$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: cfdLAL9BUSB4xE5zjqHWhjO1wQmIz2PDFk3AHtDTC0A= Subject key identifier: 74:52:BF:13:2E:DC:35:97:2B:2D:BE:C2:02:B2:69:36:1B:E8:21:CE Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 385E34A6C7BBBD07A3B753B19289972A12DCBBF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 0128 Signing time: Fri 22 Nov 2024 06:40:36 +0000 Manifest this update: Fri 22 Nov 2024 06:35:36 +0000 Manifest next update: Mon 25 Nov 2024 07:57:36 +0000 Files and hashes: 1: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: M22oeIkYdJT0AW1cVL31IxCFck7R8eGHeb3ZdEDWXHk=) 2: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: GZXY3JPfRQg0h3cT0Tv2dDMfqsqC82KH0m9zWrE/43w=) 3: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: mzUFPzCyUKnoJ/NkhA91GXgkzTJUGSOqjJknENZptNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5e:34:a6:c7:bb:bd:07:a3:b7:53:b1:92:89:97:2a:12:dc:bb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Nov 22 06:35:36 2024 GMT Not After : Nov 25 07:57:36 2024 GMT Subject: CN=7452BF132EDC35972B2DBEC202B269361BE821CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:e2:71:ae:93:e4:a9:71:45:da:e2:b6:f0: 69:2f:e1:94:58:58:65:b2:a7:b3:9e:bd:6a:42:d8: 42:77:b0:16:e4:97:ca:ed:33:c7:b0:a2:2b:44:fe: 4e:f2:86:43:1a:0a:30:c4:bc:cf:56:31:79:22:7e: 36:a5:9b:de:83:57:a5:b7:8e:c4:fe:52:72:9d:a0: ed:4d:13:48:ee:6f:2d:10:d8:04:95:d6:51:3c:a1: 0c:ff:b4:31:d9:3d:5a:eb:ed:74:d9:dd:d3:b9:bd: 4c:44:32:54:ea:24:35:ca:64:9c:fa:f6:f6:e3:38: e9:81:fd:ac:96:49:27:6f:02:cc:89:89:3e:e0:1c: 61:7a:b1:58:6c:b0:09:af:7c:0a:b9:12:4f:04:ea: 25:1c:1c:ce:54:38:2f:84:d1:68:25:de:f5:a7:34: d0:f9:b4:78:0f:e5:ee:1b:e0:ca:02:f8:8e:77:89: 02:6e:39:77:2a:5d:2a:d4:f3:b5:5d:e7:8e:7c:89: 22:99:46:4a:bc:98:da:e7:e2:8c:6d:31:ce:ac:39: 86:43:a3:56:ee:ca:6f:7c:d9:9b:e4:a3:84:37:53: 71:38:1f:c9:08:1b:72:6d:cd:3f:8c:18:66:b2:f1: 4d:33:e0:33:08:7e:17:fe:db:59:93:ba:95:0f:1d: 7b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:52:BF:13:2E:DC:35:97:2B:2D:BE:C2:02:B2:69:36:1B:E8:21:CE X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:21:df:86:1e:b8:a3:7a:ce:03:9f:d0:3c:49:52:89:52:1b: e3:4e:a0:41:3b:2a:b8:b5:69:a3:fd:dc:41:e1:da:af:7a:40: f5:3d:63:fa:e9:ca:63:6b:52:99:fe:1e:44:e6:64:be:80:a6: 49:ab:d9:88:f4:64:92:49:a4:af:2c:2a:65:ea:f9:c2:fd:7b: ac:7e:24:0e:37:de:bd:58:f0:13:06:62:db:e9:e1:97:34:ab: e7:df:0c:6e:ed:fb:a4:2b:a5:32:4e:48:ad:8b:7f:a3:c4:e6: 36:3b:dc:7d:51:18:0d:c7:81:07:71:98:d3:c6:f7:05:3b:c6: dd:58:ad:a7:70:69:ee:6b:d4:4c:ba:f3:0a:22:8d:25:69:f6: e1:41:1e:e3:12:61:83:ae:dc:ae:d9:ee:a2:f7:dd:ac:ca:ae: cc:be:6e:e5:54:a6:a7:dc:a5:cc:6c:c8:04:2e:32:a3:9e:ae: fe:86:57:31:f2:2a:66:73:7a:37:f7:99:b1:97:4b:47:e1:91: b6:df:4b:4b:97:9e:93:f2:c1:95:12:c6:92:d3:9b:28:11:3a: 37:01:32:c2:2f:17:de:49:74:2d:07:44:e5:50:bc:1c:4e:1e: 97:7c:06:56:9f:b9:f9:77:13:0e:b7:78:56:2b:f7:fc:c6:22: 0d:ec:22:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOF40pse7vQejt1OxkomXKhLcu/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNDExMjIwNjM1MzZaFw0yNDExMjUwNzU3MzZaMDMxMTAvBgNV BAMTKDc0NTJCRjEzMkVEQzM1OTcyQjJEQkVDMjAyQjI2OTM2MUJFODIxQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWL+JxrpPkqXFF2uK28Gkv4ZRY WGWyp7OevWpC2EJ3sBbkl8rtM8ewoitE/k7yhkMaCjDEvM9WMXkifjalm96DV6W3 jsT+UnKdoO1NE0juby0Q2ASV1lE8oQz/tDHZPVrr7XTZ3dO5vUxEMlTqJDXKZJz6 9vbjOOmB/ayWSSdvAsyJiT7gHGF6sVhssAmvfAq5Ek8E6iUcHM5UOC+E0Wgl3vWn NND5tHgP5e4b4MoC+I53iQJuOXcqXSrU87Vd5458iSKZRkq8mNrn4oxtMc6sOYZD o1buym982Zvko4Q3U3E4H8kIG3JtzT+MGGay8U0z4DMIfhf+21mTupUPHXvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdFK/Ey7cNZcrLb7CArJpNhvoIc4wHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsh34YeuKN6zgOf0DxJUolSG+NOoEE7Kri1 aaP93EHh2q96QPU9Y/rpymNrUpn+HkTmZL6Apkmr2Yj0ZJJJpK8sKmXq+cL9e6x+ JA433r1Y8BMGYtvp4Zc0q+ffDG7t+6QrpTJOSK2Lf6PE5jY73H1RGA3HgQdxmNPG 9wU7xt1Yradwae5r1Ey68woijSVp9uFBHuMSYYOu3K7Z7qL33azKrsy+buVUpqfc pcxsyAQuMqOerv6GVzHyKmZzejf3mbGXS0fhkbbfS0uXnpPywZUSxpLTmygROjcB MsIvF95JdC0HROVQvBxOHpd8Blafufl3Ew63eFYr9/zGIg3sIrY= -----END CERTIFICATE-----Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org