$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: SNl1mDSckM+kTijm2aAvk8PHHm53OSE8PXkaF9lbY9E= Subject key identifier: 51:E1:B5:D6:6A:79:52:15:2E:B2:15:64:B9:70:71:F3:F7:30:D2:B0 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 4A85DAD52EBF1226BAAF6F7117D2679B2641FE33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: 53 Signing time: Fri 29 Nov 2024 07:00:39 +0000 Manifest this update: Fri 29 Nov 2024 06:55:39 +0000 Manifest next update: Mon 02 Dec 2024 15:16:39 +0000 Files and hashes: 1: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: A1hnHJuSS/CjegeZCbVDBe+9fc3PzAjrhUV0+3BfwCE=) 2: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: yG4+2M7fws6C52HoixX4PcNGnAAet0z0xRyi0LE26aU=) 3: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: KXISEgIZt8VUSl+Ls+ZGblGpPKh68mYNLc0QClC+ANg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 22:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:85:da:d5:2e:bf:12:26:ba:af:6f:71:17:d2:67:9b:26:41:fe:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Nov 29 06:55:39 2024 GMT Not After : Dec 2 15:16:39 2024 GMT Subject: CN=51E1B5D66A7952152EB21564B97071F3F730D2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:36:30:9f:cb:9e:07:17:8c:70:8b:94:54: a6:89:f5:22:43:2f:aa:77:41:5f:cf:34:91:ae:2a: 30:47:f9:5f:5c:12:de:e8:4d:46:ad:e4:29:48:97: ac:78:9e:94:ce:32:47:71:20:c8:f8:06:4a:8f:81: 00:f9:44:6e:78:a9:36:9f:52:d2:53:f7:d0:40:31: 15:ec:98:fe:98:5c:be:8f:fc:44:b6:d3:93:29:6d: 5f:38:a3:44:72:00:d6:bd:32:88:4b:4a:cb:0a:08: 94:cd:51:02:f2:a3:88:4b:53:fe:58:cd:91:9d:1c: 15:cc:f9:0f:3a:7c:25:dd:7e:08:34:55:ab:dc:2c: 5d:f9:8a:69:cc:f6:7d:5c:bc:2b:3e:41:a9:30:25: 06:7a:42:61:3f:cd:6a:9f:99:da:71:0d:b8:65:d2: 23:73:20:1c:44:7b:57:4b:e0:f2:3a:41:0d:af:45: cb:e1:31:95:40:36:32:ba:8d:bd:6b:5a:ef:03:26: 10:6d:76:c2:91:2c:58:04:55:20:73:83:8f:b6:72: 7c:2c:6e:7c:e8:17:56:7d:25:c9:9d:58:83:39:e0: ea:34:11:aa:12:c0:93:c7:1c:54:96:12:3e:07:5d: 5b:8c:e6:11:e7:69:a8:f6:6c:77:7b:4c:a6:94:cf: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E1:B5:D6:6A:79:52:15:2E:B2:15:64:B9:70:71:F3:F7:30:D2:B0 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:10:d7:a7:08:23:26:2d:02:0d:84:96:b9:48:4c:33:d8:cf: 00:5b:51:0e:4f:ab:9a:0e:f0:c8:ee:8f:c5:53:3b:67:63:f2: 83:b0:75:60:98:38:b7:47:b4:da:01:35:b9:70:9b:66:03:0d: 9e:fa:e3:25:88:6f:1f:66:b9:fe:6d:9f:00:82:32:3a:cf:59: 78:7c:83:cc:07:bd:15:10:d1:68:71:3b:14:28:61:a0:20:32: 6d:cc:dd:de:d2:b8:63:42:90:71:7b:8e:ad:86:55:27:23:75: cd:64:05:fa:7b:41:52:a5:a7:a0:c7:2d:ec:a8:15:72:4b:9a: 8b:be:1a:81:b1:0f:85:3b:8b:5d:91:ed:ed:24:f7:43:14:3b: 54:16:c4:94:55:cd:55:82:3d:6d:9b:75:f1:2d:48:9c:4b:e9: 97:91:39:83:9e:f9:c3:c5:b0:16:da:dc:56:f1:99:80:06:46: b6:0e:95:f2:21:2f:1b:1a:97:5f:36:94:67:47:e6:d1:16:4d: 78:6e:02:e3:90:98:2d:76:6a:7f:d5:61:07:e8:86:b4:ef:6c: 6d:ad:ad:12:0f:53:60:fc:c2:8d:24:f7:8c:72:01:9a:61:13: ee:90:a1:fd:93:01:dd:7d:3d:3e:82:ee:7a:88:e9:ab:74:5a: 04:07:9c:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSoXa1S6/Eia6r29xF9JnmyZB/jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNDExMjkwNjU1MzlaFw0yNDEyMDIxNTE2MzlaMDMxMTAvBgNV BAMTKDUxRTFCNUQ2NkE3OTUyMTUyRUIyMTU2NEI5NzA3MUYzRjczMEQyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56TYwn8ueBxeMcIuUVKaJ9SJD L6p3QV/PNJGuKjBH+V9cEt7oTUat5ClIl6x4npTOMkdxIMj4BkqPgQD5RG54qTaf UtJT99BAMRXsmP6YXL6P/ES205MpbV84o0RyANa9MohLSssKCJTNUQLyo4hLU/5Y zZGdHBXM+Q86fCXdfgg0VavcLF35imnM9n1cvCs+QakwJQZ6QmE/zWqfmdpxDbhl 0iNzIBxEe1dL4PI6QQ2vRcvhMZVANjK6jb1rWu8DJhBtdsKRLFgEVSBzg4+2cnws bnzoF1Z9JcmdWIM54Oo0EaoSwJPHHFSWEj4HXVuM5hHnaaj2bHd7TKaUz1OFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUeG11mp5UhUushVkuXBx8/cw0rAwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIQ16cIIyYtAg2ElrlITDPYzwBbUQ5Pq5oO 8Mjuj8VTO2dj8oOwdWCYOLdHtNoBNblwm2YDDZ764yWIbx9muf5tnwCCMjrPWXh8 g8wHvRUQ0WhxOxQoYaAgMm3M3d7SuGNCkHF7jq2GVScjdc1kBfp7QVKlp6DHLeyo FXJLmou+GoGxD4U7i12R7e0k90MUO1QWxJRVzVWCPW2bdfEtSJxL6ZeROYOe+cPF sBba3FbxmYAGRrYOlfIhLxsal182lGdH5tEWTXhuAuOQmC12an/VYQfohrTvbG2t rRIPU2D8wo0k94xyAZphE+6Qof2TAd19PT6C7nqI6at0WgQHnOE= -----END CERTIFICATE-----Generated at Fri Nov 29 08:51:54 2024 by rpki-client on console-fra.rpki-client.org