$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: Ygo8oqVgl28+tYg5xLUbE4aJNOhf2uD54EzCK6qcwj8= Subject key identifier: 2A:D0:D0:E6:9D:8F:B6:BB:E5:91:AA:0C:CD:D6:A7:CD:3C:81:5A:48 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 7698A26201AF28BFA41845770B0C1635CEA1918A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 36 Signing time: Thu 21 Nov 2024 18:52:04 +0000 Manifest this update: Thu 21 Nov 2024 18:47:04 +0000 Manifest next update: Sun 24 Nov 2024 20:44:04 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: 2ev1PxwNxxGNCjZrTJC5NpTCjVO4ov0t5OCKpvRorzM=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: IYlIkK9ZMSP7xUAGZ1Am2ZgHJrv4HQzXJImTEhZj1s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:98:a2:62:01:af:28:bf:a4:18:45:77:0b:0c:16:35:ce:a1:91:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Nov 21 18:47:04 2024 GMT Not After : Nov 24 20:44:04 2024 GMT Subject: CN=2AD0D0E69D8FB6BBE591AA0CCDD6A7CD3C815A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:27:10:01:8e:da:d3:00:8f:fc:3c:10:2a: 47:01:d4:ef:0b:24:99:a4:ce:5b:ae:7e:97:aa:24: 46:c5:78:f7:e9:52:33:38:b0:51:f4:39:a0:1a:94: e7:52:5f:0a:c0:68:24:68:a6:23:dc:d4:ee:38:be: 23:28:f5:56:67:b2:a2:cc:ad:2c:9a:89:05:c2:aa: 31:64:1e:57:0c:c7:9b:0e:46:28:6f:f7:d2:c3:c4: 69:cd:ca:b5:0f:37:93:2b:74:18:f9:f1:fb:5b:99: a8:22:82:87:ed:27:84:70:20:90:99:d0:c8:b1:66: b9:d7:36:a6:a3:12:d1:07:02:39:50:31:2b:72:60: a3:54:fc:55:e8:21:e3:50:4e:8e:6b:c0:09:64:0d: 2c:3b:e0:b3:fa:d0:52:9b:ef:dd:b1:b6:8f:ac:d8: 13:54:d9:e1:96:3e:d3:c8:32:45:7e:6b:53:da:10: 2d:83:85:31:cd:7b:ec:81:ea:30:03:d6:21:7a:1c: e4:ea:ec:1f:0a:a7:45:f6:76:11:db:d7:d8:8b:fc: 44:46:b9:65:5b:9c:b3:81:06:eb:de:4a:1b:57:92: c7:00:01:e7:32:2b:fb:e5:6e:00:3a:bd:2d:28:54: 23:44:4f:6e:6d:36:fa:41:5c:7f:e7:df:b4:b0:58: 6d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D0:D0:E6:9D:8F:B6:BB:E5:91:AA:0C:CD:D6:A7:CD:3C:81:5A:48 X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7b:6a:c4:43:90:c9:66:cb:3c:ec:b6:60:b7:37:b8:72:69: df:a9:34:6e:ef:02:04:f5:4c:d7:28:ea:52:bb:18:95:43:02: eb:69:af:ce:60:6f:33:18:b3:3c:a9:75:55:4f:21:6e:d1:9e: 52:c6:28:fe:e8:c2:52:0c:e5:e3:5b:f5:3e:98:4c:af:2c:a9: 2e:78:bb:9d:c2:ca:f1:99:f9:cc:37:c8:c3:97:5c:c1:04:3c: 5f:cf:35:e2:ce:35:31:84:15:48:2c:cf:ff:01:38:f6:18:f8: 7b:6a:7d:6d:a2:b3:07:0f:a1:1c:9e:ec:d9:72:fb:7d:ce:98: 51:e1:06:54:32:1c:2e:fb:27:b9:68:b1:63:b3:e5:7f:26:c5: c4:7e:34:bb:9e:a1:5c:43:70:22:38:17:56:d6:6c:d3:8d:1c: 4b:63:f7:19:fb:59:d5:17:36:38:93:82:54:e2:c2:cc:c3:d2: ce:4f:c9:ce:f0:e2:fe:1e:8f:6c:2d:39:18:1d:59:6a:46:9c: a6:b1:33:0d:03:dd:28:86:e0:86:ff:42:8f:7f:03:c4:9c:8a: 72:d3:d1:6b:84:0a:75:5a:fa:1d:eb:3f:22:00:19:71:1a:3f: fb:4e:3b:2c:ae:05:89:90:00:77:f6:6e:24:c7:f2:5b:e3:92: c6:ad:28:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdpiiYgGvKL+kGEV3CwwWNc6hkYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNDExMjExODQ3MDRaFw0yNDExMjQyMDQ0MDRaMDMxMTAvBgNV BAMTKDJBRDBEMEU2OUQ4RkI2QkJFNTkxQUEwQ0NERDZBN0NEM0M4MTVBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNycQAY7a0wCP/DwQKkcB1O8L JJmkzluufpeqJEbFePfpUjM4sFH0OaAalOdSXwrAaCRopiPc1O44viMo9VZnsqLM rSyaiQXCqjFkHlcMx5sORihv99LDxGnNyrUPN5MrdBj58ftbmagigoftJ4RwIJCZ 0MixZrnXNqajEtEHAjlQMStyYKNU/FXoIeNQTo5rwAlkDSw74LP60FKb792xto+s 2BNU2eGWPtPIMkV+a1PaEC2DhTHNe+yB6jAD1iF6HOTq7B8Kp0X2dhHb19iL/ERG uWVbnLOBBuveShtXkscAAecyK/vlbgA6vS0oVCNET25tNvpBXH/n37SwWG0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKtDQ5p2PtrvlkaoMzdanzTyBWkgwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKd7asRDkMlmyzzstmC3N7hyad+pNG7vAgT1 TNco6lK7GJVDAutpr85gbzMYszypdVVPIW7RnlLGKP7owlIM5eNb9T6YTK8sqS54 u53CyvGZ+cw3yMOXXMEEPF/PNeLONTGEFUgsz/8BOPYY+HtqfW2iswcPoRye7Nly +33OmFHhBlQyHC77J7losWOz5X8mxcR+NLueoVxDcCI4F1bWbNONHEtj9xn7WdUX NjiTglTiwszD0s5Pyc7w4v4ej2wtORgdWWpGnKaxMw0D3SiG4Ib/Qo9/A8ScinLT 0WuECnVa+h3rPyIAGXEaP/tOOyyuBYmQAHf2biTH8lvjksatKO4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org