$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: vgqOm15+l1v/a1I3K+Ejjrskqf8OErLBK3TvaA95F1M= Subject key identifier: 1D:10:8C:6F:FD:0F:43:74:7F:81:75:77:B3:51:27:88:75:0D:B4:9E Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 7FC77895915B5A2E1EC8C488246A54A50B7CE094 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: 4C Signing time: Sat 23 Nov 2024 20:12:32 +0000 Manifest this update: Sat 23 Nov 2024 20:07:32 +0000 Manifest next update: Wed 27 Nov 2024 05:31:32 +0000 Files and hashes: 1: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: ctntkAXUI57UCQ3sU6b5QuN5R1MB/23qibMUlSwHY7g=) 2: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: J3T8X7ZJVcf+xL7seKPOkVeZWHPjQGRxd1iPkjH4nwA=) 3: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: 8dGmjzsLEY4UlpUOguHBOA4hB1JXgIR8COyHcQcSDqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c7:78:95:91:5b:5a:2e:1e:c8:c4:88:24:6a:54:a5:0b:7c:e0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Nov 23 20:07:32 2024 GMT Not After : Nov 27 05:31:32 2024 GMT Subject: CN=1D108C6FFD0F43747F817577B3512788750DB49E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:ea:22:c5:9d:69:c3:e7:4a:d6:44:cd:83: 82:dd:2a:a8:eb:17:31:e5:84:40:da:2c:c8:62:b8: c7:cd:11:e8:cb:5b:a9:75:8a:29:b6:14:7f:a4:76: 16:3c:91:1e:9d:be:cc:23:aa:53:17:0a:ba:e6:3f: 30:a2:b9:65:89:36:33:f1:15:45:14:75:8b:be:ab: fd:7b:5b:f8:11:0f:dc:eb:31:49:f6:f7:df:2b:df: 7a:f4:ca:4a:e4:b7:b5:7a:e7:e6:95:ce:d4:cd:fb: 78:c3:9f:ba:a5:94:41:5b:93:b7:43:bc:fc:82:08: e9:62:b1:33:7f:63:1c:55:bf:88:74:2c:f5:ab:75: 77:c3:92:65:ef:9a:e2:84:b9:51:bd:1c:53:f0:1f: 18:8a:f0:59:dd:ed:ad:fb:63:c7:32:db:22:a7:e5: 25:62:fb:15:07:14:76:54:42:b6:d1:fd:ec:04:48: 89:a1:31:5e:37:ca:45:3c:d4:e2:30:bd:f7:71:7a: b0:0f:06:75:5d:c8:c2:a7:0a:39:ec:45:c0:4a:0a: a8:25:bf:1b:be:01:1b:e9:48:6c:67:63:5b:ca:67: 44:b4:d3:98:5a:da:ff:72:c6:95:69:a3:5f:d3:4d: 43:0d:53:21:27:8e:2d:6c:62:bd:ac:0d:cd:d4:65: 77:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:10:8C:6F:FD:0F:43:74:7F:81:75:77:B3:51:27:88:75:0D:B4:9E X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:65:85:44:91:fa:83:6f:b1:56:d4:ff:17:34:53:c7:00:40: 8a:5c:67:d8:bb:4d:fa:2b:c5:e4:c0:5b:32:da:bc:df:9a:bc: 44:5a:f1:89:e4:1d:e7:7d:86:ba:de:70:57:b6:6b:95:c7:d4: 11:3b:22:cc:78:0a:ac:54:89:a9:bf:35:ae:05:9c:95:11:43: b5:8d:b6:67:41:07:3d:90:87:58:c8:e4:51:18:4f:92:d1:78: 29:b6:28:5a:2e:da:e7:e3:95:2d:37:5e:aa:22:c0:14:39:a3: af:7a:13:62:20:b4:ec:f4:57:5b:6d:12:50:ad:f7:09:45:df: 2c:50:83:00:3f:54:51:85:2d:cb:fe:b4:33:eb:25:94:b2:a3: c9:c9:36:a5:38:f5:7c:9c:ca:41:14:63:28:a2:41:69:e7:c6: 06:a3:5f:77:2e:d8:60:38:c6:b9:ab:07:24:65:7d:aa:8a:39: b7:5b:b0:38:44:0b:9f:48:c4:18:a4:64:1a:7a:57:42:a9:57: 52:42:fe:35:aa:24:97:05:17:0c:ce:fd:ff:2c:88:bd:39:49: c6:aa:74:99:fb:20:37:13:c0:c8:ef:dd:73:0a:f6:b1:6b:d4: f7:95:92:c3:07:d7:de:43:28:bc:d7:32:36:a3:c5:9a:50:5d: 43:b4:a8:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8d4lZFbWi4eyMSIJGpUpQt84JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNDExMjMyMDA3MzJaFw0yNDExMjcwNTMxMzJaMDMxMTAvBgNV BAMTKDFEMTA4QzZGRkQwRjQzNzQ3RjgxNzU3N0IzNTEyNzg4NzUwREI0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBt+oixZ1pw+dK1kTNg4LdKqjr FzHlhEDaLMhiuMfNEejLW6l1iim2FH+kdhY8kR6dvswjqlMXCrrmPzCiuWWJNjPx FUUUdYu+q/17W/gRD9zrMUn2998r33r0ykrkt7V65+aVztTN+3jDn7qllEFbk7dD vPyCCOlisTN/YxxVv4h0LPWrdXfDkmXvmuKEuVG9HFPwHxiK8Fnd7a37Y8cy2yKn 5SVi+xUHFHZUQrbR/ewESImhMV43ykU81OIwvfdxerAPBnVdyMKnCjnsRcBKCqgl vxu+ARvpSGxnY1vKZ0S005ha2v9yxpVpo1/TTUMNUyEnji1sYr2sDc3UZXftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHRCMb/0PQ3R/gXV3s1EniHUNtJ4wHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBlhUSR+oNvsVbU/xc0U8cAQIpcZ9i7Tfor xeTAWzLavN+avERa8YnkHed9hrrecFe2a5XH1BE7Isx4CqxUiam/Na4FnJURQ7WN tmdBBz2Qh1jI5FEYT5LReCm2KFou2ufjlS03XqoiwBQ5o696E2IgtOz0V1ttElCt 9wlF3yxQgwA/VFGFLcv+tDPrJZSyo8nJNqU49XycykEUYyiiQWnnxgajX3cu2GA4 xrmrByRlfaqKObdbsDhEC59IxBikZBp6V0KpV1JC/jWqJJcFFwzO/f8siL05Scaq dJn7IDcTwMjv3XMK9rFr1PeVksMH195DKLzXMjajxZpQXUO0qLk= -----END CERTIFICATE-----Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org