$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: 5W6/Bycq/ASbmODBsQ/Pfz7+2kHvN7a0NwLY5CVRc+o= Subject key identifier: AA:F6:D3:5B:51:C5:A5:12:1D:4C:B7:F5:83:27:49:C1:7E:5B:15:AC Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 5766D74A13FE864FC1CECFDCE25B281DB7BE82F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: F5 Signing time: Mon 25 Nov 2024 01:50:54 +0000 Manifest this update: Mon 25 Nov 2024 01:45:54 +0000 Manifest next update: Thu 28 Nov 2024 05:34:54 +0000 Files and hashes: 1: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: qzTVrc4V5jXNwhJy7faCUkEvQZgcN7I04NM/a0FyoT8=) 2: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: rfmzRlsdAvNLiNI+69dQJvzwCRcUetfcXyg7dj9lLfM=) 3: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: huRfaxbhSwylLxpTR+qFQbNwgI1ST+DGQJKRH6CbwiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:66:d7:4a:13:fe:86:4f:c1:ce:cf:dc:e2:5b:28:1d:b7:be:82:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Nov 25 01:45:54 2024 GMT Not After : Nov 28 05:34:54 2024 GMT Subject: CN=AAF6D35B51C5A5121D4CB7F5832749C17E5B15AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:4c:f4:55:80:3a:cf:12:fd:1b:ca:74:13: 0a:61:3d:86:ee:41:a4:fc:29:da:02:d2:4f:f2:21: 23:2a:b3:77:90:07:be:c5:9d:d6:17:48:20:98:3f: c3:fe:d3:11:37:3c:6a:46:aa:8c:f6:ea:81:ca:5e: c1:6c:6c:b5:d1:96:d6:70:26:5d:30:c8:04:94:72: d4:de:a8:de:6b:4f:cc:9d:dd:16:35:56:60:00:a7: c7:1b:a9:5f:90:43:15:50:66:21:bc:58:40:ba:84: e3:61:d7:a8:00:66:38:e6:17:86:1a:cc:6c:7b:22: 47:ef:71:bc:1a:ff:52:33:3d:5b:7d:58:51:e4:ce: e6:38:c1:3c:d8:5a:24:27:56:d1:1b:42:c5:44:08: 50:21:3e:2d:2e:13:4f:df:a3:67:d7:30:33:28:12: 91:27:b6:0c:fd:ae:c4:f4:62:4b:69:8a:77:e4:a0: f5:3c:8c:fc:93:59:9c:6e:3e:e2:85:4e:52:56:05: 63:35:c5:16:c0:cf:ce:70:88:b9:77:4a:36:a7:24: 74:e7:82:89:c2:09:bd:8d:30:58:fe:0e:aa:a6:2e: 21:29:50:f3:88:6e:8a:2b:8e:6d:a0:d9:4f:93:1c: 4f:ba:27:ec:69:0e:90:7b:b8:a4:20:ff:5b:57:76: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F6:D3:5B:51:C5:A5:12:1D:4C:B7:F5:83:27:49:C1:7E:5B:15:AC X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:af:82:1f:a3:63:1c:2a:a6:1a:b2:2a:73:50:f5:28:66:13: fc:17:1e:39:b7:51:9b:05:01:17:64:68:8b:25:df:ac:07:8f: 42:ed:da:47:37:88:a8:96:e1:cd:6e:35:1d:a0:46:22:e3:80: f5:0c:e6:1c:a6:39:ac:96:90:69:a3:e3:18:ab:08:ef:c2:3d: 00:a0:bf:52:6c:04:31:30:74:6d:72:48:75:b7:8a:0a:e5:b8: c0:34:52:bc:8e:61:5a:6e:33:27:32:ad:93:ab:26:75:37:9f: a1:57:68:61:48:87:39:c0:1c:88:d3:05:03:a2:37:18:7c:91: f0:0c:e7:ce:67:6f:84:ca:f4:a3:21:f2:12:43:33:d9:86:84: af:c4:15:42:d5:9e:c5:48:8d:b6:e7:e5:bd:bb:52:da:e8:71: e9:9c:ad:87:ba:72:56:af:99:9a:48:cc:9e:d3:50:5d:28:07: 12:70:d2:fc:ae:bf:c3:94:1e:68:32:d1:cd:52:eb:09:dc:ff: b4:a2:fd:3f:d1:b0:42:85:d1:e6:21:69:e7:31:7c:90:56:74: 56:47:0a:7c:55:b8:5a:29:0d:56:fa:31:a4:60:f0:c8:33:ee: a1:d4:f2:9e:34:c1:c2:0a:25:d7:45:e1:e3:f5:27:f8:fb:94: f5:1d:c0:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2bXShP+hk/Bzs/c4lsoHbe+gvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNDExMjUwMTQ1NTRaFw0yNDExMjgwNTM0NTRaMDMxMTAvBgNV BAMTKEFBRjZEMzVCNTFDNUE1MTIxRDRDQjdGNTgzMjc0OUMxN0U1QjE1QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWWkz0VYA6zxL9G8p0EwphPYbu QaT8KdoC0k/yISMqs3eQB77FndYXSCCYP8P+0xE3PGpGqoz26oHKXsFsbLXRltZw Jl0wyASUctTeqN5rT8yd3RY1VmAAp8cbqV+QQxVQZiG8WEC6hONh16gAZjjmF4Ya zGx7Ikfvcbwa/1IzPVt9WFHkzuY4wTzYWiQnVtEbQsVECFAhPi0uE0/fo2fXMDMo EpEntgz9rsT0YktpinfkoPU8jPyTWZxuPuKFTlJWBWM1xRbAz85wiLl3SjanJHTn gonCCb2NMFj+DqqmLiEpUPOIboorjm2g2U+THE+6J+xpDpB7uKQg/1tXdiSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqvbTW1HFpRIdTLf1gydJwX5bFawwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6vgh+jYxwqphqyKnNQ9ShmE/wXHjm3UZsF ARdkaIsl36wHj0Lt2kc3iKiW4c1uNR2gRiLjgPUM5hymOayWkGmj4xirCO/CPQCg v1JsBDEwdG1ySHW3igrluMA0UryOYVpuMycyrZOrJnU3n6FXaGFIhznAHIjTBQOi Nxh8kfAM585nb4TK9KMh8hJDM9mGhK/EFULVnsVIjbbn5b27UtrocemcrYe6clav mZpIzJ7TUF0oBxJw0vyuv8OUHmgy0c1S6wnc/7Si/T/RsEKF0eYhaecxfJBWdFZH CnxVuFopDVb6MaRg8Mgz7qHU8p40wcIKJddF4eP1J/j7lPUdwNw= -----END CERTIFICATE-----Generated at Mon Nov 25 02:56:53 2024 by rpki-client on console-fra.rpki-client.org