$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: 1epaZ7jh/gbNqOXPmow9AYNUajwiNUZ0IZaEh2Y42As= Subject key identifier: 53:8A:16:70:25:96:46:EE:56:2B:2F:56:E2:88:86:C3:97:58:F3:12 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 5EFDF8B17B0E181503C29EA7BB5ED093AFD7E7D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 03F5 Signing time: Mon 25 Nov 2024 02:12:22 +0000 Manifest this update: Mon 25 Nov 2024 02:07:22 +0000 Manifest next update: Thu 28 Nov 2024 07:17:22 +0000 Files and hashes: 1: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: R6jlOMebhI7dihMnvovn6K1+eHFopc71JfRc6zYxAOY=) 2: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: JJTSpueK+8xOey5mADXWIZ6VRAaWkGW2eN97ELtB3co=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE=) 4: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: 9hgqgNLtK3Kp6rQdBuRjySVRJduSanHEfC4wgFXfx+Y=) 5: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: IGi6DrH51U07XomDWdoiKr2G5BS4MVMB5tHm0OIctaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fd:f8:b1:7b:0e:18:15:03:c2:9e:a7:bb:5e:d0:93:af:d7:e7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Nov 25 02:07:22 2024 GMT Not After : Nov 28 07:17:22 2024 GMT Subject: CN=538A1670259646EE562B2F56E28886C39758F312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:05:09:4e:88:35:2f:a0:fc:43:24:b6:d8:35: 31:37:27:6c:78:84:8d:b9:ab:77:dd:18:b2:41:23: ac:40:1a:83:68:33:0b:34:7b:cc:47:cd:d5:09:23: 34:eb:39:5d:09:51:de:a3:96:a4:93:85:80:8c:88: e0:f5:fd:45:8d:41:61:65:1c:37:21:41:23:f1:d0: 96:90:ca:5d:2d:af:e5:d6:86:de:0d:1a:bb:eb:af: b2:6f:53:df:68:e3:ec:d8:4a:14:b1:94:9d:0a:d8: a9:de:c5:60:7c:bb:bc:8c:d7:26:1c:7f:8e:ff:11: fd:a4:eb:76:83:74:6e:43:f2:a2:ea:01:9e:81:f0: 59:a2:0c:6c:04:c7:9b:2b:93:44:13:63:1e:a7:79: 76:6c:e1:72:81:ec:d9:d3:b5:d6:58:10:7e:50:22: f9:68:b9:ed:75:4f:3b:35:7a:a8:c7:a9:62:44:ec: b8:d4:15:2e:f1:a9:82:0b:a0:cf:ad:c0:31:59:28: 09:61:de:fa:cf:70:8f:1f:bc:45:73:38:35:b2:9e: 15:03:b5:d3:31:73:72:21:10:c6:05:5a:7f:08:ab: 5f:9e:46:b1:e4:0f:16:ee:dd:0f:7c:fd:6a:34:87: 93:07:da:36:bd:5c:1e:cf:e9:14:ee:19:25:93:61: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8A:16:70:25:96:46:EE:56:2B:2F:56:E2:88:86:C3:97:58:F3:12 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:3e:8b:cb:d8:0c:50:93:5c:29:f0:b6:d3:88:08:10:3e:77: 5f:95:93:2b:f1:be:72:e9:26:68:54:29:af:04:18:45:39:a1: 70:39:25:0c:18:da:b5:89:93:1c:4a:a6:9a:57:cd:48:da:db: ef:dc:ab:b1:b0:b4:c8:f7:c5:a7:ad:53:c7:ae:ef:87:c1:41: 10:ec:09:f9:18:de:9d:41:fa:60:98:19:f4:24:09:1f:d6:27: 92:9f:b3:7d:63:ff:e1:bc:47:17:8a:4c:88:88:df:ad:17:7e: f3:5e:9b:3e:b1:f1:f3:d6:06:92:10:dd:38:ef:73:59:cb:14: 3d:ed:84:83:8b:a5:f9:bb:34:99:26:92:ae:81:f4:cd:84:3d: 42:17:6f:23:32:70:ae:3c:15:47:1d:d9:e6:f5:9a:f2:da:7c: e8:b4:ad:2d:26:27:d4:59:0e:e5:70:65:05:e4:19:b2:c1:dc: 9e:1f:54:2d:b9:d4:ab:53:3a:b4:b5:76:c8:a5:bc:2a:11:b2: 3e:73:c2:d0:2c:d6:6a:05:1f:c4:10:0b:2d:39:81:a0:1a:0a: 9e:4b:3d:d3:e2:e4:e2:94:7a:20:ea:08:06:cc:1a:b8:76:41: f7:b1:86:20:82:53:ee:61:14:56:91:5e:c1:de:d3:4b:ba:c0: 0b:56:82:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXv34sXsOGBUDwp6nu17Qk6/X59MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNDExMjUwMjA3MjJaFw0yNDExMjgwNzE3MjJaMDMxMTAvBgNV BAMTKDUzOEExNjcwMjU5NjQ2RUU1NjJCMkY1NkUyODg4NkMzOTc1OEYzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4BQlOiDUvoPxDJLbYNTE3J2x4 hI25q3fdGLJBI6xAGoNoMws0e8xHzdUJIzTrOV0JUd6jlqSThYCMiOD1/UWNQWFl HDchQSPx0JaQyl0tr+XWht4NGrvrr7JvU99o4+zYShSxlJ0K2KnexWB8u7yM1yYc f47/Ef2k63aDdG5D8qLqAZ6B8FmiDGwEx5srk0QTYx6neXZs4XKB7NnTtdZYEH5Q Ivloue11Tzs1eqjHqWJE7LjUFS7xqYILoM+twDFZKAlh3vrPcI8fvEVzODWynhUD tdMxc3IhEMYFWn8Iq1+eRrHkDxbu3Q98/Wo0h5MH2ja9XB7P6RTuGSWTYeTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU4oWcCWWRu5WKy9W4oiGw5dY8xIwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABw+i8vYDFCTXCnwttOICBA+d1+VkyvxvnLp JmhUKa8EGEU5oXA5JQwY2rWJkxxKpppXzUja2+/cq7GwtMj3xaetU8eu74fBQRDs CfkY3p1B+mCYGfQkCR/WJ5Kfs31j/+G8RxeKTIiI360XfvNemz6x8fPWBpIQ3Tjv c1nLFD3thIOLpfm7NJkmkq6B9M2EPUIXbyMycK48FUcd2eb1mvLafOi0rS0mJ9RZ DuVwZQXkGbLB3J4fVC251KtTOrS1dsilvCoRsj5zwtAs1moFH8QQCy05gaAaCp5L PdPi5OKUeiDqCAbMGrh2QfexhiCCU+5hFFaRXsHe00u6wAtWgrA= -----END CERTIFICATE-----Generated at Mon Nov 25 02:56:53 2024 by rpki-client on console-fra.rpki-client.org