$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json) Hash identifier: XMX2cbCihbCLw/pWH4W8gLa5f8kMGa7uThNnjH5gZYI= Subject key identifier: 9A:68:99:29:83:1C:27:2F:50:1D:2D:28:42:32:50:52:5A:0A:B2:58 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 2C3F7F31F62B104A6D6CC20C8EB48FCBC5BF9769 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft Manifest number: 3D Signing time: Sun 24 Nov 2024 08:00:37 +0000 Manifest this update: Sun 24 Nov 2024 07:55:37 +0000 Manifest next update: Wed 27 Nov 2024 15:08:37 +0000 Files and hashes: 1: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: AGtr53jIPwrIQP7ijk4+cdUWZ6tDTIQGMkK4BbIW1E8=) 2: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: qpoFl5JoTzbSM2hPO0hoJAUaowyf53VlGJf2OUjDyLM=) 3: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: DE4nHNca8ayWoDl52eSSRth/7jHheEal78ri52HzLS8=) 4: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: NGJ06HPZPnasggQ7SzYoKC32u86oginffTyP/A+SYes=) 5: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: rEiPJnrdrYYlFEBaRzbUD9BJkoKBn51ZZoCL2QKX2fk=) 6: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: RHHvOyA9tsUN29lAfel5+ig0UTk0M++2DoiTzJALirg=) 7: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: h0Ikm5xLILqHiZgjn6vJMZ/MDEgRmvD05eIzOebsCJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3f:7f:31:f6:2b:10:4a:6d:6c:c2:0c:8e:b4:8f:cb:c5:bf:97:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Nov 24 07:55:37 2024 GMT Not After : Nov 27 15:08:37 2024 GMT Subject: CN=9A689929831C272F501D2D28423250525A0AB258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:77:70:c2:70:e7:02:d1:ef:5c:6a:46:05:9b: 8d:44:99:47:0b:59:7f:cc:d6:fc:7c:83:52:48:7b: 1c:b5:a2:e2:04:e8:94:d8:a3:44:e0:91:75:0b:fb: de:a9:d6:5b:e1:e0:05:13:ac:38:38:20:77:43:a0: fa:29:49:b4:c2:24:41:2e:20:c7:c3:41:93:c5:f6: 65:68:48:89:f1:19:2d:11:2c:d2:16:28:c7:59:77: e3:09:5d:c2:db:8e:d1:f1:9f:62:0d:34:fc:77:92: 5a:0e:f7:bc:ae:4f:39:75:bf:09:39:18:15:d7:bf: 51:62:a5:07:b3:d4:49:cd:73:5d:2c:c3:28:33:9e: 0d:28:8e:bc:95:16:ac:f2:ce:f7:70:d6:fd:62:af: cb:ac:26:25:c2:9c:36:95:68:4f:46:6c:94:bc:5c: 27:fe:bc:8d:b4:30:dc:47:e1:39:a8:84:d8:a8:66: ea:01:34:bc:cb:99:c4:e4:25:08:23:04:08:99:8b: af:86:96:99:36:c0:d5:19:61:4c:53:39:e2:94:1c: e3:60:0e:5c:b6:e0:d4:f1:5c:65:08:a8:8d:06:49: 14:c7:2a:00:d8:b7:90:1b:84:5d:a6:af:bb:ef:c3: 52:10:87:3b:53:33:30:75:0b:4e:68:f1:b0:35:ec: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:68:99:29:83:1C:27:2F:50:1D:2D:28:42:32:50:52:5A:0A:B2:58 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:07:1b:29:ad:e3:92:79:e3:4a:3f:ae:cf:bf:64:36:08:93: 4a:dc:69:da:58:75:87:13:a8:51:0d:ca:f6:b1:6c:53:1e:a4: d9:91:2a:67:92:54:80:eb:cb:d4:20:da:65:44:4b:6a:91:68: c5:ee:28:3b:43:22:5a:d0:09:17:2b:09:e3:f4:9e:90:80:54: de:d5:58:52:b8:06:58:0c:d5:8d:0d:f2:52:75:2d:4c:f6:f6: 87:d2:89:97:c0:82:a7:36:59:eb:41:c7:32:9a:a7:d7:e1:aa: 3c:62:8e:d4:b2:a7:7b:d0:09:3b:0f:e0:fe:09:57:c5:8b:77: 1b:9b:47:b2:36:5c:01:b6:af:bc:88:9a:f3:c7:60:04:d4:7d: 55:8e:95:20:21:de:8f:46:f6:3c:de:40:ff:f7:07:df:ab:f1: 06:2c:f9:92:19:52:b0:fb:13:4a:41:43:11:9a:c4:d6:66:16: 1f:4a:d0:ef:6a:f2:67:ee:14:16:b3:a7:87:27:60:05:58:34: f3:de:88:78:50:e8:3e:07:a9:59:40:a2:19:8f:cb:97:6a:b7: fc:ea:04:22:7f:11:23:33:a2:8f:21:13:0a:f7:cd:a7:b7:cf: ed:03:de:ed:b6:d0:ea:29:39:7e:61:7e:4b:8b:b1:15:88:cc: 49:c4:83:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULD9/MfYrEEptbMIMjrSPy8W/l2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNDExMjQwNzU1MzdaFw0yNDExMjcxNTA4MzdaMDMxMTAvBgNV BAMTKDlBNjg5OTI5ODMxQzI3MkY1MDFEMkQyODQyMzI1MDUyNUEwQUIyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMd3DCcOcC0e9cakYFm41EmUcL WX/M1vx8g1JIexy1ouIE6JTYo0TgkXUL+96p1lvh4AUTrDg4IHdDoPopSbTCJEEu IMfDQZPF9mVoSInxGS0RLNIWKMdZd+MJXcLbjtHxn2INNPx3kloO97yuTzl1vwk5 GBXXv1FipQez1EnNc10swygzng0ojryVFqzyzvdw1v1ir8usJiXCnDaVaE9GbJS8 XCf+vI20MNxH4TmohNioZuoBNLzLmcTkJQgjBAiZi6+Glpk2wNUZYUxTOeKUHONg Dly24NTxXGUIqI0GSRTHKgDYt5AbhF2mr7vvw1IQhztTMzB1C05o8bA17LuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmmiZKYMcJy9QHS0oQjJQUloKslgwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEw MjlCMTAxMzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMHGymt45J540o/rs+/ZDYIk0rcadpYdYcT qFENyvaxbFMepNmRKmeSVIDry9Qg2mVES2qRaMXuKDtDIlrQCRcrCeP0npCAVN7V WFK4BlgM1Y0N8lJ1LUz29ofSiZfAgqc2WetBxzKap9fhqjxijtSyp3vQCTsP4P4J V8WLdxubR7I2XAG2r7yImvPHYATUfVWOlSAh3o9G9jzeQP/3B9+r8QYs+ZIZUrD7 E0pBQxGaxNZmFh9K0O9q8mfuFBazp4cnYAVYNPPeiHhQ6D4HqVlAohmPy5dqt/zq BCJ/ESMzoo8hEwr3zae3z+0D3u220OopOX5hfkuLsRWIzEnEgxE= -----END CERTIFICATE-----Generated at Sun Nov 24 09:53:15 2024 by rpki-client on console-ams.rpki-client.org