$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft File: 2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json) Hash identifier: IVhw1tw+AwgvPI44jHO0fttZqdUDiubLiYAZCBO5CcM= Subject key identifier: CB:64:50:BF:07:AB:C7:D2:DA:D4:13:82:CE:13:72:79:93:67:D9:5B Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248 Certificate serial: 291B5BB3F23D1C0EA3F8875E4D63B2C5BE9336E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft Manifest number: 0158 Signing time: Fri 22 Nov 2024 11:30:54 +0000 Manifest this update: Fri 22 Nov 2024 11:25:54 +0000 Manifest next update: Mon 25 Nov 2024 12:17:54 +0000 Files and hashes: 1: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: eCFE+UjcpGbJUElYORqb1b3I6rl7l4QrholydIGG0d0=) 2: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: ADulXqH+XQa/cOCtt/Tm9P2HLNHiHCnpZrAPCXgaUIU=) 3: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: 3BxgBY3dX8feRwsm1hvpch2b234JpMx6XR/YBvSI5jE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 12:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1b:5b:b3:f2:3d:1c:0e:a3:f8:87:5e:4d:63:b2:c5:be:93:36:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248 Validity Not Before: Nov 22 11:25:54 2024 GMT Not After : Nov 25 12:17:54 2024 GMT Subject: CN=CB6450BF07ABC7D2DAD41382CE1372799367D95B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:03:43:c2:de:79:fb:5d:6d:3d:67:e8:ee:b4: e5:54:e8:60:51:f8:56:d7:9e:c7:a2:88:7f:a4:93: f4:95:95:ac:3a:75:9e:9d:eb:55:1a:41:9a:80:85: e2:c2:13:5e:3b:5f:49:54:8d:51:c5:f6:8f:b8:4c: 76:59:4a:ef:93:29:40:e5:d5:fa:a2:f4:81:13:59: d3:fe:37:d3:d9:68:79:5a:fe:b7:a5:ca:0c:ae:01: fd:3f:8c:74:2b:3d:5f:f0:ed:37:e5:bd:8e:cb:cc: e2:71:d8:93:fb:23:9c:30:47:7b:1a:fa:3b:7f:b2: 5c:6e:f7:2b:b0:a6:df:e7:ad:1f:8b:d4:4f:29:b7: 76:93:a1:1e:63:4d:e7:fa:8b:f0:92:a9:90:40:52: 6f:f9:61:54:80:0e:fb:6e:33:78:53:15:f7:da:5d: 8f:aa:31:71:7f:6e:20:35:a7:25:bd:d4:b0:79:81: ea:4a:de:32:b9:c2:64:98:b9:e4:1d:61:bd:2b:16: 4d:78:a7:0b:6c:87:c7:65:59:38:1f:eb:92:54:0f: e5:9b:d7:06:69:7b:52:32:8a:6d:99:20:50:8c:0a: 59:fa:ee:48:cb:c3:c1:ab:21:5a:db:15:39:c3:df: d3:18:05:8f:0f:6a:83:c5:9f:23:d9:89:5b:ca:80: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:64:50:BF:07:AB:C7:D2:DA:D4:13:82:CE:13:72:79:93:67:D9:5B X509v3 Authority Key Identifier: keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:35:71:7c:67:60:a4:b9:6a:37:6f:8e:53:7d:9c:19:81:1b: 52:fe:e8:63:38:01:af:5a:42:00:08:92:a8:e1:32:cd:4e:1e: 2b:9b:3e:e9:b1:fb:91:7c:1c:7e:d1:1c:8c:bd:43:57:de:f1: 89:02:b9:d2:5c:20:bc:69:97:97:2b:6a:90:a4:72:da:60:15: 27:e3:09:db:36:9a:e0:5a:c1:27:3d:46:2b:74:a5:2a:18:f0: 5f:70:f4:d1:42:ac:53:8e:90:0e:72:05:52:0d:fc:06:b7:f9: 64:ae:df:35:dc:85:53:30:dc:d5:27:c9:eb:51:27:c4:84:f1: 36:07:51:2e:2a:e3:5d:2b:22:bd:ac:51:c1:04:9b:b0:1c:93: 05:a8:2c:83:5d:84:bb:f2:22:5f:e9:d4:43:37:13:aa:2f:5e: 55:6f:5c:82:ad:72:41:05:82:55:b6:8c:ee:23:e6:e2:9d:56: af:17:0a:16:da:b6:4a:21:35:41:af:55:49:06:a3:63:f3:f8: c3:78:6d:a6:67:e3:ee:94:07:b8:9d:c7:e0:2f:a8:55:48:e2: e2:5c:79:2d:17:08:86:3d:65:9e:19:48:25:40:5a:13:ef:82: 66:0a:1e:93:7d:36:fc:1c:82:88:0f:c7:af:a4:c9:eb:e1:8e: 4e:29:f7:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRtbs/I9HA6j+IdeTWOyxb6TNuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNE QTc1MzI0ODAeFw0yNDExMjIxMTI1NTRaFw0yNDExMjUxMjE3NTRaMDMxMTAvBgNV BAMTKENCNjQ1MEJGMDdBQkM3RDJEQUQ0MTM4MkNFMTM3Mjc5OTM2N0Q5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmA0PC3nn7XW09Z+jutOVU6GBR +FbXnseiiH+kk/SVlaw6dZ6d61UaQZqAheLCE147X0lUjVHF9o+4THZZSu+TKUDl 1fqi9IETWdP+N9PZaHla/relygyuAf0/jHQrPV/w7TflvY7LzOJx2JP7I5wwR3sa +jt/slxu9yuwpt/nrR+L1E8pt3aToR5jTef6i/CSqZBAUm/5YVSADvtuM3hTFffa XY+qMXF/biA1pyW91LB5gepK3jK5wmSYueQdYb0rFk14pwtsh8dlWTgf65JUD+Wb 1wZpe1Iyim2ZIFCMCln67kjLw8GrIVrbFTnD39MYBY8PaoPFnyPZiVvKgAdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy2RQvwerx9La1BOCzhNyeZNn2VswHwYDVR0j BBgwFoAULQdF0m5ZRAy3H6/ploNEk9p1MkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMC8yRDA3NDVEMjZF NTk0NDBDQjcxRkFGRTk5NjgzNDQ5M0RBNzUzMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNEQTc1 MzI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0 OTNEQTc1MzI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKw1cXxnYKS5ajdvjlN9nBmBG1L+6GM4Aa9a QgAIkqjhMs1OHiubPumx+5F8HH7RHIy9Q1fe8YkCudJcILxpl5crapCkctpgFSfj Cds2muBawSc9Rit0pSoY8F9w9NFCrFOOkA5yBVIN/Aa3+WSu3zXchVMw3NUnyetR J8SE8TYHUS4q410rIr2sUcEEm7AckwWoLINdhLvyIl/p1EM3E6ovXlVvXIKtckEF glW2jO4j5uKdVq8XChbatkohNUGvVUkGo2Pz+MN4baZn4+6UB7idx+AvqFVI4uJc eS0XCIY9ZZ4ZSCVAWhPvgmYKHpN9NvwcgogPx6+kyevhjk4p968= -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org