$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: dQtnMxykjdTiV0Mror8TsJMPRcG2Tlt/IDlEGhGVl40= Subject key identifier: 32:BD:CB:EC:DF:70:63:9B:59:DC:0F:82:47:8D:5F:29:96:AA:5A:E5 Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 2FE63945B19E4F5095D2F81179C291F17796531E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 0431 Signing time: Mon 25 Nov 2024 06:11:28 +0000 Manifest this update: Mon 25 Nov 2024 06:06:28 +0000 Manifest next update: Thu 28 Nov 2024 17:03:28 +0000 Files and hashes: 1: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: Ir0P4yJrm/PCKvQUSBYu3lhDSEfnRL8nLBdPvVCLefo=) 2: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: h82l4aqeZ/GkiL03ruhQbsIuDDhhbzZLf8UeIgM64CQ=) 3: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: GgQGIVctlCvNlOfS2rEwMFV2kj5ohQAxfF74xcz3/1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e6:39:45:b1:9e:4f:50:95:d2:f8:11:79:c2:91:f1:77:96:53:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Nov 25 06:06:28 2024 GMT Not After : Nov 28 17:03:28 2024 GMT Subject: CN=32BDCBECDF70639B59DC0F82478D5F2996AA5AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:37:d4:79:7c:2b:6f:ca:5f:ca:25:b8:c1:6a: d7:46:b2:91:a1:9f:b1:ab:06:bc:a3:b3:5a:69:31: 97:cc:bf:4e:e9:71:f5:c1:60:e9:7a:e3:10:53:94: 28:c2:04:64:f0:ef:0e:ab:b3:d0:0e:15:43:0e:fa: e8:23:f5:15:d8:31:c6:9f:3f:5c:39:b8:08:8f:63: d5:ad:cc:28:24:b5:a7:18:dc:91:85:91:d6:9f:66: 9d:2d:18:5b:6e:da:50:5e:80:23:f4:b9:e8:b8:f7: 33:36:67:d1:c8:33:c2:1b:d8:4a:16:a8:d3:76:b2: a4:0e:38:b7:33:cd:67:69:3e:80:fd:d7:33:54:f3: f7:3a:61:d5:c8:8f:65:a8:70:e6:96:f5:fa:83:80: 59:61:9a:45:36:57:6e:28:37:02:1a:5c:f3:54:e4: 1d:ad:58:2f:71:4f:f4:36:77:cf:86:06:e6:4d:cc: 74:c9:6b:dc:3c:58:de:8d:76:5c:e8:da:aa:de:3c: 74:34:1c:ac:52:dd:43:e0:87:4c:f3:cc:2f:59:64: cf:b7:4a:49:02:87:6e:d2:b0:1e:f5:e4:ed:55:bb: 92:36:9f:aa:ee:d7:b0:14:6b:74:00:f5:6b:bf:e1: e1:23:d5:a1:5d:19:07:94:30:04:26:90:ef:18:fd: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BD:CB:EC:DF:70:63:9B:59:DC:0F:82:47:8D:5F:29:96:AA:5A:E5 X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:41:2b:76:63:80:68:67:24:0f:a7:a2:ee:3a:2e:d1:12:4c: 28:2c:c4:d4:92:64:b1:f2:2a:73:b4:f6:86:c6:9d:4f:69:8b: 0a:b8:92:4b:a1:31:75:6c:95:04:1d:27:b2:e5:f9:c4:86:36: 63:5d:b0:fe:24:9c:8d:5c:49:f7:63:c4:a3:f6:91:98:64:5e: c2:54:53:19:96:ed:e4:8d:9c:70:d7:cd:d1:b8:01:c5:f3:c6: c5:6f:8c:01:5f:90:37:ef:48:2c:f8:2c:a0:7c:c3:56:7a:09: 7a:b1:3e:c5:d7:7c:9f:78:df:a8:2b:a4:a7:02:0b:6e:8b:a1: 53:16:b4:6f:a1:d8:1a:ff:2e:11:a7:c9:46:a4:c7:49:81:b5: 6b:82:c3:38:95:ba:03:2b:45:4e:54:fd:b0:81:cb:6b:75:0c: cc:93:7d:aa:a3:0d:02:3f:d1:7d:ae:ae:1a:2f:7b:0b:e3:a1: be:f5:d3:a0:c2:4f:66:dd:59:c0:0f:f6:ef:16:b7:9d:34:e7: 84:64:83:bf:51:aa:50:f8:5f:9c:17:2d:6f:35:2d:3a:ce:13: ed:41:d0:95:11:a4:50:44:3d:b2:d8:2c:0d:ad:30:2e:c3:80: 63:56:e3:12:f9:0b:5f:68:92:11:b1:08:63:e1:04:1d:68:0c: 6a:8e:ae:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+Y5RbGeT1CV0vgRecKR8XeWUx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNDExMjUwNjA2MjhaFw0yNDExMjgxNzAzMjhaMDMxMTAvBgNV BAMTKDMyQkRDQkVDREY3MDYzOUI1OURDMEY4MjQ3OEQ1RjI5OTZBQTVBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWN9R5fCtvyl/KJbjBatdGspGh n7GrBryjs1ppMZfMv07pcfXBYOl64xBTlCjCBGTw7w6rs9AOFUMO+ugj9RXYMcaf P1w5uAiPY9WtzCgktacY3JGFkdafZp0tGFtu2lBegCP0uei49zM2Z9HIM8Ib2EoW qNN2sqQOOLczzWdpPoD91zNU8/c6YdXIj2WocOaW9fqDgFlhmkU2V24oNwIaXPNU 5B2tWC9xT/Q2d8+GBuZNzHTJa9w8WN6Ndlzo2qrePHQ0HKxS3UPgh0zzzC9ZZM+3 SkkCh27SsB715O1Vu5I2n6ru17AUa3QA9Wu/4eEj1aFdGQeUMAQmkO8Y/SHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMr3L7N9wY5tZ3A+CR41fKZaqWuUwHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVBK3ZjgGhnJA+nou46LtESTCgsxNSSZLHy KnO09obGnU9piwq4kkuhMXVslQQdJ7Ll+cSGNmNdsP4knI1cSfdjxKP2kZhkXsJU UxmW7eSNnHDXzdG4AcXzxsVvjAFfkDfvSCz4LKB8w1Z6CXqxPsXXfJ9436grpKcC C26LoVMWtG+h2Br/LhGnyUakx0mBtWuCwziVugMrRU5U/bCBy2t1DMyTfaqjDQI/ 0X2urhovewvjob7106DCT2bdWcAP9u8Wt50054Rkg79RqlD4X5wXLW81LTrOE+1B 0JURpFBEPbLYLA2tMC7DgGNW4xL5C19okhGxCGPhBB1oDGqOrkY= -----END CERTIFICATE-----Generated at Mon Nov 25 07:18:15 2024 by rpki-client on console-ams.rpki-client.org