$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: vLcQ8Nz+GKx0EvY7XnJzxW51HvO44TfX9/LmfZY7a6s= Subject key identifier: D7:30:1D:E3:28:0A:E2:03:7C:E0:41:C3:86:4F:14:49:E2:C0:98:28 Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 438E841A98DC0934EC33D5590C85507616686EAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: EE Signing time: Wed 20 Nov 2024 15:41:53 +0000 Manifest this update: Wed 20 Nov 2024 15:36:53 +0000 Manifest next update: Sat 23 Nov 2024 22:02:53 +0000 Files and hashes: 1: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: iVqTXsar0hA3nszBrArX6ivMW+z5J85a032K5pCbze8=) 2: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: YwTP6biL0vWcLoh9MoLz1Uo2jrp+zMTivqpB+PZ6AqY=) 3: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: eoiqESJfyAflmuyxAiqbZbjAB8pFlV4NBTXMBJ5PgaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8e:84:1a:98:dc:09:34:ec:33:d5:59:0c:85:50:76:16:68:6e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Nov 20 15:36:53 2024 GMT Not After : Nov 23 22:02:53 2024 GMT Subject: CN=D7301DE3280AE2037CE041C3864F1449E2C09828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:28:42:14:ca:f7:0c:51:22:1a:ed:10:3e: 9a:99:5a:5a:97:5d:87:eb:51:55:d9:aa:e7:0b:95: 3a:b5:81:e1:20:b7:80:01:fe:37:7f:a4:e4:75:2a: 20:6f:f2:42:0d:fe:48:8f:c5:d3:f8:99:bb:dd:81: 62:ec:21:72:7d:8d:f1:a9:5a:aa:6b:b3:43:55:08: 76:bd:52:7b:e8:2a:0e:d0:44:f3:ae:ff:87:31:6a: 76:f4:8e:aa:16:37:72:a4:6b:2b:8b:39:ca:d2:50: 9e:23:c3:b9:97:f0:f9:8d:ab:b2:f8:16:8e:ed:6b: ba:c0:86:0e:43:30:bc:b4:b6:0d:fb:c7:e8:58:00: b8:3b:c5:7f:51:69:f9:b2:1d:39:e6:15:67:0a:52: 4b:9c:5f:6e:cf:b5:ca:33:82:59:c1:4b:82:39:05: 3d:be:b9:f7:2d:77:0b:f9:df:c2:4b:5c:d9:ee:68: 41:56:56:04:c8:4a:cd:a1:e4:43:ff:5e:8c:ab:54: e6:8b:45:46:bc:d8:0b:22:31:a0:62:38:86:9d:1f: 62:0c:85:b9:d4:f7:57:f9:9a:37:32:83:91:2f:24: 37:10:e4:d0:8b:b4:aa:5f:81:f3:d2:6e:1f:b8:1a: 5f:d3:4f:ff:5c:3d:b4:46:5c:46:5f:32:f8:c1:4f: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:30:1D:E3:28:0A:E2:03:7C:E0:41:C3:86:4F:14:49:E2:C0:98:28 X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:40:79:f7:d0:63:45:94:66:f5:9c:a3:67:62:f7:43:85:f1: 6c:16:51:af:af:85:5d:e0:3e:14:f9:5f:a7:4b:5f:05:75:be: a2:3a:48:84:e0:99:77:cb:6c:23:73:84:af:7d:e6:a3:93:83: 04:da:2d:87:67:4d:8a:b4:a9:c4:45:f4:47:77:94:b0:0b:1f: 41:f5:c2:37:07:a1:f0:2b:2a:9a:7e:7f:b1:75:88:bd:50:3d: 74:a3:78:20:a3:fc:58:5f:6c:bc:a0:63:56:85:b5:1c:39:78: 8e:2c:b9:56:60:d5:3f:14:aa:80:8e:34:39:02:f2:8f:66:b0: 02:2a:ed:17:e4:ba:a0:91:90:0d:01:a8:9a:6e:31:2f:55:ad: 67:d1:67:50:db:0f:f0:37:04:c1:40:f3:22:42:22:0d:dc:0c: 11:a7:52:60:e8:b9:ab:97:83:24:4f:4c:16:07:24:a7:67:a5: 7f:d3:41:38:51:87:3a:61:5d:3d:3f:fd:c4:d8:a7:df:fc:08: de:20:e1:47:7b:9a:f3:22:35:46:aa:6f:23:1b:e9:73:d3:99: 75:7a:cb:48:8b:29:c5:cb:02:c5:de:4c:de:c6:04:92:4b:ca: 0a:bb:84:68:15:9a:13:ab:14:0b:53:8c:69:18:be:c9:4d:35: f4:12:2d:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ46EGpjcCTTsM9VZDIVQdhZobq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNDExMjAxNTM2NTNaFw0yNDExMjMyMjAyNTNaMDMxMTAvBgNV BAMTKEQ3MzAxREUzMjgwQUUyMDM3Q0UwNDFDMzg2NEYxNDQ5RTJDMDk4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgShCFMr3DFEiGu0QPpqZWlqX XYfrUVXZqucLlTq1geEgt4AB/jd/pOR1KiBv8kIN/kiPxdP4mbvdgWLsIXJ9jfGp Wqprs0NVCHa9UnvoKg7QRPOu/4cxanb0jqoWN3KkayuLOcrSUJ4jw7mX8PmNq7L4 Fo7ta7rAhg5DMLy0tg37x+hYALg7xX9RafmyHTnmFWcKUkucX27PtcozglnBS4I5 BT2+ufctdwv538JLXNnuaEFWVgTISs2h5EP/XoyrVOaLRUa82AsiMaBiOIadH2IM hbnU91f5mjcyg5EvJDcQ5NCLtKpfgfPSbh+4Gl/TT/9cPbRGXEZfMvjBT7JdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1zAd4ygK4gN84EHDhk8USeLAmCgwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpAeffQY0WUZvWco2di90OF8WwWUa+vhV3g PhT5X6dLXwV1vqI6SITgmXfLbCNzhK995qOTgwTaLYdnTYq0qcRF9Ed3lLALH0H1 wjcHofArKpp+f7F1iL1QPXSjeCCj/FhfbLygY1aFtRw5eI4suVZg1T8UqoCONDkC 8o9msAIq7RfkuqCRkA0BqJpuMS9VrWfRZ1DbD/A3BMFA8yJCIg3cDBGnUmDouauX gyRPTBYHJKdnpX/TQThRhzphXT0//cTYp9/8CN4g4Ud7mvMiNUaqbyMb6XPTmXV6 y0iLKcXLAsXeTN7GBJJLygq7hGgVmhOrFAtTjGkYvslNNfQSLWU= -----END CERTIFICATE-----Generated at Wed Nov 20 18:41:50 2024 by rpki-client on console-fra.rpki-client.org