$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: vU9HI9lhNKqvLz9Kr22j2jbB1kq+78in1XtSFdVweLc= Subject key identifier: CB:4A:4D:1D:E9:33:32:A1:C5:08:34:CC:B8:A3:A6:D1:44:5B:4F:C7 Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 7DEBE384F829CAE5EBEB7C1CBC00FD3C91FF5B63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 01AA Signing time: Sat 23 Nov 2024 22:31:14 +0000 Manifest this update: Sat 23 Nov 2024 22:26:14 +0000 Manifest next update: Wed 27 Nov 2024 00:27:14 +0000 Files and hashes: 1: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: 3WAGUxj/2EOgWdD0bDTjy0LX/1wg5ITtf4y2dTfVS/s=) 2: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: Ka0MjgNKUspCUyCAepzulHNHRozMRhfCPQZzHbPXnpU=) 3: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: LkKeG9ESZa/NLh7Xm3ZiP4uaI8GgGt5EDUDI9OkVd50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:eb:e3:84:f8:29:ca:e5:eb:eb:7c:1c:bc:00:fd:3c:91:ff:5b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Nov 23 22:26:14 2024 GMT Not After : Nov 27 00:27:14 2024 GMT Subject: CN=CB4A4D1DE93332A1C50834CCB8A3A6D1445B4FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:99:bc:f0:a5:2a:63:c0:34:6a:8b:f7:f0: 3c:66:0a:eb:7a:5b:6e:39:14:a7:b2:ac:9e:2d:81: fa:2a:a2:ed:c9:61:b0:c7:bc:c5:2f:17:33:6f:47: 8f:d6:b8:c9:bb:a1:8d:4a:08:e2:a8:b9:6c:e3:6b: 87:46:d5:e8:80:39:2b:a6:9f:13:79:29:a1:ec:f7: 5f:a8:90:67:61:b7:5b:d1:db:a6:b5:eb:6b:4e:a0: c5:48:a3:83:16:dc:fc:59:ec:6f:ad:0c:59:39:f1: aa:03:10:69:00:99:7a:81:bf:49:3f:6f:42:7d:39: 53:5f:be:1b:07:2d:88:94:8a:73:b1:a3:fa:3d:2c: 17:20:52:b6:72:7d:2a:f3:95:19:6e:06:58:57:a2: a0:f6:3a:22:5c:c2:ed:b3:c4:70:46:61:fa:85:e3: 66:ab:50:19:61:97:fe:ad:de:89:88:47:0e:9c:3c: d7:1c:74:a2:11:18:32:38:38:b5:07:5b:70:88:be: c3:60:93:09:dd:aa:ba:5f:a6:55:d4:1f:0b:c6:72: 36:36:8d:4c:66:2f:4a:0b:bf:1c:89:e1:de:ce:f8: f2:9d:04:cd:88:26:e7:69:ee:bc:6c:75:bd:4c:1b: cd:ac:36:09:2d:4c:74:7c:8b:c5:09:5b:8f:00:32: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4A:4D:1D:E9:33:32:A1:C5:08:34:CC:B8:A3:A6:D1:44:5B:4F:C7 X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:80:60:d5:ad:2f:33:a3:65:a5:c2:00:d2:e9:55:1e:cb:51: f6:0d:10:6b:b0:70:4e:2b:88:90:31:f1:0a:2d:61:2c:0b:2d: 20:85:12:c7:24:be:3d:98:1d:b3:4c:1b:b7:9f:0f:6e:6b:2f: d3:5d:f0:c7:e1:46:27:ef:27:19:cd:6f:16:06:ef:cd:7c:66: 07:96:b5:6d:27:a8:8e:1c:11:b8:72:e1:e4:3c:79:ea:67:df: 75:4e:50:0a:9a:c6:2b:49:74:5a:82:e0:68:95:76:8d:d7:af: 15:ca:e3:4e:d1:0f:e0:e3:21:99:f0:48:b8:62:7f:c7:45:f2: 58:11:db:68:30:7d:f3:be:81:be:b4:e2:f1:3a:c3:f0:1b:1d: 9b:5b:01:06:5d:cc:67:d5:c0:3d:29:51:aa:c1:61:e1:2a:68: 55:f5:63:8d:6e:69:ff:7f:aa:a1:98:95:49:fb:87:20:b1:cb: 7b:93:21:9b:5f:bc:69:75:0b:5a:f6:89:8c:8f:35:9f:db:10: 38:ce:4d:e3:b8:09:38:33:d9:5e:c3:46:d4:7f:a6:84:26:ee: ff:3c:22:0a:9f:28:4b:ca:67:d1:87:cf:0d:16:18:46:f2:7c: 96:5d:1e:f1:de:b0:3e:47:4e:02:b8:ee:38:4f:a4:3a:c8:ec: 12:ba:97:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfevjhPgpyuXr63wcvAD9PJH/W2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNDExMjMyMjI2MTRaFw0yNDExMjcwMDI3MTRaMDMxMTAvBgNV BAMTKENCNEE0RDFERTkzMzMyQTFDNTA4MzRDQ0I4QTNBNkQxNDQ1QjRGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxZm88KUqY8A0aov38DxmCut6 W245FKeyrJ4tgfoqou3JYbDHvMUvFzNvR4/WuMm7oY1KCOKouWzja4dG1eiAOSum nxN5KaHs91+okGdht1vR26a162tOoMVIo4MW3PxZ7G+tDFk58aoDEGkAmXqBv0k/ b0J9OVNfvhsHLYiUinOxo/o9LBcgUrZyfSrzlRluBlhXoqD2OiJcwu2zxHBGYfqF 42arUBlhl/6t3omIRw6cPNccdKIRGDI4OLUHW3CIvsNgkwndqrpfplXUHwvGcjY2 jUxmL0oLvxyJ4d7O+PKdBM2IJudp7rxsdb1MG82sNgktTHR8i8UJW48AMhkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy0pNHekzMqHFCDTMuKOm0URbT8cwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaAYNWtLzOjZaXCANLpVR7LUfYNEGuwcE4r iJAx8QotYSwLLSCFEsckvj2YHbNMG7efD25rL9Nd8MfhRifvJxnNbxYG7818ZgeW tW0nqI4cEbhy4eQ8eepn33VOUAqaxitJdFqC4GiVdo3XrxXK407RD+DjIZnwSLhi f8dF8lgR22gwffO+gb604vE6w/AbHZtbAQZdzGfVwD0pUarBYeEqaFX1Y41uaf9/ qqGYlUn7hyCxy3uTIZtfvGl1C1r2iYyPNZ/bEDjOTeO4CTgz2V7DRtR/poQm7v88 IgqfKEvKZ9GHzw0WGEbyfJZdHvHesD5HTgK47jhPpDrI7BK6l/M= -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org