$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: fHDP4dmPp9qqRWrgJ5/fURLev3wAUaBAj9x9TTHaUfU= Subject key identifier: C6:49:0A:97:2A:71:38:21:5A:D4:E3:72:69:93:A4:15:76:42:B0:EC Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 335E13482C135F25CB0788508C9237A21C38739D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 02A3 Signing time: Thu 21 Nov 2024 08:01:25 +0000 Manifest this update: Thu 21 Nov 2024 07:56:25 +0000 Manifest next update: Sun 24 Nov 2024 19:38:25 +0000 Files and hashes: 1: AS45700.roa (hash: cp2rZrJf6e0mq/R0te/rkN2OATdL4cqCz7ZSa3GPTRk=) 2: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: dRt9gtyib4E9s0JDxwqJpL237uBQ4F6mb4upwhyAzrI=) 3: AS10217.roa (hash: 9xXBh+/815DiPPXr8CSofuZZ8QbnRc1BpCZCny2X1lA=) 4: AS147168.roa (hash: e20CGZZgjTyz3kNZT3WXZXnYEX1ApqROokbLe+6uHIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5e:13:48:2c:13:5f:25:cb:07:88:50:8c:92:37:a2:1c:38:73:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Nov 21 07:56:25 2024 GMT Not After : Nov 24 19:38:25 2024 GMT Subject: CN=C6490A972A7138215AD4E3726993A4157642B0EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:51:7d:5b:76:e4:27:b0:0b:90:3b:33:e0: 6a:e2:46:b4:ec:76:0d:ca:e6:fd:12:c8:fc:4e:e1: 3c:a9:88:fc:8f:86:e1:db:a7:b6:02:f9:52:7b:dd: 9c:af:38:d5:56:06:e5:e4:9b:92:cd:b8:58:a2:20: c0:56:f8:62:00:c7:d7:e3:30:ea:cd:ff:36:62:7b: a4:2b:00:b2:65:ac:f3:ae:24:ea:3e:bd:9c:25:82: 2f:a5:a6:93:53:1b:36:20:53:23:d2:c1:15:28:35: 1d:a9:af:d6:f0:d8:80:ee:2a:f7:8a:8f:ce:c8:8d: bc:ae:19:59:0d:15:23:e5:f5:72:2d:8d:28:7c:47: 86:79:e7:45:6f:75:24:fe:69:9b:a2:1b:62:32:40: 79:40:7b:79:18:98:d0:6a:8d:6d:ce:60:33:ed:9d: 2d:17:bd:70:72:ac:3f:35:11:b1:25:cd:ba:93:4b: 53:db:67:0e:98:14:2b:c2:9d:b8:85:5b:45:38:fe: dd:99:ad:0d:19:bf:a8:9a:cf:d8:d8:73:2d:c4:27: a4:e0:17:4e:0e:13:bb:6b:9b:6c:16:76:c6:0d:61: cd:e2:d4:86:79:d2:4d:66:d7:55:7f:db:c1:7a:0a: 37:63:d7:63:2a:ff:5c:af:60:0d:a8:09:33:39:bd: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:49:0A:97:2A:71:38:21:5A:D4:E3:72:69:93:A4:15:76:42:B0:EC X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:25:be:13:e6:ae:02:bb:f1:ef:2e:25:61:10:af:3f:55:a4: 35:85:26:87:34:3d:a4:ec:76:ea:38:c0:85:65:4f:7f:df:8a: 99:92:ea:24:4e:9f:ea:8e:9c:e9:f4:17:6c:38:63:25:4f:44: 5a:fc:34:5f:06:9a:84:98:22:0f:3a:dc:35:67:e9:3d:5c:1f: 8c:95:fa:95:e3:78:1e:e9:59:8a:3c:bc:da:3b:97:59:8a:a2: 19:25:c7:05:75:86:64:02:46:1e:f9:4b:1d:d1:0d:1e:0c:c1: b0:d3:5b:ff:81:09:dc:54:f5:0e:bf:d5:c8:d0:97:9c:45:9d: 16:da:7b:4e:d6:7b:d4:b2:0b:66:4c:c2:c7:c2:d5:2e:3f:45: f0:58:e7:80:32:ff:67:92:60:4b:b3:e5:74:6a:47:8f:40:bc: 88:47:e2:0f:96:81:98:85:80:c5:d9:46:f1:e9:ac:c4:20:a0: e3:a9:08:ff:ef:4b:be:9d:ec:94:ae:48:34:89:b9:31:6b:84: 35:fa:4e:e3:da:27:76:0d:84:f5:05:3c:67:0f:3e:d3:3b:5d: 78:66:d5:d2:24:f4:9e:0c:44:14:f9:24:f5:b2:5c:d9:25:4b: d3:e9:f7:08:1a:c2:31:0d:b7:2b:52:fa:8a:94:22:30:62:74: ff:67:ea:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM14TSCwTXyXLB4hQjJI3ohw4c50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNDExMjEwNzU2MjVaFw0yNDExMjQxOTM4MjVaMDMxMTAvBgNV BAMTKEM2NDkwQTk3MkE3MTM4MjE1QUQ0RTM3MjY5OTNBNDE1NzY0MkIwRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIVF9W3bkJ7ALkDsz4GriRrTs dg3K5v0SyPxO4TypiPyPhuHbp7YC+VJ73ZyvONVWBuXkm5LNuFiiIMBW+GIAx9fj MOrN/zZie6QrALJlrPOuJOo+vZwlgi+lppNTGzYgUyPSwRUoNR2pr9bw2IDuKveK j87IjbyuGVkNFSPl9XItjSh8R4Z550VvdST+aZuiG2IyQHlAe3kYmNBqjW3OYDPt nS0XvXByrD81EbElzbqTS1PbZw6YFCvCnbiFW0U4/t2ZrQ0Zv6iaz9jYcy3EJ6Tg F04OE7trm2wWdsYNYc3i1IZ50k1m11V/28F6Cjdj12Mq/1yvYA2oCTM5vSAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxkkKlypxOCFa1ONyaZOkFXZCsOwwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAolvhPmrgK78e8uJWEQrz9VpDWFJoc0PaTs duo4wIVlT3/fipmS6iROn+qOnOn0F2w4YyVPRFr8NF8GmoSYIg863DVn6T1cH4yV +pXjeB7pWYo8vNo7l1mKohklxwV1hmQCRh75Sx3RDR4MwbDTW/+BCdxU9Q6/1cjQ l5xFnRbae07We9SyC2ZMwsfC1S4/RfBY54Ay/2eSYEuz5XRqR49AvIhH4g+WgZiF gMXZRvHprMQgoOOpCP/vS76d7JSuSDSJuTFrhDX6TuPaJ3YNhPUFPGcPPtM7XXhm 1dIk9J4MRBT5JPWyXNklS9Pp9wgawjENtytS+oqUIjBidP9n6pc= -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org