$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: ugM5XAw3YtqiWkmGZhQ8iYclS5vipeNleaL8lPDDKko= Subject key identifier: 9D:29:21:27:D5:17:5F:74:5E:9A:F9:46:15:75:66:92:4B:51:FA:C8 Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 73389890C3D0CC93DED8BCAFE1DB3EC80D71960E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 015A Signing time: Fri 22 Nov 2024 16:01:24 +0000 Manifest this update: Fri 22 Nov 2024 15:56:24 +0000 Manifest next update: Tue 26 Nov 2024 03:51:24 +0000 Files and hashes: 1: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: rGvCg+TpgUiBNIDr9Kcc6mUns2Bb23FUVan/M6wOA1E=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: yfirY/IdmmUBXQP+agxLPC5R2mzKmb/7B1nbgYo1Od4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:38:98:90:c3:d0:cc:93:de:d8:bc:af:e1:db:3e:c8:0d:71:96:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Nov 22 15:56:24 2024 GMT Not After : Nov 26 03:51:24 2024 GMT Subject: CN=9D292127D5175F745E9AF946157566924B51FAC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:19:80:b0:2b:f9:01:c6:7a:b9:36:94:a4: 9b:f4:13:32:09:7d:10:c8:50:16:23:c0:ca:d7:bf: e2:61:d9:5f:5f:28:03:90:0a:60:90:0d:a9:d9:44: 88:f1:70:93:d1:90:cb:5f:71:02:c5:62:82:5d:94: b2:e8:37:bf:e6:a4:07:31:2c:0d:f8:ad:1c:a3:fe: b0:47:0f:67:b3:bf:0c:b4:db:9b:1b:bb:a2:53:e8: d6:61:39:05:a0:64:8a:a8:0c:0e:39:1c:8b:76:0d: 70:a7:a3:ec:dd:59:99:09:30:81:8f:02:91:51:28: e2:59:19:74:54:a0:fe:cd:5f:d0:9d:c3:c2:48:ff: 6f:68:2c:de:b5:a0:aa:e8:48:a9:6f:51:c9:ba:76: e8:cb:59:ea:84:1d:1b:2d:04:7b:47:05:f4:a5:e0: 38:08:85:05:ae:6f:68:83:18:9a:58:c5:b5:bc:74: 9a:34:16:2e:d5:03:b6:f8:5a:e8:cf:17:ab:6c:90: ea:d3:27:b6:61:ef:f4:a7:1e:51:24:24:ce:08:27: e5:93:f0:5b:41:a0:3c:79:72:f3:2b:ea:d2:7c:dc: cf:65:36:53:92:fd:56:73:62:27:a2:12:ff:a2:9b: 58:9b:89:d3:e6:1c:ba:6c:21:92:dc:eb:3f:98:a9: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:29:21:27:D5:17:5F:74:5E:9A:F9:46:15:75:66:92:4B:51:FA:C8 X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7b:aa:bb:5f:71:91:a8:47:7d:72:70:20:0a:dc:be:88:6e: 4a:3c:75:24:74:83:0d:78:34:75:4d:ff:70:88:e5:3c:25:bd: 0e:b8:42:3e:71:83:09:d4:7d:c4:cc:20:6b:7e:bb:f3:ba:e6: a6:bf:68:7d:5d:51:55:59:92:3a:5c:9e:c7:f5:3c:2e:a6:93: b3:ad:ed:01:92:a7:66:22:d5:3d:cd:b1:a5:53:b3:6c:6a:f0: f6:40:5b:ab:f2:39:3c:57:5a:b9:0f:a8:0c:8d:a0:1f:2a:26: 00:8e:69:57:27:7c:ad:53:96:9d:67:c7:7e:b4:5a:95:57:52: 97:05:85:0d:16:5d:9f:fa:17:33:a7:99:05:9c:21:48:d0:ec: 79:01:6f:05:1e:f1:00:a4:a5:c7:51:96:a6:12:fc:d8:d9:f7: bb:bd:af:66:7d:99:11:8e:3c:73:70:18:60:ce:cd:9d:f6:5f: d0:3d:a6:6d:6f:89:1a:4a:f0:b9:09:64:e5:9e:2a:73:90:75: 1d:bc:c9:85:06:15:04:7f:71:5e:aa:9e:94:ea:56:7d:67:d9: 42:c5:38:0b:b8:d7:4c:0a:49:bb:3c:64:c5:c0:a4:73:f5:fa: 8b:82:c9:72:5a:3e:72:f5:e6:b4:99:6a:d6:ce:ef:b5:20:d4: 41:1e:1a:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcziYkMPQzJPe2Lyv4ds+yA1xlg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNDExMjIxNTU2MjRaFw0yNDExMjYwMzUxMjRaMDMxMTAvBgNV BAMTKDlEMjkyMTI3RDUxNzVGNzQ1RTlBRjk0NjE1NzU2NjkyNEI1MUZBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPhmAsCv5AcZ6uTaUpJv0EzIJ fRDIUBYjwMrXv+Jh2V9fKAOQCmCQDanZRIjxcJPRkMtfcQLFYoJdlLLoN7/mpAcx LA34rRyj/rBHD2ezvwy025sbu6JT6NZhOQWgZIqoDA45HIt2DXCno+zdWZkJMIGP ApFRKOJZGXRUoP7NX9Cdw8JI/29oLN61oKroSKlvUcm6dujLWeqEHRstBHtHBfSl 4DgIhQWub2iDGJpYxbW8dJo0Fi7VA7b4WujPF6tskOrTJ7Zh7/SnHlEkJM4IJ+WT 8FtBoDx5cvMr6tJ83M9lNlOS/VZzYieiEv+im1ibidPmHLpsIZLc6z+YqVDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnSkhJ9UXX3RemvlGFXVmkktR+sgwHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJF7qrtfcZGoR31ycCAK3L6Ibko8dSR0gw14 NHVN/3CI5TwlvQ64Qj5xgwnUfcTMIGt+u/O65qa/aH1dUVVZkjpcnsf1PC6mk7Ot 7QGSp2Yi1T3NsaVTs2xq8PZAW6vyOTxXWrkPqAyNoB8qJgCOaVcnfK1Tlp1nx360 WpVXUpcFhQ0WXZ/6FzOnmQWcIUjQ7HkBbwUe8QCkpcdRlqYS/NjZ97u9r2Z9mRGO PHNwGGDOzZ32X9A9pm1viRpK8LkJZOWeKnOQdR28yYUGFQR/cV6qnpTqVn1n2ULF OAu410wKSbs8ZMXApHP1+ouCyXJaPnL15rSZatbO77Ug1EEeGvE= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org