$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json) Hash identifier: aBT3eonOKs4+Q1HsJMUJjj0JmhDvLLQrFlmbPOyZqls= Subject key identifier: 15:AF:37:E4:E6:87:02:9B:1E:FA:4E:FC:DF:C1:85:79:7E:AD:0B:34 Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 0CBE613F4ED2C163F685BE29DE58F1A7D552BD94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft Manifest number: 0199 Signing time: Fri 22 Nov 2024 06:41:07 +0000 Manifest this update: Fri 22 Nov 2024 06:36:07 +0000 Manifest next update: Mon 25 Nov 2024 09:33:07 +0000 Files and hashes: 1: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: kRpP0BeJh3DcYk/o0PW91y6EIMDXBtYhIc0dJMopnO0=) 2: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: JbiZR5UDYhxEXfL7YVUdRrVmBMf0rkUwLXF2AuItYeE=) 3: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: 89NaN2Qid0Bn8uAEHeLf2je8c86Fr/P9bXEvZ/Ka6sU=) 4: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: DrzrzWSWK8DJhJcjkRZ5Npky0ohInuCUO3X+txS12xg=) 5: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5UCXQT1z6xwrv+p2r1xCa912g8D9t2e/tDPFQBRYTgc=) 6: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: rOVfpQj2SuehZyBOyfzRsFBxxzBQND4glxJf6z0otOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:be:61:3f:4e:d2:c1:63:f6:85:be:29:de:58:f1:a7:d5:52:bd:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Nov 22 06:36:07 2024 GMT Not After : Nov 25 09:33:07 2024 GMT Subject: CN=15AF37E4E687029B1EFA4EFCDFC185797EAD0B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:99:ea:2f:c4:7f:1f:ee:4a:ce:63:ea:ab: aa:91:2f:1c:93:b2:3a:57:9c:fd:c9:c6:9c:75:16: fc:60:66:d2:53:26:d5:d3:33:88:3e:dc:e3:20:08: 37:28:10:9b:fd:ec:7c:89:52:f0:9d:18:03:ab:9c: 92:94:70:9b:cd:a8:46:19:3d:2d:77:1e:64:3d:5c: 87:d5:9c:92:9d:63:7b:16:f3:2a:cc:76:4b:5a:3f: 4a:3f:cf:a2:4a:a1:20:42:0a:50:fb:d2:b5:a3:71: 56:46:51:a2:a3:cf:2b:46:c7:cd:91:8b:a9:ff:6b: 49:f6:f0:5d:7b:8a:cb:46:e2:ab:b8:0c:e1:70:d8: 4a:69:95:74:4f:af:ac:93:0c:5f:ec:1e:75:e8:b3: eb:0f:8f:ee:64:a3:2a:0c:02:6f:8c:1b:0b:94:f5: e3:5d:dc:48:81:6c:10:30:6d:e8:01:7d:d3:9a:f3: 04:e3:1b:65:fe:c1:83:54:74:77:65:e2:b0:49:55: 70:f6:df:e6:3e:ff:b2:82:ac:ac:78:88:aa:a5:b7: 61:9f:c7:af:56:15:4b:7d:88:a7:53:c5:55:5b:8f: 08:7a:6c:7b:6b:9d:52:be:13:6c:af:64:59:c5:c3: 07:42:3e:53:51:25:5f:e5:44:53:93:84:eb:36:bf: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AF:37:E4:E6:87:02:9B:1E:FA:4E:FC:DF:C1:85:79:7E:AD:0B:34 X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:2d:60:3f:d1:ab:49:90:86:45:ab:f5:f6:67:79:00:97:cc: 06:e7:a9:23:76:e4:79:b5:db:d4:87:63:04:b7:8e:90:41:27: 5b:f1:f8:21:91:b1:2d:ac:00:9e:9f:8b:ed:3a:62:3b:a2:be: 2d:86:67:93:f2:0d:55:b3:51:cb:9a:43:74:8f:7a:35:cb:42: 1a:36:11:3a:8f:3e:0f:ff:3f:32:70:98:1d:df:d7:2c:43:1f: f0:be:5b:ec:dd:e6:af:b6:d2:94:f2:6a:0a:6f:af:c1:f2:75: 69:d7:88:64:a2:0d:d5:39:0c:0c:d2:bb:73:50:78:d3:82:aa: 29:14:b6:03:e0:e8:0a:61:4d:8f:21:d8:45:2c:92:73:c0:a4: ae:b1:13:1a:c6:8b:01:02:f6:3b:28:98:b5:fe:c9:42:b3:21: e4:4a:be:97:20:1c:3a:22:27:a0:00:79:ef:99:1b:c5:8e:77: 2e:73:c0:de:96:cc:5c:83:d4:a4:85:5d:1a:43:cb:a5:b7:e6: fa:20:a4:6f:97:61:1c:55:71:ab:83:14:aa:cd:ce:3f:05:4c: 80:fa:f6:59:85:21:99:ce:31:3f:f9:22:86:92:e8:42:da:5b: 0c:ff:cc:3a:12:91:a7:81:db:7e:b0:dd:03:ca:08:ed:2c:c3: 90:6f:42:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDL5hP07SwWP2hb4p3ljxp9VSvZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNDExMjIwNjM2MDdaFw0yNDExMjUwOTMzMDdaMDMxMTAvBgNV BAMTKDE1QUYzN0U0RTY4NzAyOUIxRUZBNEVGQ0RGQzE4NTc5N0VBRDBCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi95nqL8R/H+5KzmPqq6qRLxyT sjpXnP3Jxpx1FvxgZtJTJtXTM4g+3OMgCDcoEJv97HyJUvCdGAOrnJKUcJvNqEYZ PS13HmQ9XIfVnJKdY3sW8yrMdktaP0o/z6JKoSBCClD70rWjcVZGUaKjzytGx82R i6n/a0n28F17istG4qu4DOFw2EpplXRPr6yTDF/sHnXos+sPj+5koyoMAm+MGwuU 9eNd3EiBbBAwbegBfdOa8wTjG2X+wYNUdHdl4rBJVXD23+Y+/7KCrKx4iKqlt2Gf x69WFUt9iKdTxVVbjwh6bHtrnVK+E2yvZFnFwwdCPlNRJV/lRFOThOs2v5ArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFa835OaHApse+k7838GFeX6tCzQwHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3ZGUwNzEtM2FhYS00ZTJlLTk3 NGUtYTc4YzgxNzI5ZjA2LzAvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEw OTlEMkZEODk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMtYD/Rq0mQhkWr9fZneQCXzAbnqSN25Hm1 29SHYwS3jpBBJ1vx+CGRsS2sAJ6fi+06Yjuivi2GZ5PyDVWzUcuaQ3SPejXLQho2 ETqPPg//PzJwmB3f1yxDH/C+W+zd5q+20pTyagpvr8HydWnXiGSiDdU5DAzSu3NQ eNOCqikUtgPg6AphTY8h2EUsknPApK6xExrGiwEC9jsomLX+yUKzIeRKvpcgHDoi J6AAee+ZG8WOdy5zwN6WzFyD1KSFXRpDy6W35vogpG+XYRxVcauDFKrNzj8FTID6 9lmFIZnOMT/5IoaS6ELaWwz/zDoSkaeB236w3QPKCO0sw5BvQvU= -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org