$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft File: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft (raw, json) Hash identifier: 3qLhy5GMyi5rTkvCgn8pudIFh+Q31wcLkGaC3fYk8ks= Subject key identifier: BA:9D:AD:53:32:4A:F5:DD:DA:35:12:C0:B7:51:9D:7F:29:62:B4:41 Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Certificate serial: 786228B87B236C650A55A9F7FE802E2F01E5E3E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft Manifest number: 0487 Signing time: Thu 21 Nov 2024 18:50:48 +0000 Manifest this update: Thu 21 Nov 2024 18:45:48 +0000 Manifest next update: Sun 24 Nov 2024 21:37:48 +0000 Files and hashes: 1: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: OI9Dbbh3AxBZ/lUfEAmwLldVzXyZ0yA+CnQ3viXQgc8=) 2: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: AhfedWLCTEc5EhocODFri+NBZVGPcnF3DEyLO8J+BrU=) 3: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl (hash: zu466n7XLuOXqA3noSBZjudBr7eIRS8x7PdWb1veviQ=) 4: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: dlsqZUGTjCRx+krpGNhgh3Umv+mTDrb/1GV2U8GokZ0=) 5: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: cAMxueznS/nh3h73C9cG6Tq/nGQZqb7kaIFcHdsdkqw=) 6: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: sOLICWbkOQCKZGJuOxKOtJraYeaZ/2+UOwySpa2U+Ms=) 7: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: OT+Mk5WwssGJkg82hSQpE4gvwieaMEJQhhjdSn/cLTY=) 8: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: 71jqN8DhE0JKYB0EqMDkvLldp1gfS+xo4HcST08Qg/k=) 9: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: gmlwk1E3suVjn/8fiND0vsV46kLjlNiZNpLWBhFFIPo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 21:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:62:28:b8:7b:23:6c:65:0a:55:a9:f7:fe:80:2e:2f:01:e5:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Validity Not Before: Nov 21 18:45:48 2024 GMT Not After : Nov 24 21:37:48 2024 GMT Subject: CN=BA9DAD53324AF5DDDA3512C0B7519D7F2962B441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:61:7d:5c:ea:4d:ab:08:e2:aa:22:a0:d4: b6:1d:8b:2f:a9:87:24:84:bf:bd:61:9b:f2:d0:d1: 59:47:a9:8c:bc:ae:03:0f:1c:9c:22:fc:e3:19:a8: 49:aa:57:96:65:43:e2:63:ef:1f:7b:42:3a:20:23: 70:79:e3:ba:7c:0e:44:67:3e:45:af:08:85:19:78: db:d2:57:a3:e2:5c:59:5b:15:07:56:11:ee:b4:81: 9d:44:a8:e4:70:06:3d:10:90:44:56:8e:2d:ec:a5: 06:8f:a5:2e:fc:0d:5d:8d:ac:e4:f1:49:8c:95:d7: 75:e7:cf:87:a2:4e:10:0e:0d:a1:8d:08:19:90:fa: c9:71:c0:03:07:48:b8:6a:cc:d7:99:7b:55:e7:53: 3d:fb:7b:36:e9:72:3c:36:6d:d2:7e:55:fb:47:0f: 23:ea:37:95:55:8a:b4:a8:89:b5:80:61:98:00:0f: 1b:6f:c1:e9:5c:4f:db:ef:a6:01:fc:f5:c1:f8:9e: 05:87:e5:d5:63:05:80:25:95:6a:a5:02:8f:46:3f: 2e:69:0c:88:73:17:60:e4:53:51:ec:36:69:c3:a8: 73:6c:79:6e:99:ba:65:0d:67:2b:7c:31:92:ff:e9: af:5f:1a:7c:83:eb:dd:fa:9d:93:d0:b2:c1:11:ef: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9D:AD:53:32:4A:F5:DD:DA:35:12:C0:B7:51:9D:7F:29:62:B4:41 X509v3 Authority Key Identifier: keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e4:69:ac:de:31:9f:d6:00:76:b9:f7:1a:8b:ae:77:dc:11: 21:a4:cb:8a:e8:2d:75:fe:68:a4:46:68:8f:77:ce:44:de:5e: 50:ec:04:0d:b9:1f:64:a0:c8:1b:a4:60:fb:8d:c3:ad:72:99: 95:6b:6d:6c:4e:af:8d:4e:ee:78:66:23:dc:f6:7d:7e:37:ac: 25:ac:2f:6f:fb:b0:5b:1e:93:9f:c1:ad:08:b0:45:b9:7f:6b: 43:d9:31:9d:16:a6:84:c9:06:83:3f:29:2f:d3:23:7e:88:2d: 9b:04:4b:be:45:26:17:53:c5:98:a8:fd:29:4f:d8:22:7c:01: cd:aa:73:5c:81:7b:b6:82:27:74:28:5c:46:b0:72:de:e5:42: 7b:63:09:f6:99:b7:cf:11:93:1c:63:58:c2:5a:4a:54:30:a8: cc:e0:3d:47:88:e7:45:e0:ae:69:ef:91:a7:0e:aa:e9:86:44: af:94:63:1a:75:72:be:42:2b:2d:3a:65:71:e9:dc:e3:e9:51: bb:7d:8b:c1:15:88:09:05:3d:c3:83:b5:a3:87:9b:1b:14:6f: 45:05:c1:b3:df:e7:3a:dd:08:6e:1f:47:88:7f:57:26:d1:8c: 57:9a:48:59:2c:b0:ef:7d:7e:ee:ea:e9:39:0f:dc:7d:2e:70: 5b:81:a3:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGIouHsjbGUKVan3/oAuLwHl4+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2 MTQyRTVGRDAeFw0yNDExMjExODQ1NDhaFw0yNDExMjQyMTM3NDhaMDMxMTAvBgNV BAMTKEJBOURBRDUzMzI0QUY1REREQTM1MTJDMEI3NTE5RDdGMjk2MkI0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwGWF9XOpNqwjiqiKg1LYdiy+p hySEv71hm/LQ0VlHqYy8rgMPHJwi/OMZqEmqV5ZlQ+Jj7x97QjogI3B547p8DkRn PkWvCIUZeNvSV6PiXFlbFQdWEe60gZ1EqORwBj0QkERWji3spQaPpS78DV2NrOTx SYyV13Xnz4eiThAODaGNCBmQ+slxwAMHSLhqzNeZe1XnUz37ezbpcjw2bdJ+VftH DyPqN5VVirSoibWAYZgADxtvwelcT9vvpgH89cH4ngWH5dVjBYAllWqlAo9GPy5p DIhzF2DkU1HsNmnDqHNseW6ZumUNZyt8MZL/6a9fGnyD6936nZPQssER7/HpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUup2tUzJK9d3aNRLAt1GdfylitEEwHwYDVR0j BBgwFoAU0loEoOTlL/Qi2dj7hX0j3GFC5f0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMC9EMjVBMDRBMEU0 RTUyRkY0MjJEOUQ4RkI4NTdEMjNEQzYxNDJFNUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2MTQy RTVGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIz REM2MTQyRTVGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDkaazeMZ/WAHa59xqLrnfcESGky4roLXX+ aKRGaI93zkTeXlDsBA25H2SgyBukYPuNw61ymZVrbWxOr41O7nhmI9z2fX43rCWs L2/7sFsek5/BrQiwRbl/a0PZMZ0WpoTJBoM/KS/TI36ILZsES75FJhdTxZio/SlP 2CJ8Ac2qc1yBe7aCJ3QoXEawct7lQntjCfaZt88RkxxjWMJaSlQwqMzgPUeI50Xg rmnvkacOqumGRK+UYxp1cr5CKy06ZXHp3OPpUbt9i8EViAkFPcODtaOHmxsUb0UF wbPf5zrdCG4fR4h/VybRjFeaSFkssO99fu7q6TkP3H0ucFuBo88= -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:20 2024 by rpki-client on console-fra.rpki-client.org