$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: e6EmmJxV1wVAcEi2piJiwX8NGO1VW0XWgOBX8iHeWI0= Subject key identifier: 7A:F9:FF:BF:BD:19:F8:75:FC:91:A4:89:43:87:4A:D9:E3:71:5E:0E Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 120E1B66EA54ECAFC801E2F91F7FCF040E4B6ED9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: 53 Signing time: Mon 25 Nov 2024 10:21:41 +0000 Manifest this update: Mon 25 Nov 2024 10:16:41 +0000 Manifest next update: Thu 28 Nov 2024 16:02:41 +0000 Files and hashes: 1: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: S8V0ctQ3OB5TmtbeMUDgMTOgNyEaOOAlgreQPvLhaJ4=) 2: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 9m+4v7BYbM9SS9Yvhf+ii+qFUs/B5Cv8TrlKAtlSBSI=) 3: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: uwdYr6Vc4obI5UkZd3aysyOqaW/UmE8m3/nxpyz48I4=) 4: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: m4o9tmG8VWbfYauSbCi6chKVKssFkKAm15xM3xmJaes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 16:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0e:1b:66:ea:54:ec:af:c8:01:e2:f9:1f:7f:cf:04:0e:4b:6e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Nov 25 10:16:41 2024 GMT Not After : Nov 28 16:02:41 2024 GMT Subject: CN=7AF9FFBFBD19F875FC91A48943874AD9E3715E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:6a:fb:71:9c:48:ff:b3:a1:69:33:5d:d1: ba:80:6e:0b:1a:2c:7a:ac:82:f9:f5:3c:fe:ca:d2: 3d:c7:37:48:b6:3f:26:76:0f:e3:be:fe:e8:06:88: 57:dd:ff:9c:51:6e:2c:9a:33:ac:52:80:ff:d2:4c: 75:07:9d:cd:06:2e:8f:d8:22:cc:c2:9a:e3:2f:d2: f4:76:bc:94:9c:df:01:b3:66:80:57:29:27:10:70: 43:ed:d8:ed:7c:3a:e3:e0:13:b1:c3:1d:3e:42:42: 81:1d:2e:6b:93:97:a2:ef:8b:eb:61:4e:6c:58:a9: 27:21:e0:c3:b1:ef:47:92:81:80:b4:d8:97:e7:a7: b5:01:fc:cc:9d:b1:22:b0:b6:de:0c:77:07:8c:0a: 54:61:19:c5:48:a7:9c:82:f8:20:d7:4a:ba:a1:b3: e9:2b:bd:4b:9c:53:65:b2:33:c2:f2:13:0b:90:57: 39:bc:25:1a:e8:9a:06:d6:aa:f2:42:87:e5:ed:26: 0f:b7:82:0e:cc:81:aa:7d:5b:15:73:56:01:61:97: 02:c6:0d:48:3e:6f:55:ff:d5:49:0a:d4:a8:d3:eb: 2a:3f:d3:4b:14:63:57:9d:e0:90:e6:fa:db:7f:a8: 7f:fc:0d:f0:f1:4c:80:d3:5d:ad:0f:b0:60:97:ff: 0c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F9:FF:BF:BD:19:F8:75:FC:91:A4:89:43:87:4A:D9:E3:71:5E:0E X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3e:3d:eb:0a:3d:bf:22:30:12:5d:24:28:21:d0:72:1d:72: 69:1b:a2:54:df:b8:f9:0b:fd:86:6d:e2:ac:1f:75:35:21:49: 40:4d:e2:b7:7f:a9:df:a2:b3:f8:b3:0e:69:a1:a1:9c:c4:5e: b4:c8:ca:87:a0:ad:fb:e6:e4:b2:b1:b9:9f:aa:29:22:a3:bb: 3d:75:b3:4e:8f:25:2c:35:a9:e3:6a:32:46:74:d4:0d:77:73: 8d:7d:50:b6:89:11:35:34:e1:d0:43:2f:da:88:52:78:1f:0e: 81:dd:92:52:af:db:b8:f0:03:27:5b:45:ac:53:0d:ef:35:a5: 2c:55:b1:f5:49:8c:7f:c0:bf:e5:e8:2e:4a:ce:69:46:89:74: 22:d7:e7:38:ad:36:d5:8a:a4:5b:c1:26:15:cc:7e:40:79:6c: f0:08:94:51:64:b8:23:99:99:75:3e:ad:18:30:4d:43:be:7e: bd:77:07:1d:f5:74:c1:97:bf:4b:97:f6:9e:c0:59:7c:19:55: c3:3b:5f:5e:03:fd:3a:9c:34:51:bf:0f:68:b4:a4:0a:b7:af: e8:c5:d5:95:f1:a5:47:bd:5d:c9:73:75:c6:4e:dd:71:de:65: 80:c7:8d:69:83:d0:c9:b9:8f:8a:50:6b:12:f1:a3:19:75:8a: 46:93:4d:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEg4bZupU7K/IAeL5H3/PBA5LbtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNDExMjUxMDE2NDFaFw0yNDExMjgxNjAyNDFaMDMxMTAvBgNV BAMTKDdBRjlGRkJGQkQxOUY4NzVGQzkxQTQ4OTQzODc0QUQ5RTM3MTVFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN12r7cZxI/7OhaTNd0bqAbgsa LHqsgvn1PP7K0j3HN0i2PyZ2D+O+/ugGiFfd/5xRbiyaM6xSgP/STHUHnc0GLo/Y IszCmuMv0vR2vJSc3wGzZoBXKScQcEPt2O18OuPgE7HDHT5CQoEdLmuTl6Lvi+th TmxYqSch4MOx70eSgYC02Jfnp7UB/MydsSKwtt4MdweMClRhGcVIp5yC+CDXSrqh s+krvUucU2WyM8LyEwuQVzm8JRromgbWqvJCh+XtJg+3gg7Mgap9WxVzVgFhlwLG DUg+b1X/1UkK1KjT6yo/00sUY1ed4JDm+tt/qH/8DfDxTIDTXa0PsGCX/wwnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUevn/v70Z+HX8kaSJQ4dK2eNxXg4wHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0+PesKPb8iMBJdJCgh0HIdcmkbolTfuPkL /YZt4qwfdTUhSUBN4rd/qd+is/izDmmhoZzEXrTIyoegrfvm5LKxuZ+qKSKjuz11 s06PJSw1qeNqMkZ01A13c419ULaJETU04dBDL9qIUngfDoHdklKv27jwAydbRaxT De81pSxVsfVJjH/Av+XoLkrOaUaJdCLX5zitNtWKpFvBJhXMfkB5bPAIlFFkuCOZ mXU+rRgwTUO+fr13Bx31dMGXv0uX9p7AWXwZVcM7X14D/TqcNFG/D2i0pAq3r+jF 1ZXxpUe9XclzdcZO3XHeZYDHjWmD0Mm5j4pQaxLxoxl1ikaTTfY= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:43 2024 by rpki-client on console-fra.rpki-client.org