$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: JuV+P5nQ9TlxW/LsKT1Em17H4iaLQ3kI2PFqIs1Zci8= Subject key identifier: 93:19:18:F7:FE:74:D5:A4:E9:08:0F:E3:DF:E2:5A:8C:BD:6E:84:D1 Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 35B953304D24AA5B551F1AA9FDB5FC960DA43A7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: 0129 Signing time: Sun 24 Nov 2024 14:51:28 +0000 Manifest this update: Sun 24 Nov 2024 14:46:28 +0000 Manifest next update: Thu 28 Nov 2024 01:50:28 +0000 Files and hashes: 1: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: zMxSmroB5hx9dKNqeKSghm5X3bKfrqcdd3JxnZwBQZY=) 2: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: UejcqXthU+xDYc57QX1uPj4KvmZun8dR+kYv7mUvD0Y=) 3: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: seJwwj5vnUOa3AkdxxZAyKSwvUhE5Et0XOT0XCRhJp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b9:53:30:4d:24:aa:5b:55:1f:1a:a9:fd:b5:fc:96:0d:a4:3a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: Nov 24 14:46:28 2024 GMT Not After : Nov 28 01:50:28 2024 GMT Subject: CN=931918F7FE74D5A4E9080FE3DFE25A8CBD6E84D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:f6:a3:5c:2b:b3:dc:0b:4a:3b:85:04:3c: ca:d6:81:8a:f1:5a:b4:4b:a9:b9:25:7f:db:0c:08: 7b:fa:bf:a2:de:fe:d8:8d:fc:f3:c8:22:ba:ad:af: 32:aa:5c:71:41:52:55:a5:51:e4:8c:ea:03:62:c1: 49:30:77:92:8d:92:92:10:9a:5e:6e:c2:a9:de:bf: 34:ad:21:89:7b:62:63:9e:ae:a0:75:ec:ae:bf:f6: 68:0c:8a:29:bb:fb:46:14:18:3a:b8:ec:d8:bf:a4: 23:a4:be:7a:3c:8f:f5:32:42:14:4a:a9:8b:13:99: 4d:57:6f:7b:d8:fd:08:66:1d:98:41:45:cf:83:5a: bd:e5:2f:2e:cf:bc:0e:71:f7:db:ec:58:79:e1:ee: 14:b3:16:c0:03:0a:92:c9:a1:13:c2:b3:31:50:67: f4:1e:0d:45:7b:6a:d8:d5:b4:86:0f:6b:6e:30:92: 39:ea:2d:92:63:6c:2e:fe:b0:69:e5:c9:bb:48:99: 34:3b:51:13:8e:4d:86:ca:81:6b:70:1a:1b:4a:3e: ca:93:1e:ba:7a:36:1d:20:22:2a:66:0f:93:c3:9c: 68:76:f6:4c:27:57:be:7a:55:de:0e:8f:39:3f:02: fc:cd:f1:ef:80:1e:4c:e3:98:a1:37:4c:af:a5:b7: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:19:18:F7:FE:74:D5:A4:E9:08:0F:E3:DF:E2:5A:8C:BD:6E:84:D1 X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6e:10:dd:e7:9f:8a:e5:63:72:55:60:0a:4c:b0:6e:13:25: 4f:2c:57:da:fe:31:be:1b:39:b5:16:8e:1b:14:96:de:29:e2: 9d:dd:ff:8b:5d:50:7c:3e:86:fb:bb:09:2c:22:1a:64:64:5d: 6d:0e:c5:b0:f8:76:62:fc:bb:61:12:3f:d4:c3:7b:66:b7:c7: 20:d8:77:5c:46:b6:a0:5a:ee:b5:99:1c:5d:2d:56:56:22:35: 89:7b:74:55:3e:9d:5f:cd:04:4c:f2:a5:00:0d:04:e1:ed:57: 34:1a:fd:78:1e:df:33:28:bb:b4:0f:ef:19:e3:b5:af:15:19: e0:44:cc:1c:c8:99:f7:7f:e8:e3:87:75:69:32:ad:71:97:7c: 63:3c:33:78:5c:b1:41:ef:2a:fc:c2:de:f5:b5:26:30:98:c1: cd:04:49:34:87:08:05:a2:c2:b2:e2:fe:d9:01:c2:ac:ef:4b: cf:3d:5a:d3:88:07:72:bf:cc:6e:a9:a3:35:8d:71:c2:34:97: aa:d1:d4:46:c9:52:9f:f3:a5:c0:62:8e:af:c6:c2:80:50:78: 7a:92:99:8c:87:9c:0c:bd:c2:53:70:10:ee:36:9e:e7:5e:89: c2:c6:7e:f2:cf:5c:50:1e:3e:71:e0:4b:fe:d2:4b:07:1b:0a: 94:41:27:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNblTME0kqltVHxqp/bX8lg2kOnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNDExMjQxNDQ2MjhaFw0yNDExMjgwMTUwMjhaMDMxMTAvBgNV BAMTKDkzMTkxOEY3RkU3NEQ1QTRFOTA4MEZFM0RGRTI1QThDQkQ2RTg0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqfajXCuz3AtKO4UEPMrWgYrx WrRLqbklf9sMCHv6v6Le/tiN/PPIIrqtrzKqXHFBUlWlUeSM6gNiwUkwd5KNkpIQ ml5uwqnevzStIYl7YmOerqB17K6/9mgMiim7+0YUGDq47Ni/pCOkvno8j/UyQhRK qYsTmU1Xb3vY/QhmHZhBRc+DWr3lLy7PvA5x99vsWHnh7hSzFsADCpLJoRPCszFQ Z/QeDUV7atjVtIYPa24wkjnqLZJjbC7+sGnlybtImTQ7UROOTYbKgWtwGhtKPsqT Hrp6Nh0gIipmD5PDnGh29kwnV756Vd4Ojzk/AvzN8e+AHkzjmKE3TK+lt0o7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkxkY9/501aTpCA/j3+JajL1uhNEwHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpuEN3nn4rlY3JVYApMsG4TJU8sV9r+Mb4b ObUWjhsUlt4p4p3d/4tdUHw+hvu7CSwiGmRkXW0OxbD4dmL8u2ESP9TDe2a3xyDY d1xGtqBa7rWZHF0tVlYiNYl7dFU+nV/NBEzypQANBOHtVzQa/Xge3zMou7QP7xnj ta8VGeBEzBzImfd/6OOHdWkyrXGXfGM8M3hcsUHvKvzC3vW1JjCYwc0ESTSHCAWi wrLi/tkBwqzvS889WtOIB3K/zG6pozWNccI0l6rR1EbJUp/zpcBijq/GwoBQeHqS mYyHnAy9wlNwEO42nudeicLGfvLPXFAePnHgS/7SSwcbCpRBJ2A= -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org