$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: PcCHh4pqNzsCZGvqiiu8kcERtU6mm7qN8iatdFM1aWs= Subject key identifier: 1D:62:FD:FA:30:CB:9E:F6:59:23:A9:1C:A0:69:4A:1D:3B:88:96:2E Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 2EA6CA48D01DF199FE39F4E59FC7C584FB8F632C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: FD Signing time: Sat 23 Nov 2024 20:32:01 +0000 Manifest this update: Sat 23 Nov 2024 20:27:01 +0000 Manifest next update: Wed 27 Nov 2024 03:56:01 +0000 Files and hashes: 1: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: hS9W5zhiPMoA5xFQ7ZKaftiZbmY4HQaJ34cbk5T3AvA=) 2: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: 0I6GncCx2+0vSrHS0X7aKcX1OXnxEujN0wTF9MGxlR4=) 3: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: MK8sCC8N+jxIle5DouV0FAWtS3LVmt81dQuXnTzLQj0=) 4: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: VXHzGzWWOdUHSL0pFV0k3y50wM3LEutF4Pd4G82/XLo=) 5: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: 9NdE9Yt64lHcZmHfcp/BPdUY3C5A8B6IZ0IM6khU6pM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a6:ca:48:d0:1d:f1:99:fe:39:f4:e5:9f:c7:c5:84:fb:8f:63:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Nov 23 20:27:01 2024 GMT Not After : Nov 27 03:56:01 2024 GMT Subject: CN=1D62FDFA30CB9EF65923A91CA0694A1D3B88962E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:59:bc:27:7f:44:3d:73:f7:71:1e:9d:1e:4a: 5a:67:ef:f3:87:81:11:60:26:c7:4e:a3:4c:98:36: 24:43:dc:01:8e:c1:ea:4b:0f:d0:76:61:9a:66:0c: 7d:0b:c9:86:85:b9:97:9a:2d:24:34:48:eb:90:df: b7:0b:02:6b:20:ee:d8:81:a4:a4:d9:47:90:1b:99: dc:62:1f:5d:14:5a:6c:69:5b:3a:d0:f1:8a:90:d0: 14:be:a2:d3:3b:e8:60:1e:1c:bd:77:e6:ec:4c:c1: 5b:94:b9:94:d9:8c:9e:b2:0f:52:c8:34:69:84:09: e4:33:4a:0d:4a:9d:b7:11:6c:76:a1:27:33:86:7f: 7e:6d:9a:60:db:80:4b:8b:e8:94:21:c4:a6:8d:8a: 06:c5:23:00:df:5d:df:c5:a6:69:15:b3:9b:a4:06: ea:19:00:6e:20:3f:f5:ce:1d:1b:42:d6:17:4e:b7: 3b:71:d7:f8:4b:f2:c1:a3:37:b5:84:6c:5b:81:fa: 79:46:ea:cc:d7:54:97:0e:47:47:85:b6:8e:ed:9f: 70:2b:94:43:95:57:2d:e2:39:13:ca:44:b2:7d:ad: 22:1e:a0:a2:ed:d9:b0:4b:fe:bb:aa:26:b6:93:c6: 0f:de:f4:c1:29:24:e2:31:f5:2f:40:35:7c:c4:d4: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:62:FD:FA:30:CB:9E:F6:59:23:A9:1C:A0:69:4A:1D:3B:88:96:2E X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d8:fd:b2:07:fe:33:fe:d5:cf:c5:f4:13:d3:7c:09:3d:73: 13:51:47:d3:ed:c9:4b:7c:2b:8a:c0:a2:f3:fc:90:69:f4:ac: 3a:52:0e:92:1b:e9:9d:3a:da:98:8a:46:83:00:6b:53:08:3d: cc:24:9b:91:55:0c:5b:f5:93:f9:e7:42:cf:50:20:bf:c6:95: 6f:c1:fd:ed:8d:9f:7b:2e:c4:7a:4f:8d:f7:78:d1:fb:74:11: 45:ef:a2:7d:57:4f:68:c5:b7:c7:9f:30:5e:25:86:a7:4e:ca: 08:a8:78:51:66:e7:40:fb:a3:f1:e2:db:9a:13:b3:c2:1e:51: 0f:ca:e8:ee:8b:89:98:ec:fd:2e:b4:0b:65:39:70:c0:68:52: 0a:31:40:66:ab:e2:0a:2a:d6:2c:c5:59:6a:7b:1a:5b:df:be: 8b:97:e5:57:66:18:ce:cb:4a:de:2c:fe:b3:8e:9a:68:7e:83: 72:4e:d5:e3:e0:66:82:25:8c:62:7e:29:4c:04:f9:db:00:7f: 47:d1:f6:1e:b9:58:d2:a5:e6:4a:be:d0:f6:87:66:f4:59:34: 68:49:0d:ae:7c:a0:6e:b8:39:f5:90:fc:90:cf:1d:f4:bf:c3: 92:cd:ed:3a:c5:45:8f:50:7d:d6:94:30:e2:17:90:21:60:d6: 0e:fa:a0:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqbKSNAd8Zn+OfTln8fFhPuPYywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNDExMjMyMDI3MDFaFw0yNDExMjcwMzU2MDFaMDMxMTAvBgNV BAMTKDFENjJGREZBMzBDQjlFRjY1OTIzQTkxQ0EwNjk0QTFEM0I4ODk2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrWbwnf0Q9c/dxHp0eSlpn7/OH gRFgJsdOo0yYNiRD3AGOwepLD9B2YZpmDH0LyYaFuZeaLSQ0SOuQ37cLAmsg7tiB pKTZR5AbmdxiH10UWmxpWzrQ8YqQ0BS+otM76GAeHL135uxMwVuUuZTZjJ6yD1LI NGmECeQzSg1KnbcRbHahJzOGf35tmmDbgEuL6JQhxKaNigbFIwDfXd/FpmkVs5uk BuoZAG4gP/XOHRtC1hdOtztx1/hL8sGjN7WEbFuB+nlG6szXVJcOR0eFto7tn3Ar lEOVVy3iORPKRLJ9rSIeoKLt2bBL/ruqJraTxg/e9MEpJOIx9S9ANXzE1DjJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHWL9+jDLnvZZI6kcoGlKHTuIli4wHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbY/bIH/jP+1c/F9BPTfAk9cxNRR9PtyUt8 K4rAovP8kGn0rDpSDpIb6Z062piKRoMAa1MIPcwkm5FVDFv1k/nnQs9QIL/GlW/B /e2Nn3suxHpPjfd40ft0EUXvon1XT2jFt8efMF4lhqdOygioeFFm50D7o/Hi25oT s8IeUQ/K6O6LiZjs/S60C2U5cMBoUgoxQGar4goq1izFWWp7GlvfvouX5VdmGM7L St4s/rOOmmh+g3JO1ePgZoIljGJ+KUwE+dsAf0fR9h65WNKl5kq+0PaHZvRZNGhJ Da58oG64OfWQ/JDPHfS/w5LN7TrFRY9QfdaUMOIXkCFg1g76oI8= -----END CERTIFICATE-----Generated at Sat Nov 23 21:51:28 2024 by rpki-client on console-fra.rpki-client.org