$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: 4MDSARevEvrnIMMg4twZ5sLVkcaOmwpim45WUu6gwhs= Subject key identifier: 2A:DA:45:EC:25:0B:DA:E8:4A:B0:10:38:76:4E:EC:E2:53:BD:F2:75 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 789DE7A794F9FDCF1E2ABEE9CB172A0FA101FD42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 02C1 Signing time: Wed 20 Nov 2024 01:11:02 +0000 Manifest this update: Wed 20 Nov 2024 01:06:02 +0000 Manifest next update: Sat 23 Nov 2024 11:29:02 +0000 Files and hashes: 1: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: MargjL84nTzHz8ChojHD7+4RMOnc9Fhif/pdgboFtAQ=) 2: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: vrTITHbJ7Z89V7LCGHxYnSOAw5dei/ElVg8Aq8hclwk=) 3: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: 07yh7hfVKVGF6Yffm3aMOKeO+ClRWm+M1+obA5h32mQ=) 4: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=) 5: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: Gb4dk6cIFWpDm7yOXj9wMvU+xey+IEOR2MYqhzLU7AE=) 6: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: N+Ot/inKVcA4yr7n4GNYrMxfbDoZyZlvEVliFyH2+mQ=) 7: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: HELroqXQd2AK9AlEsMayxTGKU2MgckQLI+nRzfzmPCw=) 8: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: Fob1/hoaxI1PmxjmOmJBrnjoUBlYNNau0pJudnAPUXY=) 9: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: vos4wfbgWit9CPIZhtiH7kwDHAjtl0eqL3m94EaJcso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9d:e7:a7:94:f9:fd:cf:1e:2a:be:e9:cb:17:2a:0f:a1:01:fd:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Nov 20 01:06:02 2024 GMT Not After : Nov 23 11:29:02 2024 GMT Subject: CN=2ADA45EC250BDAE84AB01038764EECE253BDF275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:d7:89:b5:1e:f9:90:38:65:30:1e:0f:4c: 71:8f:97:de:4a:cf:d0:a3:5c:72:c3:ae:ba:78:ac: d6:5d:39:c4:af:29:c6:71:2f:a8:f1:5a:47:fb:06: 9b:46:6f:96:a3:13:d5:76:3d:c3:a9:4c:81:48:9d: 24:95:3f:23:d9:9e:e4:51:a9:ad:e8:f3:a7:9c:91: 70:ce:da:cf:9f:1d:45:d2:c5:08:0b:6c:0a:a0:94: a3:44:59:53:bf:fd:96:1e:22:d8:10:c9:0d:3e:79: ff:a0:2a:35:15:94:cd:5e:4f:1f:f1:69:bb:34:ad: ea:d7:db:73:8e:af:32:f6:12:18:de:7e:ef:77:53: c4:6d:f1:45:4d:eb:ec:4d:45:d6:94:58:2e:26:44: 5b:e6:79:6b:33:56:93:05:2d:3f:35:24:8f:c8:e3: 0d:94:27:de:ff:05:af:49:f8:06:89:53:51:fd:30: 13:26:bc:df:f4:65:49:6b:35:36:28:fd:24:87:c9: 8c:14:ec:d0:b8:fb:d0:3e:bf:73:29:a4:1f:e9:8d: 2c:b3:24:cc:0b:80:4f:d9:5a:46:64:9e:08:a4:3b: 6c:a3:01:d0:dd:7a:2f:4c:7c:49:37:0c:3e:fa:3c: 32:8e:6a:64:db:b6:f7:d6:62:bc:c1:98:d2:7d:4d: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DA:45:EC:25:0B:DA:E8:4A:B0:10:38:76:4E:EC:E2:53:BD:F2:75 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:70:ca:18:fb:70:60:6d:18:bb:dd:3e:d7:f7:05:16:05:2c: a3:cf:f9:02:0c:82:e4:bf:a6:2f:f1:97:26:f5:29:14:b2:4a: 6f:8a:9f:a0:fb:7d:ae:b7:af:17:aa:48:85:c0:03:da:4c:0a: a0:da:be:0b:a1:57:0b:c5:b1:8c:af:17:25:e6:2a:9b:82:25: 9f:1b:28:0d:2e:b2:42:c3:8d:58:45:36:10:09:20:05:4a:45: 97:95:b0:f4:36:5c:58:e8:e7:28:2b:30:b1:e9:ab:ef:d8:a4: b0:98:49:38:2d:31:b5:89:72:4e:78:46:ed:91:63:28:ed:41: 28:a7:48:f5:c1:ac:d2:8a:f4:27:ec:8e:fa:93:3e:0f:50:7a: 70:4b:83:d2:79:ab:f4:7e:46:4d:8a:e6:80:35:a2:05:4f:c8: bc:08:4a:d8:e2:f6:42:fe:58:40:c0:a0:69:34:ae:5a:c8:51: fb:0c:c0:c6:b8:01:32:15:44:2b:c4:a2:9c:a7:51:2b:98:ff: d9:83:34:13:c9:a4:23:30:52:6f:1b:48:10:9a:db:c5:d0:23: 9f:6f:db:fa:75:7a:2e:07:49:d6:41:28:6a:e1:5b:6c:55:89: 1d:a7:78:08:1c:23:80:bc:fc:6b:ee:e8:d3:4e:3a:55:9c:32: b5:f8:e4:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJ3np5T5/c8eKr7pyxcqD6EB/UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNDExMjAwMTA2MDJaFw0yNDExMjMxMTI5MDJaMDMxMTAvBgNV BAMTKDJBREE0NUVDMjUwQkRBRTg0QUIwMTAzODc2NEVFQ0UyNTNCREYyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznteJtR75kDhlMB4PTHGPl95K z9CjXHLDrrp4rNZdOcSvKcZxL6jxWkf7BptGb5ajE9V2PcOpTIFInSSVPyPZnuRR qa3o86eckXDO2s+fHUXSxQgLbAqglKNEWVO//ZYeItgQyQ0+ef+gKjUVlM1eTx/x abs0rerX23OOrzL2Ehjefu93U8Rt8UVN6+xNRdaUWC4mRFvmeWszVpMFLT81JI/I 4w2UJ97/Ba9J+AaJU1H9MBMmvN/0ZUlrNTYo/SSHyYwU7NC4+9A+v3MppB/pjSyz JMwLgE/ZWkZkngikO2yjAdDdei9MfEk3DD76PDKOamTbtvfWYrzBmNJ9TfhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKtpF7CUL2uhKsBA4dk7s4lO98nUwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1wyhj7cGBtGLvdPtf3BRYFLKPP+QIMguS/ pi/xlyb1KRSySm+Kn6D7fa63rxeqSIXAA9pMCqDavguhVwvFsYyvFyXmKpuCJZ8b KA0uskLDjVhFNhAJIAVKRZeVsPQ2XFjo5ygrMLHpq+/YpLCYSTgtMbWJck54Ru2R YyjtQSinSPXBrNKK9CfsjvqTPg9QenBLg9J5q/R+Rk2K5oA1ogVPyLwIStji9kL+ WEDAoGk0rlrIUfsMwMa4ATIVRCvEopynUSuY/9mDNBPJpCMwUm8bSBCa28XQI59v 2/p1ei4HSdZBKGrhW2xViR2neAgcI4C8/Gvu6NNOOlWcMrX45Ig= -----END CERTIFICATE-----Generated at Wed Nov 20 03:18:09 2024 by rpki-client on console-ams.rpki-client.org