$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: RzCnMZ8UbzcdWbaiGUuJMPbVkZP9t8Gp3hVowK+ZssA= Subject key identifier: 17:28:9A:F0:03:8F:81:44:F2:4B:59:6F:FE:82:C5:FE:14:BC:F4:25 Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 232425CBD986239DBBF456DF521B7774A7C93E55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 01AF Signing time: Fri 22 Nov 2024 14:22:28 +0000 Manifest this update: Fri 22 Nov 2024 14:17:28 +0000 Manifest next update: Mon 25 Nov 2024 15:32:28 +0000 Files and hashes: 1: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: booilFqKqk7YiPZlOpGne/6T1TyNPVoUN5vNVO/pz5U=) 2: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: FYf2N/1tym2JIye4TlK+dEKrK0oCIL82T+TI3bb+HCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 15:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:24:25:cb:d9:86:23:9d:bb:f4:56:df:52:1b:77:74:a7:c9:3e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Nov 22 14:17:28 2024 GMT Not After : Nov 25 15:32:28 2024 GMT Subject: CN=17289AF0038F8144F24B596FFE82C5FE14BCF425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:cc:e3:e2:eb:51:6a:08:fd:c7:a2:71:e4: 24:43:68:ba:9a:57:6c:1e:89:b0:13:52:26:50:e1: 18:2a:f7:02:0f:94:a4:b5:6f:04:f2:5f:1b:df:2a: 46:4b:db:e8:06:61:e7:75:93:d6:70:f6:49:e9:c6: 7a:4a:69:e1:9b:0c:aa:0d:72:3d:39:f3:b6:63:47: 9c:73:4e:d3:d4:c1:da:9d:27:26:57:ee:24:c2:23: 35:cb:2e:d9:6d:16:76:00:11:89:56:ed:94:8e:9d: 30:e6:6c:fb:4b:a3:2f:f6:ca:85:4e:3c:43:b4:f1: 1a:5b:4f:91:c9:e9:41:8f:94:00:27:38:d2:82:f1: e4:23:fc:b7:72:78:a2:22:3b:6c:3c:03:7d:02:d8: a1:eb:3f:01:6f:1e:91:5f:f5:e3:20:1f:77:07:e8: 22:7f:e8:d3:90:4f:e3:86:18:82:b1:e6:7d:77:3d: d8:dc:e3:ef:bd:76:ca:52:32:4c:8d:c1:1f:18:92: 6c:b5:ff:53:d9:d6:5b:4a:58:48:c3:85:74:c2:d5: 4f:ae:83:18:44:01:32:38:ad:97:9f:5e:3b:8c:7e: 36:5e:83:5b:d5:5b:b8:e9:e9:9d:d7:27:79:0b:a3: f3:d9:39:2b:13:5d:16:db:ad:fe:44:53:b1:dc:1f: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:28:9A:F0:03:8F:81:44:F2:4B:59:6F:FE:82:C5:FE:14:BC:F4:25 X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c1:04:68:66:31:00:bf:a8:55:8c:ab:b4:22:c0:85:39:79: 5b:49:bc:81:03:18:8d:b7:e1:96:7d:06:a6:86:b2:65:c7:7a: 11:58:b7:19:48:74:72:4e:a3:a4:da:8d:01:49:4b:12:5d:72: 5a:33:97:77:62:df:70:09:53:ab:9a:ab:30:5f:78:0b:37:36: 4a:c4:8d:38:e2:bc:2a:3a:95:18:18:fd:a2:11:3b:bc:47:8c: 86:a0:b6:fd:17:7e:28:0b:a2:30:83:f0:49:0d:c4:26:09:14: 4d:cb:f2:eb:8a:24:eb:07:7a:a1:ba:2e:07:6b:1b:ef:54:87: e0:46:b6:fd:d5:ab:06:9b:ed:ab:df:64:90:c3:01:c4:09:95: d5:db:a5:91:79:76:7e:a2:b5:55:68:0d:5d:aa:26:e1:63:4b: 2e:8f:73:77:df:aa:b0:0d:36:d3:c1:a9:7b:e2:3e:e5:45:78: 01:cb:b0:01:72:d3:84:c9:f9:18:d4:51:c4:f9:c3:15:2f:94: fa:c0:99:81:61:ef:0e:33:5e:56:59:6d:d8:e0:e8:02:fa:5c: 9f:66:05:e1:88:ac:10:94:23:fd:81:ff:3b:b2:f6:5f:60:10: 95:bd:c1:53:5e:a8:e0:9c:ef:c9:8b:43:ac:25:2e:ff:22:c1: 96:5e:20:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyQly9mGI5279FbfUht3dKfJPlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNDExMjIxNDE3MjhaFw0yNDExMjUxNTMyMjhaMDMxMTAvBgNV BAMTKDE3Mjg5QUYwMDM4RjgxNDRGMjRCNTk2RkZFODJDNUZFMTRCQ0Y0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8czj4utRagj9x6Jx5CRDaLqa V2weibATUiZQ4Rgq9wIPlKS1bwTyXxvfKkZL2+gGYed1k9Zw9knpxnpKaeGbDKoN cj0587ZjR5xzTtPUwdqdJyZX7iTCIzXLLtltFnYAEYlW7ZSOnTDmbPtLoy/2yoVO PEO08RpbT5HJ6UGPlAAnONKC8eQj/LdyeKIiO2w8A30C2KHrPwFvHpFf9eMgH3cH 6CJ/6NOQT+OGGIKx5n13Pdjc4++9dspSMkyNwR8Ykmy1/1PZ1ltKWEjDhXTC1U+u gxhEATI4rZefXjuMfjZeg1vVW7jp6Z3XJ3kLo/PZOSsTXRbbrf5EU7HcH5M1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFyia8AOPgUTyS1lv/oLF/hS89CUwHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzBBGhmMQC/qFWMq7QiwIU5eVtJvIEDGI23 4ZZ9BqaGsmXHehFYtxlIdHJOo6TajQFJSxJdclozl3di33AJU6uaqzBfeAs3NkrE jTjivCo6lRgY/aIRO7xHjIagtv0XfigLojCD8EkNxCYJFE3L8uuKJOsHeqG6Lgdr G+9Uh+BGtv3Vqwab7avfZJDDAcQJldXbpZF5dn6itVVoDV2qJuFjSy6Pc3ffqrAN NtPBqXviPuVFeAHLsAFy04TJ+RjUUcT5wxUvlPrAmYFh7w4zXlZZbdjg6AL6XJ9m BeGIrBCUI/2B/zuy9l9gEJW9wVNeqOCc78mLQ6wlLv8iwZZeIIA= -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org