW6vDdYGYJnk= -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org