$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: LeH7NNcXPAupOGr1aB07HrAJVEt0rZp0YJtDrM50CtY= Subject key identifier: 7E:C0:9E:5F:38:4B:64:08:92:F5:81:55:64:63:B2:2D:42:0B:1C:8B Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 2121456143E68BB2F1C989766A5B7C63DC5DA98C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 043F Signing time: Thu 21 Nov 2024 09:41:50 +0000 Manifest this update: Thu 21 Nov 2024 09:36:50 +0000 Manifest next update: Sun 24 Nov 2024 20:21:50 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: sGuZ949AervQFXJY8lGdE9UQu3pLwaxX5H+2ASfBYqU=) 2: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: ZUwy08QgFzxaXcxClqQhVbx1vSi1p/knCwET/eGZ2mg=) 3: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: alDRN92tlwgNSOsmGcO4bYs5k2yVLt0hg1F97xm610Y=) 4: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: igZUGj9WZ1hy1WLn/uUmoBiqqH+6kXF5u53eZj34KGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:21:45:61:43:e6:8b:b2:f1:c9:89:76:6a:5b:7c:63:dc:5d:a9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Nov 21 09:36:50 2024 GMT Not After : Nov 24 20:21:50 2024 GMT Subject: CN=7EC09E5F384B640892F581556463B22D420B1C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:4b:d5:5d:f6:72:82:a9:a1:20:9c:54:5b: 67:cf:78:c2:b6:fe:19:57:89:5c:38:72:dd:57:3b: a8:d2:65:b9:92:5c:78:a1:8b:ea:d8:f9:2d:b5:db: c5:73:1f:7c:bb:0b:40:4c:f1:c6:51:89:6b:e9:64: 0d:d4:fc:69:d1:15:95:dd:5f:2a:20:73:84:c2:ec: 0c:5d:0b:7a:e5:ee:00:00:6e:61:cd:bb:b9:5f:14: 74:c5:05:f5:51:d3:02:64:90:48:64:c8:17:40:2d: 25:72:b8:98:3c:6a:ed:b0:e5:78:1c:34:a9:8b:82: ba:93:63:15:87:38:db:c4:32:30:5e:dc:b0:85:33: 1e:31:0e:05:7b:13:36:42:39:59:f5:79:c7:4e:2e: a6:4a:27:38:11:1d:df:0f:7c:2b:a4:54:0c:2d:c9: d2:48:55:4a:a5:2d:7e:ea:42:cb:85:f3:5d:de:48: d7:60:89:b6:d7:ca:01:35:a1:60:a9:b6:56:28:45: 28:5d:1f:47:f3:61:7e:e1:b5:23:65:6c:ba:06:0c: e9:ff:b4:c1:ef:82:2b:25:cb:46:7c:9d:d6:a1:77: b9:a5:86:e7:d5:2f:2d:2e:7f:26:d0:b3:e0:36:4d: b0:df:c1:dd:ac:dd:43:a8:43:85:05:75:cc:6f:83: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C0:9E:5F:38:4B:64:08:92:F5:81:55:64:63:B2:2D:42:0B:1C:8B X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:02:9e:5a:28:38:23:be:0b:16:1a:a9:74:a6:62:fd:d6:f4: 39:be:09:79:97:e0:80:34:5f:60:fb:4a:9d:23:bf:38:b5:d4: 70:f7:52:30:d6:71:3a:58:b8:32:ae:36:3b:1c:35:2d:9b:87: c2:2c:40:31:7c:af:d1:44:e2:f9:5e:c4:fe:2b:6c:52:8a:0f: 30:5a:03:9c:cd:e3:83:d7:0a:f1:5b:14:fc:8d:43:6e:66:63: 4e:b8:c2:e6:fd:ad:aa:c1:2d:35:ba:58:ba:c0:19:27:3d:6b: b8:50:b9:e5:64:0e:2c:79:f7:67:d6:43:01:36:09:da:b4:a7: 58:db:72:7d:71:dd:9f:41:36:32:9f:de:bf:28:ae:74:33:55: f5:90:0a:33:b9:0d:02:4e:34:7d:d2:27:92:b9:a8:ef:cf:d4: 60:11:a6:0e:fb:82:4b:5c:46:43:6d:91:73:d7:28:40:fc:46: b8:4d:9b:c2:52:5e:6b:75:e5:b9:83:39:bb:08:ca:de:39:25: 74:ef:9a:9e:15:60:ff:06:a8:06:da:42:b8:62:24:41:ed:12: fb:4d:cc:76:52:f7:c4:a2:39:11:68:17:b8:b1:a6:5b:d0:64: cb:f5:6a:71:52:ef:28:7f:7b:7b:a1:c3:58:23:a8:43:e1:ea: 83:07:03:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISFFYUPmi7LxyYl2alt8Y9xdqYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNDExMjEwOTM2NTBaFw0yNDExMjQyMDIxNTBaMDMxMTAvBgNV BAMTKDdFQzA5RTVGMzg0QjY0MDg5MkY1ODE1NTY0NjNCMjJENDIwQjFDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RUvVXfZygqmhIJxUW2fPeMK2 /hlXiVw4ct1XO6jSZbmSXHihi+rY+S2128VzH3y7C0BM8cZRiWvpZA3U/GnRFZXd Xyogc4TC7AxdC3rl7gAAbmHNu7lfFHTFBfVR0wJkkEhkyBdALSVyuJg8au2w5Xgc NKmLgrqTYxWHONvEMjBe3LCFMx4xDgV7EzZCOVn1ecdOLqZKJzgRHd8PfCukVAwt ydJIVUqlLX7qQsuF813eSNdgibbXygE1oWCptlYoRShdH0fzYX7htSNlbLoGDOn/ tMHvgisly0Z8ndahd7mlhufVLy0ufybQs+A2TbDfwd2s3UOoQ4UFdcxvg/WtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfsCeXzhLZAiS9YFVZGOyLUILHIswHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQCnlooOCO+CxYaqXSmYv3W9Dm+CXmX4IA0 X2D7Sp0jvzi11HD3UjDWcTpYuDKuNjscNS2bh8IsQDF8r9FE4vlexP4rbFKKDzBa A5zN44PXCvFbFPyNQ25mY064wub9rarBLTW6WLrAGSc9a7hQueVkDix592fWQwE2 Cdq0p1jbcn1x3Z9BNjKf3r8ornQzVfWQCjO5DQJONH3SJ5K5qO/P1GARpg77gktc RkNtkXPXKED8RrhNm8JSXmt15bmDObsIyt45JXTvmp4VYP8GqAbaQrhiJEHtEvtN zHZS98SiORFoF7ixplvQZMv1anFS7yh/e3uhw1gjqEPh6oMHA94= -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:50 2024 by rpki-client on console-ams.rpki-client.org