$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: Tufrhf1zDe6vOCc6Z8Hc1w6fpgjAiR4dwE+3JL+MUGk= Subject key identifier: DB:7A:56:08:4F:81:67:12:79:7A:3C:2B:A9:5A:F5:F3:05:9C:E0:56 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 359FFC37B50A1790B2FA4D3F645AD93A2916A885 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: 5D Signing time: Sun 24 Nov 2024 17:52:14 +0000 Manifest this update: Sun 24 Nov 2024 17:47:14 +0000 Manifest next update: Thu 28 Nov 2024 00:01:14 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: yRf7DT4SMWKJd5i4r1s4nhb5FSivER/9Py910m3Jd4o=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: Yid8frpvCMkMf1ma76Hg9B9Pe7bRisQmq2+wHrZy8PM=) 3: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: SRdouSv1qfM9FxUJfV+VU82Y1iw5YcEU0ZR+ez7rwYY=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: A6lmT+4re8NJP6RZrWP6uSLhDKlk3n2nKGBixAMUJac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9f:fc:37:b5:0a:17:90:b2:fa:4d:3f:64:5a:d9:3a:29:16:a8:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Nov 24 17:47:14 2024 GMT Not After : Nov 28 00:01:14 2024 GMT Subject: CN=DB7A56084F816712797A3C2BA95AF5F3059CE056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:f3:1d:a5:0c:62:c8:0e:89:26:89:20:2e: 47:37:74:1a:ce:fc:13:74:01:f9:3e:66:e4:30:2e: 85:fd:80:a6:0d:3a:74:ef:f7:df:cd:c9:c4:15:a8: 49:b0:58:7d:c4:d7:e3:2b:ee:da:dc:25:72:87:bb: 36:c7:e7:93:95:57:29:e8:33:78:43:94:05:c6:c9: bb:42:ab:83:d4:9c:ca:b3:36:c4:72:2b:fd:5d:6a: 83:7e:26:43:bd:00:f9:d9:95:b0:a9:6c:d2:0c:30: 9c:fd:df:18:05:0b:3d:8f:e8:c7:da:38:e3:27:73: 53:4d:08:ff:87:a2:89:45:e6:22:ba:63:7b:04:72: 10:13:77:1a:57:49:f5:cc:43:21:93:d9:e6:b4:a3: 2f:41:f7:01:54:1d:85:33:f5:e2:a1:d7:72:41:49: 2c:df:9f:99:41:b3:21:f9:ac:40:67:20:ac:76:a1: 2b:03:9b:19:21:e3:e9:5c:4f:0a:6f:ad:1e:25:86: b1:34:2d:44:5e:50:97:d6:ee:02:bd:0c:a5:10:ba: 35:3f:8b:fd:01:48:de:39:77:a6:29:1a:f7:82:aa: 56:24:61:9a:3f:4d:38:78:7e:59:34:59:04:43:b9: 78:d3:e2:c7:13:9e:75:f4:33:c3:ee:16:c2:57:90: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7A:56:08:4F:81:67:12:79:7A:3C:2B:A9:5A:F5:F3:05:9C:E0:56 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:bf:91:fb:18:ab:4b:8b:c6:8c:e6:28:ae:5e:a2:1a:93:54: 7b:4c:9b:f4:29:aa:40:45:1d:d0:b6:6d:4a:9a:5e:27:88:ec: fc:99:9c:9a:1d:ce:56:5e:b8:39:fb:a4:8f:58:28:30:9d:fb: 31:66:27:e7:34:79:5d:22:b4:d8:63:6f:40:f7:e2:d6:54:19: df:4a:67:e6:2b:28:0e:22:96:1b:5b:61:be:8f:ab:d8:c5:ad: 62:9f:e2:d5:b7:a3:25:e3:22:e1:8e:a3:4c:7e:7b:10:ca:a0: a5:0c:99:4e:3c:98:73:64:8f:c9:fd:21:ee:06:82:60:28:94: 3d:86:52:2d:31:9e:eb:0f:e8:fe:6c:99:d6:27:fa:2d:dd:2a: fa:c5:2f:af:32:c4:7d:4b:90:a2:30:b8:01:8d:ca:ba:3a:e1: a3:55:d7:97:23:a3:42:2f:17:99:1b:57:e7:be:e1:33:b2:a9: 60:f4:ae:d8:c2:86:eb:5e:9a:65:00:91:f9:02:5c:b7:05:b1: 1d:d4:35:fc:50:b5:c0:8d:13:70:cb:13:9f:53:c3:f9:09:b0: 66:ec:a6:d7:ec:98:70:66:77:34:2e:7c:14:03:78:34:df:9d: 9e:de:1f:23:c2:34:29:19:6b:3d:ea:b8:e1:5e:52:8f:3a:4d: bc:18:19:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZ/8N7UKF5Cy+k0/ZFrZOikWqIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNDExMjQxNzQ3MTRaFw0yNDExMjgwMDAxMTRaMDMxMTAvBgNV BAMTKERCN0E1NjA4NEY4MTY3MTI3OTdBM0MyQkE5NUFGNUYzMDU5Q0UwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgYfMdpQxiyA6JJokgLkc3dBrO /BN0Afk+ZuQwLoX9gKYNOnTv99/NycQVqEmwWH3E1+Mr7trcJXKHuzbH55OVVyno M3hDlAXGybtCq4PUnMqzNsRyK/1daoN+JkO9APnZlbCpbNIMMJz93xgFCz2P6Mfa OOMnc1NNCP+HoolF5iK6Y3sEchATdxpXSfXMQyGT2ea0oy9B9wFUHYUz9eKh13JB SSzfn5lBsyH5rEBnIKx2oSsDmxkh4+lcTwpvrR4lhrE0LUReUJfW7gK9DKUQujU/ i/0BSN45d6YpGveCqlYkYZo/TTh4flk0WQRDuXjT4scTnnX0M8PuFsJXkI3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23pWCE+BZxJ5ejwrqVr18wWc4FYwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALS/kfsYq0uLxozmKK5eohqTVHtMm/QpqkBF HdC2bUqaXieI7PyZnJodzlZeuDn7pI9YKDCd+zFmJ+c0eV0itNhjb0D34tZUGd9K Z+YrKA4ilhtbYb6Pq9jFrWKf4tW3oyXjIuGOo0x+exDKoKUMmU48mHNkj8n9Ie4G gmAolD2GUi0xnusP6P5smdYn+i3dKvrFL68yxH1LkKIwuAGNyro64aNV15cjo0Iv F5kbV+e+4TOyqWD0rtjChutemmUAkfkCXLcFsR3UNfxQtcCNE3DLE59Tw/kJsGbs ptfsmHBmdzQufBQDeDTfnZ7eHyPCNCkZaz3quOFeUo86TbwYGf4= -----END CERTIFICATE-----Generated at Sun Nov 24 18:33:16 2024 by rpki-client on console-fra.rpki-client.org