$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: z2Nt9fOz7ZGogC6zcsHnnvlofyk0ItSdRHkmMzcg3f0= Subject key identifier: CE:4F:DF:7C:02:DB:76:58:69:3E:66:7F:AD:0F:2D:18:B2:74:EE:E9 Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 4927A270647030C72A96A25C8B6BA0C5ED45F77D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: 77 Signing time: Wed 20 Nov 2024 11:01:02 +0000 Manifest this update: Wed 20 Nov 2024 10:56:02 +0000 Manifest next update: Sat 23 Nov 2024 17:53:02 +0000 Files and hashes: 1: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: MGZqXkg2hL6cKhi+eEz++a6bxv1IqBtxrs+XdeyupvE=) 2: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: cVo7rLu+bRP7mU8H98UO9GE+ahBe/jWee1+/LHg0NV8=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: 9GOZkV/w8qpWyEmLkspOLEV7XUErL3ME5/AoXnDepkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:27:a2:70:64:70:30:c7:2a:96:a2:5c:8b:6b:a0:c5:ed:45:f7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Nov 20 10:56:02 2024 GMT Not After : Nov 23 17:53:02 2024 GMT Subject: CN=CE4FDF7C02DB7658693E667FAD0F2D18B274EEE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:84:d5:42:02:4c:ad:a2:d1:69:4e:b8:7f:5d: d1:cf:51:c1:20:1a:7d:66:a8:63:4b:ea:37:8f:02: 08:ba:17:eb:3d:5b:b6:07:db:2b:fc:b4:ef:7c:d5: 05:f9:42:19:17:d7:5f:af:5c:f2:1f:64:db:d2:05: 20:89:59:be:9d:6c:34:06:e1:6b:e2:08:a4:18:b1: 6b:c4:b0:6a:95:75:ea:b6:1b:35:da:1e:d6:a5:cd: 6e:71:a7:9f:8d:0e:fe:c1:38:e8:c0:e3:58:33:a0: 30:d3:86:30:ea:54:00:2a:06:ea:47:bd:d9:08:5b: 1c:0a:f5:33:2a:7e:73:23:9d:4c:b7:14:a6:ff:1e: 4b:ef:cc:df:a7:e5:97:bf:dc:06:3f:8a:b7:ee:aa: db:1d:73:3b:78:37:a7:79:96:ad:c6:e3:1c:4d:a1: fc:8d:4a:a2:ac:21:2a:19:b1:14:1f:93:78:29:5f: bb:b5:45:df:3b:05:18:1b:fd:1c:3a:5f:f5:41:5f: 83:5c:dc:1f:fb:63:fa:ef:65:a1:80:ce:05:cb:24: 9b:bf:fd:8b:3f:89:8e:8b:1f:1a:b4:01:32:b9:9f: aa:64:ff:ed:53:6f:39:c7:52:fb:f2:4c:38:97:b1: 9a:18:0d:47:ee:f6:68:7d:82:d8:4a:85:5e:62:ff: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4F:DF:7C:02:DB:76:58:69:3E:66:7F:AD:0F:2D:18:B2:74:EE:E9 X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:db:f0:69:72:3c:46:34:ac:d6:7a:23:8e:83:12:f9:2d:56: 98:10:6a:b6:c4:4e:dc:bc:53:9f:8b:2a:eb:7e:4d:37:06:65: 65:43:96:52:d2:89:e9:2b:73:26:0c:0d:a6:fb:3f:a7:22:47: 69:ad:2c:4b:7a:e9:e0:40:a4:fc:df:64:5e:75:49:c6:50:4b: 12:d1:82:1e:1d:07:23:6d:f9:95:b6:b9:d1:54:ca:ff:bf:08: d1:d0:47:de:ea:1c:80:e1:e9:00:d3:e0:08:91:eb:2e:c0:95: 5a:14:84:15:9e:2a:4c:db:e6:3e:2b:47:c0:27:87:a0:a4:10: a7:04:a4:2f:c6:5b:ee:a9:a6:6b:89:ef:e7:fa:1f:5e:03:f7: cd:35:ff:2d:05:b5:7f:53:22:85:4d:80:ee:26:a9:ac:0d:69: 90:82:59:49:ef:df:03:e4:65:90:d2:1e:26:90:3e:c5:a9:44: c4:79:2b:31:f8:6b:30:5d:6c:36:62:d6:7e:3d:63:d3:6e:9f: 8a:6d:91:9f:bd:58:72:b7:65:12:d1:71:f7:80:68:07:35:ee: b1:c7:df:d2:f4:f0:51:6e:80:71:7b:a3:76:b9:e6:24:b0:42: 04:71:fe:fe:f7:21:6c:4f:bf:79:b7:4a:f9:db:0c:ab:89:8b: 73:b8:c7:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSSeicGRwMMcqlqJci2ugxe1F930wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNDExMjAxMDU2MDJaFw0yNDExMjMxNzUzMDJaMDMxMTAvBgNV BAMTKENFNEZERjdDMDJEQjc2NTg2OTNFNjY3RkFEMEYyRDE4QjI3NEVFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRhNVCAkytotFpTrh/XdHPUcEg Gn1mqGNL6jePAgi6F+s9W7YH2yv8tO981QX5QhkX11+vXPIfZNvSBSCJWb6dbDQG 4WviCKQYsWvEsGqVdeq2GzXaHtalzW5xp5+NDv7BOOjA41gzoDDThjDqVAAqBupH vdkIWxwK9TMqfnMjnUy3FKb/HkvvzN+n5Ze/3AY/irfuqtsdczt4N6d5lq3G4xxN ofyNSqKsISoZsRQfk3gpX7u1Rd87BRgb/Rw6X/VBX4Nc3B/7Y/rvZaGAzgXLJJu/ /Ys/iY6LHxq0ATK5n6pk/+1TbznHUvvyTDiXsZoYDUfu9mh9gthKhV5i//tjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzk/ffALbdlhpPmZ/rQ8tGLJ07ukwHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMnb8GlyPEY0rNZ6I46DEvktVpgQarbETty8 U5+LKut+TTcGZWVDllLSiekrcyYMDab7P6ciR2mtLEt66eBApPzfZF51ScZQSxLR gh4dByNt+ZW2udFUyv+/CNHQR97qHIDh6QDT4AiR6y7AlVoUhBWeKkzb5j4rR8An h6CkEKcEpC/GW+6ppmuJ7+f6H14D9801/y0FtX9TIoVNgO4mqawNaZCCWUnv3wPk ZZDSHiaQPsWpRMR5KzH4azBdbDZi1n49Y9Nun4ptkZ+9WHK3ZRLRcfeAaAc17rHH 39L08FFugHF7o3a55iSwQgRx/v73IWxPv3m3SvnbDKuJi3O4x4o= -----END CERTIFICATE-----Generated at Wed Nov 20 12:07:51 2024 by rpki-client on console-fra.rpki-client.org