$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: S/+hTmBdArhvpVmvzkqOP7NvnsvRO3sKJ3xi+UT85BQ= Subject key identifier: 55:5C:08:E7:5C:E3:DC:82:2A:72:26:79:E1:47:4C:56:23:FC:28:A4 Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 77FB50C31D75E7E5435EDF955B598CE41EDA6327 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: 33 Signing time: Fri 22 Nov 2024 00:21:32 +0000 Manifest this update: Fri 22 Nov 2024 00:16:32 +0000 Manifest next update: Mon 25 Nov 2024 11:34:32 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: 0vqEjbzJ2oTN8YUg5plSL7bME0j1cq9HckeFz0ga7Y8=) 2: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: 4WyFuS1lCsWHGwSwWXX/6JKaGaFiITPNwvT276WKeXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:fb:50:c3:1d:75:e7:e5:43:5e:df:95:5b:59:8c:e4:1e:da:63:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Nov 22 00:16:32 2024 GMT Not After : Nov 25 11:34:32 2024 GMT Subject: CN=555C08E75CE3DC822A722679E1474C5623FC28A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:d6:8e:c4:66:f1:0b:c2:82:00:c0:06:36: 8e:5f:82:96:2f:2b:a4:eb:7e:48:bb:ca:47:7d:da: 3c:b6:18:d6:ca:6c:70:74:8b:93:d0:87:75:a3:a1: f1:75:bf:3c:f7:2b:7c:38:57:a7:68:ee:19:6c:69: b5:c4:b6:d0:00:ff:38:66:b3:72:50:91:e0:65:71: 5e:51:4e:87:b6:81:06:d5:f8:40:5c:c9:37:b7:b6: 01:60:40:d2:63:c1:39:d0:be:95:d3:cc:e6:31:9a: 07:c1:8b:da:1e:3c:be:5f:bb:fc:93:27:18:f9:6b: d0:e8:65:02:e4:68:c2:ba:83:14:48:81:c8:71:2e: da:07:2d:eb:d0:a5:fc:0d:43:b8:97:3f:18:7d:97: 85:56:f3:27:92:09:9f:83:84:ca:32:c0:b9:7a:21: 5e:9f:8a:df:5f:49:87:ef:1b:b5:e3:87:e8:7f:6e: 6f:2b:a7:25:c7:eb:39:9f:25:e7:63:b4:08:d3:61: 99:67:9f:f0:78:d2:e8:a3:99:1e:0f:1b:1d:5d:de: 65:79:4e:4d:cb:d7:f2:86:d6:14:b2:f3:8b:fc:d3: 9a:6b:35:b0:d5:79:bb:9f:6b:30:24:95:3b:f2:84: 24:20:8d:61:fe:3d:52:b8:3f:09:20:25:2f:a2:52: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5C:08:E7:5C:E3:DC:82:2A:72:26:79:E1:47:4C:56:23:FC:28:A4 X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:45:a4:4b:1e:d4:51:2f:cf:84:b7:3c:97:c7:8f:96:7f:88: 56:7f:0d:66:fa:5c:cc:43:db:47:12:ab:75:cc:f9:11:8b:cd: 29:ce:bb:12:dd:af:d2:bc:60:5b:96:99:6c:78:c4:20:12:7a: 20:e0:67:6e:d0:45:75:67:5b:aa:e7:dd:75:07:fe:8b:e5:cf: 99:80:a6:d2:cb:19:e0:fc:a9:36:b3:83:ec:0c:eb:f5:46:6e: 62:bc:8b:00:57:ee:3d:73:6e:c3:c8:c4:2d:e2:00:72:f6:48: 33:20:b8:fe:d1:7d:4f:41:05:05:0e:7e:db:b2:26:3a:b2:7f: da:41:7a:b9:93:9d:c1:21:06:c1:18:82:3d:0a:8f:a5:55:74: 74:2b:7b:aa:ce:0d:87:03:d1:55:dc:c9:30:6e:be:5a:01:d8: 75:7e:f0:e3:59:fd:bd:f9:39:9e:b2:57:51:3e:a1:5b:a9:40: b2:d0:51:68:f1:a6:8a:9c:60:44:42:31:20:1e:b5:dc:3e:e0: 94:0b:51:46:31:2b:fe:e3:40:eb:87:7b:c3:d3:44:44:86:4b: 83:6b:6b:59:37:3c:f7:7c:b7:21:65:aa:f9:e4:2c:69:4a:23: 9c:e1:c8:9f:9e:30:81:d9:de:f0:29:a9:9c:18:af:5e:49:02: 7c:75:2f:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/tQwx115+VDXt+VW1mM5B7aYycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNDExMjIwMDE2MzJaFw0yNDExMjUxMTM0MzJaMDMxMTAvBgNV BAMTKDU1NUMwOEU3NUNFM0RDODIyQTcyMjY3OUUxNDc0QzU2MjNGQzI4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNUdaOxGbxC8KCAMAGNo5fgpYv K6Trfki7ykd92jy2GNbKbHB0i5PQh3WjofF1vzz3K3w4V6do7hlsabXEttAA/zhm s3JQkeBlcV5RToe2gQbV+EBcyTe3tgFgQNJjwTnQvpXTzOYxmgfBi9oePL5fu/yT Jxj5a9DoZQLkaMK6gxRIgchxLtoHLevQpfwNQ7iXPxh9l4VW8yeSCZ+DhMoywLl6 IV6fit9fSYfvG7Xjh+h/bm8rpyXH6zmfJedjtAjTYZlnn/B40uijmR4PGx1d3mV5 Tk3L1/KG1hSy84v805prNbDVebufazAklTvyhCQgjWH+PVK4PwkgJS+iUnLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVVwI51zj3IIqciZ54UdMViP8KKQwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5FpEse1FEvz4S3PJfHj5Z/iFZ/DWb6XMxD 20cSq3XM+RGLzSnOuxLdr9K8YFuWmWx4xCASeiDgZ27QRXVnW6rn3XUH/ovlz5mA ptLLGeD8qTazg+wM6/VGbmK8iwBX7j1zbsPIxC3iAHL2SDMguP7RfU9BBQUOftuy Jjqyf9pBermTncEhBsEYgj0Kj6VVdHQre6rODYcD0VXcyTBuvloB2HV+8ONZ/b35 OZ6yV1E+oVupQLLQUWjxpoqcYERCMSAetdw+4JQLUUYxK/7jQOuHe8PTRESGS4Nr a1k3PPd8tyFlqvnkLGlKI5zhyJ+eMIHZ3vApqZwYr15JAnx1L0E= -----END CERTIFICATE-----Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org