$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: q5lBhnogMkzqmBJF5Fi1gvYldCBfoESDOdLppx3+Fs4= Subject key identifier: AF:45:37:E1:EC:0B:C8:A1:48:17:6D:AD:3F:39:F8:88:6B:62:1E:0B Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 09D9FCCABA92721A76C1E596561A5DFD051E233D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 0452 Signing time: Thu 21 Nov 2024 11:51:59 +0000 Manifest this update: Thu 21 Nov 2024 11:46:59 +0000 Manifest next update: Sun 24 Nov 2024 13:45:59 +0000 Files and hashes: 1: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: Y829XAFE9eed0nOm5EtB2BBwNWI1JEh8T8LUzNvjd88=) 2: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: KiHXA3kouLZg5fwlNXjOYNgz9xWPAyNa7B/vVD0aLjQ=) 3: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: VIUHgHSJ9BstOaTVLDyN6BPv5dR1OTHyCPByWsifLIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d9:fc:ca:ba:92:72:1a:76:c1:e5:96:56:1a:5d:fd:05:1e:23:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Nov 21 11:46:59 2024 GMT Not After : Nov 24 13:45:59 2024 GMT Subject: CN=AF4537E1EC0BC8A148176DAD3F39F8886B621E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:a3:12:2b:7b:3f:dd:90:6a:1d:0e:e4:1f: 09:d7:33:49:d3:9d:de:b5:58:e1:a0:b0:3c:91:88: 3f:50:04:dd:a2:85:a4:aa:f2:01:3f:fb:43:b2:a9: 55:3c:b6:9f:7c:a7:35:d2:16:48:1e:84:c9:88:c8: e2:3e:0a:62:94:73:57:90:7d:a2:ff:7a:09:5b:d5: b8:0f:e7:57:06:c8:f9:6b:e5:ae:05:10:b0:f5:b8: c9:dc:61:31:dc:aa:b0:5e:c9:1c:fd:ed:17:3d:af: 7b:04:4e:18:d8:42:79:37:eb:9c:59:13:a1:84:98: e8:06:fe:df:d6:ff:f0:d2:29:7c:16:83:b5:1f:11: 00:79:8d:df:e9:8e:51:a7:53:9d:40:41:d7:84:e7: 8a:e1:ec:da:11:27:42:79:8f:33:af:4d:fe:ba:aa: bd:f4:ef:09:d4:c5:d4:55:7f:25:99:2b:51:ab:dd: d9:a9:94:71:60:0f:ac:47:c4:27:8e:97:87:25:97: c5:24:71:b8:de:1d:13:e2:ba:00:b4:80:b7:5b:42: e1:39:f9:f7:ff:09:d6:4d:56:07:8a:72:69:03:c0: 2a:df:96:63:99:9d:2f:94:24:76:f9:00:5b:ac:f9: d4:ba:74:1e:97:ba:e5:37:5b:d4:02:d8:99:b2:56: a6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:45:37:E1:EC:0B:C8:A1:48:17:6D:AD:3F:39:F8:88:6B:62:1E:0B X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:84:59:c5:5c:1c:4b:58:61:65:2b:4b:d3:52:cf:c8:57:68: 99:c9:52:0a:36:78:2b:e2:d1:88:fe:11:14:bb:3a:6f:94:27: f3:eb:d4:d3:c1:f1:76:fb:75:5e:99:21:95:13:1c:fe:59:1b: c7:c1:e8:31:fe:38:89:ed:ad:0b:ef:88:9e:13:6b:58:91:89: 1f:3f:d0:95:1c:55:98:27:af:fa:94:e9:52:60:14:3e:3e:47: b2:ea:ab:82:14:06:ed:da:9c:31:48:4a:0d:30:be:42:d6:5d: 55:18:1f:27:e7:5c:6a:fe:a5:fc:ab:74:b4:4a:bf:b8:00:34: 46:cc:31:52:d2:5c:9a:ce:c7:60:74:a3:0f:ac:af:5b:cc:70: b2:e9:d0:43:3c:03:c1:e2:72:9d:7f:0b:f3:3e:d0:9b:eb:b9: 8e:43:00:b4:3c:c8:f4:c2:65:7a:e1:32:32:ed:08:80:d1:7b: 32:0e:b5:98:57:a7:99:26:b9:b9:7f:f9:06:96:6e:3f:2b:4c: f1:78:b3:9f:74:a2:71:f3:5b:65:45:4d:5e:4c:74:b8:c1:ca: 5c:52:db:44:ce:6e:c2:e2:6a:aa:d8:2f:28:27:de:51:a5:28: 86:4a:a0:a8:4e:42:8e:49:4b:04:29:2c:59:b0:11:4a:cc:19: a3:28:4d:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCdn8yrqSchp2weWWVhpd/QUeIz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNDExMjExMTQ2NTlaFw0yNDExMjQxMzQ1NTlaMDMxMTAvBgNV BAMTKEFGNDUzN0UxRUMwQkM4QTE0ODE3NkRBRDNGMzlGODg4NkI2MjFFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6A6MSK3s/3ZBqHQ7kHwnXM0nT nd61WOGgsDyRiD9QBN2ihaSq8gE/+0OyqVU8tp98pzXSFkgehMmIyOI+CmKUc1eQ faL/eglb1bgP51cGyPlr5a4FELD1uMncYTHcqrBeyRz97Rc9r3sEThjYQnk365xZ E6GEmOgG/t/W//DSKXwWg7UfEQB5jd/pjlGnU51AQdeE54rh7NoRJ0J5jzOvTf66 qr307wnUxdRVfyWZK1Gr3dmplHFgD6xHxCeOl4cll8UkcbjeHRPiugC0gLdbQuE5 +ff/CdZNVgeKcmkDwCrflmOZnS+UJHb5AFus+dS6dB6XuuU3W9QC2JmyVqajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr0U34ewLyKFIF22tPzn4iGtiHgswHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqEWcVcHEtYYWUrS9NSz8hXaJnJUgo2eCvi 0Yj+ERS7Om+UJ/Pr1NPB8Xb7dV6ZIZUTHP5ZG8fB6DH+OIntrQvviJ4Ta1iRiR8/ 0JUcVZgnr/qU6VJgFD4+R7Lqq4IUBu3anDFISg0wvkLWXVUYHyfnXGr+pfyrdLRK v7gANEbMMVLSXJrOx2B0ow+sr1vMcLLp0EM8A8Hicp1/C/M+0JvruY5DALQ8yPTC ZXrhMjLtCIDRezIOtZhXp5kmubl/+QaWbj8rTPF4s590onHzW2VFTV5MdLjBylxS 20TObsLiaqrYLygn3lGlKIZKoKhOQo5JSwQpLFmwEUrMGaMoTbc= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org