$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: 5S7kssb99PTJmzUA4wN+Hm8xX6QFe4DdnCYqVCLKncA= Subject key identifier: 5D:9E:37:3E:B4:44:E9:DA:D6:72:0E:EE:34:B5:45:C4:D2:A4:10:99 Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 15886D1761ADDF67300A90E70E44F2B71A8E77B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 0487 Signing time: Mon 25 Nov 2024 17:40:04 +0000 Manifest this update: Mon 25 Nov 2024 17:35:04 +0000 Manifest next update: Thu 28 Nov 2024 22:16:04 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: DNR89S5Jc0hpquIi4qAohR6c/7whqgkbqncTcS5MoXg=) 2: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: hOVv2VX8dEy5rVV9uCZfuadEk8vAwLXczR702glVMaA=) 3: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: XEz4/7IgorZX3yZsuZswHSF2VRNcLu1EPVSl3AmZ0Uo=) 4: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: jPEdG1cLq2gj/WNKOIPtFa6M4hu2Ul5X/bflKXX2AsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:88:6d:17:61:ad:df:67:30:0a:90:e7:0e:44:f2:b7:1a:8e:77:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Nov 25 17:35:04 2024 GMT Not After : Nov 28 22:16:04 2024 GMT Subject: CN=5D9E373EB444E9DAD6720EEE34B545C4D2A41099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:56:bb:48:b8:dd:a0:34:22:e2:c8:ab:cb: fb:eb:04:6b:f4:78:0e:4b:c1:a9:80:35:50:1f:1b: 0b:c2:aa:11:6b:73:e1:03:21:b0:e7:ba:22:fd:4c: bf:89:09:2f:95:4a:e2:9a:2d:36:d2:16:20:8b:5b: 77:45:b4:e7:2d:0f:05:8b:e4:c9:b1:e2:a5:40:dc: 43:af:18:19:e4:fd:02:5c:d0:72:09:11:f8:e6:cb: c7:d1:23:fd:03:3e:07:2d:8c:b0:e7:e6:3b:82:30: 7b:8e:94:1d:d2:6a:27:96:02:8d:0c:d8:29:ab:6a: a4:1e:62:59:be:ec:56:6e:1d:40:44:e7:06:7a:83: 80:42:1b:4b:43:c7:e9:1b:c0:b2:69:8d:fa:15:27: 13:a3:1f:43:40:c4:6d:e9:ec:8d:b7:94:57:cb:a3: 23:13:93:4f:f0:84:77:7e:32:7d:6f:28:f0:b7:7e: f1:35:1a:59:f9:28:ae:a5:36:03:89:12:2b:c3:00: 86:37:e3:4b:c2:a6:77:03:08:53:17:8f:4b:b9:2c: 16:68:b0:03:fa:56:66:23:47:74:9f:92:3c:fd:cd: 49:c6:08:77:b9:97:9d:67:a8:fa:c5:c7:b2:10:0c: ba:6f:8a:8a:12:a4:c7:42:3f:c3:1f:a5:a1:cb:46: 41:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9E:37:3E:B4:44:E9:DA:D6:72:0E:EE:34:B5:45:C4:D2:A4:10:99 X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:99:16:6d:ee:67:41:ec:29:fa:4f:ce:74:57:aa:84:99:e0: 7a:14:61:6b:24:fb:35:91:ea:8a:86:47:41:0c:74:0c:17:02: 05:b0:13:57:65:a5:2a:60:06:9b:cb:78:87:0c:81:f3:3d:15: 45:4b:15:d7:a9:f4:b9:ef:2d:f1:60:bb:29:bb:01:04:3b:9b: ab:44:dd:c7:c3:f3:29:fa:37:bf:b9:f7:12:23:7e:55:61:12: 30:41:11:35:2c:ec:ef:06:aa:29:59:35:d7:59:6b:5e:b9:d7: 22:a2:1c:78:a2:e1:0e:9a:bf:e6:90:49:3f:6c:de:e9:12:7e: f7:04:38:14:75:51:8e:e8:9b:e3:09:f7:50:30:50:4e:86:31: d2:e2:7e:fd:a1:f9:cd:e5:ae:e5:36:2e:ee:ce:c8:8d:f1:75: 2b:78:e3:98:b0:a8:d8:dc:78:d7:d8:57:50:88:ea:d3:89:bc: f8:a5:ff:97:b9:07:5c:4f:29:79:c0:15:42:c1:53:80:32:61: d7:77:22:8f:eb:76:78:4f:c7:a7:ca:8b:9a:55:42:ef:15:70: c7:48:a5:9b:0c:22:39:e4:77:79:3b:c2:2a:84:ed:53:9b:d5: 90:70:3c:b5:d6:6f:a0:bf:f9:77:7f:ff:3b:bb:5e:4c:32:cd: b6:99:69:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFYhtF2Gt32cwCpDnDkTytxqOd7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNDExMjUxNzM1MDRaFw0yNDExMjgyMjE2MDRaMDMxMTAvBgNV BAMTKDVEOUUzNzNFQjQ0NEU5REFENjcyMEVFRTM0QjU0NUM0RDJBNDEwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAVa7SLjdoDQi4siry/vrBGv0 eA5LwamANVAfGwvCqhFrc+EDIbDnuiL9TL+JCS+VSuKaLTbSFiCLW3dFtOctDwWL 5Mmx4qVA3EOvGBnk/QJc0HIJEfjmy8fRI/0DPgctjLDn5juCMHuOlB3SaieWAo0M 2CmraqQeYlm+7FZuHUBE5wZ6g4BCG0tDx+kbwLJpjfoVJxOjH0NAxG3p7I23lFfL oyMTk0/whHd+Mn1vKPC3fvE1Gln5KK6lNgOJEivDAIY340vCpncDCFMXj0u5LBZo sAP6VmYjR3Sfkjz9zUnGCHe5l51nqPrFx7IQDLpviooSpMdCP8MfpaHLRkGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXZ43PrRE6drWcg7uNLVFxNKkEJkwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaZFm3uZ0HsKfpPznRXqoSZ4HoUYWsk+zWR 6oqGR0EMdAwXAgWwE1dlpSpgBpvLeIcMgfM9FUVLFdep9LnvLfFguym7AQQ7m6tE 3cfD8yn6N7+59xIjflVhEjBBETUs7O8GqilZNddZa1651yKiHHii4Q6av+aQST9s 3ukSfvcEOBR1UY7om+MJ91AwUE6GMdLifv2h+c3lruU2Lu7OyI3xdSt445iwqNjc eNfYV1CI6tOJvPil/5e5B1xPKXnAFULBU4AyYdd3Io/rdnhPx6fKi5pVQu8VcMdI pZsMIjnkd3k7wiqE7VOb1ZBwPLXWb6C/+Xd//zu7XkwyzbaZaR8= -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:14 2024 by rpki-client on console-fra.rpki-client.org