$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: xOXP6jOxpfwYVevC77fpTtXyzJ53elgtj6JQNoV9bfw= Subject key identifier: 51:C8:FA:41:60:E8:E0:2D:E7:B3:D4:A1:5C:04:D4:DE:EB:51:EF:1B Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 2B0667D5D9679DD3D3162A836FE030B52CE40C61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: 5A Signing time: Sun 24 Nov 2024 04:30:47 +0000 Manifest this update: Sun 24 Nov 2024 04:25:47 +0000 Manifest next update: Wed 27 Nov 2024 11:43:47 +0000 Files and hashes: 1: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: 7Iil5FzOI8Pq2P0qrgcOG02P6mNoGC/58jDMoSjbyXc=) 2: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: yhQ2qPEfXGRWP2V4OOnCQtCGsXcCQp3TVsuE1UGncUU=) 3: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: xg8pswWKHqMiOrgkEixU/AN7UqEUnPflqvsMATJYXcQ=) 4: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: aLItU+0faUPLcJNsb0wBsR1RoR9wJwyYy+5muSHp+gk=) 5: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: gLHzdFDGpZNIXsAd7dXMpP7oQQixMaFL/sWXqKSCBgc=) 6: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: fAVVxSm1nFToQNyaLISt2LBq4Gsk+4pHivG2KqSxFZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:06:67:d5:d9:67:9d:d3:d3:16:2a:83:6f:e0:30:b5:2c:e4:0c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Nov 24 04:25:47 2024 GMT Not After : Nov 27 11:43:47 2024 GMT Subject: CN=51C8FA4160E8E02DE7B3D4A15C04D4DEEB51EF1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:e2:39:df:45:98:e5:52:c0:0f:3d:b8:af: 5a:e1:b2:3c:35:3a:a5:53:dd:b8:db:3a:99:0d:7c: c7:d2:11:42:6c:0e:b2:91:70:0c:da:df:4b:b4:0d: ed:2f:0c:6f:2e:75:5e:e3:e5:69:20:e9:8c:f0:98: 5f:f1:f3:69:56:40:8b:46:6e:24:38:ba:51:3a:7b: c8:b5:f7:35:90:b0:88:fe:83:5e:0c:07:82:62:e9: ae:71:1f:b2:fc:98:61:24:ce:2f:2a:61:fd:01:09: 1c:28:50:a7:e3:92:8a:33:bc:fa:8f:e9:54:11:a6: 8e:cf:cf:e6:6c:c6:71:ab:58:82:2e:0e:ed:a9:17: d6:e1:56:73:94:df:63:9e:21:3d:17:00:5a:c6:42: bc:93:11:b5:66:11:1e:e1:9d:8d:3b:74:a4:3d:93: a4:38:f2:14:df:2a:59:20:8e:4c:f8:54:ce:84:d2: 07:7d:a9:e7:9e:4e:20:0b:a6:4f:72:52:5e:1e:ee: 16:c8:c1:cd:9e:e9:33:14:93:24:cf:6a:53:a7:03: 68:5b:0b:d5:55:e2:d8:56:07:af:d1:4c:1d:8c:da: 6e:8a:18:13:d7:de:1b:de:c5:21:c8:a1:48:2c:09: a7:13:5b:cd:76:e7:38:fe:4f:ce:0c:28:91:d8:b9: 40:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C8:FA:41:60:E8:E0:2D:E7:B3:D4:A1:5C:04:D4:DE:EB:51:EF:1B X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4d:f6:33:61:22:9a:b8:39:b4:d6:8d:ab:98:2c:05:39:c9: 0f:81:41:1c:32:c9:5b:7d:06:14:f0:ec:b4:f5:72:e7:ac:5c: c5:78:ae:9a:e2:db:7e:02:89:79:12:cb:00:69:53:c1:d5:0d: e9:4c:7c:c6:38:e8:d4:71:41:e1:45:e8:d4:2d:5b:b2:92:20: 85:d1:bd:24:04:1d:9a:21:63:fc:64:4d:f8:02:3e:10:cd:5a: 92:7d:9e:06:b6:80:6e:c7:08:ff:7d:19:50:bd:c8:9c:74:90: 50:fa:16:8f:56:ee:50:ae:81:ca:3a:96:a4:2b:3e:88:85:d5: 6e:1e:be:e7:ca:96:e5:1c:de:48:e4:2c:b2:0c:e7:95:4f:ba: fe:de:f7:e2:8c:86:b9:6c:0a:68:36:17:70:62:e4:51:4a:ad: 21:01:1d:0f:d3:d0:f7:f5:da:07:91:48:1b:59:31:b5:40:70: 7b:2c:6b:b3:56:4d:82:fd:fe:51:39:bf:da:da:4b:c5:95:d0: 59:56:f6:28:c7:1a:e3:09:39:ed:58:e0:4b:37:43:fa:4c:fc: bc:c3:5e:87:fa:cf:7e:98:af:87:a2:d2:64:7d:b3:39:28:92: 18:a6:6d:15:26:d0:f0:69:c9:29:e1:55:77:24:0a:b5:af:3f: 81:d7:e4:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwZn1dlnndPTFiqDb+AwtSzkDGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNDExMjQwNDI1NDdaFw0yNDExMjcxMTQzNDdaMDMxMTAvBgNV BAMTKDUxQzhGQTQxNjBFOEUwMkRFN0IzRDRBMTVDMDRENERFRUI1MUVGMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNouI530WY5VLADz24r1rhsjw1 OqVT3bjbOpkNfMfSEUJsDrKRcAza30u0De0vDG8udV7j5Wkg6YzwmF/x82lWQItG biQ4ulE6e8i19zWQsIj+g14MB4Ji6a5xH7L8mGEkzi8qYf0BCRwoUKfjkoozvPqP 6VQRpo7Pz+ZsxnGrWIIuDu2pF9bhVnOU32OeIT0XAFrGQryTEbVmER7hnY07dKQ9 k6Q48hTfKlkgjkz4VM6E0gd9qeeeTiALpk9yUl4e7hbIwc2e6TMUkyTPalOnA2hb C9VV4thWB6/RTB2M2m6KGBPX3hvexSHIoUgsCacTW8125zj+T84MKJHYuUDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUcj6QWDo4C3ns9ShXATU3utR7xswHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRN9jNhIpq4ObTWjauYLAU5yQ+BQRwyyVt9 BhTw7LT1cuesXMV4rpri234CiXkSywBpU8HVDelMfMY46NRxQeFF6NQtW7KSIIXR vSQEHZohY/xkTfgCPhDNWpJ9nga2gG7HCP99GVC9yJx0kFD6Fo9W7lCugco6lqQr PoiF1W4evufKluUc3kjkLLIM55VPuv7e9+KMhrlsCmg2F3Bi5FFKrSEBHQ/T0Pf1 2geRSBtZMbVAcHssa7NWTYL9/lE5v9raS8WV0FlW9ijHGuMJOe1Y4Es3Q/pM/LzD Xof6z36Yr4ei0mR9szkokhimbRUm0PBpySnhVXckCrWvP4HX5Fc= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org