$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json) Hash identifier: ZLcb+1VaGM6gvo3FAH3Ayl8ThoOR23r+gwy3/0SYMa4= Subject key identifier: C7:85:08:B6:44:46:CE:17:8E:35:AC:CF:25:92:2E:E7:28:BA:2D:A9 Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Certificate serial: 21FE1DC581C8122920BD5A76D5C40142D918AF7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft Manifest number: 0123 Signing time: Mon 25 Nov 2024 10:40:58 +0000 Manifest this update: Mon 25 Nov 2024 10:35:58 +0000 Manifest next update: Thu 28 Nov 2024 15:55:58 +0000 Files and hashes: 1: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: fCaJ4jFPMDVpyVmbeBSPtsH35ux3s+wBCWOeP+ixVRg=) 2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: 7uZlkY5qq0jd+7pjR3aHWDyV9HgXxI/uz666olpzWQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 15:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fe:1d:c5:81:c8:12:29:20:bd:5a:76:d5:c4:01:42:d9:18:af:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Validity Not Before: Nov 25 10:35:58 2024 GMT Not After : Nov 28 15:55:58 2024 GMT Subject: CN=C78508B64446CE178E35ACCF25922EE728BA2DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:e2:ff:81:cf:19:65:54:2c:49:29:0a:68: 35:8d:cf:82:0f:82:3c:44:b2:d5:e6:5a:26:2f:03: f0:ef:eb:70:66:0a:f1:2b:8d:b5:4d:87:48:10:99: 01:a8:88:d2:d4:54:b0:e1:e0:76:d3:b8:96:6f:68: 02:bc:bb:e7:10:94:36:42:b4:0b:cf:72:5a:de:bb: 38:c9:ae:ae:50:b7:ad:98:1f:6c:1c:4b:8e:ec:1a: 05:40:40:c4:bd:b7:f8:ea:a9:75:43:23:e0:0d:11: 76:e0:df:7b:98:71:df:20:39:70:7e:15:a9:af:5e: 36:e0:fa:dc:6c:f6:4c:7b:a8:eb:2b:b4:a2:bc:19: 1b:58:1e:48:03:93:92:4e:da:66:94:0e:73:2c:e1: f0:71:86:c2:0d:78:dc:1d:33:52:02:89:6f:8b:fd: 07:51:fe:6c:4a:03:c6:14:70:b2:04:a7:dd:a7:36: 6c:c5:9d:62:3f:f3:21:c3:a9:25:ef:9f:b0:d5:4e: a9:85:64:35:61:68:58:09:51:b9:f0:86:0c:ae:19: 12:c4:ed:2f:3d:90:97:eb:c4:71:f8:85:e0:62:54: 2a:df:07:3a:7e:8d:8a:8f:24:5e:7a:eb:4f:c0:b4: ff:e8:63:97:d3:70:a1:49:0d:57:34:8c:0a:c6:42: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:85:08:B6:44:46:CE:17:8E:35:AC:CF:25:92:2E:E7:28:BA:2D:A9 X509v3 Authority Key Identifier: keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:df:77:f3:b5:83:d9:1b:7a:28:24:7d:42:e1:ec:84:28:d9: 58:0a:53:b2:f1:40:84:6c:fd:fa:33:d4:96:4a:58:98:31:c3: 28:79:2a:e3:e7:78:e8:a7:27:1d:77:30:e9:bc:d0:83:72:d0: 84:bf:fb:8e:fb:94:ee:e5:3c:63:5c:77:fa:bf:15:e1:94:1a: 51:0e:2a:fd:5d:c2:78:dd:38:28:b5:e9:6f:b8:63:ff:e9:16: d1:a8:d2:24:cd:e3:4f:72:73:4f:a2:63:d0:6a:0e:49:10:60: 9a:b2:4e:f6:54:3b:06:da:15:6e:87:65:be:d6:6c:a4:6e:7d: 42:24:ae:6d:cb:6c:9e:7f:b5:e3:dc:b2:90:10:d8:34:83:50: 2e:79:e3:20:75:b8:56:6c:aa:32:85:af:e9:42:03:fd:47:d0: 84:32:75:bd:cc:dc:7d:f7:02:1a:2e:ac:83:18:ae:63:9c:68: c6:3b:25:55:dc:09:8f:31:e5:ea:f8:c3:68:96:d4:0b:0e:50: 1e:60:b8:e6:a7:9c:be:72:40:0d:73:18:48:71:6e:2e:e1:0a: f8:7d:16:09:b9:fc:6b:b3:b4:f8:50:81:32:b1:0c:f1:a9:e8: 74:1b:45:33:db:85:1c:c0:60:96:bf:06:c7:a9:20:13:c3:6c: f5:d1:ac:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIf4dxYHIEikgvVp21cQBQtkYr30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4 MTk2MTUyRDAeFw0yNDExMjUxMDM1NThaFw0yNDExMjgxNTU1NThaMDMxMTAvBgNV BAMTKEM3ODUwOEI2NDQ0NkNFMTc4RTM1QUNDRjI1OTIyRUU3MjhCQTJEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AeL/gc8ZZVQsSSkKaDWNz4IP gjxEstXmWiYvA/Dv63BmCvErjbVNh0gQmQGoiNLUVLDh4HbTuJZvaAK8u+cQlDZC tAvPclreuzjJrq5Qt62YH2wcS47sGgVAQMS9t/jqqXVDI+ANEXbg33uYcd8gOXB+ FamvXjbg+txs9kx7qOsrtKK8GRtYHkgDk5JO2maUDnMs4fBxhsINeNwdM1ICiW+L /QdR/mxKA8YUcLIEp92nNmzFnWI/8yHDqSXvn7DVTqmFZDVhaFgJUbnwhgyuGRLE 7S89kJfrxHH4heBiVCrfBzp+jYqPJF5660/AtP/oY5fTcKFJDVc0jArGQtZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx4UItkRGzheONazPJZIu5yi6LakwHwYDVR0j BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4 Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2 MTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2 M0M4MTk2MTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjfd/O1g9kbeigkfULh7IQo2VgKU7LxQIRs /foz1JZKWJgxwyh5KuPneOinJx13MOm80INy0IS/+477lO7lPGNcd/q/FeGUGlEO Kv1dwnjdOCi16W+4Y//pFtGo0iTN409yc0+iY9BqDkkQYJqyTvZUOwbaFW6HZb7W bKRufUIkrm3LbJ5/tePcspAQ2DSDUC554yB1uFZsqjKFr+lCA/1H0IQydb3M3H33 AhourIMYrmOcaMY7JVXcCY8x5er4w2iW1AsOUB5guOannL5yQA1zGEhxbi7hCvh9 Fgm5/GuztPhQgTKxDPGp6HQbRTPbhRzAYJa/BsepIBPDbPXRrAk= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org