$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft File: D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json) Hash identifier: FeRLs4WqSdRA9KOkkjBKCz42faMvFal7PVm0kPfia8k= Subject key identifier: 95:A7:5A:D6:0F:5B:69:44:8C:3F:93:B1:91:0F:87:AE:6B:C6:92:01 Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE Certificate serial: 782A276E4E5F25383D6A8798E283F948DBD576A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft Manifest number: 0455 Signing time: Fri 22 Nov 2024 07:01:51 +0000 Manifest this update: Fri 22 Nov 2024 06:56:51 +0000 Manifest next update: Mon 25 Nov 2024 15:23:51 +0000 Files and hashes: 1: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: lMm04bbrV0DrDR/LfrROVfPhtdVsje7cFfAvFrg0iac=) 2: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: D2jvDSEdAD/32iOFK0Fb0RMkxz6dQ2XqjNkYA6Cgan8=) 3: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: t2JkAO4RGOdwgjllPAyKujK/HVSkrKZfup0TzzlD7iQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2a:27:6e:4e:5f:25:38:3d:6a:87:98:e2:83:f9:48:db:d5:76:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE Validity Not Before: Nov 22 06:56:51 2024 GMT Not After : Nov 25 15:23:51 2024 GMT Subject: CN=95A75AD60F5B69448C3F93B1910F87AE6BC69201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:d9:a0:62:b9:9f:17:44:87:1d:7a:b4:cc: 48:65:41:bb:67:9a:d4:ee:29:8e:cc:4f:83:f8:bf: b8:8f:d4:99:ed:89:7c:92:b6:c7:fd:f5:15:9a:a8: 36:20:19:8d:6d:9f:10:40:63:2b:1a:0b:94:a6:73: f1:3d:4d:df:29:d9:6e:59:c2:a8:a2:0a:78:22:c6: 9b:77:d5:e7:f2:ea:6c:8e:60:b1:21:5c:05:b9:b0: cf:54:c5:de:a7:11:28:ec:af:89:e3:29:76:9a:26: 86:93:e9:09:f3:da:7e:92:23:4e:2f:06:e3:0b:63: 1c:41:b5:7a:43:3b:1a:56:7e:97:f4:67:9a:8e:06: bd:27:a8:6a:79:44:ec:09:06:13:4f:df:1f:aa:22: c6:9b:a4:34:4e:a7:9e:0c:1b:9b:48:41:8b:23:ce: af:e5:9f:ec:e3:45:b5:0c:58:1a:a8:9b:ff:8e:3b: de:38:9b:40:5f:0a:02:f0:e7:09:98:5e:e6:4c:c0: e5:a2:94:95:e3:37:3f:66:4c:0e:b0:2c:bb:34:0e: 89:d5:e7:cf:e1:01:72:cf:10:8b:74:8d:f0:a1:f8: 7d:5d:79:86:b5:40:2c:f5:56:7d:43:85:7e:ce:df: 6d:b1:2d:7d:12:dd:c1:75:1f:e7:c5:9b:f5:21:a5: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A7:5A:D6:0F:5B:69:44:8C:3F:93:B1:91:0F:87:AE:6B:C6:92:01 X509v3 Authority Key Identifier: keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5b:b8:13:8c:60:bd:de:56:aa:c9:10:7b:b8:b3:a0:14:71: a7:f2:4f:8e:80:f3:7b:0b:a5:62:cf:ec:ed:ff:e4:69:0d:b0: 16:6c:aa:9d:1c:d2:c1:f3:43:46:c3:59:c2:a1:aa:62:ae:22: b5:be:59:21:01:34:36:8e:97:c1:df:03:1f:a2:f5:8c:02:73: 8b:9c:db:55:1d:39:27:7a:f6:ef:97:63:1d:6e:f5:c7:6a:a9: 73:3c:4f:d2:27:ec:77:3a:66:65:0c:88:61:0a:9a:9a:4b:65: 4b:75:bb:bb:80:3c:74:e6:ab:32:03:be:1b:3f:ed:18:1c:65: 3a:9f:f9:34:eb:8b:4d:f7:b6:d3:a7:3c:ef:8d:23:42:5b:ec: a5:02:46:0a:72:7a:48:49:ae:7a:0a:41:25:c7:4e:ce:52:4a: 3c:3e:f5:9e:a1:01:88:c3:bf:4b:c4:47:0c:9c:25:8f:35:11: 54:c7:31:68:0d:f0:64:9d:7a:2a:08:cc:7c:db:16:15:d4:f2: e8:c2:ac:30:37:0a:2e:ec:85:08:d4:e9:fb:7b:63:a1:49:24: 42:37:d1:3f:a7:77:90:08:24:91:f0:52:3a:b4:25:a8:db:61: 56:44:5e:9d:da:d3:50:8a:78:6d:80:07:87:11:91:f5:18:65: 95:af:71:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeConbk5fJTg9aoeY4oP5SNvVdqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdG Mjk1QzJERTAeFw0yNDExMjIwNjU2NTFaFw0yNDExMjUxNTIzNTFaMDMxMTAvBgNV BAMTKDk1QTc1QUQ2MEY1QjY5NDQ4QzNGOTNCMTkxMEY4N0FFNkJDNjkyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuT9mgYrmfF0SHHXq0zEhlQbtn mtTuKY7MT4P4v7iP1JntiXyStsf99RWaqDYgGY1tnxBAYysaC5Smc/E9Td8p2W5Z wqiiCngixpt31efy6myOYLEhXAW5sM9Uxd6nESjsr4njKXaaJoaT6Qnz2n6SI04v BuMLYxxBtXpDOxpWfpf0Z5qOBr0nqGp5ROwJBhNP3x+qIsabpDROp54MG5tIQYsj zq/ln+zjRbUMWBqom/+OO944m0BfCgLw5wmYXuZMwOWilJXjNz9mTA6wLLs0DonV 58/hAXLPEIt0jfCh+H1deYa1QCz1Vn1DhX7O322xLX0S3cF1H+fFm/UhpR2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlada1g9baUSMP5OxkQ+HrmvGkgEwHwYDVR0j BBgwFoAU0upCA0T0hpNYOeA98bPCN/KVwt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDA4ODNmMy00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC9EMkVBNDIwMzQ0 RjQ4NjkzNTgzOUUwM0RGMUIzQzIzN0YyOTVDMkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdGMjk1 QzJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQwODgzZjMtNDU3YS00YzE0LTk1 NzctNjdlMTUwYTJiMTJhLzAvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0My MzdGMjk1QzJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhbuBOMYL3eVqrJEHu4s6AUcafyT46A83sL pWLP7O3/5GkNsBZsqp0c0sHzQ0bDWcKhqmKuIrW+WSEBNDaOl8HfAx+i9YwCc4uc 21UdOSd69u+XYx1u9cdqqXM8T9In7Hc6ZmUMiGEKmppLZUt1u7uAPHTmqzIDvhs/ 7RgcZTqf+TTri033ttOnPO+NI0Jb7KUCRgpyekhJrnoKQSXHTs5SSjw+9Z6hAYjD v0vERwycJY81EVTHMWgN8GSdeioIzHzbFhXU8ujCrDA3Ci7shQjU6ft7Y6FJJEI3 0T+nd5AIJJHwUjq0JajbYVZEXp3a01CKeG2AB4cRkfUYZZWvcdA= -----END CERTIFICATE-----Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org