$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft File: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json) Hash identifier: QaWjCqXlD1jhxj1H42tinAV4nGO2uquTekML8EZFBcY= Subject key identifier: 23:4A:A3:45:DE:25:C1:14:CF:CD:14:9B:38:52:17:A5:53:6D:E2:D4 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 4EA40CCBDADB9581770C1A5440A4E909A0F9A8AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft Manifest number: 38 Signing time: Wed 20 Nov 2024 15:51:29 +0000 Manifest this update: Wed 20 Nov 2024 15:46:29 +0000 Manifest next update: Sat 23 Nov 2024 23:18:29 +0000 Files and hashes: 1: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: T8cBlOmjcetrSbtW+daV9YtXlBHJ/TgUuSP0ZRu08us=) 2: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: amybII68a8VE28x622WWbP3X6DorgNErjKJn51v04hU=) 3: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: PWcu8n1GQVYIbIpIIeTmS8WPhGjRtUMxtKVHKNkmcLA=) 4: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sw0SlIxt+FA7pZy4rkUInlCn0uAcgR4nYJ5Re3N9oxc=) 5: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: +efjUKkfN7wyOn1gEZ4iK+HOgdi5kSwgmzRJxOnk92c=) 6: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: yPPOkXj3mKxQYacR/9QfDIKsBFYkkZD6z3AK2Kzj3W8=) 7: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: 12eKUXGhIz6FHVGhhjWlfvlhTiivVo5sPJpz1GDHaMw=) 8: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: v0m70RT7TsMBD2CfWXOxviOzxM9VbD9adOYfqtuzcmg=) 9: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: balnJcNONLw8SBYvt7tVe9VLlUUBAlIKjs8CUCdy5n0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a4:0c:cb:da:db:95:81:77:0c:1a:54:40:a4:e9:09:a0:f9:a8:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Nov 20 15:46:29 2024 GMT Not After : Nov 23 23:18:29 2024 GMT Subject: CN=234AA345DE25C114CFCD149B385217A5536DE2D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:d4:90:9b:1d:b4:e6:34:9a:ae:4b:ec:3a: 60:5d:04:71:1f:dc:2c:c2:2f:cd:94:76:d2:e6:6c: 66:ae:b4:e1:2f:75:b3:fc:34:52:7c:01:64:81:ed: 97:09:ef:d0:98:00:24:4a:4d:3c:11:e9:32:f8:c9: f1:21:cc:49:55:18:a6:15:f6:c1:d1:eb:71:50:58: 3f:a5:6a:49:4a:9f:35:a4:0e:f3:40:c4:65:98:63: 24:cb:6d:db:69:9c:66:88:e9:92:29:1b:03:35:7f: 1f:c1:6f:56:0c:b5:da:fc:19:a5:8b:f3:de:6f:62: 2f:9f:61:2b:a4:58:46:07:5e:87:dd:aa:29:35:02: 39:f9:e7:7e:1c:14:cd:b7:63:d0:75:08:78:19:b6: d6:dc:b5:ae:ae:aa:92:fe:05:19:5e:cc:8a:b4:38: 74:65:ae:63:bc:80:ae:ce:fc:14:a3:6d:3e:04:e4: d2:cc:f0:93:66:61:d8:c9:03:3e:a6:07:93:57:9c: 5e:27:94:a7:96:74:af:45:9f:6c:c7:e7:1a:ac:cf: fc:5d:21:10:24:19:3e:d9:f6:8a:61:c5:70:79:76: cd:73:b3:db:ee:11:3c:39:a1:dc:e5:f0:fb:55:bb: da:db:c3:36:6b:db:ec:51:97:84:44:b9:7f:4f:8e: ef:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4A:A3:45:DE:25:C1:14:CF:CD:14:9B:38:52:17:A5:53:6D:E2:D4 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:00:9f:af:be:02:04:92:50:bf:fb:62:04:85:8e:a5:1f:2f: 2d:03:d4:6c:f4:6d:32:e5:a7:69:2d:43:81:82:1a:a0:c2:d0: 04:5a:e7:c3:4c:1e:94:2d:1a:14:45:34:00:c4:62:5f:17:3b: a8:75:6a:27:ef:d0:82:9e:b4:6a:18:b8:de:90:e3:11:4e:45: 18:23:c3:a9:c1:f2:ba:e6:a5:02:d0:ac:c8:19:44:23:a8:99: c7:4a:a3:02:48:d0:e6:d1:4d:db:86:d2:7c:5a:cd:a1:fa:13: 44:26:d1:a9:8d:3b:cc:2c:d4:99:e6:57:77:88:d0:51:d1:2d: 93:82:7c:b6:28:2b:c0:96:34:53:a9:80:de:f8:c1:cf:07:63: a3:27:b1:ff:f5:d4:a2:85:59:f0:00:36:d5:ff:cb:37:3a:ba: 5a:ac:04:1f:ed:a8:b7:79:b1:55:cf:b2:0b:d7:65:58:43:a4: 69:23:eb:9d:35:bd:b4:fd:07:05:27:57:f6:23:ac:bf:94:d8: 92:4a:a1:52:05:99:22:63:18:2e:e3:da:1c:cc:c5:3d:0f:b3: ce:24:a7:92:ad:5a:01:03:86:5b:4e:a7:7f:aa:5a:6b:a9:70: 7a:d6:2b:65:78:5f:be:3e:07:fc:eb:a4:bf:d0:e4:3d:90:4f: 28:76:b6:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqQMy9rblYF3DBpUQKTpCaD5qKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNDExMjAxNTQ2MjlaFw0yNDExMjMyMzE4MjlaMDMxMTAvBgNV BAMTKDIzNEFBMzQ1REUyNUMxMTRDRkNEMTQ5QjM4NTIxN0E1NTM2REUyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtF9SQmx205jSarkvsOmBdBHEf 3CzCL82UdtLmbGautOEvdbP8NFJ8AWSB7ZcJ79CYACRKTTwR6TL4yfEhzElVGKYV 9sHR63FQWD+laklKnzWkDvNAxGWYYyTLbdtpnGaI6ZIpGwM1fx/Bb1YMtdr8GaWL 895vYi+fYSukWEYHXofdqik1Ajn5534cFM23Y9B1CHgZttbcta6uqpL+BRlezIq0 OHRlrmO8gK7O/BSjbT4E5NLM8JNmYdjJAz6mB5NXnF4nlKeWdK9Fn2zH5xqsz/xd IRAkGT7Z9ophxXB5ds1zs9vuETw5odzl8PtVu9rbwzZr2+xRl4REuX9Pju+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0qjRd4lwRTPzRSbOFIXpVNt4tQwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzEvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NC MDQ4QzFENTE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgAn6++AgSSUL/7YgSFjqUfLy0D1Gz0bTLl p2ktQ4GCGqDC0ARa58NMHpQtGhRFNADEYl8XO6h1aifv0IKetGoYuN6Q4xFORRgj w6nB8rrmpQLQrMgZRCOomcdKowJI0ObRTduG0nxazaH6E0Qm0amNO8ws1JnmV3eI 0FHRLZOCfLYoK8CWNFOpgN74wc8HY6Mnsf/11KKFWfAANtX/yzc6ulqsBB/tqLd5 sVXPsgvXZVhDpGkj6501vbT9BwUnV/YjrL+U2JJKoVIFmSJjGC7j2hzMxT0Ps84k p5KtWgEDhltOp3+qWmupcHrWK2V4X74+B/zrpL/Q5D2QTyh2tpA= -----END CERTIFICATE-----Generated at Wed Nov 20 18:41:49 2024 by rpki-client on console-fra.rpki-client.org