$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: F3BxwY6kLWhR1zPfsDC5YtFda4nOkRFUcCGWPEbDfJM= Subject key identifier: A8:61:17:9F:DA:44:F5:63:17:29:A1:55:9F:C8:7D:94:CD:EA:DD:AF Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 426F91ACD1CE8FFF8899A379C1FC7168ACB05992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: EF Signing time: Thu 21 Nov 2024 09:32:00 +0000 Manifest this update: Thu 21 Nov 2024 09:27:00 +0000 Manifest next update: Sun 24 Nov 2024 15:54:00 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: +Inku8JbbUNqeg+Ljrd5Bs7t4gp+eduAPT8HbuOG6qQ=) 2: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: C0Z3ePcxnI3/9rIfryMXvRuvKa9nIXhMbM3+pi3W1ao=) 3: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: 7Pa7ev/E3nkTKr2nwDB4gxCUo3XyP4oyXigDRtUHmYc=) 4: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: 83OI1kT3dr2p7fSwSdVid0kQfD5fuV74PbYWwoo6r1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6f:91:ac:d1:ce:8f:ff:88:99:a3:79:c1:fc:71:68:ac:b0:59:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Nov 21 09:27:00 2024 GMT Not After : Nov 24 15:54:00 2024 GMT Subject: CN=A861179FDA44F5631729A1559FC87D94CDEADDAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:5e:b7:57:7c:61:26:fc:74:86:23:a6:42: bb:4f:b9:c0:0d:63:61:5a:f3:77:9e:2e:bf:5e:f8: c6:e9:b1:eb:86:f0:4f:3b:c8:10:9b:a6:b5:ee:63: af:37:bc:80:fc:91:c7:74:17:5e:39:5b:6c:62:86: 51:eb:ef:de:4a:5f:c0:04:57:a7:b2:1a:f9:7d:af: 1d:50:d6:c9:f0:6c:d3:77:9d:fd:76:3e:28:27:47: df:67:fb:fe:23:28:71:cf:36:8c:55:85:68:f5:a5: 09:23:1c:b4:74:bf:a3:55:39:c1:d0:33:06:c8:7c: 7f:5f:09:cb:b8:17:d0:54:8a:65:ec:c6:73:91:59: 70:d0:37:ef:f4:93:7a:8d:ae:28:32:bb:95:ae:aa: fd:13:28:2b:35:bb:f5:03:ae:46:4e:54:8e:dc:74: fb:06:91:b9:bf:f3:9d:fc:cd:91:25:30:f2:83:ce: 71:c3:5c:39:99:dd:13:2d:0b:ba:71:e5:5e:53:e8: d0:7c:dd:3a:72:27:ed:98:46:41:f0:45:57:dd:27: 70:37:5f:63:c1:4f:ed:6c:71:3b:b6:87:92:d5:d7: d5:47:5c:98:4f:c7:09:35:3a:49:06:2d:ff:d9:7f: db:b2:87:e6:da:9f:59:f0:95:6e:f6:be:1e:63:6a: ba:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:61:17:9F:DA:44:F5:63:17:29:A1:55:9F:C8:7D:94:CD:EA:DD:AF X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:32:53:8f:4f:e8:42:d8:e1:19:a0:0d:c2:2d:b2:6e:fa:b9: 1b:15:a1:eb:04:c7:7d:e6:eb:55:56:1e:be:dc:ef:fc:c8:f8: 26:ef:93:0a:ee:e8:4c:3c:c5:e3:25:16:1d:67:74:80:f2:f8: 70:95:e0:35:b6:ca:9d:ba:d8:93:65:95:f9:6b:c1:f7:57:ae: 65:e8:8e:bf:84:02:43:dd:b5:71:61:29:8b:6e:50:bc:fe:bd: 74:5d:65:d2:d8:38:63:82:15:82:47:13:46:fe:7d:38:c9:7d: bc:32:2e:4f:71:cd:0f:f3:a5:fe:79:99:f7:b9:26:00:6e:82: 40:8f:22:a7:b8:ac:be:d3:3e:27:5a:d7:15:55:a8:0e:90:cb: d7:f0:1a:43:cc:56:f1:cb:6d:74:78:75:07:35:d4:1f:19:ca: 86:fe:f9:ff:7a:b0:17:73:83:71:ee:4b:e6:5b:a3:c3:3f:75: 83:fd:43:85:d1:8f:e6:81:d0:f3:c7:85:b2:f2:72:6b:f5:58: 58:14:03:bf:2f:23:25:d6:f5:8d:20:05:c9:cf:fb:f6:10:63: 41:25:c9:a3:5d:30:1d:16:db:3f:fe:cb:85:41:76:e7:bd:75: da:1c:fb:d8:5e:4d:97:64:7c:94:47:6b:2f:ba:cc:0c:21:7d: 52:34:8d:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQm+RrNHOj/+ImaN5wfxxaKywWZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNDExMjEwOTI3MDBaFw0yNDExMjQxNTU0MDBaMDMxMTAvBgNV BAMTKEE4NjExNzlGREE0NEY1NjMxNzI5QTE1NTlGQzg3RDk0Q0RFQUREQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/w163V3xhJvx0hiOmQrtPucAN Y2Fa83eeLr9e+MbpseuG8E87yBCbprXuY683vID8kcd0F145W2xihlHr795KX8AE V6eyGvl9rx1Q1snwbNN3nf12PignR99n+/4jKHHPNoxVhWj1pQkjHLR0v6NVOcHQ MwbIfH9fCcu4F9BUimXsxnORWXDQN+/0k3qNrigyu5Wuqv0TKCs1u/UDrkZOVI7c dPsGkbm/8538zZElMPKDznHDXDmZ3RMtC7px5V5T6NB83TpyJ+2YRkHwRVfdJ3A3 X2PBT+1scTu2h5LV19VHXJhPxwk1OkkGLf/Zf9uyh+ban1nwlW72vh5jarrZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqGEXn9pE9WMXKaFVn8h9lM3q3a8wHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8yU49P6ELY4RmgDcItsm76uRsVoesEx33m 61VWHr7c7/zI+Cbvkwru6Ew8xeMlFh1ndIDy+HCV4DW2yp262JNllflrwfdXrmXo jr+EAkPdtXFhKYtuULz+vXRdZdLYOGOCFYJHE0b+fTjJfbwyLk9xzQ/zpf55mfe5 JgBugkCPIqe4rL7TPida1xVVqA6Qy9fwGkPMVvHLbXR4dQc11B8Zyob++f96sBdz g3HuS+Zbo8M/dYP9Q4XRj+aB0PPHhbLycmv1WFgUA78vIyXW9Y0gBcnP+/YQY0El yaNdMB0W2z/+y4VBdue9ddoc+9heTZdkfJRHay+6zAwhfVI0jQ4= -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org