$ rpki-client -vvf repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft File: 054A70F7E364F75AF2F166FE8431E616DE986448.mft (raw, json) Hash identifier: mFmSg3nw6KMEeKUNhGWDx0TTKXt1Z83kdQRzDGiEQsc= Subject key identifier: C3:11:62:5B:36:1F:98:7F:22:40:0B:2D:42:09:A4:87:78:79:DC:7A Authority key identifier: 05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 Certificate issuer: /CN=054A70F7E364F75AF2F166FE8431E616DE986448 Certificate serial: 5AB1D9C580637C8F7C33CB3CAF4793566457ECCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft Manifest number: 031F Signing time: Sun 24 Nov 2024 18:32:27 +0000 Manifest this update: Sun 24 Nov 2024 18:27:27 +0000 Manifest next update: Wed 27 Nov 2024 20:28:27 +0000 Files and hashes: 1: 054A70F7E364F75AF2F166FE8431E616DE986448.crl (hash: /16AVVNCt5P155lwOl1/K/XhiVhXOf5wGL6n0KhmDB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b1:d9:c5:80:63:7c:8f:7c:33:cb:3c:af:47:93:56:64:57:ec:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054A70F7E364F75AF2F166FE8431E616DE986448 Validity Not Before: Nov 24 18:27:27 2024 GMT Not After : Nov 27 20:28:27 2024 GMT Subject: CN=C311625B361F987F22400B2D4209A4877879DC7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:ce:4a:66:30:a5:41:c4:55:44:94:98:54: 5f:04:23:c9:d3:f6:58:a4:b8:e3:31:85:fb:38:1d: c0:e9:38:1f:50:77:0e:cb:16:36:e5:66:c1:3e:9b: 5b:9d:9e:b3:40:c0:b3:46:57:d9:d3:af:e4:fb:6c: e4:dd:9e:f7:6f:50:c2:4b:d2:f7:be:87:5c:6a:c3: 22:10:f6:27:1c:0b:e1:96:3b:f5:2e:3e:75:40:31: 55:09:34:16:c1:f5:ae:e8:4b:83:e7:a3:cb:e3:db: 3f:42:7d:94:2b:3b:64:f5:40:a2:18:1f:f9:1a:bf: 07:e2:d2:58:6f:26:e2:a8:97:05:a1:c7:48:e7:7a: 98:21:54:9b:df:c7:99:d1:f1:84:a3:d8:8e:66:0d: d1:b0:42:a9:73:07:7c:e6:6c:cd:5d:1a:13:10:66: 4a:c7:40:2f:f0:3a:60:04:08:f8:12:7d:36:2a:8b: c8:a1:58:26:19:d6:89:ca:f6:37:d1:dc:cd:ce:ac: 80:ae:d2:1f:71:cd:c3:f6:35:73:7c:e3:ae:8d:db: f4:8a:8d:9d:c9:ae:fb:cd:57:3d:ac:8a:9d:15:60: 35:c1:cc:1d:86:aa:46:9f:4d:1f:8f:92:51:ee:7b: 70:a5:66:2d:d5:00:c2:5d:db:f4:89:9f:fa:36:0d: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:11:62:5B:36:1F:98:7F:22:40:0B:2D:42:09:A4:87:78:79:DC:7A X509v3 Authority Key Identifier: keyid:05:4A:70:F7:E3:64:F7:5A:F2:F1:66:FE:84:31:E6:16:DE:98:64:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/054A70F7E364F75AF2F166FE8431E616DE986448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/054A70F7E364F75AF2F166FE8431E616DE986448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:af:d0:c9:43:e7:33:54:f3:dd:ec:b7:79:ba:72:2b:f0:ca: 3e:c3:16:3e:9b:fe:4d:cf:5a:4c:97:2a:e1:0d:48:30:75:b1: 6f:92:e0:27:a3:67:97:c6:9f:d8:b5:27:1e:d6:b7:07:ac:d4: 00:e0:e7:35:e4:a6:09:1b:0a:b8:2f:aa:8b:ab:77:b8:3e:99: 76:54:d1:c7:dd:85:aa:ac:77:74:76:68:87:a3:3b:ee:3f:83: c3:58:f9:44:3e:a6:ff:35:09:a8:07:b5:b9:e4:63:7f:e4:87: dd:04:8b:98:4c:cc:56:0a:79:05:7f:c0:29:7d:30:ad:af:29: 19:fb:37:a3:0d:42:5b:b1:b4:19:5a:96:29:c8:d6:b3:e8:76: 96:aa:67:a0:39:46:46:e8:f8:5d:07:c9:0b:64:2c:9a:34:77: 91:e0:ca:bb:55:70:f4:41:81:9b:5e:32:9f:90:ab:3a:ae:fa: 1e:aa:54:d9:fc:72:b5:70:b3:60:f1:aa:1a:58:32:ea:fa:00: 4b:d5:ff:d3:a4:29:b4:c7:54:6b:12:50:0e:f6:2e:50:02:ff: 2e:67:e8:c6:cb:35:e5:13:88:b8:f3:f7:69:1c:aa:b4:59:ee: ce:11:87:c5:ca:5c:64:dc:1e:43:e5:e7:70:2a:15:a2:c6:42: 3a:dc:13:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrHZxYBjfI98M8s8r0eTVmRX7MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZE RTk4NjQ0ODAeFw0yNDExMjQxODI3MjdaFw0yNDExMjcyMDI4MjdaMDMxMTAvBgNV BAMTKEMzMTE2MjVCMzYxRjk4N0YyMjQwMEIyRDQyMDlBNDg3Nzg3OURDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkds5KZjClQcRVRJSYVF8EI8nT 9likuOMxhfs4HcDpOB9Qdw7LFjblZsE+m1udnrNAwLNGV9nTr+T7bOTdnvdvUMJL 0ve+h1xqwyIQ9iccC+GWO/UuPnVAMVUJNBbB9a7oS4Pno8vj2z9CfZQrO2T1QKIY H/kavwfi0lhvJuKolwWhx0jnepghVJvfx5nR8YSj2I5mDdGwQqlzB3zmbM1dGhMQ ZkrHQC/wOmAECPgSfTYqi8ihWCYZ1onK9jfR3M3OrICu0h9xzcP2NXN8466N2/SK jZ3JrvvNVz2sip0VYDXBzB2GqkafTR+PklHue3ClZi3VAMJd2/SJn/o2Df//AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwxFiWzYfmH8iQAstQgmkh3h53HowHwYDVR0j BBgwFoAUBUpw9+Nk91ry8Wb+hDHmFt6YZEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MWYxMzRiMS1hNjE3LTRiYWItOTFhYi0xMzgxMDIzNTQwMWIvMC8wNTRBNzBGN0Uz NjRGNzVBRjJGMTY2RkU4NDMxRTYxNkRFOTg2NDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2MTZERTk4 NjQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzFmMTM0YjEtYTYxNy00YmFiLTkx YWItMTM4MTAyMzU0MDFiLzAvMDU0QTcwRjdFMzY0Rjc1QUYyRjE2NkZFODQzMUU2 MTZERTk4NjQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWv0MlD5zNU893st3m6civwyj7DFj6b/k3P WkyXKuENSDB1sW+S4CejZ5fGn9i1Jx7Wtwes1ADg5zXkpgkbCrgvqourd7g+mXZU 0cfdhaqsd3R2aIejO+4/g8NY+UQ+pv81CagHtbnkY3/kh90Ei5hMzFYKeQV/wCl9 MK2vKRn7N6MNQluxtBlalinI1rPodpaqZ6A5Rkbo+F0HyQtkLJo0d5HgyrtVcPRB gZteMp+Qqzqu+h6qVNn8crVws2DxqhpYMur6AEvV/9OkKbTHVGsSUA72LlAC/y5n 6MbLNeUTiLjz92kcqrRZ7s4Rh8XKXGTcHkPl53AqFaLGQjrcE3o= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org