$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: KfvbUEzY9vYcYe3//6a2wNO1KdDcM8VCF9ayBtbYE68= Subject key identifier: 5D:0E:3C:1B:FB:A2:EB:B9:8B:AA:6A:54:C5:C7:2D:D6:FA:C8:A0:70 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 646D07C748DFFA4C30D3FDA8BF7E9821EB0FDE7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 0177 Signing time: Mon 25 Nov 2024 02:12:29 +0000 Manifest this update: Mon 25 Nov 2024 02:07:29 +0000 Manifest next update: Thu 28 Nov 2024 06:50:29 +0000 Files and hashes: 1: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: Wo4AYVb8CLonvaVue1WdO/TxkHkla+hn9vXF0QMm2yg=) 2: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: wgQvt1XGBqI5XIiINdCJ3GL1hgDCidqyF88MXteZLoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6d:07:c7:48:df:fa:4c:30:d3:fd:a8:bf:7e:98:21:eb:0f:de:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Nov 25 02:07:29 2024 GMT Not After : Nov 28 06:50:29 2024 GMT Subject: CN=5D0E3C1BFBA2EBB98BAA6A54C5C72DD6FAC8A070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:bd:66:fd:48:c1:b2:11:4e:3c:d2:6e:93: 6a:ff:50:8a:2d:fc:1a:97:86:bb:a0:70:77:ce:24: 67:6f:e0:86:93:96:70:ec:d0:6d:c9:75:79:a1:3c: 06:d6:44:48:7c:d7:a5:f8:5c:d9:95:18:13:71:16: 33:83:df:19:54:91:42:51:9e:aa:0e:f6:07:aa:83: cb:3a:22:a1:f2:d9:46:68:5b:29:3c:d7:cd:51:52: 72:7e:7d:c2:30:85:81:0b:5b:15:f7:4b:74:2d:e3: 78:90:c2:2b:e1:33:e5:d1:df:8e:c0:04:43:55:b9: 55:71:b0:47:01:75:58:f8:8e:de:38:13:e2:f8:0f: da:ea:1f:3a:a7:e1:db:79:e0:30:c2:73:76:80:df: 9a:5c:80:90:fd:b0:f8:c4:ef:fa:6c:43:d4:ea:ad: ff:ab:1f:6f:d2:ff:05:f6:46:50:c6:6e:b2:87:77: 14:3e:a0:de:5f:5d:2f:2f:6c:cf:4b:52:b5:a8:d9: 41:f3:3c:39:9f:a3:df:c6:bd:24:8f:81:b6:27:57: 8c:21:9d:dc:b0:2a:1d:77:c5:84:b3:7c:5c:56:da: 64:a6:30:a6:f8:8f:d3:ad:d5:7a:9d:ef:b7:ed:5a: 27:c0:4c:2e:be:df:18:b5:c0:a5:d0:a1:fd:11:f0: 67:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0E:3C:1B:FB:A2:EB:B9:8B:AA:6A:54:C5:C7:2D:D6:FA:C8:A0:70 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:51:75:20:bb:01:d4:7a:f3:85:9b:69:45:6a:20:19:cb:6b: 62:a4:e7:86:d7:f9:d7:b8:4b:ba:29:cf:31:a9:80:f2:d3:e5: e3:5b:2c:f0:7f:19:d4:49:c2:fc:aa:c5:31:99:ea:5f:2c:7e: 50:9b:f3:ef:cf:95:d1:4b:3d:13:71:ee:5d:df:3c:22:bd:f6: bb:96:0b:6e:6a:37:31:16:90:9a:ec:e5:e4:7f:7a:59:ca:9e: 19:9d:83:f3:4c:95:ff:fe:e9:18:5c:94:cf:bd:b8:6d:80:77: 29:54:c9:7c:dc:23:a9:7b:75:55:5a:32:80:99:44:95:36:15: e3:8f:92:fc:93:eb:45:8a:9b:45:46:15:4b:16:a7:a6:b9:24: b2:71:99:dd:cf:e0:76:5e:cb:08:46:7f:76:79:0f:e3:48:f6: b3:c9:9f:8d:79:49:d7:55:e8:7a:6c:ac:02:f5:8b:a4:58:34: 58:34:54:f3:15:bf:87:24:bb:4a:aa:3d:43:bc:a1:e8:9a:63: df:55:9b:4c:fd:ce:40:99:29:57:10:4b:2d:86:a3:d8:b7:59: fe:2e:54:b9:12:d1:59:6e:20:71:59:91:1e:aa:7b:ad:30:e1: ef:d9:42:bf:bc:44:f7:e3:62:82:71:6c:55:48:c8:93:96:7f: e3:dc:40:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZG0Hx0jf+kww0/2ov36YIesP3nswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNDExMjUwMjA3MjlaFw0yNDExMjgwNjUwMjlaMDMxMTAvBgNV BAMTKDVEMEUzQzFCRkJBMkVCQjk4QkFBNkE1NEM1QzcyREQ2RkFDOEEwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2r71m/UjBshFOPNJuk2r/UIot /BqXhrugcHfOJGdv4IaTlnDs0G3JdXmhPAbWREh816X4XNmVGBNxFjOD3xlUkUJR nqoO9geqg8s6IqHy2UZoWyk8181RUnJ+fcIwhYELWxX3S3Qt43iQwivhM+XR347A BENVuVVxsEcBdVj4jt44E+L4D9rqHzqn4dt54DDCc3aA35pcgJD9sPjE7/psQ9Tq rf+rH2/S/wX2RlDGbrKHdxQ+oN5fXS8vbM9LUrWo2UHzPDmfo9/GvSSPgbYnV4wh ndywKh13xYSzfFxW2mSmMKb4j9Ot1Xqd77ftWifATC6+3xi1wKXQof0R8Gf/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXQ48G/ui67mLqmpUxcct1vrIoHAwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1RdSC7AdR684WbaUVqIBnLa2Kk54bX+de4 S7opzzGpgPLT5eNbLPB/GdRJwvyqxTGZ6l8sflCb8+/PldFLPRNx7l3fPCK99ruW C25qNzEWkJrs5eR/elnKnhmdg/NMlf/+6RhclM+9uG2AdylUyXzcI6l7dVVaMoCZ RJU2FeOPkvyT60WKm0VGFUsWp6a5JLJxmd3P4HZeywhGf3Z5D+NI9rPJn415SddV 6HpsrAL1i6RYNFg0VPMVv4cku0qqPUO8oeiaY99Vm0z9zkCZKVcQSy2Go9i3Wf4u VLkS0VluIHFZkR6qe60w4e/ZQr+8RPfjYoJxbFVIyJOWf+PcQBs= -----END CERTIFICATE-----Generated at Mon Nov 25 02:45:36 2024 by rpki-client on console-ams.rpki-client.org