$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: /Lw/9wbS/BXl4CnQcRNHb/tQObfW2mttgP8q7Eo1WMA= Subject key identifier: 05:A0:C7:87:D7:23:54:F8:48:25:4B:08:82:F5:B4:AC:EB:70:BA:D3 Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 4F3C4C83AB377465B615331EF9EDBBDC03D3ACE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: 52 Signing time: Mon 25 Nov 2024 19:50:35 +0000 Manifest this update: Mon 25 Nov 2024 19:45:35 +0000 Manifest next update: Fri 29 Nov 2024 02:04:35 +0000 Files and hashes: 1: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: wKSXX12xLgEfXlc4NbwFwaV9+r2qkpZoTAlu6JghhEI=) 2: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: SCqKZWrRiy8nw8cakY/jAbd2qy6+t2kss9DaTtS0TyA=) 3: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: K5oquwrLK66NgAAxhssyU9cE1S+99n3MDQtPouQSzd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3c:4c:83:ab:37:74:65:b6:15:33:1e:f9:ed:bb:dc:03:d3:ac:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Nov 25 19:45:35 2024 GMT Not After : Nov 29 02:04:35 2024 GMT Subject: CN=05A0C787D72354F848254B0882F5B4ACEB70BAD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:42:5f:0a:17:7b:7f:b5:e0:49:93:a9:45: 9e:1d:22:e7:11:60:f3:4a:c4:dc:42:37:7e:6b:ac: 40:91:40:bc:a7:03:bb:49:12:77:88:8c:12:23:31: 8f:e5:cc:51:02:16:c9:c0:5c:5b:28:02:9e:c2:03: 63:a6:0e:91:74:6b:61:7b:b1:61:b5:99:0e:56:8f: 77:73:48:5a:ff:8f:57:30:5c:58:b3:eb:4a:0c:ee: fc:f3:e9:cc:1a:7a:0e:a2:98:26:42:7b:77:f8:b2: ee:19:38:67:a1:c1:c3:d1:50:60:c8:e7:29:18:94: 89:76:5e:b8:38:62:10:63:bc:e2:22:3a:36:6b:2a: 28:9f:bb:63:bb:84:d3:ea:36:e3:bf:05:46:8a:44: 0a:0e:75:f2:f4:8d:72:5f:41:18:fe:d0:b0:5d:37: b3:88:66:e4:79:79:b9:88:3e:d9:c2:d2:e8:bb:61: e7:1f:f6:53:00:af:18:24:ca:0a:b3:f4:41:20:db: e7:ec:1b:a7:dd:33:95:67:82:08:52:88:35:8e:3c: 70:1c:d4:84:16:72:10:cf:9d:57:e7:a0:d4:8f:d8: 14:b9:ce:4e:8b:e1:5a:70:d8:ca:60:34:ea:8c:ec: 35:02:7a:fc:1f:39:79:0d:3b:70:ab:09:52:47:4e: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A0:C7:87:D7:23:54:F8:48:25:4B:08:82:F5:B4:AC:EB:70:BA:D3 X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7e:64:7e:36:c1:47:ab:b2:ed:1a:83:bc:94:e3:a4:42:5d: 8c:17:7f:d0:84:25:71:54:0c:63:80:7b:47:bd:02:85:de:01: b0:5b:79:7d:eb:33:af:a9:6c:88:dc:41:2c:72:64:a5:b4:99: 30:73:c0:3f:72:33:e9:e6:4e:6f:34:0a:07:3f:d8:fa:73:22: 94:8a:17:a5:38:02:83:67:5c:69:8d:ec:fe:78:29:bf:af:0f: d0:1f:4c:56:b8:5c:71:96:a7:a6:9e:3f:6b:e3:2c:02:8d:51: 4b:3b:6a:49:9e:b0:ee:ba:70:f8:02:f7:22:34:54:34:17:bc: 3c:02:0e:59:03:51:ac:a2:9f:e6:34:44:ca:e8:93:e8:1c:34: 3e:81:4c:8a:a4:d3:55:5a:0f:72:32:f4:8d:c3:aa:38:bd:fd: e3:92:8b:b0:c2:79:8f:cb:b8:7f:52:11:80:fa:00:c0:76:7a: d1:fa:0e:aa:ea:ad:36:35:c1:94:b5:f1:67:52:a7:b7:2a:af: d5:5e:3e:4a:48:16:84:cf:91:c2:96:11:5c:b3:62:77:ef:ca: b7:59:09:00:3e:36:be:a3:dd:5e:22:b3:09:85:de:29:b5:af: 43:78:75:9d:72:d5:a3:b3:d9:3d:46:5b:1a:8c:c6:3f:85:bb: b4:4f:a7:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzxMg6s3dGW2FTMe+e273APTrOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNDExMjUxOTQ1MzVaFw0yNDExMjkwMjA0MzVaMDMxMTAvBgNV BAMTKDA1QTBDNzg3RDcyMzU0Rjg0ODI1NEIwODgyRjVCNEFDRUI3MEJBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4z0JfChd7f7XgSZOpRZ4dIucR YPNKxNxCN35rrECRQLynA7tJEneIjBIjMY/lzFECFsnAXFsoAp7CA2OmDpF0a2F7 sWG1mQ5Wj3dzSFr/j1cwXFiz60oM7vzz6cwaeg6imCZCe3f4su4ZOGehwcPRUGDI 5ykYlIl2Xrg4YhBjvOIiOjZrKiifu2O7hNPqNuO/BUaKRAoOdfL0jXJfQRj+0LBd N7OIZuR5ebmIPtnC0ui7Yecf9lMArxgkygqz9EEg2+fsG6fdM5VngghSiDWOPHAc 1IQWchDPnVfnoNSP2BS5zk6L4Vpw2MpgNOqM7DUCevwfOXkNO3CrCVJHTi87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBaDHh9cjVPhIJUsIgvW0rOtwutMwHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKR+ZH42wUersu0ag7yU46RCXYwXf9CEJXFU DGOAe0e9AoXeAbBbeX3rM6+pbIjcQSxyZKW0mTBzwD9yM+nmTm80Cgc/2PpzIpSK F6U4AoNnXGmN7P54Kb+vD9AfTFa4XHGWp6aeP2vjLAKNUUs7akmesO66cPgC9yI0 VDQXvDwCDlkDUayin+Y0RMrok+gcND6BTIqk01VaD3Iy9I3Dqji9/eOSi7DCeY/L uH9SEYD6AMB2etH6DqrqrTY1wZS18WdSp7cqr9VePkpIFoTPkcKWEVyzYnfvyrdZ CQA+Nr6j3V4iswmF3im1r0N4dZ1y1aOz2T1GWxqMxj+Fu7RPp0E= -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org