$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json) Hash identifier: KZq0mN7Yk+WeANopU+GZZY2EGFTX7kOXdndgCbKx86A= Subject key identifier: B5:F6:BA:8F:E2:EC:3B:82:54:C1:2D:CA:06:83:4A:05:00:62:6F:0A Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Certificate serial: 3C9865C72136C125BB995BBEDB322F24893EF9E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft Manifest number: 013E Signing time: Mon 25 Nov 2024 20:21:30 +0000 Manifest this update: Mon 25 Nov 2024 20:16:30 +0000 Manifest next update: Fri 29 Nov 2024 08:02:30 +0000 Files and hashes: 1: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: YkO6RmqgpJcXWpdEOjgUAzcKzx65l88aN7xxfJUJ+BY=) 2: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: iOcccdQpkl2eLxl0LKt/e7W2F4Q9POflHzcnPXjdyFg=) 3: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 7mgUNnKF1k9aQc8kIoMQeXk2Q+5QMh9pXTXHjbvLNw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:98:65:c7:21:36:c1:25:bb:99:5b:be:db:32:2f:24:89:3e:f9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Validity Not Before: Nov 25 20:16:30 2024 GMT Not After : Nov 29 08:02:30 2024 GMT Subject: CN=B5F6BA8FE2EC3B8254C12DCA06834A0500626F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:64:01:17:dc:cf:c9:28:bc:96:16:74:35: 70:3c:3f:3a:20:ba:2a:c1:f4:7e:ec:38:75:e7:d5: a7:31:a6:bc:73:b9:f5:9f:bd:e2:7a:37:4d:f5:8e: dd:8c:2b:86:7c:ff:4a:c0:62:93:1b:02:a3:e3:bb: b2:ae:a3:12:24:ca:db:b8:64:1d:49:d5:6a:62:18: 38:07:e3:8a:ff:69:b9:80:52:e5:57:f4:e7:6f:b7: b3:63:70:54:36:21:b6:0b:4c:59:9a:b3:d4:b8:33: b6:15:45:1b:9b:de:15:bb:1c:2c:fd:26:b6:d0:74: 9c:d4:f3:18:48:b6:46:bb:77:cf:f5:39:54:1b:f1: d4:2a:f1:c0:f0:96:44:f9:a8:16:49:7d:f5:6d:5c: e9:ef:b7:81:4a:73:7a:76:c6:50:04:4d:2c:b8:d3: e4:25:03:59:01:7a:fb:38:eb:d2:2d:47:b5:b8:8a: a0:e8:19:66:1d:80:62:7a:f2:eb:fc:2b:33:1b:5b: db:be:03:fe:4f:f8:07:44:dd:1a:49:c3:ef:90:a1: c1:e8:1c:24:56:2e:9a:3e:10:dc:e5:1e:c9:4c:2d: ea:d9:b9:38:18:91:a3:90:e1:1e:13:e9:8e:7e:38: 29:a2:11:64:75:40:1c:f6:cb:41:99:97:d1:ef:c5: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F6:BA:8F:E2:EC:3B:82:54:C1:2D:CA:06:83:4A:05:00:62:6F:0A X509v3 Authority Key Identifier: keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d6:5b:47:3c:f0:38:85:79:98:9c:6d:86:55:18:14:9b:3d: b8:f8:02:61:0d:14:98:ed:ce:59:f5:03:7c:3a:30:c4:ed:e9: 79:99:2b:f8:12:72:f0:1f:f7:8a:2f:84:a2:e1:ce:1a:b8:0e: ce:15:ff:fb:23:97:ea:66:37:85:97:44:d9:b8:38:fd:f1:72: 66:95:38:0c:1b:e8:8c:3d:a1:44:ae:b0:b6:de:b8:a8:32:0e: fd:13:e2:a5:cb:8b:c9:c3:72:86:67:e3:7b:ec:9a:c8:db:1c: 0a:2b:b1:dd:46:0c:c2:2e:20:ab:1d:ad:7f:80:e1:2a:93:2e: 05:07:ab:95:13:f0:e3:c5:59:96:e3:d5:ba:4f:3f:1f:68:05: 85:a1:18:45:d9:02:1b:0a:29:96:51:09:eb:0a:97:03:c9:4d: 1f:78:e8:21:07:0c:86:5e:eb:1c:5d:f5:24:c7:0e:9e:b5:07: 49:14:21:02:de:de:ef:e7:34:b0:9d:e4:ab:88:93:d5:de:eb: 18:0c:ca:bc:7d:01:d7:94:e9:d6:90:7c:30:b8:90:df:6e:9c: bd:1b:c9:42:dd:17:24:c9:1c:ee:40:61:ce:a0:f7:2a:12:e5: 32:56:66:44:49:c5:1e:98:08:95:ff:38:eb:1b:1c:b8:ab:d0: f3:3a:f4:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJhlxyE2wSW7mVu+2zIvJIk++eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJC QjM3NUQ4NjAeFw0yNDExMjUyMDE2MzBaFw0yNDExMjkwODAyMzBaMDMxMTAvBgNV BAMTKEI1RjZCQThGRTJFQzNCODI1NEMxMkRDQTA2ODM0QTA1MDA2MjZGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0B2QBF9zPySi8lhZ0NXA8Pzog uirB9H7sOHXn1acxprxzufWfveJ6N031jt2MK4Z8/0rAYpMbAqPju7KuoxIkytu4 ZB1J1WpiGDgH44r/abmAUuVX9Odvt7NjcFQ2IbYLTFmas9S4M7YVRRub3hW7HCz9 JrbQdJzU8xhItka7d8/1OVQb8dQq8cDwlkT5qBZJffVtXOnvt4FKc3p2xlAETSy4 0+QlA1kBevs469ItR7W4iqDoGWYdgGJ68uv8KzMbW9u+A/5P+AdE3RpJw++QocHo HCRWLpo+ENzlHslMLerZuTgYkaOQ4R4T6Y5+OCmiEWR1QBz2y0GZl9HvxWiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtfa6j+LsO4JUwS3KBoNKBQBibwowHwYDVR0j BBgwFoAU3qOGRUoIDlLNS4nbh+hz4rs3XYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjA4YTJlMi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC9ERUEzODY0NTRB MDgwRTUyQ0Q0Qjg5REI4N0U4NzNFMkJCMzc1RDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJCQjM3 NUQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODcz RTJCQjM3NUQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLWW0c88DiFeZicbYZVGBSbPbj4AmENFJjt zln1A3w6MMTt6XmZK/gScvAf94ovhKLhzhq4Ds4V//sjl+pmN4WXRNm4OP3xcmaV OAwb6Iw9oUSusLbeuKgyDv0T4qXLi8nDcoZn43vsmsjbHAorsd1GDMIuIKsdrX+A 4SqTLgUHq5UT8OPFWZbj1bpPPx9oBYWhGEXZAhsKKZZRCesKlwPJTR946CEHDIZe 6xxd9STHDp61B0kUIQLe3u/nNLCd5KuIk9Xe6xgMyrx9AdeU6daQfDC4kN9unL0b yULdFyTJHO5AYc6g9yoS5TJWZkRJxR6YCJX/OOsbHLir0PM69Ns= -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org