$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: o//6XfOe8JNEmMUFq6nCRXtKqt3KOo+bWpOY7CI+pmM= Subject key identifier: 11:39:BB:DE:DF:00:D4:D4:0C:83:BE:9A:81:92:37:25:28:9E:AD:A3 Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 65D9A359FCED6A6E0FBC56D62BCD98ED25A5FD08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: 15 Signing time: Mon 25 Nov 2024 05:00:50 +0000 Manifest this update: Mon 25 Nov 2024 04:55:50 +0000 Manifest next update: Thu 28 Nov 2024 13:30:50 +0000 Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: 55sjufMqiAUVQEWT+QA1EUsxab9EOoQxItI4+DBt3EA=) 2: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: B+9AQaqi2ne0a9QjhC4I/BcR2YUWm6rXtOr6+XCzfic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 08:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d9:a3:59:fc:ed:6a:6e:0f:bc:56:d6:2b:cd:98:ed:25:a5:fd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Nov 25 04:55:50 2024 GMT Not After : Nov 28 13:30:50 2024 GMT Subject: CN=1139BBDEDF00D4D40C83BE9A81923725289EADA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:4b:b8:70:cb:cd:4f:21:65:01:d8:65:55: 31:52:f6:ce:d8:3b:d0:79:63:8b:19:61:51:96:aa: e7:b5:d0:fd:b8:d1:2b:54:93:d1:f8:b5:ec:08:ed: 54:9a:2c:a0:61:d9:42:ef:c2:a4:be:19:e1:f2:6c: 38:e7:58:f8:31:0d:53:e1:16:b0:05:52:0f:a5:68: 40:e1:de:54:56:12:91:77:ed:33:48:c2:72:e3:2d: c3:57:59:a7:0f:32:ff:0a:04:4e:a8:36:96:d8:43: cd:51:57:03:1a:da:12:a9:d8:40:eb:2e:37:09:a1: 8d:ec:9c:3f:04:65:78:69:eb:b9:c2:37:a6:55:8a: 5a:58:fa:5d:bf:f8:b2:65:8c:09:2e:5c:b6:08:38: 0d:db:10:53:a5:90:1a:05:2d:76:d8:51:78:d7:1d: a2:bc:6e:fb:90:80:c0:a0:7c:49:5d:46:bb:e1:ae: 4b:b0:a7:48:91:d3:33:78:f8:5c:df:92:ba:9f:37: 94:aa:5f:73:8b:f6:fc:26:c5:14:da:7f:2e:47:f6: e8:87:4c:17:50:fe:ca:cf:25:d0:b0:69:d5:43:95: 5f:0d:13:b1:d6:bc:c7:60:05:75:54:03:58:e2:6f: 84:60:e9:7d:1b:fa:8f:7f:d3:e3:d6:44:0d:24:b8: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:39:BB:DE:DF:00:D4:D4:0C:83:BE:9A:81:92:37:25:28:9E:AD:A3 X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:48:75:59:01:76:fa:96:36:2e:c8:e0:60:46:ee:84:1f:32: 5c:67:49:59:13:17:07:0c:aa:e0:08:5c:22:45:37:00:16:9a: 41:ae:93:12:a1:d2:34:7e:77:3c:98:44:c1:79:9c:a4:63:96: 32:02:ec:cf:a9:57:d2:58:fc:08:56:ef:c8:f0:f2:a8:58:8f: 50:93:3a:24:a9:ab:c5:0d:f9:93:cf:8a:3d:f3:78:e4:68:8e: 49:26:cf:39:23:35:fe:21:7c:fb:27:46:06:d3:88:66:be:1e: 8c:25:ae:3f:7f:83:4d:33:66:36:b4:ea:78:49:05:f9:57:97: 8c:83:97:27:c2:37:4d:ff:de:f3:af:57:67:f5:b6:77:85:34: 12:20:c8:c0:1e:ea:4c:50:2c:00:1c:19:cd:3a:b1:17:b7:d0: 8c:69:37:e2:fa:f5:23:ca:6f:92:6e:4e:83:92:85:9d:5e:0e: 86:7e:cd:d0:50:93:83:9a:8f:a4:3e:e7:26:ee:82:42:2a:7a: 39:22:a1:45:71:1e:fb:06:ec:26:77:52:79:5a:a6:6b:97:fb: 93:ce:6e:f6:3e:90:f8:71:55:8e:60:35:b4:bc:86:13:15:b9: d4:a4:46:17:4d:bb:a0:25:72:20:80:3c:e2:e8:90:f8:80:ff: d4:0a:78:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdmjWfztam4PvFbWK82Y7SWl/QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNDExMjUwNDU1NTBaFw0yNDExMjgxMzMwNTBaMDMxMTAvBgNV BAMTKDExMzlCQkRFREYwMEQ0RDQwQzgzQkU5QTgxOTIzNzI1Mjg5RUFEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7Eu4cMvNTyFlAdhlVTFS9s7Y O9B5Y4sZYVGWque10P240StUk9H4tewI7VSaLKBh2ULvwqS+GeHybDjnWPgxDVPh FrAFUg+laEDh3lRWEpF37TNIwnLjLcNXWacPMv8KBE6oNpbYQ81RVwMa2hKp2EDr LjcJoY3snD8EZXhp67nCN6ZVilpY+l2/+LJljAkuXLYIOA3bEFOlkBoFLXbYUXjX HaK8bvuQgMCgfEldRrvhrkuwp0iR0zN4+FzfkrqfN5SqX3OL9vwmxRTafy5H9uiH TBdQ/srPJdCwadVDlV8NE7HWvMdgBXVUA1jib4Rg6X0b+o9/0+PWRA0kuFZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUETm73t8A1NQMg76agZI3JSieraMwHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhIdVkBdvqWNi7I4GBG7oQfMlxnSVkTFwcM quAIXCJFNwAWmkGukxKh0jR+dzyYRMF5nKRjljIC7M+pV9JY/AhW78jw8qhYj1CT OiSpq8UN+ZPPij3zeORojkkmzzkjNf4hfPsnRgbTiGa+Howlrj9/g00zZja06nhJ BflXl4yDlyfCN03/3vOvV2f1tneFNBIgyMAe6kxQLAAcGc06sRe30IxpN+L69SPK b5JuToOShZ1eDoZ+zdBQk4Oaj6Q+5ybugkIqejkioUVxHvsG7CZ3UnlapmuX+5PO bvY+kPhxVY5gNbS8hhMVudSkRhdNu6AlciCAPOLokPiA/9QKeCE= -----END CERTIFICATE-----Generated at Mon Nov 25 06:02:38 2024 by rpki-client on console-ams.rpki-client.org