$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: 4tNG8iUxysa+A+8nHQISAt//4zdLBtHH6vCZsjnxpqA= Subject key identifier: 0A:99:77:78:92:57:96:AD:05:9D:56:DE:1E:D6:A3:C8:66:67:C6:16 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 1FFCBFB3AE385F2C0B139CC173A3F97EB055AE4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: 4C Signing time: Thu 21 Nov 2024 07:00:42 +0000 Manifest this update: Thu 21 Nov 2024 06:55:42 +0000 Manifest next update: Sun 24 Nov 2024 17:21:42 +0000 Files and hashes: 1: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: 07PJ0373gHmsJSP7bdaxkwGkQpeo8f9BJOxD0YWQ4qQ=) 2: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: z4PxUViWuhpy0riinUptIJwjmwPqkPJmVVNf7bC0nVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fc:bf:b3:ae:38:5f:2c:0b:13:9c:c1:73:a3:f9:7e:b0:55:ae:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Nov 21 06:55:42 2024 GMT Not After : Nov 24 17:21:42 2024 GMT Subject: CN=0A997778925796AD059D56DE1ED6A3C86667C616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:5e:e0:d8:98:05:69:84:b3:56:4b:b3:59: ac:b3:a3:c0:51:c0:26:d2:15:1b:98:05:59:8f:c0: d5:67:d7:2a:05:33:5b:b9:30:ab:12:4a:23:c0:58: 02:5f:d5:09:ff:40:45:ea:47:99:85:d6:79:8e:15: b0:d3:c6:99:99:78:df:3e:d5:5e:87:d8:45:93:67: fb:b6:d0:b5:f5:b4:ac:c4:3b:76:4b:31:46:c4:89: d9:d9:45:7d:d4:a7:02:2f:ba:91:83:cf:20:b3:f5: ca:a6:93:ad:56:88:1f:d1:72:bc:ec:a9:ef:eb:8a: a3:c6:b4:c8:d8:a5:d7:00:f1:ad:a0:92:67:c4:f5: 8f:bb:8e:e6:01:a7:3a:ac:93:76:98:ce:dc:c3:fe: 42:0b:fa:65:1e:66:dc:18:62:31:6d:58:dc:3f:0c: 52:e2:3a:1b:fe:17:6f:94:75:4b:5e:c2:72:85:3c: 4d:7c:7d:c8:08:b4:2e:a4:64:7b:ae:75:e0:1d:a0: 80:da:eb:28:b2:c2:e9:00:ce:90:00:3d:b8:3f:1d: 42:31:04:3c:2c:f6:ea:a1:e7:d7:0d:71:27:f3:4d: 4d:b3:23:85:17:9a:be:b7:a2:db:42:0b:17:33:6b: 99:12:3b:df:9f:d9:87:3c:1b:17:70:75:8a:f3:b1: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:99:77:78:92:57:96:AD:05:9D:56:DE:1E:D6:A3:C8:66:67:C6:16 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:18:bb:01:0c:76:5d:a0:3b:34:8f:d6:13:09:44:7e:a6:22: 88:a1:b4:dc:44:9c:5b:19:6b:e6:37:ca:c7:52:3a:68:ba:8c: b9:9a:ef:54:57:d6:81:69:da:50:93:43:5f:c3:a8:1e:be:55: f1:64:bd:97:f8:9f:3f:98:94:d4:03:40:00:4c:48:64:c6:0a: 21:71:c0:21:c6:27:3b:22:37:45:1e:fd:d5:01:f3:13:cd:79: e7:76:9c:3c:53:e4:fd:5c:77:a3:ee:b2:c2:bd:4e:5a:78:32: b2:32:ae:d8:18:39:bb:b1:cf:52:4e:e2:6f:8f:45:7a:e7:ba: ac:9c:04:b5:34:8b:37:81:e4:ec:ce:fc:d0:3b:30:26:4d:b0: 83:bb:21:f0:90:ab:11:1d:5b:f1:ab:f2:0b:03:33:52:dc:a9: 62:3d:e1:97:d7:ed:13:28:d6:82:85:36:9a:38:c4:72:5c:09: a7:4b:0f:ac:5a:c6:5a:d9:36:06:aa:43:26:f6:95:81:73:3e: 53:06:80:d1:46:d2:9f:92:99:b8:62:4b:e2:a6:47:3e:9d:cc: c9:a6:21:13:8d:2d:aa:b3:9c:61:6e:cc:3c:3f:a3:6a:7e:d3: 70:ec:1d:4c:f9:6f:61:4a:7b:cd:b3:68:47:97:13:10:eb:bd: bd:94:d6:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/y/s644XywLE5zBc6P5frBVrkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNDExMjEwNjU1NDJaFw0yNDExMjQxNzIxNDJaMDMxMTAvBgNV BAMTKDBBOTk3Nzc4OTI1Nzk2QUQwNTlENTZERTFFRDZBM0M4NjY2N0M2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsF7g2JgFaYSzVkuzWayzo8BR wCbSFRuYBVmPwNVn1yoFM1u5MKsSSiPAWAJf1Qn/QEXqR5mF1nmOFbDTxpmZeN8+ 1V6H2EWTZ/u20LX1tKzEO3ZLMUbEidnZRX3UpwIvupGDzyCz9cqmk61WiB/Rcrzs qe/riqPGtMjYpdcA8a2gkmfE9Y+7juYBpzqsk3aYztzD/kIL+mUeZtwYYjFtWNw/ DFLiOhv+F2+UdUtewnKFPE18fcgItC6kZHuudeAdoIDa6yiywukAzpAAPbg/HUIx BDws9uqh59cNcSfzTU2zI4UXmr63ottCCxcza5kSO9+f2Yc8GxdwdYrzsQHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCpl3eJJXlq0FnVbeHtajyGZnxhYwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMYuwEMdl2gOzSP1hMJRH6mIoihtNxEnFsZ a+Y3ysdSOmi6jLma71RX1oFp2lCTQ1/DqB6+VfFkvZf4nz+YlNQDQABMSGTGCiFx wCHGJzsiN0Ue/dUB8xPNeed2nDxT5P1cd6PussK9Tlp4MrIyrtgYObuxz1JO4m+P RXrnuqycBLU0izeB5OzO/NA7MCZNsIO7IfCQqxEdW/Gr8gsDM1LcqWI94ZfX7RMo 1oKFNpo4xHJcCadLD6xaxlrZNgaqQyb2lYFzPlMGgNFG0p+SmbhiS+KmRz6dzMmm IRONLaqznGFuzDw/o2p+03DsHUz5b2FKe82zaEeXExDrvb2U1mc= -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org