$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: aftJWSCFzpA2mQJOdG0e53kUSbK4Pnc8rQc8q6MochY= Subject key identifier: D0:35:F0:99:7D:3D:37:03:6A:DD:35:63:97:09:FC:D5:7A:C2:5F:F3 Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 62BC58624B5FD173981204749487DEDD780ED388 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 0140 Signing time: Mon 25 Nov 2024 05:32:30 +0000 Manifest this update: Mon 25 Nov 2024 05:27:30 +0000 Manifest next update: Thu 28 Nov 2024 08:39:30 +0000 Files and hashes: 1: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: JsOfskgYc/LMgCYNXu0xSAvRD3YvXfsjsfcKcNK/4L0=) 2: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: UR0TWMWgXqudddMKhRSP7Y5sJnog+ckXeMzXSamPQ84=) 3: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: 8bvQvtlBe7JNMYj2xQaIWZUm48/28VwMFP7AYXq8A30=) 4: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: Jn9KLaP/iXKotp33KugPV3FQeCL4lXPV9miMOHqJSj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 08:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:bc:58:62:4b:5f:d1:73:98:12:04:74:94:87:de:dd:78:0e:d3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Nov 25 05:27:30 2024 GMT Not After : Nov 28 08:39:30 2024 GMT Subject: CN=D035F0997D3D37036ADD35639709FCD57AC25FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ef:a4:ef:ad:2a:ff:0f:da:59:ac:4c:20:2e: 6c:e0:ca:a4:70:80:73:b2:56:b3:61:30:2b:29:d1: 23:79:71:96:8c:7d:f1:a0:bd:04:ed:f9:ee:39:23: bd:42:a8:0f:bd:bc:25:47:71:5f:69:3b:0c:02:cd: bc:14:5d:f6:6d:8e:e7:82:bc:9d:0c:bf:e3:24:04: b5:11:60:bd:3e:81:77:5e:8a:e3:0e:36:2a:94:e5: de:a0:ca:76:36:b3:28:c2:58:3e:f0:ea:36:40:64: 22:ff:8b:c8:d3:d1:e6:03:85:3b:ba:2a:d2:af:2b: 2a:6a:2f:50:2a:8c:c8:3c:61:62:e3:b9:4a:b5:5f: 95:16:32:d0:0d:b1:f0:4e:b6:51:fb:95:b7:f2:0d: 7f:8b:1b:05:83:2b:fb:52:39:ea:b9:ee:dc:7f:89: b8:1b:c1:8d:2d:da:98:ab:3d:09:7c:75:d2:d5:30: 00:43:0b:c7:d3:63:ae:78:b4:40:12:23:3e:51:24: 54:32:7e:ef:1b:0e:e7:37:3b:db:73:b3:9e:14:00: 81:32:ca:7b:56:28:7a:14:95:41:07:c4:97:f8:14: 14:12:3f:68:79:9c:2c:3e:0b:58:33:90:aa:ba:3e: 43:24:6e:5b:6a:96:7f:60:17:3e:d2:38:bf:31:6c: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:35:F0:99:7D:3D:37:03:6A:DD:35:63:97:09:FC:D5:7A:C2:5F:F3 X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:11:04:67:b9:6a:03:c0:28:23:14:3c:d0:85:49:4b:57:76: c5:bf:eb:78:dc:3a:b0:7a:e2:02:be:ad:29:f4:03:82:41:22: dd:f6:15:d8:20:54:1d:a3:7e:2b:19:ee:0b:69:6b:7d:94:ff: 1a:b1:95:63:f4:00:27:d6:c3:2f:8b:21:20:4f:ae:d4:ef:5d: ed:68:81:e0:0b:8d:f7:b4:60:96:f8:b8:37:e8:bf:e2:ab:b2: 51:62:04:93:bd:bc:c9:96:c5:49:fb:25:38:74:45:c3:a7:f3: 0b:3c:ec:e8:71:16:fb:86:de:06:38:c8:b2:56:75:6e:7c:93: 28:2d:75:6f:18:08:70:2f:88:a6:18:0b:6e:c8:2c:d1:0c:44: 11:3f:89:cf:fa:34:10:46:a1:ab:8b:5f:74:4c:04:ce:e4:79: 12:72:83:7b:c2:33:6c:1c:fe:65:28:42:bf:03:bb:b3:55:93: 44:bd:f6:e8:de:dd:27:aa:03:1a:c6:7f:e0:87:55:42:7c:5c: 0d:3c:eb:3e:c2:55:30:c2:63:3c:51:0c:de:e5:79:e5:84:a1: c3:c2:16:e9:44:e4:87:26:ef:dd:b0:cf:b1:ab:fd:ce:dd:ef: 02:a2:fc:f9:2e:99:5a:1e:b7:bc:40:b3:56:8b:39:72:a4:0f: 4b:e7:97:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYrxYYktf0XOYEgR0lIfe3XgO04gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNDExMjUwNTI3MzBaFw0yNDExMjgwODM5MzBaMDMxMTAvBgNV BAMTKEQwMzVGMDk5N0QzRDM3MDM2QUREMzU2Mzk3MDlGQ0Q1N0FDMjVGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk76TvrSr/D9pZrEwgLmzgyqRw gHOyVrNhMCsp0SN5cZaMffGgvQTt+e45I71CqA+9vCVHcV9pOwwCzbwUXfZtjueC vJ0Mv+MkBLURYL0+gXdeiuMONiqU5d6gynY2syjCWD7w6jZAZCL/i8jT0eYDhTu6 KtKvKypqL1AqjMg8YWLjuUq1X5UWMtANsfBOtlH7lbfyDX+LGwWDK/tSOeq57tx/ ibgbwY0t2pirPQl8ddLVMABDC8fTY654tEASIz5RJFQyfu8bDuc3O9tzs54UAIEy yntWKHoUlUEHxJf4FBQSP2h5nCw+C1gzkKq6PkMkbltqln9gFz7SOL8xbAUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0DXwmX09NwNq3TVjlwn81XrCX/MwHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkRBGe5agPAKCMUPNCFSUtXdsW/63jcOrB6 4gK+rSn0A4JBIt32FdggVB2jfisZ7gtpa32U/xqxlWP0ACfWwy+LISBPrtTvXe1o geALjfe0YJb4uDfov+KrslFiBJO9vMmWxUn7JTh0RcOn8ws87OhxFvuG3gY4yLJW dW58kygtdW8YCHAviKYYC27ILNEMRBE/ic/6NBBGoauLX3RMBM7keRJyg3vCM2wc /mUoQr8Du7NVk0S99uje3SeqAxrGf+CHVUJ8XA086z7CVTDCYzxRDN7leeWEocPC FulE5Icm792wz7Gr/c7d7wKi/PkumVoet7xAs1aLOXKkD0vnl9w= -----END CERTIFICATE-----Generated at Mon Nov 25 07:18:32 2024 by rpki-client on console-ams.rpki-client.org