$ rpki-client -vvf repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft File: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft (raw, json) Hash identifier: 4tJy0xpFQ25+t7xcN1XTI9CNgwRxqqXxGnMPRXzaDnk= Subject key identifier: 5A:0F:42:C1:64:FE:80:D9:23:53:2B:19:26:F5:E1:3F:E9:63:00:1F Authority key identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E Certificate issuer: /CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Certificate serial: 0925558FD2FBE6D05088759B593EEF12AFE696D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft Manifest number: 014B Signing time: Mon 25 Nov 2024 18:51:20 +0000 Manifest this update: Mon 25 Nov 2024 18:46:20 +0000 Manifest next update: Thu 28 Nov 2024 23:52:20 +0000 Files and hashes: 1: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: zqT5YWjMd6XfOxSy/65IPLyls5xiXGFCXPoGdWCUauk=) 2: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl (hash: nBEGj7zbH2RVZJD+j6Fbf7ZmR/FxvV4fhOWiQOoMoNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:25:55:8f:d2:fb:e6:d0:50:88:75:9b:59:3e:ef:12:af:e6:96:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Validity Not Before: Nov 25 18:46:20 2024 GMT Not After : Nov 28 23:52:20 2024 GMT Subject: CN=5A0F42C164FE80D923532B1926F5E13FE963001F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:88:22:a3:eb:ec:25:1c:e9:cd:54:fa:a8: 95:9c:1a:70:32:c3:f5:f9:fa:2b:38:7f:c1:cf:ce: 00:7a:5b:f0:02:cd:53:8f:a9:4d:c7:b5:3d:9b:41: 5e:fa:49:39:b1:df:47:ac:62:3b:9d:cd:a3:76:68: b7:e2:30:cd:53:e9:8d:f3:ea:cf:0b:d8:e1:87:b6: fd:19:d9:e5:fd:cf:e5:07:ab:23:f1:da:70:db:0d: 06:a6:72:1d:64:4c:ab:16:8a:1f:f8:90:2f:8f:f4: a3:f9:b2:ec:ac:a7:0f:e6:47:c3:69:e8:39:c9:b4: fc:94:83:26:44:d1:b3:cd:b8:76:f5:83:ac:b7:d3: 31:bb:e9:1b:5e:6e:7f:d7:38:f4:b7:12:46:8a:87: fb:f0:fc:7a:b8:b3:2e:5c:4b:73:85:b7:10:12:64: 76:a2:8b:37:74:48:d7:c4:cf:76:bd:99:b7:06:61: 69:47:29:86:fb:92:23:0f:9e:34:7a:2c:44:0d:7d: c1:1c:0e:d6:1b:49:5d:0e:df:d7:4d:04:ad:8d:6f: 0a:40:92:47:59:e6:f1:37:46:64:5f:94:44:25:94: 3f:f2:34:17:86:72:3d:5f:ee:89:0c:72:89:2c:48: a0:64:2d:e9:22:37:93:ce:56:09:a7:34:fc:ae:ce: 3e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0F:42:C1:64:FE:80:D9:23:53:2B:19:26:F5:E1:3F:E9:63:00:1F X509v3 Authority Key Identifier: keyid:53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fa:d8:db:63:86:90:5f:1b:79:d2:fc:99:99:f5:18:50:d3: 71:03:0a:51:7f:71:c8:a3:05:1c:b9:70:fd:da:17:5a:89:69: ba:83:8b:e2:05:25:66:50:04:c8:57:1c:44:60:61:ba:d2:51: 25:50:e3:ed:0b:f1:fb:42:6b:b0:df:09:c7:c4:1d:2e:d9:5b: b4:1d:c2:35:fd:94:71:46:80:03:ba:7c:50:2a:88:00:c1:0b: 63:00:fc:d7:82:8f:7d:2f:6c:c0:8f:95:0c:85:0f:4c:2c:c6: 75:45:7e:5b:60:45:6c:1a:9b:73:4a:8f:63:27:40:8c:ef:86: f0:d9:f1:72:f5:73:83:14:5c:f7:57:a2:51:a3:38:d0:1e:7f: 5b:82:7f:8e:8a:fd:b0:82:e5:39:dd:60:82:79:10:d0:3c:08: 21:22:fe:6a:8c:5c:3f:3f:52:14:c1:51:7c:5b:95:65:02:f6: 94:98:dc:3f:f4:ff:db:35:9c:fd:43:db:17:47:68:21:20:2f: 71:00:0d:2b:e4:42:57:d4:4e:3f:5b:67:9a:f8:63:ad:48:fe: c3:a0:6a:9f:9f:6e:8f:df:f1:33:60:e6:73:a5:34:5f:90:a1: 13:0a:d3:71:04:c6:79:ae:a1:cf:4a:1b:bc:36:0a:6d:47:57: 5d:2e:ee:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSVVj9L75tBQiHWbWT7vEq/mltEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2RDI5 RUJGQjY0RTAeFw0yNDExMjUxODQ2MjBaFw0yNDExMjgyMzUyMjBaMDMxMTAvBgNV BAMTKDVBMEY0MkMxNjRGRTgwRDkyMzUzMkIxOTI2RjVFMTNGRTk2MzAwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvogio+vsJRzpzVT6qJWcGnAy w/X5+is4f8HPzgB6W/ACzVOPqU3HtT2bQV76STmx30esYjudzaN2aLfiMM1T6Y3z 6s8L2OGHtv0Z2eX9z+UHqyPx2nDbDQamch1kTKsWih/4kC+P9KP5suyspw/mR8Np 6DnJtPyUgyZE0bPNuHb1g6y30zG76Rtebn/XOPS3EkaKh/vw/Hq4sy5cS3OFtxAS ZHaiizd0SNfEz3a9mbcGYWlHKYb7kiMPnjR6LEQNfcEcDtYbSV0O39dNBK2NbwpA kkdZ5vE3RmRflEQllD/yNBeGcj1f7okMcoksSKBkLekiN5POVgmnNPyuzj6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWg9CwWT+gNkjUysZJvXhP+ljAB8wHwYDVR0j BBgwFoAUU7LKMALbjfz1SC+OCamG0p6/tk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjcxZmM2ZC1hYTNiLTRlZDctOGZlYy03NDI3YWEwNjFmOGUvMC81M0IyQ0EzMDAy REI4REZDRjU0ODJGOEUwOUE5ODZEMjlFQkZCNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2RDI5RUJG QjY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3MWZjNmQtYWEzYi00ZWQ3LThm ZWMtNzQyN2FhMDYxZjhlLzAvNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2 RDI5RUJGQjY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADH62NtjhpBfG3nS/JmZ9RhQ03EDClF/ccij BRy5cP3aF1qJabqDi+IFJWZQBMhXHERgYbrSUSVQ4+0L8ftCa7DfCcfEHS7ZW7Qd wjX9lHFGgAO6fFAqiADBC2MA/NeCj30vbMCPlQyFD0wsxnVFfltgRWwam3NKj2Mn QIzvhvDZ8XL1c4MUXPdXolGjONAef1uCf46K/bCC5TndYIJ5ENA8CCEi/mqMXD8/ UhTBUXxblWUC9pSY3D/0/9s1nP1D2xdHaCEgL3EADSvkQlfUTj9bZ5r4Y61I/sOg ap+fbo/f8TNg5nOlNF+QoRMK03EExnmuoc9KG7w2Cm1HV10u7lA= -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:14 2024 by rpki-client on console-fra.rpki-client.org