$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: /aSxYanMa0bOsKj1OsZZSgkdNU7BcMkvG2grne2q3vM= Subject key identifier: 95:93:45:AA:55:D8:D7:EC:6B:BC:01:9F:EE:94:C5:2C:F6:F3:A7:1D Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 508E0EBE5975D86750610A6127C095B2BFC333CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: 3A Signing time: Thu 21 Nov 2024 12:51:31 +0000 Manifest this update: Thu 21 Nov 2024 12:46:31 +0000 Manifest next update: Sun 24 Nov 2024 20:35:31 +0000 Files and hashes: 1: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: ef7YYSMzAtPt9zZDc7b2VbFvOqrUwp6coiKLTTrdJbk=) 2: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aTzve7Y6mBexH/WsjxWYP1/0CSlzvkwS9M1uSz5WL7A=) 3: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: IiwJGvJXooBTapkry0rsHVHulyWnAvp0ngUMjLmkAdU=) 4: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: O/ASHgZeblmxpbkzceq8+yIIFxdV6ZLl5CtvLrpORI4=) 5: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: moFK92Lb7O04I+6FG9VzJZ/FTQ4AaEmINK+chDU1cX4=) 6: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: WY2DOuG7g1lOQ3hBzBdKaw4BL9HMUw6ef/1cdf1Td+g=) 7: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ZUUrvcV4tzaV5FI9nd3G6vecM/kD2HHsEXb/JzJw5nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8e:0e:be:59:75:d8:67:50:61:0a:61:27:c0:95:b2:bf:c3:33:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Nov 21 12:46:31 2024 GMT Not After : Nov 24 20:35:31 2024 GMT Subject: CN=959345AA55D8D7EC6BBC019FEE94C52CF6F3A71D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:01:a0:c9:6b:19:b2:5a:6d:7b:b4:28:da: 21:36:d3:99:fa:c7:44:17:09:84:d0:93:96:4b:43: 06:8f:40:2c:87:ad:51:69:36:0a:0a:01:2e:92:d2: 7e:f7:ea:d2:70:d9:12:c6:03:29:9c:71:9a:88:8e: 95:fa:5d:07:53:f7:dd:de:f7:ea:14:d9:54:dc:d1: 14:91:ca:b7:d4:99:48:0d:68:a9:67:32:ff:ef:28: 81:22:93:94:d1:e3:02:da:13:c3:a4:c1:3a:f2:c1: 4f:b0:85:77:3f:38:75:ab:28:39:5a:8c:70:21:80: e9:f4:86:9c:74:1a:38:20:ed:3c:a5:fa:c8:56:b6: fb:40:05:3f:51:29:bd:1b:82:2b:4f:5f:5c:6a:2a: 6e:b6:4e:df:72:5d:af:f5:99:e3:45:5f:1f:cb:2f: ef:20:02:fb:db:97:da:db:5c:ec:a0:0f:90:88:41: 80:a6:88:05:21:42:0b:e9:9e:4f:e6:bf:0b:ed:2c: 2d:ff:cf:6e:e6:ac:57:9e:bb:ba:92:f7:2c:06:7c: 67:16:cf:17:a3:7d:3d:cd:18:0e:18:fc:eb:43:9c: c8:fa:30:b5:d6:60:9a:09:38:68:22:a4:2b:ac:23: ea:56:81:64:da:77:5c:f8:fd:0d:7d:1b:eb:a8:63: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:93:45:AA:55:D8:D7:EC:6B:BC:01:9F:EE:94:C5:2C:F6:F3:A7:1D X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:00:fb:2e:8c:ce:7a:7e:0c:85:30:db:8b:c6:62:b1:61:44: 2b:df:bb:95:78:e2:81:07:6a:b6:39:0c:fa:e0:0c:74:15:bb: 47:fc:20:35:f4:d5:7a:9b:2f:91:0e:6a:b1:16:fc:86:fb:82: 9a:de:3c:04:84:cb:bd:29:1e:00:ab:e9:8a:52:9f:20:55:c2: 8d:52:3c:a4:cb:6b:d4:68:09:b9:f2:da:99:64:22:66:20:a1: 74:02:e5:d1:e4:9a:84:af:3a:f3:70:e8:f9:e5:74:16:98:3a: 0e:89:1e:1d:58:05:4b:79:bb:88:37:e3:36:8d:0a:5d:1f:c9: fc:b4:7a:68:aa:28:da:8e:63:62:a7:54:33:de:03:62:9b:34: 74:c4:88:3d:58:51:f4:27:ad:d4:ea:61:4b:70:8c:28:9c:30: d8:ab:fa:b9:bc:3c:eb:75:dc:92:e6:e3:06:13:b1:79:0f:8f: 58:cc:69:87:37:89:84:da:62:20:1b:27:a4:9e:8f:e6:a6:9e: c4:74:66:ba:2a:d5:18:37:98:bb:3a:23:99:af:4e:96:44:8b: 8d:a8:ea:a0:14:be:4b:e7:51:12:25:0c:61:76:46:0e:c5:90: 4c:a4:44:af:9c:89:1a:27:3d:8f:a9:81:f0:b7:1b:c7:d8:17: 49:6b:ec:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUI4Ovll12GdQYQphJ8CVsr/DM8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNDExMjExMjQ2MzFaFw0yNDExMjQyMDM1MzFaMDMxMTAvBgNV BAMTKDk1OTM0NUFBNTVEOEQ3RUM2QkJDMDE5RkVFOTRDNTJDRjZGM0E3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54AGgyWsZslpte7Qo2iE205n6 x0QXCYTQk5ZLQwaPQCyHrVFpNgoKAS6S0n736tJw2RLGAymccZqIjpX6XQdT993e 9+oU2VTc0RSRyrfUmUgNaKlnMv/vKIEik5TR4wLaE8OkwTrywU+whXc/OHWrKDla jHAhgOn0hpx0Gjgg7Tyl+shWtvtABT9RKb0bgitPX1xqKm62Tt9yXa/1meNFXx/L L+8gAvvbl9rbXOygD5CIQYCmiAUhQgvpnk/mvwvtLC3/z27mrFeeu7qS9ywGfGcW zxejfT3NGA4Y/OtDnMj6MLXWYJoJOGgipCusI+pWgWTad1z4/Q19G+uoY6g/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlZNFqlXY1+xrvAGf7pTFLPbzpx0wHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsA+y6Mznp+DIUw24vGYrFhRCvfu5V44oEH arY5DPrgDHQVu0f8IDX01XqbL5EOarEW/Ib7gprePASEy70pHgCr6YpSnyBVwo1S PKTLa9RoCbny2plkImYgoXQC5dHkmoSvOvNw6PnldBaYOg6JHh1YBUt5u4g34zaN Cl0fyfy0emiqKNqOY2KnVDPeA2KbNHTEiD1YUfQnrdTqYUtwjCicMNir+rm8POt1 3JLm4wYTsXkPj1jMaYc3iYTaYiAbJ6Sej+amnsR0Zroq1Rg3mLs6I5mvTpZEi42o 6qAUvkvnURIlDGF2Rg7FkEykRK+ciRonPY+pgfC3G8fYF0lr7E4= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org