$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json) Hash identifier: pd9rQNZJjYZaTllt08ZEkvBgBCcdWYiJxej5Rui53Mg= Subject key identifier: 90:54:6F:FC:25:4C:6A:65:96:07:A5:07:28:D6:C6:9B:40:72:EE:7D Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D Certificate serial: 2F0E407803EBFF32A8CC9DED43DE9DDC4B6FC326 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft Manifest number: 30 Signing time: Mon 25 Nov 2024 10:32:47 +0000 Manifest this update: Mon 25 Nov 2024 10:27:47 +0000 Manifest next update: Thu 28 Nov 2024 12:26:47 +0000 Files and hashes: 1: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: hOlyHuu2wphYhBJDocKFWHEZrEGEanCNnjs4wR5XHPw=) 2: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: GVMt5BtvA+JjNExYfhBMx2dAc3Nba/f2WNb0/z8+fMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 12:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0e:40:78:03:eb:ff:32:a8:cc:9d:ed:43:de:9d:dc:4b:6f:c3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Validity Not Before: Nov 25 10:27:47 2024 GMT Not After : Nov 28 12:26:47 2024 GMT Subject: CN=90546FFC254C6A659607A50728D6C69B4072EE7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:21:a4:05:80:ab:fd:27:c1:44:e7:3a:3c: 29:34:54:67:8c:5c:6c:73:9c:f2:65:c8:ac:80:9b: e3:d3:55:c1:f0:76:da:99:ed:cb:56:37:1c:67:ff: 5b:52:69:91:6e:f5:4d:81:2e:8f:11:2a:6d:18:54: 6b:44:c7:ed:4a:66:ad:41:dc:1f:50:8a:39:a0:44: c9:dd:85:bf:5c:46:5f:6a:1e:3e:fd:d3:fd:f3:d5: 1b:60:58:a0:b2:29:c4:aa:11:f9:ca:a5:c1:43:b1: 1e:a1:aa:8a:cd:36:79:fc:da:e0:a3:68:32:89:6d: 82:b4:24:3c:30:b2:df:c9:35:c3:6d:b4:49:c3:c1: be:9f:9b:05:a9:1f:9e:52:b3:bc:34:c2:e6:5e:70: dc:37:07:a4:d0:e5:14:7d:d1:35:3f:67:3c:d4:d7: 1d:79:20:62:37:fc:63:2a:44:b0:5c:a0:31:e5:cf: b8:04:53:81:50:6f:7b:8c:80:b8:fd:79:4f:74:08: 05:aa:91:ac:ad:f1:8a:06:5d:c7:a0:40:1c:5d:cd: c9:70:dc:6e:6b:df:f5:8f:82:1c:ac:0e:9b:fc:15: 22:87:25:d8:82:6d:a4:63:69:4c:12:cf:0f:f5:fd: 83:c3:d5:60:f5:aa:1e:ce:a0:a8:67:95:ad:41:ff: dd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:54:6F:FC:25:4C:6A:65:96:07:A5:07:28:D6:C6:9B:40:72:EE:7D X509v3 Authority Key Identifier: keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:36:ca:3d:8d:d5:84:4b:ed:d1:91:f2:9d:59:f6:b6:09:bb: c5:ce:a4:2f:75:aa:8b:8b:49:87:c1:4e:8c:77:61:b9:b9:10: 9f:65:97:68:a9:3a:cd:e2:9d:b2:67:a0:ee:70:0b:6b:60:27: b9:24:e1:8a:a2:e7:ac:8b:ae:c6:43:81:ff:0f:13:ff:c5:f2: af:b9:f7:84:44:74:14:29:74:9d:54:fa:0f:4c:f3:35:76:83: ec:31:a3:2b:b4:d8:bc:16:ca:26:71:ba:5c:4d:de:d0:94:a2: 77:57:ff:1d:72:0e:bc:f0:23:8e:5a:00:b2:1c:7b:46:a7:39: 23:c4:c5:9e:a5:20:fc:58:ff:df:8e:8d:dc:75:d3:1d:49:09: a3:1e:7e:56:42:46:b3:ae:9c:11:f5:c5:28:23:e7:90:78:05: 79:62:4b:d3:45:98:13:e2:e8:a7:6a:44:59:05:fd:ea:b0:e0: 9f:27:97:fc:17:cb:be:93:c5:02:ef:aa:d7:19:17:3d:61:3e: 8e:c1:46:cf:d4:0a:ca:a0:47:2f:11:80:d4:64:41:38:55:e5: 80:ca:81:64:06:84:96:3c:db:35:bd:e9:5d:ce:80:a7:01:7a: d6:f8:45:fe:9f:8e:f2:0a:c0:d6:7f:ca:f7:e0:63:97:71:d5: f3:5c:be:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULw5AeAPr/zKozJ3tQ96d3EtvwyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE NUQyNEY1RDAeFw0yNDExMjUxMDI3NDdaFw0yNDExMjgxMjI2NDdaMDMxMTAvBgNV BAMTKDkwNTQ2RkZDMjU0QzZBNjU5NjA3QTUwNzI4RDZDNjlCNDA3MkVFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfeSGkBYCr/SfBROc6PCk0VGeM XGxznPJlyKyAm+PTVcHwdtqZ7ctWNxxn/1tSaZFu9U2BLo8RKm0YVGtEx+1KZq1B 3B9QijmgRMndhb9cRl9qHj790/3z1RtgWKCyKcSqEfnKpcFDsR6hqorNNnn82uCj aDKJbYK0JDwwst/JNcNttEnDwb6fmwWpH55Ss7w0wuZecNw3B6TQ5RR90TU/ZzzU 1x15IGI3/GMqRLBcoDHlz7gEU4FQb3uMgLj9eU90CAWqkayt8YoGXcegQBxdzclw 3G5r3/WPghysDpv8FSKHJdiCbaRjaUwSzw/1/YPD1WD1qh7OoKhnla1B/90tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkFRv/CVMamWWB6UHKNbGm0By7n0wHwYDVR0j BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5 NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIk2yj2N1YRL7dGR8p1Z9rYJu8XOpC91qouL SYfBTox3Ybm5EJ9ll2ipOs3inbJnoO5wC2tgJ7kk4Yqi56yLrsZDgf8PE//F8q+5 94REdBQpdJ1U+g9M8zV2g+wxoyu02LwWyiZxulxN3tCUondX/x1yDrzwI45aALIc e0anOSPExZ6lIPxY/9+Ojdx10x1JCaMeflZCRrOunBH1xSgj55B4BXliS9NFmBPi 6KdqRFkF/eqw4J8nl/wXy76TxQLvqtcZFz1hPo7BRs/UCsqgRy8RgNRkQThV5YDK gWQGhJY82zW96V3OgKcBetb4Rf6fjvIKwNZ/yvfgY5dx1fNcvgo= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org