$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: krFlZISKNctI1UTtXA6vYo88jSBQ0gyVQFsNZoSf+So= Subject key identifier: A2:4D:17:4C:85:55:B7:5B:6F:02:E9:CB:40:6F:62:51:52:72:0F:13 Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 696C8E85434FD1EE9A4CB781710D0D49C42505ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 0372 Signing time: Thu 21 Nov 2024 21:41:29 +0000 Manifest this update: Thu 21 Nov 2024 21:36:29 +0000 Manifest next update: Mon 25 Nov 2024 04:10:29 +0000 Files and hashes: 1: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: Stn5I7RDPRMI03TmuoeCAeds6by3O6C+/bo2ByhHcFs=) 2: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: 6t2DKXzqZGE8v4rh1J/I47tJtE0ARwY+e4OGYD0Gbq8=) 3: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: O/kvSI9r8ac9UaS8UQgMdP3IqTJCcU/HYz9o7xSla0s=) 4: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: tlsdUY6ybvJN2IEtejfkmeue+5jDkByHMqeZv2dLGKI=) 5: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: x5hTeEOvLFOBqbVUlwe0w1rSl/ywnzu7BfrWIVUS2g4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6c:8e:85:43:4f:d1:ee:9a:4c:b7:81:71:0d:0d:49:c4:25:05:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Nov 21 21:36:29 2024 GMT Not After : Nov 25 04:10:29 2024 GMT Subject: CN=A24D174C8555B75B6F02E9CB406F625152720F13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:53:54:b8:07:cf:0e:d0:dd:42:91:2f:47: 0a:c3:ec:b7:94:51:66:29:74:e6:2e:3a:76:9c:3e: 93:2a:1d:84:1c:26:a5:40:ab:7d:d2:f3:ab:df:ac: 1f:71:9e:d5:bc:07:4b:cf:98:43:20:bb:23:8a:0a: 6d:43:26:fa:b1:76:41:ce:ba:d2:48:e8:7d:25:c9: 6e:91:f2:ca:92:0b:f2:70:3b:b4:6b:64:a4:10:c8: ae:8d:2e:1b:32:4d:bc:0c:c9:2c:96:72:40:23:e6: 17:ae:61:86:b0:f3:f4:eb:1a:50:6d:b6:f7:e4:e7: 9e:a3:8f:d0:28:2a:8b:90:6a:72:a8:61:8a:c5:50: 01:6c:44:24:6f:40:3f:49:16:a7:29:35:b6:0a:42: e9:8c:5a:62:e7:dc:ee:da:06:f8:79:67:a7:12:d3: 26:db:96:a0:33:0e:02:b5:e0:a2:89:76:54:a3:4f: 00:8a:ed:27:06:83:f2:d5:f9:b9:6c:8b:e5:9b:4a: 79:38:d9:fd:8c:c7:9a:cb:d4:2d:4a:9a:73:ba:dc: 4b:6f:dc:f9:97:46:dc:ff:aa:72:14:7a:4e:c4:f1: f9:a1:8f:81:96:19:01:26:fa:11:41:43:29:c9:fe: c6:81:54:7b:a2:c9:53:48:19:ea:96:bf:ca:0e:13: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4D:17:4C:85:55:B7:5B:6F:02:E9:CB:40:6F:62:51:52:72:0F:13 X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:cc:e1:26:ee:d6:cf:5a:25:46:b0:8d:e2:dc:e7:e5:c1:c8: c1:96:06:3b:59:b5:ba:f3:f9:e8:f0:b7:c7:46:a8:20:3f:9d: 56:57:70:68:93:13:db:26:6f:f2:17:00:23:9f:74:f8:c9:57: a6:94:19:02:4e:81:09:ba:ee:87:6e:59:df:4c:c8:d1:25:3b: 96:00:88:8b:4c:20:61:00:4f:81:d0:18:1a:51:d2:bc:e2:e5: bc:27:49:4a:57:97:48:51:58:ba:23:cb:26:1f:3a:b4:d0:9d: c7:8d:87:ce:6b:48:46:13:92:6b:21:d1:db:9e:5e:6c:72:13: 06:2e:b7:8c:ff:e7:2b:3e:f0:ff:88:b8:30:5f:b4:e3:9f:2c: 1a:c7:f7:27:03:17:20:7e:f5:c9:24:ab:35:44:9a:98:b9:c1: 16:d8:f4:25:d1:87:4a:0c:6a:61:77:a6:57:59:96:e4:b0:b4: ac:78:8b:b1:ef:a8:e2:71:9e:cd:94:c4:30:41:fc:41:2f:a2: 8e:45:28:93:42:9a:54:08:8f:f7:b6:88:6a:43:4f:47:76:88: 43:dd:9c:11:db:49:fa:a1:ab:54:92:a8:be:9a:4f:e7:1f:8c: b7:f1:1a:8b:e9:42:4e:3a:92:bf:1c:1f:cf:5d:90:b6:9e:16: ce:c9:b2:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWyOhUNP0e6aTLeBcQ0NScQlBe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNDExMjEyMTM2MjlaFw0yNDExMjUwNDEwMjlaMDMxMTAvBgNV BAMTKEEyNEQxNzRDODU1NUI3NUI2RjAyRTlDQjQwNkY2MjUxNTI3MjBGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07VNUuAfPDtDdQpEvRwrD7LeU UWYpdOYuOnacPpMqHYQcJqVAq33S86vfrB9xntW8B0vPmEMguyOKCm1DJvqxdkHO utJI6H0lyW6R8sqSC/JwO7RrZKQQyK6NLhsyTbwMySyWckAj5heuYYaw8/TrGlBt tvfk556jj9AoKouQanKoYYrFUAFsRCRvQD9JFqcpNbYKQumMWmLn3O7aBvh5Z6cS 0ybblqAzDgK14KKJdlSjTwCK7ScGg/LV+blsi+WbSnk42f2Mx5rL1C1KmnO63Etv 3PmXRtz/qnIUek7E8fmhj4GWGQEm+hFBQynJ/saBVHuiyVNIGeqWv8oOE5sJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUok0XTIVVt1tvAunLQG9iUVJyDxMwHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHM4Sbu1s9aJUawjeLc5+XByMGWBjtZtbrz +ejwt8dGqCA/nVZXcGiTE9smb/IXACOfdPjJV6aUGQJOgQm67oduWd9MyNElO5YA iItMIGEAT4HQGBpR0rzi5bwnSUpXl0hRWLojyyYfOrTQnceNh85rSEYTkmsh0due XmxyEwYut4z/5ys+8P+IuDBftOOfLBrH9ycDFyB+9ckkqzVEmpi5wRbY9CXRh0oM amF3pldZluSwtKx4i7HvqOJxns2UxDBB/EEvoo5FKJNCmlQIj/e2iGpDT0d2iEPd nBHbSfqhq1SSqL6aT+cfjLfxGovpQk46kr8cH89dkLaeFs7JsrE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org