$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json) Hash identifier: mtau4PqU0VIVhCNYjpxrU//hKGoX5lrFAWuYakco/Ps= Subject key identifier: DE:58:4E:DD:DB:C5:F7:85:E9:A2:62:EF:51:08:09:D7:F9:BC:71:F9 Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 129A133BA92D6DED46ACFD694586C460DACB77D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft Manifest number: A5 Signing time: Thu 21 Nov 2024 13:12:29 +0000 Manifest this update: Thu 21 Nov 2024 13:07:29 +0000 Manifest next update: Sun 24 Nov 2024 21:42:29 +0000 Files and hashes: 1: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: wICepd8U1QcGIGsrjMvgWPxltcWN58EUXrKFn1vdy6M=) 2: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: eQwZ0HpEaRU5AO86abCZFFKH0HF0iLl7VUx7NHne24s=) 3: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: smGZgJZZCOs+jVUBHqaBcVcOi1qyQfpKzrUsCCMETHM=) 4: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: jp9jW1R/7zBcaFLujyohPN0jUMmDYDwbKb0ppMW4qvQ=) 5: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: 2deZljQHRC+27lOtPHeNXwE5AsA5ouy4hMQ4YZL8z3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9a:13:3b:a9:2d:6d:ed:46:ac:fd:69:45:86:c4:60:da:cb:77:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: Nov 21 13:07:29 2024 GMT Not After : Nov 24 21:42:29 2024 GMT Subject: CN=DE584EDDDBC5F785E9A262EF510809D7F9BC71F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:d3:57:7d:87:5d:95:86:bf:ef:3c:f8:10: 32:6f:27:b5:98:99:07:be:28:34:d1:7c:8d:18:f7: 34:90:29:89:30:d3:79:66:fd:6e:ab:24:b2:f6:be: bb:70:76:86:10:ed:b4:68:7d:ae:5a:c6:f8:67:43: 45:e2:89:90:50:30:09:e7:d5:e5:75:87:a0:2c:ed: 5a:03:ed:7a:6a:eb:f0:af:dc:60:c2:15:f3:39:6f: bf:a1:03:33:24:ed:ce:0e:fc:63:d4:ad:9b:d2:0a: 2d:1e:0d:d3:c8:bc:41:dd:dc:1f:8d:4e:fa:fb:f2: 2c:67:c5:a1:d2:2b:17:36:97:44:b2:e3:31:d8:6e: 11:94:15:3f:f8:87:1e:ce:52:47:b8:54:92:21:48: 59:e8:d3:cb:46:83:24:c1:61:9d:36:08:e4:c9:10: 04:b9:7e:8e:bc:44:65:09:84:61:2f:f1:64:89:bc: f4:f6:65:79:c9:52:64:d8:a2:01:01:c3:50:fe:98: c0:4e:41:96:8c:79:9a:51:10:ce:4a:2f:5a:23:2a: 66:54:49:d0:bc:8a:7c:9b:e1:c3:81:02:34:a6:56: af:aa:08:9d:14:b3:0c:83:32:2f:6c:8d:a5:f3:13: 29:bb:8c:e1:8a:af:f5:ef:db:87:8f:25:01:f2:d8: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:58:4E:DD:DB:C5:F7:85:E9:A2:62:EF:51:08:09:D7:F9:BC:71:F9 X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:40:7f:c5:6f:83:7c:fd:cd:fc:ea:ff:1e:09:ba:6f:f8:fd: 88:0d:ce:c2:48:e4:85:aa:12:1a:9b:1e:84:9f:0b:f1:5b:8c: a8:87:d0:23:8f:3e:68:ef:33:f8:b9:cb:27:70:22:5a:ec:cd: eb:79:1a:59:b6:1d:02:26:b9:6b:0b:4e:31:76:16:b1:70:b6: ad:d9:80:40:0e:a0:1e:63:48:c5:c1:5c:57:bc:09:73:5e:b7: 78:ff:2a:fc:87:5b:2c:67:6d:18:e6:47:b6:1b:4a:5a:65:d3: ad:46:7c:27:75:e0:a7:a4:73:92:25:ca:da:03:92:c6:d8:14: 71:e3:d1:cb:7a:11:65:5f:db:36:ad:08:c1:89:ac:44:da:f1: 35:5b:ba:19:33:a7:f1:60:6f:ea:00:5a:f5:2d:9e:d4:3f:c5: cc:63:3a:d1:0f:cb:88:ba:f6:69:b6:a6:bd:98:7e:cb:3d:74: a5:9f:cb:c1:c7:a9:cb:54:18:55:58:84:06:e2:f0:09:ff:c4: 17:48:e7:64:44:b9:8b:c7:f1:6e:1c:e4:8d:fd:6b:1e:53:29: fa:5b:f3:62:cc:8a:2b:30:73:1d:d5:02:0a:f7:78:c5:b5:09: 85:d0:b6:cc:c6:d3:be:06:bc:76:33:23:c5:60:8a:67:d6:eb: e1:b2:ff:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpoTO6ktbe1GrP1pRYbEYNrLd9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNDExMjExMzA3MjlaFw0yNDExMjQyMTQyMjlaMDMxMTAvBgNV BAMTKERFNTg0RUREREJDNUY3ODVFOUEyNjJFRjUxMDgwOUQ3RjlCQzcxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkNNXfYddlYa/7zz4EDJvJ7WY mQe+KDTRfI0Y9zSQKYkw03lm/W6rJLL2vrtwdoYQ7bRofa5axvhnQ0XiiZBQMAnn 1eV1h6As7VoD7Xpq6/Cv3GDCFfM5b7+hAzMk7c4O/GPUrZvSCi0eDdPIvEHd3B+N Tvr78ixnxaHSKxc2l0Sy4zHYbhGUFT/4hx7OUke4VJIhSFno08tGgyTBYZ02COTJ EAS5fo68RGUJhGEv8WSJvPT2ZXnJUmTYogEBw1D+mMBOQZaMeZpREM5KL1ojKmZU SdC8inyb4cOBAjSmVq+qCJ0UswyDMi9sjaXzEym7jOGKr/Xv24ePJQHy2N1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3lhO3dvF94XpomLvUQgJ1/m8cfkwHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxAf8Vvg3z9zfzq/x4Jum/4/YgNzsJI5IWq EhqbHoSfC/FbjKiH0COPPmjvM/i5yydwIlrszet5Glm2HQImuWsLTjF2FrFwtq3Z gEAOoB5jSMXBXFe8CXNet3j/KvyHWyxnbRjmR7YbSlpl061GfCd14Kekc5IlytoD ksbYFHHj0ct6EWVf2zatCMGJrETa8TVbuhkzp/Fgb+oAWvUtntQ/xcxjOtEPy4i6 9mm2pr2Yfss9dKWfy8HHqctUGFVYhAbi8An/xBdI52REuYvH8W4c5I39ax5TKfpb 82LMiiswcx3VAgr3eMW1CYXQtszG074GvHYzI8VgimfW6+Gy/9g= -----END CERTIFICATE-----Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org