$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: P+xXPNXIiI5JexD4WSffyeBy+R1pkuAB3l3a2ndrdeY= Subject key identifier: 19:25:84:79:99:C5:DB:B1:DA:6D:74:35:1D:F6:71:1A:3E:9C:7A:82 Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 2A323DFF65E83DB89525F6C5110618288AA54EBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 0315 Signing time: Wed 20 Nov 2024 10:02:34 +0000 Manifest this update: Wed 20 Nov 2024 09:57:34 +0000 Manifest next update: Sat 23 Nov 2024 17:25:34 +0000 Files and hashes: 1: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 8VCbSt8sf1ira304Yivk2um0uX8Ou0NBiN+oeimWTgo=) 2: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: Ad0meesFioDB/yKS6iE3zr+SO9iJNe0sQLdX3njlhFw=) 3: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: uw1IMEfhECnCQ5x+C3EkhFtsv7FNGp+Ew9Y1n8aiN7E=) 4: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: ptqfddn+LmGBR0sbHJsF6b8Kh9RzspUjeHivKr6YmXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:32:3d:ff:65:e8:3d:b8:95:25:f6:c5:11:06:18:28:8a:a5:4e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Nov 20 09:57:34 2024 GMT Not After : Nov 23 17:25:34 2024 GMT Subject: CN=1925847999C5DBB1DA6D74351DF6711A3E9C7A82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:ee:b3:a4:f7:87:2e:a8:a3:c5:3c:9c:6d: f0:34:4f:7f:8c:d4:c3:64:0b:df:d0:6d:e2:d1:f1: 1e:7e:7c:13:67:a3:76:6e:e3:5a:2d:f1:a1:2d:c1: fc:39:37:a2:31:af:fc:49:a9:db:f0:62:dc:56:3a: 7f:27:4b:d4:e1:c4:ca:c7:f6:bf:f5:c4:f0:7c:94: ec:22:15:d0:a2:0c:20:09:20:04:03:a8:f2:ec:a3: c6:96:15:b0:bd:b5:1e:13:e5:80:37:4d:ee:09:59: 71:85:e2:52:cf:a2:ac:71:f4:95:27:d4:3c:84:c2: cf:bd:7f:37:d9:f1:37:54:43:2b:d9:41:b3:9b:bb: 39:ca:77:ca:b5:42:01:54:c9:83:93:cb:0f:a0:3c: ca:26:b1:d1:c2:1e:81:de:9b:6d:db:6e:b4:a1:a9: 29:7f:fa:51:b0:13:50:91:d5:4b:02:d4:2a:e8:e9: ee:4a:35:1a:08:70:d7:1d:62:73:93:47:fd:a3:f0: d0:54:83:3b:43:2d:fa:23:4b:7d:23:ff:ba:ab:e4: 9e:c8:9c:f2:a7:7f:11:11:2c:a5:cc:4b:ad:7a:b0: 3c:9c:d3:29:4b:63:a2:f7:1e:87:7e:11:61:96:28: 84:ac:55:b9:7c:60:7f:04:e7:21:cc:ac:2d:b6:d0: ba:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:25:84:79:99:C5:DB:B1:DA:6D:74:35:1D:F6:71:1A:3E:9C:7A:82 X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:58:ab:8a:0a:23:cf:23:1c:4d:e8:be:94:3e:76:77:f1:ba: 20:9c:7e:58:48:7e:e5:36:e4:d7:8b:de:e3:97:73:35:50:d3: 49:c9:b2:73:02:1c:67:de:b5:91:83:16:43:0a:78:2e:e6:1f: 59:0b:12:a4:14:c1:a7:37:54:b7:e0:d9:18:30:7e:93:3d:6d: 37:99:c1:d6:f1:34:33:fe:99:d4:c0:ce:98:d9:f8:dc:66:df: 60:21:74:b1:93:cb:1b:83:62:9d:f0:ab:fc:1f:75:df:dd:4d: 24:9a:21:ca:4d:1e:32:e0:d5:f2:56:cc:43:f6:be:dd:94:6a: 34:74:0c:a4:ad:65:f3:88:a6:a6:df:0d:28:a0:bf:fb:98:48: 67:0a:77:54:19:bf:63:61:b7:2d:df:ad:63:27:27:13:fa:87: 14:ce:53:89:bd:63:8a:ac:40:c6:77:40:a7:61:cd:12:04:83: 82:7d:33:b4:7f:29:db:4d:b7:cb:00:cd:ce:a3:87:13:95:41: 96:5e:8b:47:96:2a:b0:a0:c3:e3:4b:ed:53:05:17:fd:17:12: 87:07:78:07:db:da:ee:1f:0b:4a:e7:f2:de:6f:ac:47:bb:54: 0a:b8:c6:ec:77:de:f5:a3:fc:67:f0:af:1b:a3:48:da:8c:0d: 81:fa:de:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjI9/2XoPbiVJfbFEQYYKIqlTrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNDExMjAwOTU3MzRaFw0yNDExMjMxNzI1MzRaMDMxMTAvBgNV BAMTKDE5MjU4NDc5OTlDNURCQjFEQTZENzQzNTFERjY3MTFBM0U5QzdBODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSu6zpPeHLqijxTycbfA0T3+M 1MNkC9/QbeLR8R5+fBNno3Zu41ot8aEtwfw5N6Ixr/xJqdvwYtxWOn8nS9ThxMrH 9r/1xPB8lOwiFdCiDCAJIAQDqPLso8aWFbC9tR4T5YA3Te4JWXGF4lLPoqxx9JUn 1DyEws+9fzfZ8TdUQyvZQbObuznKd8q1QgFUyYOTyw+gPMomsdHCHoHem23bbrSh qSl/+lGwE1CR1UsC1Cro6e5KNRoIcNcdYnOTR/2j8NBUgztDLfojS30j/7qr5J7I nPKnfxERLKXMS616sDyc0ylLY6L3Hod+EWGWKISsVbl8YH8E5yHMrC220LpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGSWEeZnF27HabXQ1HfZxGj6ceoIwHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABYq4oKI88jHE3ovpQ+dnfxuiCcflhIfuU2 5NeL3uOXczVQ00nJsnMCHGfetZGDFkMKeC7mH1kLEqQUwac3VLfg2RgwfpM9bTeZ wdbxNDP+mdTAzpjZ+Nxm32AhdLGTyxuDYp3wq/wfdd/dTSSaIcpNHjLg1fJWzEP2 vt2UajR0DKStZfOIpqbfDSigv/uYSGcKd1QZv2Nhty3frWMnJxP6hxTOU4m9Y4qs QMZ3QKdhzRIEg4J9M7R/KdtNt8sAzc6jhxOVQZZei0eWKrCgw+NL7VMFF/0XEocH eAfb2u4fC0rn8t5vrEe7VAq4xux33vWj/GfwrxujSNqMDYH63hI= -----END CERTIFICATE-----Generated at Wed Nov 20 12:07:34 2024 by rpki-client on console-fra.rpki-client.org