$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: S37INmCrjVaVTzaFNAVa0YNmmwh57Os4y6ymHg5f6EA= Subject key identifier: 0D:EC:94:62:6F:99:C2:F8:84:A3:8D:68:AE:83:AF:B2:B8:0D:C1:A1 Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 66D88C7D304478C9C6828A9B338EE1812CE15A58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: 43 Signing time: Mon 25 Nov 2024 07:21:14 +0000 Manifest this update: Mon 25 Nov 2024 07:16:14 +0000 Manifest next update: Thu 28 Nov 2024 19:15:14 +0000 Files and hashes: 1: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: ro/Wb05Doz9cxtcCbsqj/5S+n6gOMuAr1TBpRwnK5UA=) 2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: uCrO/TheTmT5JDmkvR9LLSLwfYgCtexW8+T2kZ9fffo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d8:8c:7d:30:44:78:c9:c6:82:8a:9b:33:8e:e1:81:2c:e1:5a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Nov 25 07:16:14 2024 GMT Not After : Nov 28 19:15:14 2024 GMT Subject: CN=0DEC94626F99C2F884A38D68AE83AFB2B80DC1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:04:79:83:28:fe:e6:ad:3d:25:da:a6:f7: 9a:fd:b8:02:4a:55:38:6a:cd:b5:d3:d8:d1:78:90: 6b:11:3f:61:3c:5f:b5:7f:6e:1d:c0:4e:9e:ec:91: 9a:13:db:05:fa:a9:52:49:3e:75:c4:73:2c:14:d0: 66:5f:67:3c:63:97:f3:bf:73:0e:57:d9:81:09:b3: 1f:4b:a6:72:15:d9:6d:f3:de:47:0f:89:1b:1f:db: 00:d4:e9:ba:d9:07:06:71:60:f1:ea:a6:78:d3:da: 2a:8b:71:40:bf:da:4c:ed:93:8a:3b:3d:e5:ed:5e: 24:1b:68:b3:bf:24:0e:de:b3:f4:d3:f7:98:d8:45: c7:c8:8f:54:98:fb:85:e1:3b:62:a0:4a:40:7b:65: 21:9a:0e:e2:0b:66:24:99:bb:47:ff:91:61:3b:1a: 21:39:b5:ae:67:fb:74:fa:53:c6:08:0a:be:1d:68: c1:11:ee:79:35:f1:ae:62:fd:6e:17:a8:20:5f:7c: c0:9a:61:e0:6d:25:12:5e:0f:52:60:1e:a6:99:2d: 7b:61:29:d5:f1:8a:6d:b4:22:87:2a:7f:ca:4d:3d: 12:67:4a:15:bc:5b:05:64:ef:a8:cf:90:18:a2:37: fd:34:e2:ef:0c:e8:87:e6:9a:3e:15:7d:05:a9:03: e1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EC:94:62:6F:99:C2:F8:84:A3:8D:68:AE:83:AF:B2:B8:0D:C1:A1 X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ed:91:2c:a3:00:ef:63:eb:03:99:58:58:5b:c9:ea:71:22: 62:ed:de:c8:34:9b:43:25:2b:d3:e9:ae:e9:86:01:c5:d9:08: 91:b2:7c:5c:6c:ec:b4:83:eb:0b:4d:25:aa:09:af:28:66:7a: 5f:c4:2f:c4:54:61:0b:e9:c9:43:60:65:82:7d:70:70:01:4a: 0e:69:78:4e:15:90:a1:88:56:ec:a2:b7:02:49:32:f8:9a:8f: af:ff:ee:30:c7:35:92:58:28:0d:39:f8:aa:85:15:1a:70:f7: 8b:ad:55:64:d0:67:8f:c4:4e:a5:ac:ea:4d:7e:ce:19:60:68: 25:ad:a5:67:53:22:ad:43:38:d0:17:07:4a:c4:72:ac:d8:f1: ff:87:fe:b2:52:79:c1:d0:a7:c4:d9:de:fa:9f:8b:cc:c8:1a: dc:10:76:c5:ef:b6:f4:60:09:70:d5:0d:0f:8f:02:54:66:47: b3:c0:2d:03:31:f3:e7:34:91:29:b7:c6:a3:25:d5:fc:4f:51: 49:4a:f9:cf:05:cc:4a:8f:50:d0:cf:f5:3d:5a:a7:68:9b:91: 0e:95:8d:f5:7b:1d:e4:03:26:26:74:b0:61:98:02:43:27:7f: 50:e6:40:85:8c:0b:f0:c5:a3:25:5f:af:f4:be:12:d1:a0:45: fb:d2:33:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtiMfTBEeMnGgoqbM47hgSzhWlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNDExMjUwNzE2MTRaFw0yNDExMjgxOTE1MTRaMDMxMTAvBgNV BAMTKDBERUM5NDYyNkY5OUMyRjg4NEEzOEQ2OEFFODNBRkIyQjgwREMxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2QR5gyj+5q09Jdqm95r9uAJK VThqzbXT2NF4kGsRP2E8X7V/bh3ATp7skZoT2wX6qVJJPnXEcywU0GZfZzxjl/O/ cw5X2YEJsx9LpnIV2W3z3kcPiRsf2wDU6brZBwZxYPHqpnjT2iqLcUC/2kztk4o7 PeXtXiQbaLO/JA7es/TT95jYRcfIj1SY+4XhO2KgSkB7ZSGaDuILZiSZu0f/kWE7 GiE5ta5n+3T6U8YICr4daMER7nk18a5i/W4XqCBffMCaYeBtJRJeD1JgHqaZLXth KdXxim20Iocqf8pNPRJnShW8WwVk76jPkBiiN/004u8M6Ifmmj4VfQWpA+FPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDeyUYm+ZwviEo41oroOvsrgNwaEwHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADftkSyjAO9j6wOZWFhbyepxImLt3sg0m0Ml K9PprumGAcXZCJGyfFxs7LSD6wtNJaoJryhmel/EL8RUYQvpyUNgZYJ9cHABSg5p eE4VkKGIVuyitwJJMviaj6//7jDHNZJYKA05+KqFFRpw94utVWTQZ4/ETqWs6k1+ zhlgaCWtpWdTIq1DONAXB0rEcqzY8f+H/rJSecHQp8TZ3vqfi8zIGtwQdsXvtvRg CXDVDQ+PAlRmR7PALQMx8+c0kSm3xqMl1fxPUUlK+c8FzEqPUNDP9T1ap2ibkQ6V jfV7HeQDJiZ0sGGYAkMnf1DmQIWMC/DFoyVfr/S+EtGgRfvSM7c= -----END CERTIFICATE-----Generated at Mon Nov 25 09:01:50 2024 by rpki-client on console-ams.rpki-client.org