$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: jfWHd0T/eSHRWorc+rfU5gIWoi/3/1tdu4vEQOy2J34= Subject key identifier: D3:37:7C:F6:A8:08:48:41:0A:DC:B3:AB:AE:5F:0B:19:6C:DD:EA:13 Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 2AB3A57285EBB9D65F25A7DB7B260640B986D7E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 035B Signing time: Wed 20 Nov 2024 21:02:07 +0000 Manifest this update: Wed 20 Nov 2024 20:57:07 +0000 Manifest next update: Sat 23 Nov 2024 22:51:07 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: 2zg3+ojc2ldWr1hYGPlN7pWiEGKSHVQx8tzBkq6ETPg=) 2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: PhR91LO8zV1nLQZjQJ8GHvsQktRsNw/t15X5oCyZm2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 22:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b3:a5:72:85:eb:b9:d6:5f:25:a7:db:7b:26:06:40:b9:86:d7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Nov 20 20:57:07 2024 GMT Not After : Nov 23 22:51:07 2024 GMT Subject: CN=D3377CF6A80848410ADCB3ABAE5F0B196CDDEA13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ad:a8:1c:58:2c:d5:0e:b1:ab:a8:c2:40:45: 03:5c:20:78:8e:04:ce:65:40:c5:d0:be:55:9e:95: ea:82:24:d9:91:48:78:90:a5:c8:a5:47:08:56:51: b4:a9:e3:11:fe:66:d5:a4:36:40:7f:80:00:f6:f7: b2:27:7c:c8:50:43:8e:58:f3:ae:8a:88:19:1b:f9: 6e:12:75:ae:2e:04:ce:3a:f8:05:cb:fa:7e:69:79: 1e:48:17:8c:15:28:d5:d6:9f:f1:5c:a3:a4:24:f9: 64:0e:21:55:84:f7:fa:4f:a2:53:6d:2c:5a:77:64: 36:c5:eb:5d:1e:14:37:75:95:72:69:13:48:84:a6: 3f:67:5a:df:52:88:da:d7:1a:f7:e3:30:fc:fd:1b: 16:23:32:b7:1a:4d:d4:f9:18:d8:29:85:89:f1:58: df:4b:c9:71:98:b4:a3:24:5e:2f:f6:3a:49:68:88: 6b:86:4d:48:24:1e:6a:81:28:3a:6f:e1:ef:e7:ad: 1a:c2:8f:be:87:7d:b2:12:45:3e:a6:f5:73:1f:6d: 4d:56:c3:82:d3:5e:b0:94:50:5b:7b:36:0d:ef:e8: 62:af:6a:4b:9a:1d:00:f2:d1:53:0a:a0:0f:29:e0: 1b:d4:41:c5:3a:c1:19:83:71:f1:f5:77:15:68:e1: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:7C:F6:A8:08:48:41:0A:DC:B3:AB:AE:5F:0B:19:6C:DD:EA:13 X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b4:02:4f:c7:88:aa:6e:57:75:37:24:c7:05:43:3a:e6:24: a2:49:16:33:27:d9:b5:76:2b:f6:82:a0:08:c7:25:f1:40:b3: e7:2e:19:e2:73:ba:fa:75:b9:db:7c:98:8d:fe:01:ac:7f:52: 78:85:b3:c9:64:14:96:23:3a:32:e1:31:57:49:73:29:34:d6: fe:20:5e:d0:d4:3a:9f:53:83:e0:ec:b4:94:03:39:3b:59:18: 85:cb:c5:0e:a9:88:d7:68:cf:c3:eb:66:dd:8f:a1:04:91:ae: 29:db:ad:48:37:b9:f0:8a:ae:5d:eb:42:d5:38:66:6c:e8:6f: 73:8a:aa:e1:0b:87:63:81:ba:ea:4a:ce:54:8c:54:a0:bd:be: b6:5d:db:42:99:ac:0f:51:ea:27:12:32:50:a1:25:02:44:28: ed:85:e3:6c:34:43:5e:bf:5e:db:02:d1:dd:85:db:1d:d5:01: 1d:92:a2:a0:eb:83:d8:fe:3e:d0:cc:79:86:18:e8:f0:b3:0a: 3f:26:35:28:01:95:c2:c5:ce:33:89:e6:c8:54:56:5b:55:5e: 7d:dc:78:11:e3:52:45:bb:1c:32:d0:99:e5:f5:6b:cc:7f:fd: 6b:5b:96:96:ff:77:a9:98:54:be:b4:d6:b2:0b:e7:17:e4:67: 0d:06:63:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrOlcoXrudZfJafbeyYGQLmG1+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNDExMjAyMDU3MDdaFw0yNDExMjMyMjUxMDdaMDMxMTAvBgNV BAMTKEQzMzc3Q0Y2QTgwODQ4NDEwQURDQjNBQkFFNUYwQjE5NkNEREVBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbragcWCzVDrGrqMJARQNcIHiO BM5lQMXQvlWeleqCJNmRSHiQpcilRwhWUbSp4xH+ZtWkNkB/gAD297InfMhQQ45Y 866KiBkb+W4Sda4uBM46+AXL+n5peR5IF4wVKNXWn/Fco6Qk+WQOIVWE9/pPolNt LFp3ZDbF610eFDd1lXJpE0iEpj9nWt9SiNrXGvfjMPz9GxYjMrcaTdT5GNgphYnx WN9LyXGYtKMkXi/2OkloiGuGTUgkHmqBKDpv4e/nrRrCj76HfbISRT6m9XMfbU1W w4LTXrCUUFt7Ng3v6GKvakuaHQDy0VMKoA8p4BvUQcU6wRmDcfH1dxVo4WwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0zd89qgISEEK3LOrrl8LGWzd6hMwHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACG0Ak/HiKpuV3U3JMcFQzrmJKJJFjMn2bV2 K/aCoAjHJfFAs+cuGeJzuvp1udt8mI3+Aax/UniFs8lkFJYjOjLhMVdJcyk01v4g XtDUOp9Tg+DstJQDOTtZGIXLxQ6piNdoz8PrZt2PoQSRrinbrUg3ufCKrl3rQtU4 Zmzob3OKquELh2OBuupKzlSMVKC9vrZd20KZrA9R6icSMlChJQJEKO2F42w0Q16/ XtsC0d2F2x3VAR2SoqDrg9j+PtDMeYYY6PCzCj8mNSgBlcLFzjOJ5shUVltVXn3c eBHjUkW7HDLQmeX1a8x//Wtblpb/d6mYVL601rIL5xfkZw0GY8k= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:31 2024 by rpki-client on console-fra.rpki-client.org