$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: 2xBzx9cE2UsvQC+jeIuL2KMkovPM3o15BzlQVDDlS8M= Subject key identifier: 41:C5:F7:A8:AD:4B:4E:BC:30:57:09:B4:F6:C1:3E:82:73:2D:59:8A Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 55F7A4FED0DBC62C5F08AD3D054DF80FFAD514A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: A8 Signing time: Sun 24 Nov 2024 13:40:57 +0000 Manifest this update: Sun 24 Nov 2024 13:35:57 +0000 Manifest next update: Wed 27 Nov 2024 19:14:57 +0000 Files and hashes: 1: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: cbrl6dBckxe27KqOtUNV9s29bXGi1zCIe4QmB1+JlkA=) 2: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: +AkE8lBocYkzQtUK7rxyogDErEqAx6OPKcVzXziAtKI=) 3: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: GKIgBoE9BJr4IBV3nuLu/667yTh9Ljul+FLbbVJ6YMM=) 4: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: 4mXeU5O3PALv3QEZsFTkzOzx5yDWq6LGK8PBeqzWVWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f7:a4:fe:d0:db:c6:2c:5f:08:ad:3d:05:4d:f8:0f:fa:d5:14:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Nov 24 13:35:57 2024 GMT Not After : Nov 27 19:14:57 2024 GMT Subject: CN=41C5F7A8AD4B4EBC305709B4F6C13E82732D598A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:8e:29:b6:0e:68:a6:2d:20:d3:78:02:e9: 6c:72:a8:39:b1:fc:68:df:2f:28:da:43:1e:df:59: a4:e4:a8:68:75:a8:ca:e6:59:cc:aa:cc:f6:8d:ce: fb:50:c1:bb:a7:f0:08:77:03:40:3d:31:88:af:05: 30:e1:68:09:ff:7f:e9:ff:76:13:5b:14:a9:8b:73: ee:69:4a:3c:6f:30:95:d7:9c:fe:66:58:e5:b8:19: 67:80:a1:6b:58:c9:8c:17:ff:3f:06:59:9b:70:a1: e2:11:f5:17:73:5c:78:6e:4a:05:fb:c1:f7:d6:3c: 7f:61:59:2d:1e:b1:61:4e:cb:3e:3b:bb:61:53:0b: 75:31:ad:3a:32:61:2b:39:97:47:a0:31:7c:29:18: d3:82:e2:e4:86:5b:91:d4:2a:d5:21:b3:b5:7b:51: d7:14:8b:b4:13:37:bc:78:35:99:4d:2d:51:d8:67: 03:10:7f:fd:d3:21:d4:16:fe:6c:c4:ee:3e:40:f3: bd:45:34:69:4b:c6:ad:61:f9:63:b7:d8:39:de:b8: 2a:1d:ea:7b:9a:87:19:f1:9c:e2:f1:99:71:cf:b9: 0a:81:9a:dd:47:66:58:08:67:fe:a0:94:0a:e1:db: 75:98:ac:0d:8a:69:a3:90:a0:ad:c4:d0:24:01:1c: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C5:F7:A8:AD:4B:4E:BC:30:57:09:B4:F6:C1:3E:82:73:2D:59:8A X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:af:60:26:16:7d:2b:11:f3:66:33:f4:2c:dc:b6:0d:fc:2b: 11:58:ba:cb:03:ac:1c:37:5c:41:da:92:0a:a6:aa:5e:ad:b2: 2b:a1:28:0c:6a:8d:e7:50:7b:3d:e8:be:2b:cc:2c:23:3d:ff: 9d:f0:80:b4:9d:aa:b3:24:00:4c:5f:ba:b1:94:5c:43:a2:ff: 2a:18:7c:94:62:5a:db:24:3e:66:f0:db:24:bc:72:92:a7:d4: 3d:1c:4b:d8:31:98:59:9f:ff:c3:dd:55:19:b5:4b:30:69:7b: 19:df:ad:31:34:da:c4:9d:e0:6a:e9:75:d8:9e:15:af:bd:eb: 65:a5:72:a8:6d:f4:fe:ce:a3:cd:9e:70:b3:33:d9:db:56:ba: f9:df:e0:09:32:b2:8e:21:1e:c2:b0:9c:a0:ac:fe:37:8d:75: 70:b2:3f:0e:c0:25:66:ac:bc:3f:c3:89:98:9c:62:f3:1b:6d: 9f:06:57:82:da:76:d7:62:14:b5:89:ff:d0:5e:82:4c:6c:8b: ef:a6:6f:c4:37:7a:b4:00:88:cb:9e:43:ce:63:05:cc:f0:e9: 5b:16:81:91:99:c6:b4:8a:53:c9:bf:84:1a:36:67:b9:ce:d1: 89:cc:17:09:bb:9f:3a:f0:b7:29:75:ba:a5:fe:7d:60:92:f0: 51:5f:e3:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfek/tDbxixfCK09BU34D/rVFKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNDExMjQxMzM1NTdaFw0yNDExMjcxOTE0NTdaMDMxMTAvBgNV BAMTKDQxQzVGN0E4QUQ0QjRFQkMzMDU3MDlCNEY2QzEzRTgyNzMyRDU5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5b44ptg5opi0g03gC6WxyqDmx /GjfLyjaQx7fWaTkqGh1qMrmWcyqzPaNzvtQwbun8Ah3A0A9MYivBTDhaAn/f+n/ dhNbFKmLc+5pSjxvMJXXnP5mWOW4GWeAoWtYyYwX/z8GWZtwoeIR9RdzXHhuSgX7 wffWPH9hWS0esWFOyz47u2FTC3UxrToyYSs5l0egMXwpGNOC4uSGW5HUKtUhs7V7 UdcUi7QTN7x4NZlNLVHYZwMQf/3TIdQW/mzE7j5A871FNGlLxq1h+WO32DneuCod 6nuahxnxnOLxmXHPuQqBmt1HZlgIZ/6glArh23WYrA2KaaOQoK3E0CQBHBDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQcX3qK1LTrwwVwm09sE+gnMtWYowHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKavYCYWfSsR82Yz9Czctg38KxFYussDrBw3 XEHakgqmql6tsiuhKAxqjedQez3ovivMLCM9/53wgLSdqrMkAExfurGUXEOi/yoY fJRiWtskPmbw2yS8cpKn1D0cS9gxmFmf/8PdVRm1SzBpexnfrTE02sSd4Grpddie Fa+962Wlcqht9P7Oo82ecLMz2dtWuvnf4Akyso4hHsKwnKCs/jeNdXCyPw7AJWas vD/DiZicYvMbbZ8GV4LadtdiFLWJ/9Begkxsi++mb8Q3erQAiMueQ85jBczw6VsW gZGZxrSKU8m/hBo2Z7nO0YnMFwm7nzrwtyl1uqX+fWCS8FFf46s= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org