$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: GH5i8mqflfBLm1ylkdbJB2g54k6M2/dVfzMiu5ySSUg= Subject key identifier: 1F:20:4A:A3:20:62:4C:EF:F8:D9:DE:A4:89:CD:7B:F9:92:0A:4F:27 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 25497DF91151595EA983E6CF6D9739DBEF6C1360 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 04A8 Signing time: Thu 21 Nov 2024 20:21:51 +0000 Manifest this update: Thu 21 Nov 2024 20:16:51 +0000 Manifest next update: Mon 25 Nov 2024 04:24:51 +0000 Files and hashes: 1: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: MFBwSNR9ogt3NpUtQmOOmNuRxIKEoVF8qRLpBQvRK+E=) 2: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: dASDC6A8QkcoKOTRQ/CvgSqJWSyAkaKqOmqilKOQ97g=) 3: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 9SIW/5w9M/SmmmzkXzv4Bp8jIuxjcuDE9nLrxJeaY/8=) 4: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: fYkaRaqMdzeCnlFj0QC4k70wJ41vV5h8EX1emupb1Ew=) 5: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: unueG7P54wUmQZvOUKrhpSAH4gB/UymG78WRnuwkjpw=) 6: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: mwYMKgumoG9KUXW9CmbB5xkKPC0iVTbXFYBRWL88eZY=) 7: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: +7ThYpBxJ7cY58NoufQvfB+mtjUp0Rdkq8BnlAc4bZ4=) 8: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: m9HEvaPr+MCHUScC/S8/ZbPl5+d+RZJ8L/y0XuZIprU=) 9: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: vhMXT0X2yZyfjqh1If/jDIC06hgxnPfiOfL606K6iKk=) 10: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: twCP3bQtXm7fHopGhk9qw+BKzDavhDYNdBsRfz7JGKg=) 11: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: 9FaMWUxx6cNM5vz7M9YrzpMwj5RS9BmzIfAf19UCzPI=) 12: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HAoFxdygcRJ4Y8uy9Ks9W9Gj/PwyoONosucd1x3NYoo=) 13: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: H911T2Oyw7E/be4YSoMDYuSyG1D6EtJloE4CFkI8rag=) 14: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: ozMMj1PLYt9P59zXxht5YENq9xxiksZRJWyynQGPWwo=) 15: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: plFUYvoZx+Zhhi7/vKanQppp3zTRIZoJyKujyLUaQfM=) 16: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: So5G4uHqVHWD5JnkptSS1bHWAe/cdyDOQettCO6GGiU=) 17: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: tGWvh9Bs3t8INRdrxWygALb5XhF17l2/AZgg1s1qyuY=) 18: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: jHen1vZLG/DOZwqIeHYY98aBHq6SMyx6T3vs559h5rI=) 19: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: LqxreuPQRi/RPY9pSW+yNL/verqLyl3p0dMRTLmH8hk=) 20: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: nun7wr5qUW6SSsLL/8m4wIYLtJbVijMvNYm3I5L5gwY=) 21: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: bWRExWZZIgQwRxIP86bPE6hDOmLbrhGh8hJvUz7o6EE=) 22: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: hplPEY83KbXLKF8mvbTVWHeph6nkNRI9I2QkUrjdTPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:49:7d:f9:11:51:59:5e:a9:83:e6:cf:6d:97:39:db:ef:6c:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Nov 21 20:16:51 2024 GMT Not After : Nov 25 04:24:51 2024 GMT Subject: CN=1F204AA320624CEFF8D9DEA489CD7BF9920A4F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:a1:d2:4d:e1:2c:2b:4f:b8:da:cc:7e:6a: 3a:fd:d3:95:11:6e:f9:55:38:36:7f:d4:a0:0f:d9: bf:8e:71:1e:ab:eb:66:0b:e4:25:e5:0f:cb:57:a5: 4f:fb:56:cd:ec:43:92:d5:2d:4a:ed:d8:01:8a:81: ae:00:fb:a0:45:ed:19:6c:f6:9a:c9:ea:2d:de:43: 9d:23:bf:b6:bc:8c:4e:6e:fd:de:1d:18:7d:53:13: 17:c1:5f:03:77:4a:48:f9:6b:91:3b:da:8a:e7:1f: 13:1c:95:a0:55:bf:53:94:51:89:cb:e9:7b:3f:64: ae:2a:f2:94:33:b4:af:52:20:e7:73:71:41:e2:e9: c2:60:af:72:26:ef:02:28:cd:01:60:b5:a8:be:60: dc:f1:6b:c4:bc:66:14:a6:33:5d:b7:60:3b:35:09: c4:b0:15:71:f3:bb:18:b5:7e:71:04:1b:91:5f:c3: d5:66:06:4b:bb:69:fd:bb:18:48:a0:62:da:41:09: 70:ab:08:86:cb:fa:80:22:f0:1d:e6:ed:fd:bf:bf: a2:4b:1d:32:de:9b:e9:a2:b9:66:e7:5b:2c:5e:bb: 42:82:54:ee:d3:79:7d:d7:db:a0:62:d6:a1:b0:bb: 42:3f:69:3c:76:15:c9:0e:9a:7d:7e:e1:18:85:d3: 54:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:20:4A:A3:20:62:4C:EF:F8:D9:DE:A4:89:CD:7B:F9:92:0A:4F:27 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:39:7e:cf:f2:32:97:98:99:7b:cc:5d:64:c4:39:e4:ab:17: 27:0f:84:db:e0:fd:67:f9:cc:18:33:bb:41:cd:60:96:ec:b6: a7:58:29:e5:9e:68:84:56:d4:08:c5:a9:f9:14:ef:c2:02:a5: 7f:26:1c:4f:9f:f0:e1:00:9e:29:6e:c9:e8:80:d5:2d:96:8f: d8:c2:6d:c3:61:e6:05:90:86:b6:17:0a:ee:12:f4:52:e1:16: fc:93:05:4b:95:b1:70:8c:3f:21:f6:3e:02:22:b3:97:01:e8: 33:da:99:99:8a:13:c2:7f:87:32:4d:94:f2:e2:d0:9a:10:2b: 33:17:14:c9:ff:d4:40:59:9b:c1:1c:f2:7e:3d:a8:23:c9:74: 7b:9c:40:75:2d:42:70:45:83:b4:b5:9d:67:17:8f:e9:b5:63: cc:b1:2a:4c:39:40:5f:c6:8c:4e:c9:0c:34:e1:4b:56:09:2a: c4:08:52:b4:3c:4d:8e:3c:b1:a2:34:91:08:98:49:85:4b:bc: e1:8c:e8:f1:1a:d6:cb:4a:ee:e8:4f:2b:54:8c:66:21:ca:5a: 28:86:bd:65:08:38:83:f5:33:29:39:9e:3c:4e:1e:dd:63:4c: 62:1f:86:42:eb:8c:23:98:ad:70:1f:b8:53:16:59:de:8f:bf: 0c:f1:9b:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUl9+RFRWV6pg+bPbZc52+9sE2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNDExMjEyMDE2NTFaFw0yNDExMjUwNDI0NTFaMDMxMTAvBgNV BAMTKDFGMjA0QUEzMjA2MjRDRUZGOEQ5REVBNDg5Q0Q3QkY5OTIwQTRGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsaHSTeEsK0+42sx+ajr905UR bvlVODZ/1KAP2b+OcR6r62YL5CXlD8tXpU/7Vs3sQ5LVLUrt2AGKga4A+6BF7Rls 9prJ6i3eQ50jv7a8jE5u/d4dGH1TExfBXwN3Skj5a5E72ornHxMclaBVv1OUUYnL 6Xs/ZK4q8pQztK9SIOdzcUHi6cJgr3Im7wIozQFgtai+YNzxa8S8ZhSmM123YDs1 CcSwFXHzuxi1fnEEG5Ffw9VmBku7af27GEigYtpBCXCrCIbL+oAi8B3m7f2/v6JL HTLem+miuWbnWyxeu0KCVO7TeX3X26Bi1qGwu0I/aTx2FckOmn1+4RiF01TzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHyBKoyBiTO/42d6kic17+ZIKTycwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI05fs/yMpeYmXvMXWTEOeSrFycPhNvg/Wf5 zBgzu0HNYJbstqdYKeWeaIRW1AjFqfkU78ICpX8mHE+f8OEAniluyeiA1S2Wj9jC bcNh5gWQhrYXCu4S9FLhFvyTBUuVsXCMPyH2PgIis5cB6DPamZmKE8J/hzJNlPLi 0JoQKzMXFMn/1EBZm8Ec8n49qCPJdHucQHUtQnBFg7S1nWcXj+m1Y8yxKkw5QF/G jE7JDDThS1YJKsQIUrQ8TY48saI0kQiYSYVLvOGM6PEa1stK7uhPK1SMZiHKWiiG vWUIOIP1Myk5njxOHt1jTGIfhkLrjCOYrXAfuFMWWd6PvwzxmxQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org