$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: x3mMCwUHydAZrSob8j1ju2d0H4WDn2QWexrmH7mx2J0= Subject key identifier: A7:AE:BE:03:8D:63:CE:F5:F1:29:19:0C:D8:2D:98:01:29:8D:69:C3 Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 45496A817BE307588C9EC6EBF7F3EB9536C28061 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 01C4 Signing time: Tue 26 Nov 2024 01:01:28 +0000 Manifest this update: Tue 26 Nov 2024 00:56:28 +0000 Manifest next update: Fri 29 Nov 2024 10:31:28 +0000 Files and hashes: 1: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: Gyp7oY7LZr76Fa6YxT+OPmv2jwIkLDfqy/uZzDzcJtA=) 2: 3130332e3136392e302e302f32332d3234203d3e20313432333235.roa (hash: v7fj0n/qZqAv0WjTR8mAQzKp8e8T2QjW/FrewvXOCCY=) 3: 3130332e3136392e312e302f32342d3234203d3e20313432333235.roa (hash: G3ls2wG1XnXU+MDz1l+FjTCqJCeIEqwQsrcmDFPbZjU=) 4: 3130332e3136392e302e302f32342d3234203d3e20313432333235.roa (hash: DiKDQ4xO37uEz3LGqkudZWyBLFvDLb2BHiHtCcaC/ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:49:6a:81:7b:e3:07:58:8c:9e:c6:eb:f7:f3:eb:95:36:c2:80:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: Nov 26 00:56:28 2024 GMT Not After : Nov 29 10:31:28 2024 GMT Subject: CN=A7AEBE038D63CEF5F129190CD82D9801298D69C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:f2:a7:99:e6:5d:dd:be:07:2a:6f:20:26: eb:43:94:a4:fb:2d:c0:58:be:35:b9:97:6a:d9:dd: 2d:02:e8:9f:95:5e:4d:59:d0:48:7a:d5:47:f8:1e: be:b3:fc:7b:ae:ef:f1:04:43:12:2d:88:c0:a4:06: ef:51:07:85:58:4d:2e:0a:5e:e2:ee:4c:58:20:56: e0:a4:71:cd:ce:1e:de:16:d0:d4:45:d7:a0:55:f2: 9b:a8:d9:a1:60:c8:df:96:3c:3f:9f:49:23:e4:7f: 75:6a:ea:fc:85:43:b7:41:82:6f:55:26:b2:ba:5d: 2b:22:d0:a8:c2:51:c6:e7:30:f3:cf:31:b3:5f:d5: 1c:e2:b9:4f:93:a2:76:85:c2:57:2c:9f:2b:1e:db: 3d:db:5b:f6:41:a4:e0:4c:a0:b5:f2:76:cb:39:04: f5:01:be:65:1d:a3:ca:8c:4a:cc:80:1c:99:fc:eb: 5f:c1:4a:7f:fa:3c:84:cb:75:bc:50:a2:40:2b:8d: ba:b2:17:4e:02:fa:6c:26:fd:88:e7:77:2c:f4:14: b8:5f:5c:5f:65:1f:eb:e6:a1:72:3a:34:15:82:35: a3:05:89:33:7e:42:02:73:6f:ab:26:f5:e2:57:68: 00:ba:a8:7c:78:02:75:c4:be:fb:e6:95:06:d7:dd: af:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AE:BE:03:8D:63:CE:F5:F1:29:19:0C:D8:2D:98:01:29:8D:69:C3 X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f2:a3:2e:d4:a4:94:20:5c:a9:d2:ab:0d:4e:96:6b:fb:9f: 67:f8:cc:37:b6:d4:1f:14:81:90:a1:f7:a7:4c:f4:31:ae:e6: d5:4b:88:ca:99:cf:83:da:3d:fd:48:fe:70:0b:03:88:34:29: 1e:df:8f:59:9d:15:8d:df:d8:4e:1e:7f:4b:b4:d8:eb:34:14: 75:c6:6a:01:ae:40:02:27:4e:45:ed:2f:93:cd:14:bd:16:a1: ee:86:82:de:7f:62:a6:e8:f0:bc:97:ac:81:36:4b:6a:75:2c: 47:5a:5c:21:7d:0a:cc:a8:60:a4:44:c1:14:c7:30:23:1d:59: 51:9d:5b:13:90:d4:cf:08:21:87:e7:35:bd:4c:4a:67:e3:6c: 5f:ee:d1:ec:ee:31:a4:b1:47:1d:a4:80:76:ee:43:b5:0a:76: b6:e6:df:5c:85:2a:bf:76:e9:c6:23:6e:22:5a:ab:4b:1f:ff: d6:02:6e:14:33:76:10:87:42:0b:a1:c8:4f:1f:8c:02:40:95: 06:16:10:13:a3:fa:c3:d6:18:8a:38:9a:d6:cf:8e:25:e8:db: 01:85:65:55:38:46:b4:b6:29:a5:75:44:53:19:75:d3:a6:9b: 9f:c3:07:90:21:5f:ce:0e:46:b7:c6:f0:1e:06:fa:25:c9:b3: 65:f7:21:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUlqgXvjB1iMnsbr9/PrlTbCgGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNDExMjYwMDU2MjhaFw0yNDExMjkxMDMxMjhaMDMxMTAvBgNV BAMTKEE3QUVCRTAzOEQ2M0NFRjVGMTI5MTkwQ0Q4MkQ5ODAxMjk4RDY5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXlfKnmeZd3b4HKm8gJutDlKT7 LcBYvjW5l2rZ3S0C6J+VXk1Z0Eh61Uf4Hr6z/Huu7/EEQxItiMCkBu9RB4VYTS4K XuLuTFggVuCkcc3OHt4W0NRF16BV8puo2aFgyN+WPD+fSSPkf3Vq6vyFQ7dBgm9V JrK6XSsi0KjCUcbnMPPPMbNf1RziuU+TonaFwlcsnyse2z3bW/ZBpOBMoLXydss5 BPUBvmUdo8qMSsyAHJn861/BSn/6PITLdbxQokArjbqyF04C+mwm/Yjndyz0FLhf XF9lH+vmoXI6NBWCNaMFiTN+QgJzb6sm9eJXaAC6qHx4AnXEvvvmlQbX3a/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp66+A41jzvXxKRkM2C2YASmNacMwHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/yoy7UpJQgXKnSqw1Olmv7n2f4zDe21B8U gZCh96dM9DGu5tVLiMqZz4PaPf1I/nALA4g0KR7fj1mdFY3f2E4ef0u02Os0FHXG agGuQAInTkXtL5PNFL0Woe6Ggt5/Yqbo8LyXrIE2S2p1LEdaXCF9CsyoYKREwRTH MCMdWVGdWxOQ1M8IIYfnNb1MSmfjbF/u0ezuMaSxRx2kgHbuQ7UKdrbm31yFKr92 6cYjbiJaq0sf/9YCbhQzdhCHQguhyE8fjAJAlQYWEBOj+sPWGIo4mtbPjiXo2wGF ZVU4RrS2KaV1RFMZddOmm5/DB5AhX84ORrfG8B4G+iXJs2X3Ibs= -----END CERTIFICATE-----Generated at Tue Nov 26 02:25:08 2024 by rpki-client on console-ams.rpki-client.org