$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: ua6V54mSgqoc2Aa3Ply4zf29IrsPWD+2ddEBGSCViSw= Subject key identifier: 23:4C:3D:32:E6:F2:4F:79:14:BC:0D:D4:DB:6F:F1:C5:3E:2C:4B:B4 Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 3ECC573A40E70BBDE0DDFBE851279CE18348202D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 0147 Signing time: Mon 25 Nov 2024 13:21:28 +0000 Manifest this update: Mon 25 Nov 2024 13:16:28 +0000 Manifest next update: Fri 29 Nov 2024 00:31:28 +0000 Files and hashes: 1: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: YD9cID5kyRctzn7PrA3r5ViRbeRdOujJC4EG0ohbg1A=) 2: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: 5nBpHkwL82Gi9NUGyKestOksjx7zZUbyEsgUlUqCAVE=) 3: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: SjmKWLBiEMFhWXiRMo2sqEynUyemXFh8rKM/uEFt5LQ=) 4: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: nwE4egVuBWgMCKw3YCKh6VmNh2jKygK5nst6ZKFNdIE=) 5: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: NbIqv7AUSQMS1xCn0a3rRo2bmONh2GyMw23FeabY33s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:cc:57:3a:40:e7:0b:bd:e0:dd:fb:e8:51:27:9c:e1:83:48:20:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Nov 25 13:16:28 2024 GMT Not After : Nov 29 00:31:28 2024 GMT Subject: CN=234C3D32E6F24F7914BC0DD4DB6FF1C53E2C4BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:86:cb:cf:79:19:90:c1:f1:31:ce:d0:35: 54:09:49:6d:7e:63:c6:f0:bf:ca:39:31:28:19:2c: a7:72:b7:a6:3a:93:7a:c1:52:e7:86:ed:76:82:5a: 18:1a:ea:47:a4:82:77:02:b6:27:02:29:14:95:a7: 77:15:e6:88:61:36:5b:26:04:9f:4d:ef:2d:a6:8d: aa:ca:eb:74:d3:66:1c:11:f1:98:f1:3e:4f:7b:fc: b6:64:0b:43:18:16:a2:20:35:8f:96:55:be:56:19: 3d:eb:59:ac:dc:db:d6:38:f3:cb:93:b1:0e:b9:7f: d2:c8:37:8d:e9:8c:32:0f:52:e0:42:da:ca:24:53: 32:9a:0b:f9:aa:c6:21:c7:34:22:67:4b:be:cb:a1: 8c:f5:6e:ce:7d:3b:0f:73:ce:11:f8:87:de:ea:f0: e6:fc:26:56:12:37:b1:16:1c:ed:d0:18:e5:63:fb: 29:0b:ad:3c:e0:ac:59:80:c9:60:49:9c:88:7e:10: 79:44:29:81:cb:57:9c:27:91:97:3b:c0:a9:b4:ea: c0:57:95:a7:ec:05:ad:25:6a:37:01:33:1e:eb:28: 5d:0d:d3:00:f3:a2:48:b6:61:b5:7a:55:4a:fe:78: b5:97:cf:c5:fe:90:ce:7c:92:b9:43:fb:ab:f0:ec: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4C:3D:32:E6:F2:4F:79:14:BC:0D:D4:DB:6F:F1:C5:3E:2C:4B:B4 X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c0:3a:d1:3b:63:cc:a8:b0:36:c8:3a:63:f0:52:f9:96:c6: ea:58:9b:bd:62:98:30:1d:6b:6e:ad:d5:02:51:4a:20:d3:0b: 00:d1:f0:54:f8:19:f3:ab:6e:ab:8b:7a:7c:f6:cf:63:dd:84: 14:8f:68:60:4e:98:b1:bd:08:8a:6c:6d:7a:d8:6f:4d:ea:38: 2f:9f:ca:a2:76:3b:4c:86:4c:53:80:53:a6:61:a2:e8:e7:52: fa:22:55:2a:45:b5:a3:07:b1:1b:73:17:f4:2f:a0:df:7c:e4: 96:a9:d2:a7:2b:b0:8e:54:95:19:71:57:ae:11:71:dc:5e:1c: ee:6a:3d:13:d2:72:89:7b:fd:8c:49:63:11:8c:5f:b1:8b:c1: 11:2a:5e:42:5b:5a:b3:2b:cd:8c:60:28:4d:71:eb:85:e5:3e: 74:3b:6b:9f:78:aa:ae:54:84:9e:9f:99:ba:8b:0c:55:b7:1e: b1:40:29:3e:87:70:6e:48:56:76:a2:35:a3:9c:91:1e:af:77: ec:b8:cf:98:63:b3:4c:51:41:98:b9:d9:31:c9:31:fe:44:ba: 92:ec:df:2a:b8:33:7e:e5:01:54:5a:66:c4:fa:76:81:69:63: 9c:56:05:6d:61:7b:18:27:0f:46:50:c5:54:89:8c:83:56:3a: 68:3a:bc:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsxXOkDnC73g3fvoUSec4YNIIC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNDExMjUxMzE2MjhaFw0yNDExMjkwMDMxMjhaMDMxMTAvBgNV BAMTKDIzNEMzRDMyRTZGMjRGNzkxNEJDMERENERCNkZGMUM1M0UyQzRCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7obLz3kZkMHxMc7QNVQJSW1+ Y8bwv8o5MSgZLKdyt6Y6k3rBUueG7XaCWhga6kekgncCticCKRSVp3cV5ohhNlsm BJ9N7y2mjarK63TTZhwR8ZjxPk97/LZkC0MYFqIgNY+WVb5WGT3rWazc29Y488uT sQ65f9LIN43pjDIPUuBC2sokUzKaC/mqxiHHNCJnS77LoYz1bs59Ow9zzhH4h97q 8Ob8JlYSN7EWHO3QGOVj+ykLrTzgrFmAyWBJnIh+EHlEKYHLV5wnkZc7wKm06sBX lafsBa0lajcBMx7rKF0N0wDzoki2YbV6VUr+eLWXz8X+kM58krlD+6vw7P2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0w9MubyT3kUvA3U22/xxT4sS7QwHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILAOtE7Y8yosDbIOmPwUvmWxupYm71imDAd a26t1QJRSiDTCwDR8FT4GfOrbquLenz2z2PdhBSPaGBOmLG9CIpsbXrYb03qOC+f yqJ2O0yGTFOAU6ZhoujnUvoiVSpFtaMHsRtzF/QvoN985Jap0qcrsI5UlRlxV64R cdxeHO5qPRPScol7/YxJYxGMX7GLwREqXkJbWrMrzYxgKE1x64XlPnQ7a594qq5U hJ6fmbqLDFW3HrFAKT6HcG5IVnaiNaOckR6vd+y4z5hjs0xRQZi52THJMf5EupLs 3yq4M37lAVRaZsT6doFpY5xWBW1hexgnD0ZQxVSJjINWOmg6vBM= -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:44 2024 by rpki-client on console-fra.rpki-client.org