$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: aCez/OmV6MBSXdMgLr4qnBvl93/oEu9/mutlmbgNKHg= Subject key identifier: B8:E0:90:EA:FF:34:87:89:4B:6E:8C:98:58:11:79:DE:17:5F:C7:4A Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 42F31EF32D1702B400A58C083021277DE12790F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 024D Signing time: Wed 20 Nov 2024 08:52:29 +0000 Manifest this update: Wed 20 Nov 2024 08:47:29 +0000 Manifest next update: Sat 23 Nov 2024 20:16:29 +0000 Files and hashes: 1: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: 8X7MnhcrGXRrLaiC6p6nb/f9+Sxh0EM3kk42oSlJDeM=) 2: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: iM9qqk1rOvF+ttwfbuzs3NFrgteclozJ+eE6XMEqX1g=) 3: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: mIROvhV/B52jTv+b7xbtzNIsRy0qMHCKGHbEvF+jS6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 10:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f3:1e:f3:2d:17:02:b4:00:a5:8c:08:30:21:27:7d:e1:27:90:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Nov 20 08:47:29 2024 GMT Not After : Nov 23 20:16:29 2024 GMT Subject: CN=B8E090EAFF3487894B6E8C98581179DE175FC74A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:fa:8c:6d:85:60:fa:f4:c2:d9:c1:e8:34: 5c:4e:a5:13:cf:c9:f1:29:13:5b:82:a4:99:cb:18: a6:01:19:7e:2a:3b:89:d7:77:8d:ab:64:cc:a9:10: 15:81:cf:06:b5:de:8d:f3:79:fc:33:bb:c5:12:f1: 2f:de:bf:70:51:e6:67:31:70:9b:bd:84:be:20:33: 8b:ec:b1:ef:85:f4:42:bc:2d:a4:8f:83:07:c8:72: 25:16:7e:bc:1d:fa:40:48:2e:2a:d6:d3:3e:60:10: b6:20:4a:22:92:cd:2b:56:e3:1e:e3:a4:d2:a6:e7: 5c:c3:21:e9:ae:73:bf:70:1e:6b:4c:9e:07:50:9f: 14:78:56:f5:cd:7b:9d:4f:9f:8c:1b:93:ab:d1:84: 4b:4a:e3:d3:0b:ef:a2:54:1b:f2:0e:19:ac:fa:fb: e5:88:79:62:99:bf:60:4d:a2:a8:83:d0:8a:7e:e9: 60:74:69:9c:ec:a3:0a:a5:91:7a:fa:98:ed:f7:0a: 73:29:03:53:77:68:e0:2a:85:cc:79:a8:42:9d:bc: 60:44:35:ef:29:93:00:a4:59:76:29:da:01:ea:7d: 7a:be:41:92:e4:c0:55:b9:19:4c:ca:a0:1e:48:22: 21:74:aa:eb:bc:9f:a8:f2:4f:56:03:fa:0b:28:06: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E0:90:EA:FF:34:87:89:4B:6E:8C:98:58:11:79:DE:17:5F:C7:4A X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:44:5a:23:83:87:61:31:2a:a4:ea:6d:8f:1f:ad:63:81:64: f0:af:a5:41:e7:9d:92:7b:e7:62:3a:24:f5:d6:da:99:80:48: 73:69:cb:95:57:ac:97:52:9c:d4:89:a3:f6:24:3f:c6:d8:9a: 79:a2:93:6e:49:94:21:41:36:73:22:a2:0a:9b:fc:35:73:d5: 7f:af:00:f2:40:b8:b2:2a:23:6b:36:6d:8c:9c:2d:ab:5f:95: 5d:95:45:dd:e8:95:b1:f2:12:7d:cb:bb:87:0c:af:8a:4c:aa: 2b:77:7b:2e:7c:c0:f6:99:3f:90:ad:ec:f2:df:9f:ba:a6:b8: 8d:6a:b3:46:06:fc:1c:c3:ab:54:7b:c6:76:22:f5:25:f2:33: c5:11:4d:86:34:f7:b9:80:6e:e1:b1:3e:47:99:b8:af:99:3c: 17:34:b1:48:47:bf:ac:7d:c2:be:37:b5:1d:9e:7a:94:af:19: fb:9b:4c:d5:c5:cc:73:0f:79:d4:37:78:8e:03:07:49:ef:20: 2e:00:9d:13:14:4c:a7:38:a6:2b:b6:bb:db:0f:3e:52:e7:aa: 38:19:3a:c5:6f:f4:4d:e3:f1:07:9f:d6:e9:aa:a5:6d:0f:6a: 75:ac:e6:23:36:68:fc:7e:4e:df:01:5a:61:ae:e0:e8:5e:4f: a2:b9:da:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvMe8y0XArQApYwIMCEnfeEnkPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNDExMjAwODQ3MjlaFw0yNDExMjMyMDE2MjlaMDMxMTAvBgNV BAMTKEI4RTA5MEVBRkYzNDg3ODk0QjZFOEM5ODU4MTE3OURFMTc1RkM3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFvqMbYVg+vTC2cHoNFxOpRPP yfEpE1uCpJnLGKYBGX4qO4nXd42rZMypEBWBzwa13o3zefwzu8US8S/ev3BR5mcx cJu9hL4gM4vsse+F9EK8LaSPgwfIciUWfrwd+kBILirW0z5gELYgSiKSzStW4x7j pNKm51zDIemuc79wHmtMngdQnxR4VvXNe51Pn4wbk6vRhEtK49ML76JUG/IOGaz6 ++WIeWKZv2BNoqiD0Ip+6WB0aZzsowqlkXr6mO33CnMpA1N3aOAqhcx5qEKdvGBE Ne8pkwCkWXYp2gHqfXq+QZLkwFW5GUzKoB5IIiF0quu8n6jyT1YD+gsoBlbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuOCQ6v80h4lLboyYWBF53hdfx0owHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClEWiODh2ExKqTqbY8frWOBZPCvpUHnnZJ7 52I6JPXW2pmASHNpy5VXrJdSnNSJo/YkP8bYmnmik25JlCFBNnMiogqb/DVz1X+v APJAuLIqI2s2bYycLatflV2VRd3olbHyEn3Lu4cMr4pMqit3ey58wPaZP5Ct7PLf n7qmuI1qs0YG/BzDq1R7xnYi9SXyM8URTYY097mAbuGxPkeZuK+ZPBc0sUhHv6x9 wr43tR2eepSvGfubTNXFzHMPedQ3eI4DB0nvIC4AnRMUTKc4piu2u9sPPlLnqjgZ OsVv9E3j8Qef1umqpW0PanWs5iM2aPx+Tt8BWmGu4OheT6K52oA= -----END CERTIFICATE-----Generated at Wed Nov 20 10:24:13 2024 by rpki-client on console-fra.rpki-client.org