$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: bwmE+0ZUrugv71b8XBDRRhxl/NoUqRnU/AF8u6u9mT0= Subject key identifier: F7:1E:CA:26:8F:23:A9:74:49:D2:74:C9:BD:66:BB:99:C8:36:A1:C2 Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 303821403AA94495D880E4B561DFFD097DF65E68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 0160 Signing time: Fri 22 Nov 2024 06:41:46 +0000 Manifest this update: Fri 22 Nov 2024 06:36:46 +0000 Manifest next update: Mon 25 Nov 2024 13:52:46 +0000 Files and hashes: 1: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: LcZFx46o75ELiQwn9Tll5NZzXDFy5HHBuAQ6697gqDw=) 2: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: pd2NDQQQPyHZaBaBe61CyREtdlKxDZecHqykFbQ5pJ8=) 3: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: fOeClpPAM1TK8IOTss4/WbnoMHtsAOsqOEHzrDJIniQ=) 4: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: 2eBKUXWmF5ts/Iekm7oAEARBCDw1Enrm52lUVeCh2ig=) 5: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: VspFw++2jUPUNxpc1/y0Mp4Lv1a+LwrFNdh9KUkbu+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:38:21:40:3a:a9:44:95:d8:80:e4:b5:61:df:fd:09:7d:f6:5e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Nov 22 06:36:46 2024 GMT Not After : Nov 25 13:52:46 2024 GMT Subject: CN=F71ECA268F23A97449D274C9BD66BB99C836A1C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b6:4c:7f:0f:d4:68:82:0b:c1:4f:79:b9:4d: c2:5b:44:e2:c9:64:45:ad:ab:0c:9c:b8:9d:9e:34: 89:f0:78:ac:0b:56:f0:81:64:fa:c7:da:f4:99:96: 5c:40:ca:e3:69:bc:a7:18:d4:f4:fb:0e:94:2c:92: 1e:d3:93:a2:a0:5f:0b:5b:a5:49:7b:0b:1b:23:40: 26:80:77:58:d6:f4:bd:78:42:b3:df:2f:1c:6b:c5: df:f9:f8:1b:0c:66:47:52:77:3a:23:99:d6:d7:f1: 75:64:bb:1a:71:d8:b4:bc:2e:7f:64:0d:b4:9f:1f: ca:a7:be:4f:f5:b5:7e:61:a1:5a:78:26:49:c5:92: b5:47:bc:60:d6:ac:72:2d:6f:7a:f1:2f:91:03:96: 1d:a8:fb:e7:57:20:b7:fa:41:e7:07:36:fc:1a:8e: 26:4f:f1:7d:c2:88:a9:ab:fb:db:32:4a:6a:d5:08: 91:34:18:5c:81:de:62:e0:5d:e3:ad:af:f9:1d:9a: 22:1c:21:f5:15:88:08:b6:20:eb:3e:c1:fe:d3:9c: 33:f0:1a:0f:a9:96:15:91:ce:00:6e:17:74:c5:53: 3c:38:fb:db:d4:f2:93:18:b9:88:a3:4f:4c:f4:6c: 39:ff:17:88:74:43:40:cd:d8:7c:1e:63:bc:15:26: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1E:CA:26:8F:23:A9:74:49:D2:74:C9:BD:66:BB:99:C8:36:A1:C2 X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b7:5f:8a:ae:20:80:a6:64:f1:b2:71:68:b7:82:3d:00:1a: a4:ea:88:dd:20:23:3e:1d:a0:51:b3:66:d3:ac:bf:f0:55:f0: aa:08:26:12:9a:80:f2:3c:9c:68:2c:e2:3a:fe:52:5b:45:f3: 02:3b:18:32:99:96:b9:3b:fc:c2:a1:3b:9f:d6:c6:41:88:cb: 83:66:af:83:cd:5f:af:2c:d7:88:4b:bc:df:6d:7a:83:68:ef: c6:08:86:9e:58:ce:78:75:ef:12:70:ef:38:33:35:f9:8f:a7: ee:1a:4a:4a:b4:7e:56:4a:eb:73:1f:cd:8e:a2:59:77:5c:d4: 70:8f:83:df:b1:c2:76:3a:e1:53:8d:a9:68:0c:a7:62:56:50: 53:1a:3c:b6:d1:6a:b8:83:42:4c:10:01:6a:f5:b2:47:bf:5d: 0a:f9:a6:03:7c:72:09:d1:36:8d:6f:c9:f2:27:ce:43:9d:0a: db:0f:e3:95:9b:98:cd:42:06:33:4a:46:08:5a:f2:5f:ad:13: 35:44:64:0e:10:ab:cd:37:c6:8a:d9:f8:9c:54:6c:dd:b4:83: a0:93:f2:e2:8c:e4:83:74:d8:ed:25:33:69:28:b0:32:ee:ba: 31:60:4f:26:e2:c6:bd:3c:aa:51:4a:9e:84:4c:41:cb:99:a2: 58:39:cf:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDghQDqpRJXYgOS1Yd/9CX32XmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNDExMjIwNjM2NDZaFw0yNDExMjUxMzUyNDZaMDMxMTAvBgNV BAMTKEY3MUVDQTI2OEYyM0E5NzQ0OUQyNzRDOUJENjZCQjk5QzgzNkExQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtkx/D9RoggvBT3m5TcJbROLJ ZEWtqwycuJ2eNInweKwLVvCBZPrH2vSZllxAyuNpvKcY1PT7DpQskh7Tk6KgXwtb pUl7CxsjQCaAd1jW9L14QrPfLxxrxd/5+BsMZkdSdzojmdbX8XVkuxpx2LS8Ln9k DbSfH8qnvk/1tX5hoVp4JknFkrVHvGDWrHItb3rxL5EDlh2o++dXILf6QecHNvwa jiZP8X3CiKmr+9sySmrVCJE0GFyB3mLgXeOtr/kdmiIcIfUViAi2IOs+wf7TnDPw Gg+plhWRzgBuF3TFUzw4+9vU8pMYuYijT0z0bDn/F4h0Q0DN2HweY7wVJgXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9x7KJo8jqXRJ0nTJvWa7mcg2ocIwHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFC3X4quIICmZPGycWi3gj0AGqTqiN0gIz4d oFGzZtOsv/BV8KoIJhKagPI8nGgs4jr+UltF8wI7GDKZlrk7/MKhO5/WxkGIy4Nm r4PNX68s14hLvN9teoNo78YIhp5Yznh17xJw7zgzNfmPp+4aSkq0flZK63MfzY6i WXdc1HCPg9+xwnY64VONqWgMp2JWUFMaPLbRariDQkwQAWr1ske/XQr5pgN8cgnR No1vyfInzkOdCtsP45WbmM1CBjNKRgha8l+tEzVEZA4Qq803xorZ+JxUbN20g6CT 8uKM5IN02O0lM2kosDLuujFgTybixr08qlFKnoRMQcuZolg5z04= -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org