$ rpki-client -vvf repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft File: 52D962F5A9CABE2F4089548951269E5BD5F3249D.mft (raw, json) Hash identifier: 0lvkJkt8TUcIT7C2+R3wAXDLCTkFpBNbpVZhyudLm+s= Subject key identifier: 0F:CB:B1:9C:0E:A5:E9:AA:21:65:CB:3B:02:8D:F1:2C:54:50:C6:3E Authority key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Certificate issuer: /CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Certificate serial: 1AAA6ED24A053FC8A58EC9519D7D75AC4DCDC42C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft Manifest number: 10 Signing time: Thu 21 Nov 2024 02:40:01 +0000 Manifest this update: Thu 21 Nov 2024 02:35:01 +0000 Manifest next update: Sun 24 Nov 2024 06:03:01 +0000 Files and hashes: 1: 52D962F5A9CABE2F4089548951269E5BD5F3249D.crl (hash: aCejse1xhL6GXNZ+rOHJrd+CMJv03ha+ntE2jjuO0Ys=) 2: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: kIpsRTz8rsVh7INCm035H5PFs4vQWvdsdTQtSQQkCfE=) 3: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: YC5+nsrmWedLDnN0PaZMpSlGmxCfT//FJoWJkorFOm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:aa:6e:d2:4a:05:3f:c8:a5:8e:c9:51:9d:7d:75:ac:4d:cd:c4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Validity Not Before: Nov 21 02:35:01 2024 GMT Not After : Nov 24 06:03:01 2024 GMT Subject: CN=0FCBB19C0EA5E9AA2165CB3B028DF12C5450C63E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:19:fa:a5:67:b8:87:23:2b:1f:b4:80:b1:13: 03:cd:94:37:d3:38:09:f0:b2:3d:4d:cb:8f:d1:97: 85:4f:b3:de:11:ee:ba:39:08:5b:a1:ae:27:c2:95: 11:55:a2:b7:93:53:49:d8:80:02:97:b3:b9:19:51: 0c:3c:0d:0a:a2:32:63:79:6c:2b:db:08:2d:98:ea: 4a:f8:64:cb:d4:8f:94:37:e6:75:cb:90:68:d4:45: e0:a4:67:cb:6b:f0:86:f1:74:13:85:f9:92:32:56: 95:6e:af:45:7f:26:b8:99:3b:fb:d2:3b:4f:3b:4b: 7d:bf:3d:b2:d9:ed:61:7f:e4:e0:c4:1c:53:cf:ed: a9:93:8b:e9:f6:15:a6:eb:a0:47:c0:0d:eb:05:c5: d4:2a:19:43:5f:bd:8b:1b:33:0f:4d:95:c4:f5:e6: 3f:b8:04:fa:a6:cc:1c:3e:87:ba:ce:c1:a7:36:22: bc:be:1e:50:a5:3b:4d:db:2f:ca:21:55:03:d8:a4: 31:f1:54:fa:65:33:68:3f:38:18:2f:23:49:57:a3: fb:89:88:c8:49:4e:2c:fb:c5:cd:22:10:c8:d4:94: 78:02:27:99:56:8d:1f:da:a2:0b:d8:7b:9b:4a:fa: 00:fd:77:56:cb:c6:8c:44:4b:69:a0:c4:cb:58:12: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CB:B1:9C:0E:A5:E9:AA:21:65:CB:3B:02:8D:F1:2C:54:50:C6:3E X509v3 Authority Key Identifier: keyid:52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d8:78:d1:b4:91:d2:9b:ba:11:b3:6a:44:d5:a6:02:a5:ac: 6e:ab:5f:6b:e8:8b:1b:ed:2e:1e:c1:e4:1f:99:0e:44:5c:23: 63:ec:3c:44:a8:95:e7:63:99:85:19:8a:d5:5a:eb:b4:8a:85: 8c:bc:45:64:40:cc:35:34:ae:b4:2d:19:92:89:55:df:b6:44: 47:27:d9:b7:72:d4:b9:75:9d:c9:fc:4a:33:1d:ef:2f:6c:e0: 1a:3b:1e:e7:e2:26:4b:68:39:dd:d1:59:f5:fb:24:f6:c6:c2: f0:b9:2c:89:0e:a7:d9:5d:1d:d0:6e:70:f8:cd:db:ab:43:90: 14:8b:16:77:cb:8c:93:6c:9e:6c:70:da:f0:b2:3b:31:af:03: c7:18:4d:4b:c5:16:44:46:14:aa:5b:18:02:8d:70:c1:a0:70: 1e:dc:cb:04:35:44:c2:1b:12:6d:fc:ae:b5:57:93:ef:70:72: 79:d4:e8:31:f0:1e:32:b3:77:e5:05:56:4f:7f:d6:32:b9:2b: a6:9d:3c:b7:22:aa:18:58:7f:7e:f1:60:a7:30:07:88:73:91: 33:e6:34:d6:24:c6:b5:d7:5b:ef:ea:ff:9f:e6:a4:12:96:14: 28:f0:8c:0c:dc:13:45:be:6d:5f:b0:8f:37:2e:81:ab:00:75: 94:68:86:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqpu0koFP8iljslRnX11rE3NxCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJE NUYzMjQ5RDAeFw0yNDExMjEwMjM1MDFaFw0yNDExMjQwNjAzMDFaMDMxMTAvBgNV BAMTKDBGQ0JCMTlDMEVBNUU5QUEyMTY1Q0IzQjAyOERGMTJDNTQ1MEM2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqGfqlZ7iHIysftICxEwPNlDfT OAnwsj1Ny4/Rl4VPs94R7ro5CFuhrifClRFVoreTU0nYgAKXs7kZUQw8DQqiMmN5 bCvbCC2Y6kr4ZMvUj5Q35nXLkGjUReCkZ8tr8IbxdBOF+ZIyVpVur0V/JriZO/vS O087S32/PbLZ7WF/5ODEHFPP7amTi+n2FabroEfADesFxdQqGUNfvYsbMw9NlcT1 5j+4BPqmzBw+h7rOwac2Iry+HlClO03bL8ohVQPYpDHxVPplM2g/OBgvI0lXo/uJ iMhJTiz7xc0iEMjUlHgCJ5lWjR/aogvYe5tK+gD9d1bLxoxES2mgxMtYEtbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD8uxnA6l6aohZcs7Ao3xLFRQxj4wHwYDVR0j BBgwFoAUUtli9anKvi9AiVSJUSaeW9XzJJ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMC81MkQ5NjJGNUE5 Q0FCRTJGNDA4OTU0ODk1MTI2OUU1QkQ1RjMyNDlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJENUYz MjQ5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlF NUJENUYzMjQ5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzYeNG0kdKbuhGzakTVpgKlrG6rX2voixvt Lh7B5B+ZDkRcI2PsPESoledjmYUZitVa67SKhYy8RWRAzDU0rrQtGZKJVd+2REcn 2bdy1Ll1ncn8SjMd7y9s4Bo7HufiJktoOd3RWfX7JPbGwvC5LIkOp9ldHdBucPjN 26tDkBSLFnfLjJNsnmxw2vCyOzGvA8cYTUvFFkRGFKpbGAKNcMGgcB7cywQ1RMIb Em38rrVXk+9wcnnU6DHwHjKzd+UFVk9/1jK5K6adPLciqhhYf37xYKcwB4hzkTPm NNYkxrXXW+/q/5/mpBKWFCjwjAzcE0W+bV+wjzcugasAdZRohjI= -----END CERTIFICATE-----Generated at Thu Nov 21 05:34:48 2024 by rpki-client on console-ams.rpki-client.org