$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json) Hash identifier: JZJm9sG97Me8WPGZWQcSOjHSfD8Q63iYKI7PkG6mq3w= Subject key identifier: 00:6B:9B:ED:2C:73:CA:31:1B:63:48:62:C8:72:38:0E:2F:0C:77:CF Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 1F66880607114D945FA0E15D3A2E1B71A5D388FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft Manifest number: 0138 Signing time: Fri 22 Nov 2024 15:01:23 +0000 Manifest this update: Fri 22 Nov 2024 14:56:23 +0000 Manifest next update: Tue 26 Nov 2024 01:44:23 +0000 Files and hashes: 1: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: qYmhKPO9rFhqz04TGUFRQv1e9eYXk46mY1Xm3G2a+Uk=) 2: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: pvlL+Az4H6yh6tUg7bNOoW01vHxSP/JumaV8PkAntn0=) 3: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 2PIJNDCqxr1CYBMDta4AS70nqIttL7WaXTQsdNAh5fU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:66:88:06:07:11:4d:94:5f:a0:e1:5d:3a:2e:1b:71:a5:d3:88:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: Nov 22 14:56:23 2024 GMT Not After : Nov 26 01:44:23 2024 GMT Subject: CN=006B9BED2C73CA311B634862C872380E2F0C77CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:a8:e8:2f:73:3b:11:93:62:a5:c2:2c:9c: 1d:0f:25:f2:96:d1:10:97:ee:1d:e6:eb:3c:77:dc: 8c:ea:ec:3b:b2:72:05:29:8e:d6:12:03:1d:1d:0e: bd:cc:02:f6:34:75:58:d1:6a:0d:e1:70:e2:52:e3: 7e:a4:14:7f:b3:40:5f:99:a6:50:e6:3f:62:8d:5f: be:83:51:dc:76:42:34:e2:97:01:f5:be:cb:8b:d2: 8a:dd:c2:ba:e5:4b:ce:8c:56:e7:dd:c1:f1:4c:5f: 40:d7:8a:d7:de:2a:33:03:2b:e1:ff:d0:4a:86:29: 9f:cd:de:95:7e:85:de:44:d1:d1:2a:22:64:93:95: 96:0f:93:be:bb:c2:30:d4:6a:d6:06:9a:24:81:78: d4:95:c6:b3:03:80:c5:29:e9:1e:80:f7:c8:0c:26: 56:44:4e:e0:69:36:25:00:50:15:60:1f:02:0d:2e: af:fd:04:20:b9:3d:c8:dd:05:da:77:23:3b:02:70: f4:9e:06:99:d5:cb:01:87:c4:36:44:bc:af:b9:d9: c4:6b:0a:ca:d8:31:a9:a8:dc:4f:d8:12:9c:3c:ad: e6:bf:94:f7:b5:c4:90:29:9d:6c:63:9d:73:d1:9a: c7:0c:9e:37:27:00:23:47:b9:9b:2c:e1:a9:ba:92: 83:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6B:9B:ED:2C:73:CA:31:1B:63:48:62:C8:72:38:0E:2F:0C:77:CF X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:1d:e9:eb:2b:d2:c1:b0:33:3b:41:09:b1:25:d9:bc:d2:a5: 81:d6:74:9e:4f:9c:bc:21:ca:38:72:a9:1d:ab:97:d2:de:5f: aa:05:13:8f:6f:24:51:be:2b:54:f5:f4:4d:a8:59:13:fc:fe: a7:c8:e0:9f:08:0c:91:e3:58:fc:44:1e:70:2d:3d:2a:10:1e: 88:05:d5:63:7c:93:1e:60:62:4b:b0:57:ab:7c:08:6c:42:3a: ea:69:ca:e4:b6:01:8d:50:a4:b3:1b:1c:81:79:cd:15:c1:9d: b7:f9:92:d3:9a:ce:17:54:c7:d2:1c:10:b2:06:37:83:04:aa: dd:5f:e9:94:fa:24:4c:60:2d:bc:99:7b:6f:ec:9a:63:b0:13: a9:aa:ef:5d:a6:9c:27:9c:d1:00:d8:d6:28:c1:f0:f4:c7:5f: 67:6c:90:9c:e5:84:a9:ac:46:1a:0a:b4:32:81:e7:fc:7d:9f: 2b:81:3d:8b:53:18:3c:4c:61:19:da:28:18:da:33:d6:20:2a: bd:05:c2:21:29:4b:9e:bd:45:66:6f:d9:de:77:23:28:5d:4b: 42:2a:4a:fb:2e:c7:62:e6:46:85:d7:e2:b9:f7:14:f1:dc:4f: 97:88:9a:83:6a:a2:6e:ff:eb:c5:87:0b:af:75:cf:28:ab:5d: 17:f0:94:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2aIBgcRTZRfoOFdOi4bcaXTiPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNDExMjIxNDU2MjNaFw0yNDExMjYwMTQ0MjNaMDMxMTAvBgNV BAMTKDAwNkI5QkVEMkM3M0NBMzExQjYzNDg2MkM4NzIzODBFMkYwQzc3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7ajoL3M7EZNipcIsnB0PJfKW 0RCX7h3m6zx33Izq7DuycgUpjtYSAx0dDr3MAvY0dVjRag3hcOJS436kFH+zQF+Z plDmP2KNX76DUdx2QjTilwH1vsuL0ordwrrlS86MVufdwfFMX0DXitfeKjMDK+H/ 0EqGKZ/N3pV+hd5E0dEqImSTlZYPk767wjDUatYGmiSBeNSVxrMDgMUp6R6A98gM JlZETuBpNiUAUBVgHwINLq/9BCC5PcjdBdp3IzsCcPSeBpnVywGHxDZEvK+52cRr CsrYMamo3E/YEpw8rea/lPe1xJApnWxjnXPRmscMnjcnACNHuZss4am6koNJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGub7SxzyjEbY0hiyHI4Di8Md88wHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZC OTYyNTExMkNFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkd6esr0sGwMztBCbEl2bzSpYHWdJ5PnLwh yjhyqR2rl9LeX6oFE49vJFG+K1T19E2oWRP8/qfI4J8IDJHjWPxEHnAtPSoQHogF 1WN8kx5gYkuwV6t8CGxCOuppyuS2AY1QpLMbHIF5zRXBnbf5ktOazhdUx9IcELIG N4MEqt1f6ZT6JExgLbyZe2/smmOwE6mq712mnCec0QDY1ijB8PTHX2dskJzlhKms RhoKtDKB5/x9nyuBPYtTGDxMYRnaKBjaM9YgKr0FwiEpS569RWZv2d53IyhdS0Iq Svsux2LmRoXX4rn3FPHcT5eImoNqom7/68WHC691zyirXRfwlAo= -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org