$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: iWk7/JTZsuKBFcXQJxWLmPcO1pFEqO4M2ztk+EuEzsc= Subject key identifier: E8:CE:E0:08:A8:F2:46:8E:4A:B3:06:12:FA:18:06:C7:F5:39:7E:C1 Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 1F107C8F19E60259D5B98E8F183AC642CA9E9C8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 01C4 Signing time: Thu 21 Nov 2024 22:32:12 +0000 Manifest this update: Thu 21 Nov 2024 22:27:12 +0000 Manifest next update: Mon 25 Nov 2024 01:59:12 +0000 Files and hashes: 1: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: IYNpeYOXXNXukMuAdlgWGQRAGgWwOT8Vw+M3arFX/oQ=) 2: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: gGzEljFEKCT/qi4rQqwJoROdUBkCcQVgHtbHsN3vfZY=) 3: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: MCnkQ/dpu2kFOdk5oMz5Mu22plFa3j93DAfSetDmpxU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:10:7c:8f:19:e6:02:59:d5:b9:8e:8f:18:3a:c6:42:ca:9e:9c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Nov 21 22:27:12 2024 GMT Not After : Nov 25 01:59:12 2024 GMT Subject: CN=E8CEE008A8F2468E4AB30612FA1806C7F5397EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d9:b1:99:db:91:08:57:55:d5:c6:6a:ef:9d: 25:68:5b:d7:16:17:4f:f8:57:bc:62:4d:02:64:39: cb:d1:1d:5b:4c:1e:32:93:23:4f:1c:26:f5:82:4c: e2:16:5b:7a:c0:70:f6:fc:e3:52:aa:49:db:bd:f5: 3b:9a:d4:d6:40:cc:f8:27:c8:0e:2e:a3:73:c7:a2: 38:93:49:40:ef:c5:97:6f:e4:25:ec:86:60:f8:7e: b2:fb:ad:e0:1a:21:03:1f:d0:28:b1:fa:cd:d2:e2: da:1b:8c:d3:2e:eb:da:84:79:19:05:76:29:5b:23: e6:fc:81:af:d1:29:8a:55:e1:85:94:c4:fb:75:e6: 64:6f:3c:5b:8a:2c:ed:d3:db:d6:63:8b:70:70:71: e4:2d:44:3f:54:4b:36:dc:e2:42:b9:39:ed:6c:31: 57:98:84:51:8b:b0:14:d7:c8:b9:61:e7:96:23:ad: ae:0b:6e:86:e2:49:77:81:55:0f:ef:9a:b9:64:55: 60:ac:6c:ad:97:71:85:7e:f3:54:95:9d:21:68:01: 3c:07:86:0b:1c:db:2c:ad:7f:59:b2:30:b5:2c:4f: 1e:6e:6f:57:01:09:7f:fa:30:b6:b3:6c:d8:87:70: 7f:04:81:dd:12:54:58:dd:48:7f:03:6d:9b:5a:99: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CE:E0:08:A8:F2:46:8E:4A:B3:06:12:FA:18:06:C7:F5:39:7E:C1 X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b1:24:a9:d0:fa:68:4a:0b:5f:c1:2d:5a:4e:df:60:48:22: ee:d0:f9:86:17:97:2e:85:7d:85:bf:17:8f:03:d2:e5:02:8e: d7:f4:3a:f8:91:47:cc:d4:fe:40:43:d9:02:06:78:a2:de:c4: b9:b1:2c:09:79:5b:2a:eb:59:7d:1f:c1:84:53:48:7f:ad:99: 4e:72:76:2c:3f:85:dc:02:bf:14:53:2e:aa:40:57:54:d5:c5: b8:61:48:f8:6b:bf:96:64:3a:67:7d:55:47:b5:e4:c3:3a:96: e6:9a:12:76:43:a6:c1:f2:dc:eb:9a:24:53:eb:3b:df:c3:a9: ad:56:16:ca:77:ac:90:56:12:f5:bb:dd:93:12:14:0b:f5:ef: df:24:0b:59:98:f5:77:c5:d5:da:a5:68:da:58:46:42:c2:18: 94:ba:b8:4c:3f:63:53:51:bd:40:e9:61:7d:f0:fc:c2:8b:93: 82:fb:2b:66:4e:85:a1:93:62:ff:fd:a0:b2:09:20:3b:43:fd: 0b:87:27:34:88:98:95:fb:3e:d1:a2:61:cb:23:24:4b:c1:b7: a3:5e:46:13:b2:90:9f:53:00:74:1d:43:a6:34:a5:a2:be:6e: 2a:f4:13:38:ad:d5:f9:bf:f0:f5:8c:0d:af:15:b6:fa:2e:76: 16:e4:4c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxB8jxnmAlnVuY6PGDrGQsqenIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNDExMjEyMjI3MTJaFw0yNDExMjUwMTU5MTJaMDMxMTAvBgNV BAMTKEU4Q0VFMDA4QThGMjQ2OEU0QUIzMDYxMkZBMTgwNkM3RjUzOTdFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo2bGZ25EIV1XVxmrvnSVoW9cW F0/4V7xiTQJkOcvRHVtMHjKTI08cJvWCTOIWW3rAcPb841KqSdu99Tua1NZAzPgn yA4uo3PHojiTSUDvxZdv5CXshmD4frL7reAaIQMf0Cix+s3S4tobjNMu69qEeRkF dilbI+b8ga/RKYpV4YWUxPt15mRvPFuKLO3T29Zji3BwceQtRD9USzbc4kK5Oe1s MVeYhFGLsBTXyLlh55Yjra4LbobiSXeBVQ/vmrlkVWCsbK2XcYV+81SVnSFoATwH hgsc2yytf1myMLUsTx5ub1cBCX/6MLazbNiHcH8Egd0SVFjdSH8DbZtameXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6M7gCKjyRo5KswYS+hgGx/U5fsEwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2xJKnQ+mhKC1/BLVpO32BIIu7Q+YYXly6F fYW/F48D0uUCjtf0OviRR8zU/kBD2QIGeKLexLmxLAl5WyrrWX0fwYRTSH+tmU5y diw/hdwCvxRTLqpAV1TVxbhhSPhrv5ZkOmd9VUe15MM6luaaEnZDpsHy3OuaJFPr O9/Dqa1WFsp3rJBWEvW73ZMSFAv1798kC1mY9XfF1dqlaNpYRkLCGJS6uEw/Y1NR vUDpYX3w/MKLk4L7K2ZOhaGTYv/9oLIJIDtD/QuHJzSImJX7PtGiYcsjJEvBt6Ne RhOykJ9TAHQdQ6Y0paK+bir0Ezit1fm/8PWMDa8VtvoudhbkTL4= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org