$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: TESIZvYngYvENZhPfgL+/V51rMOdE9UHJ5MiuGVdRPY= Subject key identifier: 32:7D:B4:0B:D2:5B:B3:08:65:C7:F3:BB:4E:2D:1A:5E:96:3E:94:83 Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 448AB6B067B0837E3E6635B15BAB53F10257C0AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 0285 Signing time: Mon 25 Nov 2024 05:00:47 +0000 Manifest this update: Mon 25 Nov 2024 04:55:47 +0000 Manifest next update: Thu 28 Nov 2024 06:34:47 +0000 Files and hashes: 1: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: MWqeWjmTixAOn+Gc9tFKycHUfhr7BF4hgDw5O4FK2PY=) 2: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 5QR0rWF2IYw3MMT+ABenqub20374tAd3/MqhQ2MqKAw=) 3: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: M7ARMW0Syu/e/Atlnmxt/GgYuhrgbrbs/ZkmGuY2nEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8a:b6:b0:67:b0:83:7e:3e:66:35:b1:5b:ab:53:f1:02:57:c0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Nov 25 04:55:47 2024 GMT Not After : Nov 28 06:34:47 2024 GMT Subject: CN=327DB40BD25BB30865C7F3BB4E2D1A5E963E9483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:ae:bb:3d:83:a3:f0:bd:fc:88:12:9f:19: b4:b4:07:ad:b2:e0:16:d6:d0:24:8f:5b:7f:b4:d5: 2f:6b:d7:34:d9:7d:2b:c0:5d:3d:6a:7f:89:47:81: 6b:b9:68:44:13:fa:9d:6f:48:51:41:6a:c7:fc:37: 12:c0:4c:a5:e0:d0:90:42:65:0c:5d:09:92:17:52: 10:e6:e6:21:a7:b9:ad:40:a7:0b:3c:9c:6f:6c:43: 51:3b:38:cb:0e:48:45:3f:35:4d:b9:58:6d:85:e8: 74:01:b8:65:1c:86:69:57:57:01:11:3d:47:82:e9: c1:be:c9:a3:3c:c2:aa:4c:4c:37:37:dd:3f:8b:5c: 2b:73:1e:fe:46:9d:2b:6f:cf:a5:f9:8b:26:0a:55: 67:68:d1:5b:5c:98:55:d4:db:9e:f7:4c:6c:76:a4: f3:8e:2e:42:c7:19:b4:ca:56:82:0c:47:0a:52:37: 5d:9b:de:6e:b1:56:65:8f:83:0c:27:ec:11:a9:6b: df:85:d9:9b:5d:14:87:36:ba:dd:4e:3f:93:9e:09: 55:c3:de:82:14:f9:c1:1f:79:d8:15:1f:af:a1:bf: 32:8b:aa:b4:4c:31:45:54:5c:9e:e4:a2:27:9d:ee: 66:60:c5:b7:e6:d4:97:f0:34:5f:8d:cf:3a:3b:c0: ea:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:B4:0B:D2:5B:B3:08:65:C7:F3:BB:4E:2D:1A:5E:96:3E:94:83 X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:56:5d:75:b5:8a:e3:79:99:3c:61:e0:76:78:d8:80:ff:87: cc:f1:d0:0c:fd:12:71:df:9e:69:85:d5:00:95:56:c0:f3:d6: d7:29:99:93:b9:49:66:5a:a7:76:42:5e:75:16:d0:8a:e0:02: 34:2a:c9:98:cd:89:46:f6:7b:99:f0:ae:42:ff:e8:46:af:b2: 57:01:10:b3:b3:9d:dc:fd:c6:82:59:a2:ca:2a:03:45:96:3c: 3a:3f:b6:7d:64:70:71:82:fe:ca:8a:7c:89:e5:ac:da:a4:ec: ca:5c:ef:a0:38:81:ac:47:f8:70:0a:5f:54:60:70:13:50:ae: 7c:03:bd:0f:23:8f:f9:1e:b2:e6:77:21:59:be:cf:e8:cf:21: 97:53:07:3b:a6:c0:e9:40:aa:e6:d6:26:3f:7b:ac:69:73:13: 03:ae:cb:8a:0f:f3:47:9e:cf:d3:2a:f7:67:25:d6:fa:39:8d: f8:1a:e8:73:d1:a5:40:aa:e4:0b:32:82:6a:1a:f4:5c:f4:40: f9:04:30:72:50:ad:1f:c6:9d:6e:da:e3:38:00:b4:a9:ad:75: bb:2b:3f:cb:0b:b7:e4:fd:ad:0e:e9:18:94:91:4d:b5:e2:be: a1:af:27:cf:c3:b9:1f:33:42:d5:f9:8b:a5:ef:78:d0:b6:a9: 82:a7:68:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURIq2sGewg34+ZjWxW6tT8QJXwKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNDExMjUwNDU1NDdaFw0yNDExMjgwNjM0NDdaMDMxMTAvBgNV BAMTKDMyN0RCNDBCRDI1QkIzMDg2NUM3RjNCQjRFMkQxQTVFOTYzRTk0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4K67PYOj8L38iBKfGbS0B62y 4BbW0CSPW3+01S9r1zTZfSvAXT1qf4lHgWu5aEQT+p1vSFFBasf8NxLATKXg0JBC ZQxdCZIXUhDm5iGnua1Apws8nG9sQ1E7OMsOSEU/NU25WG2F6HQBuGUchmlXVwER PUeC6cG+yaM8wqpMTDc33T+LXCtzHv5GnStvz6X5iyYKVWdo0VtcmFXU2573TGx2 pPOOLkLHGbTKVoIMRwpSN12b3m6xVmWPgwwn7BGpa9+F2ZtdFIc2ut1OP5OeCVXD 3oIU+cEfedgVH6+hvzKLqrRMMUVUXJ7koied7mZgxbfm1JfwNF+Nzzo7wOpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMn20C9Jbswhlx/O7Ti0aXpY+lIMwHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVWXXW1iuN5mTxh4HZ42ID/h8zx0Az9EnHf nmmF1QCVVsDz1tcpmZO5SWZap3ZCXnUW0IrgAjQqyZjNiUb2e5nwrkL/6EavslcB ELOzndz9xoJZosoqA0WWPDo/tn1kcHGC/sqKfInlrNqk7Mpc76A4gaxH+HAKX1Rg cBNQrnwDvQ8jj/kesuZ3IVm+z+jPIZdTBzumwOlAqubWJj97rGlzEwOuy4oP80ee z9Mq92cl1vo5jfga6HPRpUCq5Asygmoa9Fz0QPkEMHJQrR/GnW7a4zgAtKmtdbsr P8sLt+T9rQ7pGJSRTbXivqGvJ8/DuR8zQtX5i6XveNC2qYKnaKU= -----END CERTIFICATE-----Generated at Mon Nov 25 06:02:38 2024 by rpki-client on console-ams.rpki-client.org