$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft File: A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft (raw, json) Hash identifier: EJPvFp1S/YKobQdH+c5vPuxuLx+Otp0doGMjTLJfNnM= Subject key identifier: 8C:FC:35:D5:2A:89:00:2B:49:FD:9D:CE:C1:C6:E0:07:C0:1D:A8:9B Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A Certificate issuer: /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Certificate serial: 5846A1F54987F422C1370B25DFE8BC7D30798477 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft Manifest number: 01AD Signing time: Mon 25 Nov 2024 15:41:57 +0000 Manifest this update: Mon 25 Nov 2024 15:36:57 +0000 Manifest next update: Thu 28 Nov 2024 17:40:57 +0000 Files and hashes: 1: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: Hy2xLcFgrsXcJMEPM+FB0vEiSoA/kovkO4p5/sCss4M=) 2: A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl (hash: 3QKDUMK82CtnV4/Z9EqO0Iq3hapwx2sH9ze7Kxw3O+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 17:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:46:a1:f5:49:87:f4:22:c1:37:0b:25:df:e8:bc:7d:30:79:84:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Validity Not Before: Nov 25 15:36:57 2024 GMT Not After : Nov 28 17:40:57 2024 GMT Subject: CN=8CFC35D52A89002B49FD9DCEC1C6E007C01DA89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:8c:82:9a:46:9f:f2:9c:6e:7e:c2:ff:9e: bf:f9:74:fc:0a:81:6f:ea:49:61:21:b2:96:1a:9a: 8c:40:d5:6a:67:cf:46:29:82:e0:92:39:06:01:89: f6:c9:9f:bf:39:a5:f4:bb:c4:cc:45:e3:74:15:ea: 36:06:f5:9c:03:c7:1c:f5:02:5c:64:cf:65:c2:2c: 86:3a:10:ec:8c:b9:8d:a0:9f:5c:57:43:40:08:5e: 46:c4:a3:86:13:a6:8a:63:f8:a0:d3:23:1c:76:a4: 3e:18:1e:51:f7:70:f1:32:13:b0:7f:bd:9b:8c:95: 5c:82:6f:35:ac:1e:b2:b2:3f:d9:05:73:83:25:ee: 0c:45:0e:2a:4e:8d:1c:d4:9f:d0:38:15:c0:95:47: 6a:64:8e:ec:a4:1e:b6:5f:3c:5e:77:e4:6e:cc:10: 06:0f:90:0a:eb:0d:3b:38:73:c1:46:50:07:8c:26: 22:e8:94:04:80:9f:ab:3c:d0:60:84:2c:05:95:8f: 8f:e0:0c:37:55:0c:aa:27:73:c6:89:af:40:bb:f1: 54:14:3a:09:1e:ef:15:a1:a6:a2:39:a3:a1:e4:79: 21:cf:81:2e:4b:3a:ab:e5:7f:68:53:4e:1c:ca:d0: fe:8d:fa:6b:8c:37:e1:5c:c6:63:a3:d8:2d:5f:28: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FC:35:D5:2A:89:00:2B:49:FD:9D:CE:C1:C6:E0:07:C0:1D:A8:9B X509v3 Authority Key Identifier: keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1b:9b:9f:85:e6:ed:62:00:03:3e:7b:e0:55:2a:e4:0c:23: c1:2e:67:4d:1f:01:62:65:13:d5:9f:5c:2b:d7:0b:7b:62:1a: 43:33:5a:22:38:ce:a9:a4:4d:c1:01:1e:27:5b:b6:05:b4:15: 28:41:a9:df:c0:ca:5a:ad:73:d2:82:70:65:39:10:da:9b:e1: 01:d8:f8:c5:16:36:40:f5:4f:9a:e1:82:36:04:7c:0f:2e:71: 0b:e3:8e:e0:6a:e2:4e:ab:b7:b1:a2:e4:f7:e4:45:1d:7d:ae: 5b:d9:9c:99:c5:5b:2e:9f:60:57:ee:3c:09:bb:8d:15:fc:ef: 66:13:e9:12:89:1f:e1:88:d3:14:2c:5b:63:4b:af:f1:77:fb: ed:3f:a2:dc:e2:02:91:3e:5c:64:d5:01:5e:4b:69:07:36:b1: bb:8f:83:0c:25:de:82:a6:a4:a9:7f:2a:3f:05:a8:df:e1:98: 0b:cc:32:8c:c0:54:24:85:81:b3:f8:bc:ef:ea:da:73:61:ef: a9:fe:21:6e:96:dd:60:59:47:f6:4e:1c:e9:38:bb:62:eb:ea: dc:07:25:51:dd:ec:e2:03:0a:b2:0c:25:04:8e:a4:03:86:42: 8b:fd:17:bd:e4:af:c8:fc:47:34:6e:0e:73:b0:fc:c7:b8:2c: 87:3a:a4:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEah9UmH9CLBNwsl3+i8fTB5hHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1 QzY4NTA5QTAeFw0yNDExMjUxNTM2NTdaFw0yNDExMjgxNzQwNTdaMDMxMTAvBgNV BAMTKDhDRkMzNUQ1MkE4OTAwMkI0OUZEOURDRUMxQzZFMDA3QzAxREE4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDYyCmkaf8pxufsL/nr/5dPwK gW/qSWEhspYamoxA1Wpnz0YpguCSOQYBifbJn785pfS7xMxF43QV6jYG9ZwDxxz1 Alxkz2XCLIY6EOyMuY2gn1xXQ0AIXkbEo4YTpopj+KDTIxx2pD4YHlH3cPEyE7B/ vZuMlVyCbzWsHrKyP9kFc4Ml7gxFDipOjRzUn9A4FcCVR2pkjuykHrZfPF535G7M EAYPkArrDTs4c8FGUAeMJiLolASAn6s80GCELAWVj4/gDDdVDKonc8aJr0C78VQU Ogke7xWhpqI5o6HkeSHPgS5LOqvlf2hTThzK0P6N+muMN+FcxmOj2C1fKKtzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjPw11SqJACtJ/Z3OwcbgB8AdqJswHwYDVR0j BBgwFoAUpKTEJqT0KimCljb7MiP6f1xoUJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmFlYmZiMy1lMjliLTQ3YzQtYmQyMS00NTcxYzMwZjQ0MWIvMC9BNEE0QzQyNkE0 RjQyQTI5ODI5NjM2RkIzMjIzRkE3RjVDNjg1MDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1QzY4 NTA5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZB N0Y1QzY4NTA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgbm5+F5u1iAAM+e+BVKuQMI8EuZ00fAWJl E9WfXCvXC3tiGkMzWiI4zqmkTcEBHidbtgW0FShBqd/Aylqtc9KCcGU5ENqb4QHY +MUWNkD1T5rhgjYEfA8ucQvjjuBq4k6rt7Gi5PfkRR19rlvZnJnFWy6fYFfuPAm7 jRX872YT6RKJH+GI0xQsW2NLr/F3++0/otziApE+XGTVAV5LaQc2sbuPgwwl3oKm pKl/Kj8FqN/hmAvMMozAVCSFgbP4vO/q2nNh76n+IW6W3WBZR/ZOHOk4u2Lr6twH JVHd7OIDCrIMJQSOpAOGQov9F73kr8j8RzRuDnOw/Me4LIc6pOI= -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:02 2024 by rpki-client on console-ams.rpki-client.org