$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: mnFDYQuB64vO4AlHbuW8YDSJOPlmCBlekPgM6PJe1Y8= Subject key identifier: 59:97:EC:63:2D:E5:BB:09:FD:A2:68:8C:91:62:21:3C:22:1A:97:C2 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 462B225004E30CD49579EB29C9D1825A9AC0A928 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 0485 Signing time: Fri 22 Nov 2024 18:12:23 +0000 Manifest this update: Fri 22 Nov 2024 18:07:23 +0000 Manifest next update: Mon 25 Nov 2024 19:57:23 +0000 Files and hashes: 1: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: 9y4X6Q8A36s4jUlnuNwCcRKhFlpKUgIVfBI5GrEnYlY=) 2: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: slhG6aE/lNA4aRVSDQs/dfGcG5yIePIerNTIUaHIm2A=) 3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: dqqK2b30QcWDUvsFT2ynFnDCTSvisXhj5I9h/iJg6fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2b:22:50:04:e3:0c:d4:95:79:eb:29:c9:d1:82:5a:9a:c0:a9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Nov 22 18:07:23 2024 GMT Not After : Nov 25 19:57:23 2024 GMT Subject: CN=5997EC632DE5BB09FDA2688C9162213C221A97C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:be:18:08:05:80:56:4d:4e:ee:e7:72:a3: 2e:3a:a3:25:63:bb:21:dd:6b:ed:ee:70:65:ff:7e: cf:8e:7a:70:32:8a:12:da:97:5f:03:c9:c1:4c:b5: 6e:e0:73:99:c0:e9:35:38:7b:99:3b:fd:6b:35:57: 63:d5:cc:b7:6b:e5:a1:90:c2:c0:35:f5:ca:20:23: dc:f5:bc:d6:55:dc:5a:e4:67:be:27:5a:33:b4:c3: 70:34:54:ba:b5:f9:48:b6:c0:54:0f:8e:1b:b6:87: e4:36:7e:53:d0:f2:e7:bd:c9:1f:3c:91:03:8f:ef: 27:72:3d:47:66:6c:1b:69:d6:32:62:67:28:c8:ff: 9d:bc:ae:3d:87:41:3c:58:19:d3:90:66:08:0d:ab: 76:f3:a2:9b:b5:07:08:fc:a7:0c:00:bb:5d:93:d2: 13:b3:e9:78:b3:e4:14:c5:95:3b:43:ff:e6:79:a2: e4:ab:95:97:b8:b0:00:1c:c2:50:1f:80:b1:d0:6f: e1:2c:d8:d0:06:dd:49:79:b5:0c:ba:53:36:1d:56: 9c:df:0f:2c:82:5f:27:54:0f:a3:8e:87:62:46:73: ce:25:69:89:ca:42:b9:dd:8e:e1:b9:34:dd:f8:74: c9:00:8e:92:0c:2a:05:66:7e:d3:f8:4d:0a:73:f9: d9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:97:EC:63:2D:E5:BB:09:FD:A2:68:8C:91:62:21:3C:22:1A:97:C2 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:db:4c:9d:06:a5:3d:5f:32:12:c1:87:4a:20:c1:d2:1d:39: 4a:80:15:71:1c:35:c0:67:0a:6b:e6:13:85:26:ab:31:61:3c: 1a:c5:69:1b:de:3c:b4:68:ed:7e:26:7d:b5:51:15:cf:04:08: c4:14:43:a0:80:a3:bc:11:6d:fb:21:1d:64:2e:7d:65:99:25: c4:72:d7:79:33:ef:26:93:2c:a4:9e:9e:bc:e1:77:61:6b:40: 64:87:ac:c2:2a:a3:2b:d8:cf:6c:5f:eb:81:c3:8d:ce:5f:c0: e6:f4:f9:fd:3c:8a:dd:ab:5b:dd:41:50:e3:59:2d:78:a6:10: 25:48:38:87:48:9e:e6:f9:9b:af:70:2e:4b:4d:b3:89:83:79: e5:44:0e:61:76:6a:34:3e:8c:85:c4:eb:3e:bc:59:14:fd:35: d4:f2:bb:f8:58:4e:ab:ac:e3:68:16:9e:5f:4b:04:e9:e4:c2: 52:6a:56:02:c7:59:ac:22:2f:26:b4:f6:d8:04:42:66:22:7a: ef:7e:cb:11:5f:75:57:37:50:d8:e8:22:d7:94:1b:da:ab:28: 8b:93:fa:36:32:3c:d0:f3:74:36:f5:17:ff:b8:9a:86:06:7e: c7:7d:6a:4f:5f:a9:6c:d0:78:89:7c:e9:1f:3d:6b:8f:a8:43: 6b:a0:91:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURisiUATjDNSVeespydGCWprAqSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNDExMjIxODA3MjNaFw0yNDExMjUxOTU3MjNaMDMxMTAvBgNV BAMTKDU5OTdFQzYzMkRFNUJCMDlGREEyNjg4QzkxNjIyMTNDMjIxQTk3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYib4YCAWAVk1O7udyoy46oyVj uyHda+3ucGX/fs+OenAyihLal18DycFMtW7gc5nA6TU4e5k7/Ws1V2PVzLdr5aGQ wsA19cogI9z1vNZV3FrkZ74nWjO0w3A0VLq1+Ui2wFQPjhu2h+Q2flPQ8ue9yR88 kQOP7ydyPUdmbBtp1jJiZyjI/528rj2HQTxYGdOQZggNq3bzopu1Bwj8pwwAu12T 0hOz6Xiz5BTFlTtD/+Z5ouSrlZe4sAAcwlAfgLHQb+Es2NAG3Ul5tQy6UzYdVpzf DyyCXydUD6OOh2JGc84laYnKQrndjuG5NN34dMkAjpIMKgVmftP4TQpz+dkTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZfsYy3luwn9omiMkWIhPCIal8IwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTbTJ0GpT1fMhLBh0ogwdIdOUqAFXEcNcBn CmvmE4UmqzFhPBrFaRvePLRo7X4mfbVRFc8ECMQUQ6CAo7wRbfshHWQufWWZJcRy 13kz7yaTLKSenrzhd2FrQGSHrMIqoyvYz2xf64HDjc5fwOb0+f08it2rW91BUONZ LXimECVIOIdInub5m69wLktNs4mDeeVEDmF2ajQ+jIXE6z68WRT9NdTyu/hYTqus 42gWnl9LBOnkwlJqVgLHWawiLya09tgEQmYieu9+yxFfdVc3UNjoIteUG9qrKIuT +jYyPNDzdDb1F/+4moYGfsd9ak9fqWzQeIl86R89a4+oQ2ugkes= -----END CERTIFICATE-----Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org