$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: lQt/FFHJhrJI80BZFO7VpAPbCx39k8wxaoK8rKi+4aY= Subject key identifier: 15:D7:CC:02:B7:01:3C:BB:42:8D:D0:31:77:66:70:F8:20:9E:61:3D Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 23C956ADA86458C3F86C2304490FA927E2EDB84A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: 43 Signing time: Mon 25 Nov 2024 18:32:17 +0000 Manifest this update: Mon 25 Nov 2024 18:27:17 +0000 Manifest next update: Thu 28 Nov 2024 21:07:17 +0000 Files and hashes: 1: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: fPmATf3p519D1nsuyIU7bMDgC3vCa3u+pQyHo3JelLE=) 2: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: vQU9/Xe4tMZcM3qgJOTfXSgscdnd9KaQbrDg6nhEFcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c9:56:ad:a8:64:58:c3:f8:6c:23:04:49:0f:a9:27:e2:ed:b8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Nov 25 18:27:17 2024 GMT Not After : Nov 28 21:07:17 2024 GMT Subject: CN=15D7CC02B7013CBB428DD031776670F8209E613D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a0:5b:b7:56:5a:83:9c:7e:fe:f0:96:8c:27: 1d:ad:8d:1c:36:2c:37:1d:ea:4b:95:5a:5a:32:93: 75:c2:d7:c4:9c:18:98:70:41:1b:49:7f:7e:c2:79: b1:98:69:42:98:e0:c3:13:2f:80:f1:ee:dd:9a:04: 78:ef:db:50:d6:42:42:f5:4e:84:e9:3f:53:bc:81: f3:18:e7:7f:39:e8:87:8f:f9:44:02:d1:4c:4e:97: d3:4a:77:c4:6b:06:5d:3b:3d:32:d0:38:fd:be:78: 4d:18:2a:97:55:7f:b0:53:4c:95:ae:ce:f5:55:e7: 15:3a:15:83:4f:ee:85:31:dd:89:66:ec:2e:b5:a0: fb:59:9c:85:d3:5f:0c:c3:ef:dc:54:e8:46:bc:85: 8f:e9:b0:c8:78:96:c5:59:34:87:15:be:4a:21:00: 89:2a:61:5e:fb:ba:7e:a8:61:a6:dd:98:a9:a6:c4: 11:85:09:01:ff:56:2d:e9:89:e8:8d:4f:38:3c:42: 12:99:85:77:d6:98:a8:b7:75:fd:5f:7e:17:2a:c9: ea:e4:ff:8e:8b:38:2f:d3:5f:c9:48:ab:57:50:af: c6:ec:6f:12:32:4d:29:c9:00:5b:06:24:73:46:19: 4e:f4:1a:86:24:7e:41:ab:53:4e:5c:e0:25:18:0e: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D7:CC:02:B7:01:3C:BB:42:8D:D0:31:77:66:70:F8:20:9E:61:3D X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a0:9c:64:48:8a:3a:ef:29:a3:08:f7:4e:70:9c:3c:5c:27: 9d:b2:39:5d:c8:c2:02:05:e8:3d:2a:d3:19:b3:74:4c:23:a5: 98:39:65:d9:7c:35:5f:c9:aa:48:89:7b:7b:95:45:44:6e:13: ae:0f:63:58:f6:79:88:81:f3:4d:f9:8d:36:bd:bf:41:be:5c: 4d:ab:90:c2:dc:d5:77:2b:68:39:08:4e:33:f3:7b:70:92:f1: 43:0d:76:dc:76:9c:d8:68:69:3a:40:ee:6c:f2:10:92:ab:5a: d8:58:8f:11:a1:ce:ba:37:cd:54:2f:e0:0c:4e:76:d0:69:da: f4:20:2a:a3:24:43:69:59:18:ab:26:98:b5:13:a9:1c:55:11: 27:9a:45:ad:3d:bc:18:36:d0:22:f8:3b:15:8c:c2:d7:4f:77: 0d:28:4e:fb:69:0f:71:be:e8:b1:09:5d:ca:7e:77:2f:cd:25: eb:8a:93:58:2c:34:19:a9:fa:66:e6:89:2b:7d:55:e2:48:ca: 31:27:5f:33:7e:4f:26:c8:44:90:10:d7:58:fb:fb:79:e3:ff: 16:70:49:29:5e:a8:b3:1b:05:3a:b2:f3:6f:ae:e7:8c:d0:4c: 84:d1:bc:90:14:bd:4e:3c:95:4a:16:88:21:5b:8a:76:aa:67: 73:5f:80:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8lWrahkWMP4bCMESQ+pJ+LtuEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNDExMjUxODI3MTdaFw0yNDExMjgyMTA3MTdaMDMxMTAvBgNV BAMTKDE1RDdDQzAyQjcwMTNDQkI0MjhERDAzMTc3NjY3MEY4MjA5RTYxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoFu3VlqDnH7+8JaMJx2tjRw2 LDcd6kuVWloyk3XC18ScGJhwQRtJf37CebGYaUKY4MMTL4Dx7t2aBHjv21DWQkL1 ToTpP1O8gfMY53856IeP+UQC0UxOl9NKd8RrBl07PTLQOP2+eE0YKpdVf7BTTJWu zvVV5xU6FYNP7oUx3Ylm7C61oPtZnIXTXwzD79xU6Ea8hY/psMh4lsVZNIcVvkoh AIkqYV77un6oYabdmKmmxBGFCQH/Vi3pieiNTzg8QhKZhXfWmKi3df1ffhcqyerk /46LOC/TX8lIq1dQr8bsbxIyTSnJAFsGJHNGGU70GoYkfkGrU05c4CUYDqQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFdfMArcBPLtCjdAxd2Zw+CCeYT0wHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWgnGRIijrvKaMI905wnDxcJ52yOV3IwgIF 6D0q0xmzdEwjpZg5Zdl8NV/JqkiJe3uVRURuE64PY1j2eYiB8035jTa9v0G+XE2r kMLc1XcraDkITjPze3CS8UMNdtx2nNhoaTpA7mzyEJKrWthYjxGhzro3zVQv4AxO dtBp2vQgKqMkQ2lZGKsmmLUTqRxVESeaRa09vBg20CL4OxWMwtdPdw0oTvtpD3G+ 6LEJXcp+dy/NJeuKk1gsNBmp+mbmiSt9VeJIyjEnXzN+TybIRJAQ11j7+3nj/xZw SSleqLMbBTqy82+u54zQTITRvJAUvU48lUoWiCFbinaqZ3NfgJ0= -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:13 2024 by rpki-client on console-ams.rpki-client.org