$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: H7iNO+s999t/1umMYACN9mlG6MO4SlOlCibeSkBPv4I= Subject key identifier: B5:7D:96:E4:6C:56:02:0F:8B:85:EE:0A:2E:14:D2:78:0B:07:B0:C8 Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 50AC7C126DAE7BFC8F5389D205A7EB2E98C02CDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: 57 Signing time: Fri 22 Nov 2024 03:03:37 +0000 Manifest this update: Fri 22 Nov 2024 02:58:37 +0000 Manifest next update: Mon 25 Nov 2024 06:04:37 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 8DQsxFhy3B2FSJjcIs7WJOa5hiXQX9aZo0w+Wjhmzdo=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: scnxUfDl17yzzEG6eGB4zIHe854L6XwRtRW/Se43wAg=) 3: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: /hpFmbCFjfVngFJqBYmWwlRp6SXwbhgAIJju8D00KuM=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: MW6d0vK/HCTtYGiiJfgImVZh48mUFlNfk7u/owijm9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ac:7c:12:6d:ae:7b:fc:8f:53:89:d2:05:a7:eb:2e:98:c0:2c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Nov 22 02:58:37 2024 GMT Not After : Nov 25 06:04:37 2024 GMT Subject: CN=B57D96E46C56020F8B85EE0A2E14D2780B07B0C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:8f:2c:ae:fd:a2:8f:31:3b:b5:e4:57:6d: 9f:8e:9d:54:df:45:3f:cf:c6:af:70:62:03:02:c8: 89:64:d6:ec:9e:56:dd:86:85:6f:64:7c:52:8a:78: f9:57:61:db:6d:6c:52:de:0d:33:92:36:8a:fb:0a: 2e:f6:bc:08:60:d7:01:1b:68:d5:5f:4e:48:e7:97: f8:85:ad:61:a5:3f:06:94:98:7b:57:79:59:4a:db: 70:29:63:3d:b6:92:b0:b9:e3:48:b5:f7:d8:58:69: 80:bf:e5:5c:82:0f:dc:93:a1:b9:4a:5d:76:62:a2: ae:0b:cc:a7:a0:75:0b:6f:2d:93:8a:e1:f7:94:ba: f9:7f:ab:96:35:53:56:10:f0:d9:4e:81:91:d0:f2: fd:69:02:eb:03:20:fc:94:f3:17:26:fb:18:09:4e: 39:5b:b6:c0:79:f6:ee:9d:5c:35:d6:a5:0b:d6:0a: 31:4d:a0:fa:22:8c:51:8d:b0:f3:80:66:60:0e:d3: 8a:12:75:0c:d6:6c:a9:ac:21:92:c1:49:dc:b0:65: a3:e8:73:97:95:09:89:d5:06:23:61:39:49:a9:58: 27:20:40:e7:95:b0:cc:b2:64:d6:cf:74:9f:07:bf: 33:23:50:a9:1e:30:be:79:4e:58:7b:2f:f4:77:26: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7D:96:E4:6C:56:02:0F:8B:85:EE:0A:2E:14:D2:78:0B:07:B0:C8 X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:41:62:ba:87:9e:97:63:65:ac:cf:96:15:f0:6a:d9:9a:3c: 9d:8c:17:fe:31:d1:8f:b3:1b:d4:d2:d7:4f:63:19:4d:c6:d4: df:4a:49:3d:f2:43:69:1c:6a:19:6c:a3:8c:09:38:54:85:46: 89:4c:d2:8a:6f:4a:fc:99:a9:ae:21:85:5c:5d:24:4e:9f:60: dd:1e:de:1d:15:09:ce:98:46:58:76:bf:7c:f8:2c:57:7f:4d: 03:5f:65:50:75:c1:1c:cd:bd:72:f3:7d:bb:0f:b8:86:55:b7: c6:79:80:6b:cc:a7:36:e5:43:35:00:38:6b:52:72:44:bf:19: b5:1b:c6:91:3f:a4:7f:da:8d:f8:57:ca:37:ba:f5:dc:e1:f7: d3:40:2b:9a:57:af:c5:32:8a:20:96:6d:b0:5d:ff:0f:c3:26: e2:82:ae:ec:9e:7e:64:da:be:45:03:6c:74:80:a0:2d:05:38: 73:75:16:7c:c7:67:41:e1:13:9f:f3:2c:34:57:22:cc:75:bd: 4b:ab:60:b9:65:66:a3:c1:09:cb:4f:36:55:78:1e:48:c9:98: f9:af:4f:c4:d3:cb:4c:be:5f:2f:8c:f9:ab:47:81:ec:d0:46: fd:c2:2a:1f:11:3f:00:33:8d:a0:28:b7:13:b4:b6:d7:38:c6: 8f:7c:8d:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKx8Em2ue/yPU4nSBafrLpjALN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNDExMjIwMjU4MzdaFw0yNDExMjUwNjA0MzdaMDMxMTAvBgNV BAMTKEI1N0Q5NkU0NkM1NjAyMEY4Qjg1RUUwQTJFMTREMjc4MEIwN0IwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4pY8srv2ijzE7teRXbZ+OnVTf RT/Pxq9wYgMCyIlk1uyeVt2GhW9kfFKKePlXYdttbFLeDTOSNor7Ci72vAhg1wEb aNVfTkjnl/iFrWGlPwaUmHtXeVlK23ApYz22krC540i199hYaYC/5VyCD9yToblK XXZioq4LzKegdQtvLZOK4feUuvl/q5Y1U1YQ8NlOgZHQ8v1pAusDIPyU8xcm+xgJ TjlbtsB59u6dXDXWpQvWCjFNoPoijFGNsPOAZmAO04oSdQzWbKmsIZLBSdywZaPo c5eVCYnVBiNhOUmpWCcgQOeVsMyyZNbPdJ8HvzMjUKkeML55Tlh7L/R3Jvg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtX2W5GxWAg+Lhe4KLhTSeAsHsMgwHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNBYrqHnpdjZazPlhXwatmaPJ2MF/4x0Y+z G9TS109jGU3G1N9KST3yQ2kcahlso4wJOFSFRolM0opvSvyZqa4hhVxdJE6fYN0e 3h0VCc6YRlh2v3z4LFd/TQNfZVB1wRzNvXLzfbsPuIZVt8Z5gGvMpzblQzUAOGtS ckS/GbUbxpE/pH/ajfhXyje69dzh99NAK5pXr8UyiiCWbbBd/w/DJuKCruyefmTa vkUDbHSAoC0FOHN1FnzHZ0HhE5/zLDRXIsx1vUurYLllZqPBCctPNlV4HkjJmPmv T8TTy0y+Xy+M+atHgezQRv3CKh8RPwAzjaAotxO0ttc4xo98jVE= -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org