$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: y85AiW5eKL3Ht9IuC59kWHO7yoeUSAW9nBmXxSpbOoI= Subject key identifier: C1:36:EC:A4:82:9D:35:FA:BB:62:88:2F:8C:15:1F:1A:AD:CA:B5:28 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 5F3CDFB7BFF6CEAB563E29824F6DE7EF1FDC00C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 02A8 Signing time: Mon 25 Nov 2024 14:52:18 +0000 Manifest this update: Mon 25 Nov 2024 14:47:18 +0000 Manifest next update: Thu 28 Nov 2024 15:05:18 +0000 Files and hashes: 1: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: Vow9NXJEsJMlOkAyVM/wdt7cbf+5Lm36cnOL4i1hWNI=) 2: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: KY5Q38tghqbGAveqQA6JKe7i+KFoXalouHQ/ChXrWvk=) 3: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: /o6tmQkGvPsOq4Lw5BPVkwo19QVwkW2zkWmc/uGp+xM=) 4: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: fwyJa5mhG/p5zrm7WsD823rq8IWOTIX6aI5FYC++s0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 15:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3c:df:b7:bf:f6:ce:ab:56:3e:29:82:4f:6d:e7:ef:1f:dc:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Nov 25 14:47:18 2024 GMT Not After : Nov 28 15:05:18 2024 GMT Subject: CN=C136ECA4829D35FABB62882F8C151F1AADCAB528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:4a:15:82:b2:42:68:b1:bc:b7:12:8e:bc: 25:da:89:86:36:cb:ef:c6:b9:30:52:dd:7a:23:75: 79:49:e7:94:b8:d7:fb:b8:4d:52:19:83:84:bf:ff: 69:ac:c8:ce:95:25:fe:be:52:38:47:76:de:e5:07: 00:80:ca:3f:73:71:24:82:e3:47:7b:85:50:78:00: 6d:41:4d:49:bf:c2:6a:05:da:2b:eb:17:e9:b0:48: c2:4c:f4:eb:4e:6f:e5:91:67:83:4c:b6:7e:6c:a4: ec:db:bc:b8:18:48:23:c8:b7:e4:40:1b:d7:2b:f3: ff:1e:6a:81:fb:5b:d3:6c:24:2f:80:3e:e8:3c:60: 0d:f1:bc:5c:2a:26:ac:2e:e7:73:d6:a7:db:81:d2: bd:c3:1e:38:13:4b:da:d6:2f:c9:e8:91:be:c2:32: dd:2c:b2:8f:62:f8:c6:2d:83:08:37:5b:4a:e8:80: b0:77:fe:9b:37:5e:7a:d8:93:25:48:61:d0:ed:47: ff:a0:17:30:6b:56:36:1b:37:54:39:23:fc:1c:77: e2:87:1c:95:3e:ed:08:ca:29:47:64:4c:25:3d:ca: 72:fc:0b:64:ec:be:a4:22:cc:c3:f1:b0:90:36:59: 43:a8:fe:e4:32:04:54:e5:70:63:92:86:29:1c:fb: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:36:EC:A4:82:9D:35:FA:BB:62:88:2F:8C:15:1F:1A:AD:CA:B5:28 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:51:33:9c:fa:c4:51:01:1c:dc:2b:ba:6e:8d:fc:10:83:49: a5:e2:d4:58:f1:9b:02:ab:74:92:c1:f3:d7:12:7b:b1:6f:e4: da:e9:be:d9:58:d9:de:8a:dc:bd:e6:36:44:9d:88:af:b8:3f: b3:a4:f4:34:ed:3e:84:c1:cf:12:f3:ec:97:fc:51:7d:83:c7: f0:16:49:07:f7:a0:1b:e9:96:cc:aa:8b:c4:a5:d4:93:3a:af: d7:66:80:51:89:4d:5a:72:f9:74:4c:76:10:ba:10:a5:d5:fa: 01:0a:c5:5b:d1:ec:9c:47:50:56:ff:ae:04:6d:a7:c3:7c:6a: 40:17:6a:dc:bd:a4:b4:47:d0:5d:09:a5:28:d0:42:29:cd:d3: ec:28:ab:98:f1:f3:dd:58:74:d1:b5:78:55:f1:2f:b6:86:1d: 97:16:4a:bf:b0:90:65:1b:fd:f9:72:71:24:7f:f1:21:4c:61: df:0f:1a:22:5e:bd:55:f2:78:5d:da:e2:ed:5d:c1:70:fd:45: 38:60:41:8e:22:e8:e5:8f:eb:de:ab:db:7e:10:62:2c:5b:0d: 54:54:2b:9f:6a:ef:86:0e:b2:1b:98:3f:ec:94:b1:71:38:4b: 51:f8:fb:9b:3b:ba:b8:89:e2:df:e9:56:e2:d6:01:8a:7b:c5: a7:53:5d:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzzft7/2zqtWPimCT23n7x/cAMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNDExMjUxNDQ3MThaFw0yNDExMjgxNTA1MThaMDMxMTAvBgNV BAMTKEMxMzZFQ0E0ODI5RDM1RkFCQjYyODgyRjhDMTUxRjFBQURDQUI1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvekoVgrJCaLG8txKOvCXaiYY2 y+/GuTBS3XojdXlJ55S41/u4TVIZg4S//2msyM6VJf6+UjhHdt7lBwCAyj9zcSSC 40d7hVB4AG1BTUm/wmoF2ivrF+mwSMJM9OtOb+WRZ4NMtn5spOzbvLgYSCPIt+RA G9cr8/8eaoH7W9NsJC+APug8YA3xvFwqJqwu53PWp9uB0r3DHjgTS9rWL8nokb7C Mt0sso9i+MYtgwg3W0rogLB3/ps3XnrYkyVIYdDtR/+gFzBrVjYbN1Q5I/wcd+KH HJU+7QjKKUdkTCU9ynL8C2TsvqQizMPxsJA2WUOo/uQyBFTlcGOShikc+xsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTbspIKdNfq7YogvjBUfGq3KtSgwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJRM5z6xFEBHNwrum6N/BCDSaXi1FjxmwKr dJLB89cSe7Fv5NrpvtlY2d6K3L3mNkSdiK+4P7Ok9DTtPoTBzxLz7Jf8UX2Dx/AW SQf3oBvplsyqi8Sl1JM6r9dmgFGJTVpy+XRMdhC6EKXV+gEKxVvR7JxHUFb/rgRt p8N8akAXaty9pLRH0F0JpSjQQinN0+woq5jx891YdNG1eFXxL7aGHZcWSr+wkGUb /flycSR/8SFMYd8PGiJevVXyeF3a4u1dwXD9RThgQY4i6OWP696r234QYixbDVRU K59q74YOshuYP+yUsXE4S1H4+5s7uriJ4t/pVuLWAYp7xadTXYo= -----END CERTIFICATE-----Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org