$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: qzEIUhqH0Lry1R9XIBy51UtAbPEf0Kemq7padj06ihQ= Subject key identifier: C4:41:FB:36:FD:FC:38:2C:31:33:DA:74:B5:1E:03:D8:61:B7:D7:31 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 331F0124F8C3BF86EAE6327C558C0152F7C8FB52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 0255 Signing time: Mon 25 Nov 2024 23:52:21 +0000 Manifest this update: Mon 25 Nov 2024 23:47:21 +0000 Manifest next update: Fri 29 Nov 2024 05:31:21 +0000 Files and hashes: 1: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: JkQA/oVx7nSJZSG/P9kFIu+xx/U2BTezfRvZq/eeJWQ=) 2: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: yc9ygBZfa/B9HpgtBSqTXPNF8DMIJpW1C+TKiJFRUI8=) 3: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: OG5Z9CpKWxd1W4YOSrj5Xk//pa9S5164fCU9LE6L+sg=) 4: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: lx3+LLlQ4WnCMnKdcVANXgIMuP9AcgN7h+mv0gF7DvQ=) 5: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: lco+WzxW3Iji0/qkTCFH+wsYzV3XvFCQHLZ/O4Vbnww=) 6: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: MusaVD8Rj5ogKmHgFDdrJrrSMHNpTmm2r0jTc52+4c0=) 7: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: 4Ce67YL0bl40nJXMynzDOb6UG6RAWI//TFzIcKJFNZA=) 8: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: bKrbBC55rwvL7th1EkrT2ahO/qEfrCcBth/UGnzXcLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1f:01:24:f8:c3:bf:86:ea:e6:32:7c:55:8c:01:52:f7:c8:fb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Nov 25 23:47:21 2024 GMT Not After : Nov 29 05:31:21 2024 GMT Subject: CN=C441FB36FDFC382C3133DA74B51E03D861B7D731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:7c:f2:5f:29:d7:b0:5c:2d:82:fd:fe:b3: 92:c7:0c:6b:d7:a2:39:2d:b4:bc:2b:79:f5:d3:0f: 2f:64:65:a4:9b:71:90:5b:0d:3f:45:38:da:60:16: 68:9e:ae:5e:6a:72:c4:dc:d2:64:54:da:f0:e1:ed: 1d:7d:b0:59:23:15:fd:00:80:ae:ff:be:db:fb:a1: c8:43:b6:83:b3:17:ce:e5:47:7e:eb:2a:e1:3b:32: 5d:8a:0d:79:df:1b:b3:57:4e:f6:75:ae:f5:d7:70: 6a:fb:9e:4c:bb:df:11:71:e0:29:21:d1:61:6b:ad: 38:b5:4f:91:0c:96:a8:24:c4:dd:4e:fd:62:e9:99: 9b:5c:6b:d3:fe:44:33:88:01:ac:64:a9:8d:bf:f4: ba:27:d0:24:73:b8:7a:f4:b9:47:87:54:35:21:8d: 02:aa:51:1d:11:b9:19:94:05:b4:10:58:f6:3a:27: 54:70:aa:2d:b3:43:f2:50:ab:ae:ff:97:e0:d3:4c: b4:96:56:fc:f2:5e:e5:02:02:12:03:62:d7:9c:4c: a6:e3:b7:cd:6b:e0:a0:90:17:cf:cd:73:c1:c7:1f: 33:30:8d:3c:08:b9:dc:d0:8a:b8:c8:c4:d5:bb:8a: 58:7e:be:92:c5:93:36:50:3f:c3:c8:7c:3a:ca:29: d3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:FB:36:FD:FC:38:2C:31:33:DA:74:B5:1E:03:D8:61:B7:D7:31 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9a:7d:08:ff:0f:cd:e1:88:8b:4e:ca:a3:38:b0:48:0e:15: a0:0d:93:2c:73:8a:27:63:d1:be:bd:db:a7:49:26:b1:b9:91: 9f:a3:6b:15:6b:eb:79:ff:20:bf:f0:38:1b:d5:d9:dd:c5:c7: fc:be:0b:60:46:fc:87:15:35:25:65:8b:4b:5b:3d:05:5e:29: 2f:99:47:c4:15:c0:cd:85:83:40:a6:bc:28:bc:77:87:b6:1a: 39:05:06:e0:0c:fb:af:84:58:ac:e0:5c:ea:88:d6:84:42:5c: 64:93:e0:9b:b9:d5:6b:1d:3a:6f:45:d2:91:28:73:b4:e3:d3: 44:bb:8c:16:66:ad:90:08:71:42:22:0a:7d:7d:80:89:66:97: 65:cf:71:d7:d9:bf:f4:7b:27:b3:e8:e6:bc:d8:e3:e7:44:e5: 69:c6:d9:37:d9:43:8c:da:eb:bf:4b:c8:2d:06:45:58:ea:5c: b1:9b:93:a5:33:05:51:02:f3:9a:ce:e4:7b:c4:d7:97:9f:ea: ed:29:99:b5:03:b3:d6:3b:2a:7b:24:03:09:3b:b0:18:10:34: 84:fa:d5:03:bb:cc:3d:2e:93:60:8e:ac:5b:5e:24:c7:c9:25: 66:94:3b:ba:88:06:5b:13:e0:51:cf:5a:51:5a:74:d9:57:93: 90:16:61:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMx8BJPjDv4bq5jJ8VYwBUvfI+1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNDExMjUyMzQ3MjFaFw0yNDExMjkwNTMxMjFaMDMxMTAvBgNV BAMTKEM0NDFGQjM2RkRGQzM4MkMzMTMzREE3NEI1MUUwM0Q4NjFCN0Q3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyB3zyXynXsFwtgv3+s5LHDGvX ojkttLwrefXTDy9kZaSbcZBbDT9FONpgFmierl5qcsTc0mRU2vDh7R19sFkjFf0A gK7/vtv7ochDtoOzF87lR37rKuE7Ml2KDXnfG7NXTvZ1rvXXcGr7nky73xFx4Ckh 0WFrrTi1T5EMlqgkxN1O/WLpmZtca9P+RDOIAaxkqY2/9Lon0CRzuHr0uUeHVDUh jQKqUR0RuRmUBbQQWPY6J1Rwqi2zQ/JQq67/l+DTTLSWVvzyXuUCAhIDYtecTKbj t81r4KCQF8/Nc8HHHzMwjTwIudzQirjIxNW7ilh+vpLFkzZQP8PIfDrKKdNVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxEH7Nv38OCwxM9p0tR4D2GG31zEwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6afQj/D83hiItOyqM4sEgOFaANkyxziidj 0b6926dJJrG5kZ+jaxVr63n/IL/wOBvV2d3Fx/y+C2BG/IcVNSVli0tbPQVeKS+Z R8QVwM2Fg0CmvCi8d4e2GjkFBuAM+6+EWKzgXOqI1oRCXGST4Ju51WsdOm9F0pEo c7Tj00S7jBZmrZAIcUIiCn19gIlml2XPcdfZv/R7J7Po5rzY4+dE5WnG2TfZQ4za 679LyC0GRVjqXLGbk6UzBVEC85rO5HvE15ef6u0pmbUDs9Y7KnskAwk7sBgQNIT6 1QO7zD0uk2COrFteJMfJJWaUO7qIBlsT4FHPWlFadNlXk5AWYUk= -----END CERTIFICATE-----Generated at Tue Nov 26 02:25:09 2024 by rpki-client on console-ams.rpki-client.org