$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: XTnFOQlPiCMXA57BFftfh01qsral/FawRFRDjS7tK3c= Subject key identifier: D7:90:7F:01:9E:EC:CB:CE:2E:93:2A:45:AF:E3:4E:F7:9C:BC:54:94 Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 73E194CD12AD691DA95923CB6CBC078844BA772C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 02BD Signing time: Thu 21 Nov 2024 10:50:40 +0000 Manifest this update: Thu 21 Nov 2024 10:45:40 +0000 Manifest next update: Sun 24 Nov 2024 11:20:40 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: MJ5rji/pccqQ0iJjDsk6/7TOxTNMih19wHwBeZGz1Sk=) 2: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: vC5i4QzFQUw7tG7ffAvrAagTKXceDILsCFLWD7Geca0=) 3: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: dvdUssi0GYF+nu0bzgaccucJ6IsLa1FRw2pzBTZE3GU=) 4: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: d+ITxps3cZ18Zq/dbteBtMW4w2s91LJtz5llba104bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e1:94:cd:12:ad:69:1d:a9:59:23:cb:6c:bc:07:88:44:ba:77:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Nov 21 10:45:40 2024 GMT Not After : Nov 24 11:20:40 2024 GMT Subject: CN=D7907F019EECCBCE2E932A45AFE34EF79CBC5494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:78:67:6b:85:a5:11:4a:dc:38:23:ab:18: a0:53:69:ab:cb:2f:43:d0:2a:48:69:0a:64:c3:51: 13:4c:9f:cc:fb:47:f1:64:23:1a:a1:3a:8f:c4:13: 2c:62:8d:59:1f:0a:c0:75:2c:ef:f6:22:87:bd:fe: 45:37:4e:3e:b5:95:17:85:15:3c:39:c8:3b:a7:bd: 6b:b6:70:40:79:87:15:cf:3d:c2:93:c0:73:01:65: 48:8c:5d:a4:6d:76:c8:3a:fd:29:cb:d9:f6:ef:46: 93:44:a6:f3:b1:b3:99:e8:4c:d8:73:f3:65:28:53: a8:57:cd:96:75:00:44:04:0e:fa:37:e9:01:aa:e8: e2:df:27:08:4d:57:1a:da:f8:ee:23:8f:4d:cb:f9: 49:c7:12:f8:23:cd:35:39:bf:5f:66:45:a3:af:bc: f5:a1:d7:2d:3b:d7:fa:46:be:fd:76:4c:0c:73:ff: b5:e1:85:7b:68:f8:20:8a:57:38:f7:58:c1:71:08: 49:23:7c:7c:0a:de:1d:19:c8:10:51:6d:a6:45:87: 19:b6:da:cd:c9:28:36:c7:45:0f:c6:ba:61:02:19: 15:8e:7c:71:89:7b:21:03:39:23:ef:1d:88:6c:56: 00:d9:78:a7:55:99:3a:df:12:86:f4:c0:4c:0c:00: f5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:90:7F:01:9E:EC:CB:CE:2E:93:2A:45:AF:E3:4E:F7:9C:BC:54:94 X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:de:24:85:18:2d:4a:0e:61:16:88:8e:06:0d:ba:4e:88:6f: 01:5d:31:fd:b7:15:62:0d:fd:22:88:c4:92:78:a0:f1:71:22: da:df:6a:31:95:5c:8b:99:d6:e7:ad:84:08:4b:c7:76:00:28: c3:42:21:90:fb:65:d2:b1:2c:fa:b0:de:60:c4:1d:ab:14:3e: 9d:39:9e:1b:d5:c8:0e:02:07:3c:12:12:f4:7a:52:de:73:9b: eb:7c:9f:3e:10:fb:0c:79:f4:1e:e1:19:b9:4e:46:2a:25:27: fd:02:98:02:ce:9a:57:a8:d6:2f:f2:a0:90:4c:78:ca:3e:39: 8e:6d:4b:80:80:ef:fe:53:f7:1d:68:ae:8b:1a:15:c7:19:b8: a8:9b:c1:bb:61:3e:d8:6c:b5:ea:22:2a:d9:76:da:1b:28:53: 57:e6:4e:44:1b:f5:24:7c:2f:7d:79:08:3e:b6:80:d5:51:f6: bd:3e:07:8c:8a:69:05:bb:07:ff:5e:55:97:46:e6:6d:c0:41: e2:2f:2a:92:0b:f4:19:db:51:fa:af:01:64:7c:b1:97:1b:df: 25:3f:9c:25:7c:3d:42:7f:2e:ae:d0:34:f1:a7:87:90:49:1d: 8b:2b:4f:c3:e7:64:3f:31:dd:4d:d0:fe:92:74:e3:6a:ba:af: a4:dc:21:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+GUzRKtaR2pWSPLbLwHiES6dywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNDExMjExMDQ1NDBaFw0yNDExMjQxMTIwNDBaMDMxMTAvBgNV BAMTKEQ3OTA3RjAxOUVFQ0NCQ0UyRTkzMkE0NUFGRTM0RUY3OUNCQzU0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLnhna4WlEUrcOCOrGKBTaavL L0PQKkhpCmTDURNMn8z7R/FkIxqhOo/EEyxijVkfCsB1LO/2Ioe9/kU3Tj61lReF FTw5yDunvWu2cEB5hxXPPcKTwHMBZUiMXaRtdsg6/SnL2fbvRpNEpvOxs5noTNhz 82UoU6hXzZZ1AEQEDvo36QGq6OLfJwhNVxra+O4jj03L+UnHEvgjzTU5v19mRaOv vPWh1y071/pGvv12TAxz/7XhhXto+CCKVzj3WMFxCEkjfHwK3h0ZyBBRbaZFhxm2 2s3JKDbHRQ/GumECGRWOfHGJeyEDOSPvHYhsVgDZeKdVmTrfEob0wEwMAPXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU15B/AZ7sy84ukypFr+NO95y8VJQwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3eJIUYLUoOYRaIjgYNuk6IbwFdMf23FWIN /SKIxJJ4oPFxItrfajGVXIuZ1uethAhLx3YAKMNCIZD7ZdKxLPqw3mDEHasUPp05 nhvVyA4CBzwSEvR6Ut5zm+t8nz4Q+wx59B7hGblORiolJ/0CmALOmleo1i/yoJBM eMo+OY5tS4CA7/5T9x1orosaFccZuKibwbthPthsteoiKtl22hsoU1fmTkQb9SR8 L315CD62gNVR9r0+B4yKaQW7B/9eVZdG5m3AQeIvKpIL9BnbUfqvAWR8sZcb3yU/ nCV8PUJ/Lq7QNPGnh5BJHYsrT8PnZD8x3U3Q/pJ042q6r6TcIdY= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org