$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft File: 19B904DED71657E1E79F9B50507DCCCB817E9635.mft (raw, json) Hash identifier: uIjcZU32EsQXocxnoFAYEyVtRXh+ryGsdDX2uv/b9Ow= Subject key identifier: CF:1E:4D:47:C4:A0:90:2A:3B:DA:62:1D:80:53:10:41:DD:F5:11:DF Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 Certificate issuer: /CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Certificate serial: 5CB0850E034D99241EA8BCC8019ACB9BC8C50C55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft Manifest number: 0142 Signing time: Fri 22 Nov 2024 15:51:23 +0000 Manifest this update: Fri 22 Nov 2024 15:46:23 +0000 Manifest next update: Mon 25 Nov 2024 23:10:23 +0000 Files and hashes: 1: 3130332e38332e38342e302f32342d3234203d3e20313431313430.roa (hash: JSBjMNgm6VrWNBbXhh9GFia7rRVRLaQwOX5rnhZkaGk=) 2: 19B904DED71657E1E79F9B50507DCCCB817E9635.crl (hash: ot4kwFLS0cNEETlKEzFHjNv6/L0kP+1jjZbbOzkLtPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b0:85:0e:03:4d:99:24:1e:a8:bc:c8:01:9a:cb:9b:c8:c5:0c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Validity Not Before: Nov 22 15:46:23 2024 GMT Not After : Nov 25 23:10:23 2024 GMT Subject: CN=CF1E4D47C4A0902A3BDA621D80531041DDF511DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:b9:29:97:57:d4:fa:86:b6:fc:07:f0:aa: 0f:bd:99:7d:3c:4c:32:cf:88:c2:80:a4:42:b9:d6: 1d:4e:bd:f4:20:eb:55:d7:8e:a2:c8:ec:f8:0f:a0: 8e:a1:a5:f0:4b:f8:cb:14:81:ae:48:0f:91:d7:ab: e3:6f:89:42:98:36:a2:04:fe:c3:94:91:8b:46:fa: 01:e9:96:6b:6c:16:5d:e8:eb:37:fe:2c:2f:12:19: 81:19:2a:31:aa:d4:42:67:00:6a:57:c2:8d:6d:7a: 0a:2d:d5:45:45:37:83:02:f6:1b:28:fd:fc:8d:82: 10:c4:f5:d9:8b:04:39:26:fa:fe:d2:84:e7:49:56: 32:6c:fb:ac:b9:2f:26:b2:7a:4b:d4:21:55:64:d5: 8b:16:3a:72:35:37:81:22:a8:32:25:ed:83:94:26: 85:35:64:1a:b3:8c:95:dd:44:ce:b3:f3:5a:d1:bf: 81:83:fd:5f:b2:3f:68:1b:97:d6:ac:4d:5c:18:39: c8:0c:58:b6:69:47:6e:41:b3:ba:f9:21:3c:bf:83: f9:ba:53:8c:01:fc:a1:f7:71:60:6f:a1:62:cd:3f: 2e:93:57:15:81:d3:ed:32:98:de:79:c1:ef:ba:5d: 1e:9b:ca:db:26:07:43:58:fa:5b:c9:f8:58:e7:c6: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1E:4D:47:C4:A0:90:2A:3B:DA:62:1D:80:53:10:41:DD:F5:11:DF X509v3 Authority Key Identifier: keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6d:28:18:cd:44:e7:0f:0b:91:7d:c8:8e:b0:ec:ee:4f:b0: 07:f5:c4:a2:50:fb:54:9a:22:a2:05:2b:f2:83:b1:4f:12:4d: 6c:cb:3e:4e:e0:e2:79:24:52:e7:82:d8:29:f8:bd:bd:35:aa: 53:c0:09:28:61:2a:67:68:9c:e5:7d:91:5a:1e:13:5a:4e:3b: 33:d0:74:78:62:19:36:39:3b:e7:28:00:20:cd:66:e0:21:92: 47:d1:91:95:dd:e7:63:22:8c:77:2a:51:1d:2f:e2:70:ea:8e: 12:c7:2e:cf:9e:cd:44:74:fb:0e:cf:62:1d:51:3a:8d:2f:f4: c7:57:d3:5a:7a:b1:b9:cf:49:a2:dc:3a:b2:6a:33:f2:26:a3: 30:0a:30:f5:88:e7:1d:ce:62:54:6a:fc:e2:fd:ef:45:86:53: 4f:f8:48:d9:71:8a:65:5a:cb:f1:0a:4d:3b:d5:92:ad:9a:ff: 7d:5f:35:d2:65:6f:af:bc:54:12:a0:0e:7a:fb:dc:45:50:af: e6:4b:c1:ec:e3:ce:76:02:12:4d:64:78:a4:16:b3:9b:95:6d: dd:60:e5:08:c2:bc:4a:32:76:c7:37:e8:b4:e8:f0:11:2f:76: de:e2:3f:45:46:8a:34:6c:41:a6:de:74:e0:c5:0d:03:02:2a: 97:68:6e:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLCFDgNNmSQeqLzIAZrLm8jFDFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4 MTdFOTYzNTAeFw0yNDExMjIxNTQ2MjNaFw0yNDExMjUyMzEwMjNaMDMxMTAvBgNV BAMTKENGMUU0RDQ3QzRBMDkwMkEzQkRBNjIxRDgwNTMxMDQxRERGNTExREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXHLkpl1fU+oa2/Afwqg+9mX08 TDLPiMKApEK51h1OvfQg61XXjqLI7PgPoI6hpfBL+MsUga5ID5HXq+NviUKYNqIE /sOUkYtG+gHplmtsFl3o6zf+LC8SGYEZKjGq1EJnAGpXwo1tegot1UVFN4MC9hso /fyNghDE9dmLBDkm+v7ShOdJVjJs+6y5LyayekvUIVVk1YsWOnI1N4EiqDIl7YOU JoU1ZBqzjJXdRM6z81rRv4GD/V+yP2gbl9asTVwYOcgMWLZpR25Bs7r5ITy/g/m6 U4wB/KH3cWBvoWLNPy6TVxWB0+0ymN55we+6XR6bytsmB0NY+lvJ+FjnxtolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzx5NR8SgkCo72mIdgFMQQd31Ed8wHwYDVR0j BBgwFoAUGbkE3tcWV+Hnn5tQUH3My4F+ljUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMC8xOUI5MDRERUQ3 MTY1N0UxRTc5RjlCNTA1MDdEQ0NDQjgxN0U5NjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4MTdF OTYzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZlNDBhOTgtOTNlZi00YWY4LWE0 MzYtNDY5NzQwMTU0NzgyLzAvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3REND Q0I4MTdFOTYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIptKBjNROcPC5F9yI6w7O5PsAf1xKJQ+1Sa IqIFK/KDsU8STWzLPk7g4nkkUueC2Cn4vb01qlPACShhKmdonOV9kVoeE1pOOzPQ dHhiGTY5O+coACDNZuAhkkfRkZXd52MijHcqUR0v4nDqjhLHLs+ezUR0+w7PYh1R Oo0v9MdX01p6sbnPSaLcOrJqM/ImozAKMPWI5x3OYlRq/OL970WGU0/4SNlximVa y/EKTTvVkq2a/31fNdJlb6+8VBKgDnr73EVQr+ZLwezjznYCEk1keKQWs5uVbd1g 5QjCvEoydsc36LTo8BEvdt7iP0VGijRsQabedODFDQMCKpdobgg= -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org