$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft File: C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json) Hash identifier: DzOSaQiXAGJV25wT39vfxMwqzoBzMiBvz6op6DrV3xU= Subject key identifier: D2:B1:0E:8F:70:29:2B:12:DF:7F:C3:BB:57:25:28:F5:A8:A8:06:9D Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 1C7CDE153D34617B944CECDB629A465EBAA95EE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft Manifest number: 041D Signing time: Wed 27 Nov 2024 00:01:38 +0000 Manifest this update: Tue 26 Nov 2024 23:56:38 +0000 Manifest next update: Sat 30 Nov 2024 02:02:38 +0000 Files and hashes: 1: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: cfaaVl5RivAI5aEsFEpR96b1yzNXPD55gNZl0+j6JoI=) 2: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: OQ+jixdB6D9ZFk5GiVurAtSF74hmhaPoxwyCKEsGsYI=) 3: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: CnkVTPyXoN81CXoMBzW6erzeaYjqRdKYOHnGAhWhsKo=) 4: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: 3T8MbbOtG2+ZgU9C1xgwAYx2HlDNUDW4JXH7L0pvZ80=) 5: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: g8UPVDpb1m/IFnDlcUZIzOXR04b/PAWmv165hevmi70=) 6: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: g0FFTgDxa4Hez+HwVNQ7bFyBpeqsTBamtra1C6gMee0=) 7: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: HyCE+wb3o9CDjWwDlbm/esNR5nByEQvKGtR35PJURy0=) 8: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: gi0af/cQbabaV6AiHGMfP/9tqFkO/i715nyDNUjuW74=) 9: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: N7dD/FSi3TZ7eLd1FkTH81UWI+fs0udUhwSc1vTMSUU=) 10: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: c6fpSUbyQdt1ZsHYs9eWhZI0zdnm3cArV6v/GBThWWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 22:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7c:de:15:3d:34:61:7b:94:4c:ec:db:62:9a:46:5e:ba:a9:5e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Nov 26 23:56:38 2024 GMT Not After : Nov 30 02:02:38 2024 GMT Subject: CN=D2B10E8F70292B12DF7FC3BB572528F5A8A8069D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c0:56:9f:f3:80:c0:cd:82:1a:42:15:22:f0: 10:fd:9b:3a:55:47:a0:33:86:b1:74:41:1d:6f:e7: ef:5e:93:b5:d7:c7:f3:ea:b4:60:0d:ac:cd:af:f9: a1:91:6d:13:3d:f0:d5:ff:c7:be:1c:0d:2e:5f:9e: c7:4e:04:a5:c5:73:e5:62:1b:88:95:c3:89:73:ed: 96:fe:2e:6d:d5:84:9e:1b:b0:6f:0e:e8:49:19:08: 6b:a8:fe:4c:61:0c:68:2e:66:c3:76:ae:b8:1b:80: 88:b2:06:5c:3d:d9:5d:78:89:92:b3:72:62:30:97: 5c:c3:14:40:64:35:2a:d4:b4:14:d0:fe:0c:6a:47: 50:6d:9b:12:ee:4d:f6:05:88:cf:16:10:3c:a7:e6: 4c:d1:17:5a:1e:1c:83:36:23:64:fe:33:be:66:7f: 8a:61:fc:5d:86:f1:7c:2c:c7:9e:09:fc:1e:41:f8: 15:b4:33:67:39:56:b2:09:2c:b4:d2:22:06:e6:a9: 0f:3e:a2:7d:74:d1:07:1e:20:71:8e:e1:66:c7:38: 5c:09:f6:f2:b4:3d:56:53:35:fb:19:06:e3:7b:da: 7d:67:5e:68:0e:e0:12:4b:c7:3f:50:72:26:92:c7: 4c:d5:3b:ee:58:94:49:be:bc:fe:5e:40:93:4e:a1: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:0E:8F:70:29:2B:12:DF:7F:C3:BB:57:25:28:F5:A8:A8:06:9D X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:65:90:6a:f6:b3:a2:92:61:ef:e2:95:ac:91:97:6a:1b:df: 4f:d8:1c:ca:02:d4:ae:fe:ac:01:e4:13:1a:49:41:f1:81:50: 57:79:37:e6:b0:38:d6:6f:9b:4e:e0:66:84:84:fd:d9:e2:7f: e1:87:06:28:7e:84:aa:d5:b9:f9:88:b8:6b:43:52:55:88:a1: b9:5b:a1:65:86:3e:e0:50:6d:12:f2:3b:bb:f0:f5:bc:22:95: b6:f0:db:98:75:9e:f6:d0:a3:25:b7:25:67:2a:79:17:d4:c3: 8d:58:37:2c:84:38:f3:27:ef:9f:cb:df:58:84:23:14:a0:76: b0:e8:1d:a7:8a:bf:cc:fb:af:9b:48:c5:98:e6:30:07:46:73: 07:39:a6:61:b4:6b:93:04:b5:ec:43:c2:b2:06:89:3a:47:bd: 7b:28:a1:62:94:b3:17:c5:d3:ad:e2:51:3c:cb:dd:6d:4a:1a: ab:29:6d:37:be:dd:83:e1:9f:eb:af:92:38:bb:1c:77:3a:46: 40:f3:0d:cf:f9:9e:6e:ec:58:80:76:13:0c:6f:75:94:81:07: c3:12:2b:ee:3d:28:7e:17:ec:9b:f8:7c:25:cb:94:c6:d8:25: 93:03:2f:94:c8:0b:32:d8:be:d5:dc:dc:e0:0f:d5:c0:7a:d3: 1b:f8:a6:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHzeFT00YXuUTOzbYppGXrqpXuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNDExMjYyMzU2MzhaFw0yNDExMzAwMjAyMzhaMDMxMTAvBgNV BAMTKEQyQjEwRThGNzAyOTJCMTJERjdGQzNCQjU3MjUyOEY1QThBODA2OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwFaf84DAzYIaQhUi8BD9mzpV R6AzhrF0QR1v5+9ek7XXx/PqtGANrM2v+aGRbRM98NX/x74cDS5fnsdOBKXFc+Vi G4iVw4lz7Zb+Lm3VhJ4bsG8O6EkZCGuo/kxhDGguZsN2rrgbgIiyBlw92V14iZKz cmIwl1zDFEBkNSrUtBTQ/gxqR1BtmxLuTfYFiM8WEDyn5kzRF1oeHIM2I2T+M75m f4ph/F2G8Xwsx54J/B5B+BW0M2c5VrIJLLTSIgbmqQ8+on100QceIHGO4WbHOFwJ 9vK0PVZTNfsZBuN72n1nXmgO4BJLxz9QciaSx0zVO+5YlEm+vP5eQJNOoevjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0rEOj3ApKxLff8O7VyUo9aioBp0wHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi ZDktNGFjNGJjNjMwNDE0LzAvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAx MkZGQjQ4ODcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdlkGr2s6KSYe/ilayRl2ob30/YHMoC1K7+ rAHkExpJQfGBUFd5N+awONZvm07gZoSE/dnif+GHBih+hKrVufmIuGtDUlWIoblb oWWGPuBQbRLyO7vw9bwilbbw25h1nvbQoyW3JWcqeRfUw41YNyyEOPMn75/L31iE IxSgdrDoHaeKv8z7r5tIxZjmMAdGcwc5pmG0a5MEtexDwrIGiTpHvXsooWKUsxfF 063iUTzL3W1KGqspbTe+3YPhn+uvkji7HHc6RkDzDc/5nm7sWIB2EwxvdZSBB8MS K+49KH4X7Jv4fCXLlMbYJZMDL5TICzLYvtXc3OAP1cB60xv4pqM= -----END CERTIFICATE-----Generated at Wed Nov 27 01:59:19 2024 by rpki-client on console-ams.rpki-client.org