$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: /BDSTW3Rg5rRCaVTYEX4S8VOyw6SNyiPVVffCYnPuCI= Subject key identifier: 09:14:2B:15:0D:27:2B:2D:30:DB:8B:D8:D4:27:C9:3E:0C:C9:54:EC Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 129402DA18D5BC824318F09BC17D5FFFE04F4575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 048A Signing time: Mon 25 Nov 2024 17:21:48 +0000 Manifest this update: Mon 25 Nov 2024 17:16:48 +0000 Manifest next update: Fri 29 Nov 2024 02:54:48 +0000 Files and hashes: 1: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: zATifDTb+wtwfEPPSpTb/HpvR0QCYLd5wr6TZHX8XOg=) 2: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: 5A2C36U8HTCvU0pViOzKlpqcbRYDkSYucBfxXQMgwuc=) 3: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: FajHoBMw9AffvLL7aPy+XxeSPMHuRGpEhAp57EEf9lo=) 4: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: REe8Gnbzv+cpC5r6l+mKFTeY9qAThVwp1bhR4g0ii3Q=) 5: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: +q/iuIkAvoW/+mRN5t1jx8eDH7Y2uNKgPrNXx6SUxWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:94:02:da:18:d5:bc:82:43:18:f0:9b:c1:7d:5f:ff:e0:4f:45:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Nov 25 17:16:48 2024 GMT Not After : Nov 29 02:54:48 2024 GMT Subject: CN=09142B150D272B2D30DB8BD8D427C93E0CC954EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:06:1a:37:e4:fc:5d:e5:7b:28:7c:46:de: 9d:5e:20:f2:10:c0:85:d6:e3:72:67:8f:5f:b2:d9: 32:9a:2e:1c:82:1b:95:63:73:b4:f6:fa:8a:0a:cf: 39:b9:71:1e:d8:2e:51:56:6d:88:14:6d:9a:7d:30: 03:d9:e0:1b:d2:f1:9a:26:0e:82:cb:53:03:87:d6: fc:5f:df:94:aa:a5:39:cb:b1:52:33:0d:ad:02:87: 69:72:31:36:93:0a:d4:2b:b6:96:7f:9d:8b:54:73: 98:fb:7f:be:04:39:17:32:2a:f0:0e:e4:34:90:61: 35:17:0c:f4:16:1a:06:c0:2e:80:e5:72:d4:d0:c6: ef:16:24:05:9c:62:f4:e4:0e:74:a3:4a:38:17:cb: 1e:fc:69:f5:ab:bd:a5:20:3e:0b:6f:4a:32:1e:74: ad:73:0f:3a:aa:b0:43:d7:2f:90:e4:74:60:fd:db: 6f:c3:93:41:af:7a:d1:2e:c4:3f:e3:5c:f1:55:59: e4:85:38:ec:38:fb:39:e1:c8:59:a9:67:8f:7f:b5: 2d:1b:00:0a:26:0a:28:56:2a:43:ac:17:0b:b9:09: cf:6f:b8:f7:bc:b5:33:dd:3b:e8:53:fb:44:a9:16: 39:50:19:2a:42:f8:c1:6c:53:31:e3:4d:06:59:e6: 9e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:14:2B:15:0D:27:2B:2D:30:DB:8B:D8:D4:27:C9:3E:0C:C9:54:EC X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e5:0e:22:8d:4b:67:04:10:36:98:0f:9c:c6:19:37:5a:1a: 08:c1:dd:11:19:c3:35:0c:ed:0c:cb:3e:2d:d5:8a:14:e4:9a: 8f:fa:9c:fb:e0:87:15:9a:c0:af:e1:f7:eb:45:df:ca:f1:59: 17:09:bc:b3:56:f1:76:8d:34:3d:14:5c:cc:de:7a:24:8e:5b: ff:53:fa:f5:cf:e3:37:22:0c:4b:0d:f9:53:8d:b3:df:b6:e8: 8b:bd:fd:ed:fe:3e:37:ca:ec:35:58:5b:e5:b9:c5:99:87:cb: 6a:51:45:01:c7:0d:b6:c9:58:23:92:2f:04:71:fd:9c:22:be: 68:0f:e8:28:7d:3c:40:28:63:25:b6:42:3f:4f:f3:b6:a7:c6: 1a:f5:f5:60:13:33:fc:a1:0e:f6:74:ef:bd:aa:e2:4c:6d:bf: 1e:f9:18:a5:e0:d1:6d:04:d1:9b:58:69:06:5f:f4:e6:bd:36: 04:81:ba:42:ff:25:2a:05:ae:8e:44:4b:3e:ed:41:ad:33:bf: 86:e8:98:9a:4c:e1:79:10:66:f2:db:23:cc:30:15:39:74:a3: d6:84:a5:4e:c2:81:56:51:79:5a:3a:9a:0f:6a:88:38:3f:06: b6:d0:f2:56:c2:65:a6:9a:45:29:07:c8:79:9d:08:c6:69:4d: 4a:6f:07:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpQC2hjVvIJDGPCbwX1f/+BPRXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNDExMjUxNzE2NDhaFw0yNDExMjkwMjU0NDhaMDMxMTAvBgNV BAMTKDA5MTQyQjE1MEQyNzJCMkQzMERCOEJEOEQ0MjdDOTNFMENDOTU0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qwYaN+T8XeV7KHxG3p1eIPIQ wIXW43Jnj1+y2TKaLhyCG5Vjc7T2+ooKzzm5cR7YLlFWbYgUbZp9MAPZ4BvS8Zom DoLLUwOH1vxf35SqpTnLsVIzDa0Ch2lyMTaTCtQrtpZ/nYtUc5j7f74EORcyKvAO 5DSQYTUXDPQWGgbALoDlctTQxu8WJAWcYvTkDnSjSjgXyx78afWrvaUgPgtvSjIe dK1zDzqqsEPXL5DkdGD922/Dk0GvetEuxD/jXPFVWeSFOOw4+znhyFmpZ49/tS0b AAomCihWKkOsFwu5Cc9vuPe8tTPdO+hT+0SpFjlQGSpC+MFsUzHjTQZZ5p5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCRQrFQ0nKy0w24vY1CfJPgzJVOwwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/lDiKNS2cEEDaYD5zGGTdaGgjB3REZwzUM 7QzLPi3VihTkmo/6nPvghxWawK/h9+tF38rxWRcJvLNW8XaNND0UXMzeeiSOW/9T +vXP4zciDEsN+VONs9+26Iu9/e3+PjfK7DVYW+W5xZmHy2pRRQHHDbbJWCOSLwRx /ZwivmgP6Ch9PEAoYyW2Qj9P87anxhr19WATM/yhDvZ0772q4kxtvx75GKXg0W0E 0ZtYaQZf9Oa9NgSBukL/JSoFro5ESz7tQa0zv4bomJpM4XkQZvLbI8wwFTl0o9aE pU7CgVZReVo6mg9qiDg/BrbQ8lbCZaaaRSkHyHmdCMZpTUpvB7Y= -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:02 2024 by rpki-client on console-ams.rpki-client.org