$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: pk2mhzvpgI5JTpVGrkBrOGZhgq7fQqHy85gTLWnll04= Subject key identifier: AA:EC:1A:64:C6:EF:EA:F5:35:8E:F3:EC:DC:0A:CD:C3:C1:0A:79:00 Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 7B70F37F32AE7E52F838C6323BB9893E95DCC871 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 0129 Signing time: Thu 21 Nov 2024 12:41:10 +0000 Manifest this update: Thu 21 Nov 2024 12:36:10 +0000 Manifest next update: Mon 25 Nov 2024 00:28:10 +0000 Files and hashes: 1: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: AjFSHS1N7rikp7e5IMgYxY9/qqmZpz7GnCdCCGH49eg=) 2: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: kqMJU8kz62ENz/kMr1+leae/U8SugiVYAP2XMec4n8Y=) 3: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: ms+jxl5HgDD7MbwF3qaDrkGxswI4wlS/R9QVqe8Uf38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:70:f3:7f:32:ae:7e:52:f8:38:c6:32:3b:b9:89:3e:95:dc:c8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Nov 21 12:36:10 2024 GMT Not After : Nov 25 00:28:10 2024 GMT Subject: CN=AAEC1A64C6EFEAF5358EF3ECDC0ACDC3C10A7900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:b1:83:d6:5d:d9:d9:42:d7:1e:b2:6c:ed: 91:97:b5:8a:e2:14:f2:32:b2:87:95:ec:4b:e7:9a: 59:b2:08:02:72:cc:32:81:ef:d2:8f:8c:16:dc:a5: 53:3c:2b:3c:0f:19:fc:4d:29:0b:f7:ab:06:8e:84: 3e:be:c0:2b:5a:a7:6c:43:9c:57:7a:47:2d:32:4f: e6:3b:b9:ee:bb:d3:d8:44:13:26:31:dd:aa:aa:44: 57:d5:c5:f2:85:0a:f4:f2:07:32:9e:79:7a:9c:2e: 87:ff:7e:30:81:cf:70:cb:ff:15:19:4a:be:0d:29: 36:da:5c:cb:50:8b:59:d0:80:e5:17:79:a1:9f:16: ca:3b:c6:f0:7e:d4:59:4d:b0:ae:f3:ce:72:5f:cb: ac:59:51:2a:3c:68:cb:ae:5b:9d:63:87:7d:22:7d: d2:e2:c5:36:f2:a3:31:e1:9d:d7:eb:59:95:2a:9b: 8e:4d:05:a1:53:e0:bc:40:6c:f5:8c:c7:1b:d2:32: 64:53:83:de:4f:43:ef:62:a3:be:6f:7a:cc:81:bb: ec:2a:2f:65:43:b2:75:c8:27:c9:88:dd:f4:83:96: fe:db:a3:e2:9f:8e:2e:6f:d2:5f:f5:54:8e:97:24: 1c:06:9a:94:d6:f1:42:03:f6:05:72:4c:2b:04:94: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EC:1A:64:C6:EF:EA:F5:35:8E:F3:EC:DC:0A:CD:C3:C1:0A:79:00 X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d3:8d:f4:30:1c:02:8c:94:2a:22:b4:5e:05:5a:38:d5:54: c0:4a:f4:9b:2b:55:95:33:20:54:4c:e9:70:70:cd:18:b2:74: 14:4e:ee:8c:1b:d8:10:3d:e5:56:88:d5:6f:64:55:53:96:4a: 93:7b:f1:60:e0:70:34:f9:b8:7b:f2:a3:d1:47:42:53:2f:ae: c2:ab:24:93:7e:89:c3:d6:33:49:ee:45:e1:1b:1b:96:60:16: 17:7b:00:a1:42:09:68:b4:31:b9:d9:5b:5f:ea:d1:a1:be:59: 82:4a:6f:ec:ea:a7:ce:f5:8f:bf:07:b4:96:a3:0c:a3:5d:21: 40:b0:77:15:db:04:c5:36:ce:29:90:fd:a9:df:92:1c:ac:4e: cd:c3:a1:be:45:cd:82:59:eb:39:d0:ae:f9:33:0b:ee:cd:61: 0b:42:93:ba:4b:ba:f3:19:e1:3d:14:1b:53:ab:2a:ab:56:59: ec:f7:b3:28:21:6d:f8:e6:11:b7:39:47:b0:51:3f:b7:cb:91: 98:3e:c2:d0:d8:cf:4b:57:ee:7a:a7:72:df:d9:ec:42:e9:b8: 1d:cf:45:cc:c0:22:76:58:91:21:4c:44:74:76:98:f3:4f:f0: fe:8e:24:98:64:6f:ea:7d:77:52:8b:46:ea:6f:d0:08:8a:54: ef:68:7c:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3DzfzKuflL4OMYyO7mJPpXcyHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNDExMjExMjM2MTBaFw0yNDExMjUwMDI4MTBaMDMxMTAvBgNV BAMTKEFBRUMxQTY0QzZFRkVBRjUzNThFRjNFQ0RDMEFDREMzQzEwQTc5MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78LGD1l3Z2ULXHrJs7ZGXtYri FPIysoeV7EvnmlmyCAJyzDKB79KPjBbcpVM8KzwPGfxNKQv3qwaOhD6+wCtap2xD nFd6Ry0yT+Y7ue6709hEEyYx3aqqRFfVxfKFCvTyBzKeeXqcLof/fjCBz3DL/xUZ Sr4NKTbaXMtQi1nQgOUXeaGfFso7xvB+1FlNsK7zznJfy6xZUSo8aMuuW51jh30i fdLixTbyozHhndfrWZUqm45NBaFT4LxAbPWMxxvSMmRTg95PQ+9io75vesyBu+wq L2VDsnXIJ8mI3fSDlv7bo+Kfji5v0l/1VI6XJBwGmpTW8UID9gVyTCsElNKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUquwaZMbv6vU1jvPs3ArNw8EKeQAwHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHTjfQwHAKMlCoitF4FWjjVVMBK9JsrVZUz IFRM6XBwzRiydBRO7owb2BA95VaI1W9kVVOWSpN78WDgcDT5uHvyo9FHQlMvrsKr JJN+icPWM0nuReEbG5ZgFhd7AKFCCWi0MbnZW1/q0aG+WYJKb+zqp871j78HtJaj DKNdIUCwdxXbBMU2zimQ/anfkhysTs3Dob5FzYJZ6znQrvkzC+7NYQtCk7pLuvMZ 4T0UG1OrKqtWWez3syghbfjmEbc5R7BRP7fLkZg+wtDYz0tX7nqnct/Z7ELpuB3P RczAInZYkSFMRHR2mPNP8P6OJJhkb+p9d1KLRupv0AiKVO9ofKU= -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org