$ rpki-client -vvf repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft File: 40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft (raw, json) Hash identifier: 7DgW2wf+mmt1tZXrMSWKar6l4/Cj66dZrYGXnaaD52w= Subject key identifier: C0:32:79:3E:4C:C7:6B:60:E5:D3:3A:B1:4E:39:20:F6:6C:3A:4C:44 Authority key identifier: 40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3 Certificate issuer: /CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3 Certificate serial: 38EE3065AA41A660B612CA1541FC8D96A52D3B2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft Manifest number: 01DF Signing time: Mon 25 Nov 2024 21:22:31 +0000 Manifest this update: Mon 25 Nov 2024 21:17:31 +0000 Manifest next update: Thu 28 Nov 2024 22:24:31 +0000 Files and hashes: 1: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: Ai97/AeZ67d5F3AYWobNbu9wLgxWIRH2a6eXmHZgojQ=) 2: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: kwL1JREwxH10sgLMYdlWUdKS0D8gYxJYzVh+9DEMKo4=) 3: 40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl (hash: gfoMEy/FQs07sJ9VEfT72kOIapF8e6KNvCfxn8Koooc=) 4: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 1AXu9VMwS+8knSVXl2hI8iHOcYa+VjnkUxjjL7VCI30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ee:30:65:aa:41:a6:60:b6:12:ca:15:41:fc:8d:96:a5:2d:3b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3 Validity Not Before: Nov 25 21:17:31 2024 GMT Not After : Nov 28 22:24:31 2024 GMT Subject: CN=C032793E4CC76B60E5D33AB14E3920F66C3A4C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:42:50:a9:7a:e2:c0:6c:31:ad:6f:1c:eb:c9: d0:e9:52:4f:fa:dc:b0:f2:33:8d:04:23:5b:f8:2b: 59:0c:e3:86:49:52:4f:da:34:ba:02:88:e4:eb:01: 4d:73:cf:0d:58:7d:50:4f:30:80:8c:8a:97:ec:ec: 36:52:18:df:78:d8:93:39:3e:ce:03:db:55:4e:09: 79:a2:22:0b:60:46:a1:10:1a:2f:14:df:74:2d:f4: e9:b6:32:0e:a2:ae:bc:e1:5d:50:5b:76:a9:fd:5d: 5d:75:02:47:7d:f3:7d:4d:80:4e:5f:61:58:73:fb: a3:dd:c9:26:fb:e0:b3:5f:e4:ad:40:74:9b:03:7d: 5b:08:16:7c:25:4b:ea:0a:76:a8:70:d2:5c:6c:17: 65:e7:4a:d7:a9:24:04:d4:41:04:cf:97:74:1a:14: a9:41:6e:79:e2:43:db:8a:b0:e3:1d:06:1a:6a:b5: 5f:ce:c2:88:43:9e:e6:00:08:61:0b:64:ba:52:34: fe:1c:cf:e8:10:d0:e5:5f:c2:33:2a:07:3a:50:01: e4:44:bd:5f:9a:31:65:ec:85:2d:bd:9f:0c:9e:87: 51:bf:fa:7e:30:51:e6:2d:84:da:a7:56:02:83:28: 3d:e1:01:59:57:21:3a:b4:32:09:16:e2:4f:80:14: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:32:79:3E:4C:C7:6B:60:E5:D3:3A:B1:4E:39:20:F6:6C:3A:4C:44 X509v3 Authority Key Identifier: keyid:40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f9:96:70:9e:1f:95:02:3b:50:d1:cd:b4:11:37:ec:94:bc: 02:5f:e2:d1:7d:46:51:7a:62:93:11:ea:66:1d:ea:8b:38:30: 93:ef:88:3d:ea:46:5a:d3:76:be:bd:26:94:69:ed:fa:f5:b8: 15:f6:49:bd:9c:7d:74:28:4b:e7:b3:bd:e0:fe:b2:00:af:41: b1:ea:ed:5a:b5:45:12:2d:14:e5:6d:c9:62:44:81:37:8d:e0: 7d:3d:7d:df:e7:c0:44:7f:08:79:13:6c:01:89:6b:4c:39:2f: c4:7a:39:fb:f1:c8:df:c8:1b:fa:8e:8a:3e:c1:2a:80:9d:2d: f2:2d:c8:c1:08:55:08:8a:92:d0:d4:df:b5:04:11:55:da:44: 64:0a:a5:3c:84:cf:32:88:88:2d:23:55:7d:0e:01:fe:95:34: 91:0f:87:3d:e2:6f:c4:a0:f8:5e:59:44:b9:1b:55:dd:25:b5: 1d:1b:d5:b3:54:6d:b9:f6:e5:1f:2b:18:13:63:81:a1:04:4a: af:f9:58:03:eb:47:ca:95:ff:4f:19:b9:a8:35:58:c3:43:7b: 97:78:62:0f:6a:16:58:01:97:d5:df:c7:28:ac:e9:60:d7:33: e5:87:d7:42:f0:d2:4a:96:1c:79:a0:ed:07:8b:94:66:8f:86: ea:4f:6e:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOO4wZapBpmC2EsoVQfyNlqUtOywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0 NzBCNDFGMzAeFw0yNDExMjUyMTE3MzFaFw0yNDExMjgyMjI0MzFaMDMxMTAvBgNV BAMTKEMwMzI3OTNFNENDNzZCNjBFNUQzM0FCMTRFMzkyMEY2NkMzQTRDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3QlCpeuLAbDGtbxzrydDpUk/6 3LDyM40EI1v4K1kM44ZJUk/aNLoCiOTrAU1zzw1YfVBPMICMipfs7DZSGN942JM5 Ps4D21VOCXmiIgtgRqEQGi8U33Qt9Om2Mg6irrzhXVBbdqn9XV11Akd9831NgE5f YVhz+6PdySb74LNf5K1AdJsDfVsIFnwlS+oKdqhw0lxsF2XnStepJATUQQTPl3Qa FKlBbnniQ9uKsOMdBhpqtV/OwohDnuYACGELZLpSNP4cz+gQ0OVfwjMqBzpQAeRE vV+aMWXshS29nwyeh1G/+n4wUeYthNqnVgKDKD3hAVlXITq0MgkW4k+AFL2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwDJ5PkzHa2Dl0zqxTjkg9mw6TEQwHwYDVR0j BBgwFoAUQMBVPJCX7EpPI+7cBSBbxUcLQfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGNjNjllOS1lZjc0LTRiODEtOTFmNC03YmZkZjkzZjdiYWEvMC80MEMwNTUzQzkw OTdFQzRBNEYyM0VFREMwNTIwNUJDNTQ3MEI0MUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0NzBC NDFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVC QzU0NzBCNDFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj5lnCeH5UCO1DRzbQRN+yUvAJf4tF9RlF6 YpMR6mYd6os4MJPviD3qRlrTdr69JpRp7fr1uBX2Sb2cfXQoS+ezveD+sgCvQbHq 7Vq1RRItFOVtyWJEgTeN4H09fd/nwER/CHkTbAGJa0w5L8R6OfvxyN/IG/qOij7B KoCdLfItyMEIVQiKktDU37UEEVXaRGQKpTyEzzKIiC0jVX0OAf6VNJEPhz3ib8Sg +F5ZRLkbVd0ltR0b1bNUbbn25R8rGBNjgaEESq/5WAPrR8qV/08Zuag1WMNDe5d4 Yg9qFlgBl9Xfxyis6WDXM+WH10Lw0kqWHHmg7QeLlGaPhupPbl8= -----END CERTIFICATE-----Generated at Mon Nov 25 23:52:54 2024 by rpki-client on console-ams.rpki-client.org