$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: DcQi1Ypvv6rcHPvq0yu+YapVMUhr3Qu63bt9wlpynKY= Subject key identifier: EC:46:C1:66:D9:8D:4A:65:36:D0:1C:3D:71:A2:20:CB:50:4D:46:E7 Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 5D57B9C304A32DC5F99DB989B0500E1E28B28EB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: 3E Signing time: Thu 26 Sep 2024 11:41:35 +0000 Manifest this update: Thu 26 Sep 2024 11:36:35 +0000 Manifest next update: Sun 29 Sep 2024 15:22:35 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: scnxUfDl17yzzEG6eGB4zIHe854L6XwRtRW/Se43wAg=) 2: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: ghk52sf/nBi6slYHWw8rhhjlvjP/UQknaVxdSyzecU4=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: MW6d0vK/HCTtYGiiJfgImVZh48mUFlNfk7u/owijm9Y=) 4: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 8DQsxFhy3B2FSJjcIs7WJOa5hiXQX9aZo0w+Wjhmzdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Sep 2024 12:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:57:b9:c3:04:a3:2d:c5:f9:9d:b9:89:b0:50:0e:1e:28:b2:8e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Sep 26 11:36:35 2024 GMT Not After : Sep 29 15:22:35 2024 GMT Subject: CN=EC46C166D98D4A6536D01C3D71A220CB504D46E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:43:29:a6:56:92:78:92:10:92:15:bb:f4:87: 6a:a7:db:f9:25:23:3c:4b:46:85:0e:17:a6:73:8f: 5f:12:a9:68:5d:79:68:2d:03:a1:db:4f:1f:43:fa: c8:3a:d6:f6:cf:8e:5f:fb:f8:ac:d8:48:47:37:a1: 63:ba:d2:46:87:d5:36:93:48:80:d3:03:77:13:4b: 7e:7b:27:8d:72:6f:f5:f4:89:03:a0:47:4e:93:fc: cb:1f:34:2b:d8:3f:cf:ec:ae:03:6b:60:c8:02:5b: 64:99:d8:96:29:14:88:28:c9:1e:7c:5b:f8:2a:4e: ac:1b:33:fd:a9:27:25:e0:ef:4d:ed:da:b1:c4:c9: 5d:4d:61:48:d1:a8:62:9b:45:7a:fa:ff:80:79:c7: 99:0c:26:2f:44:02:d6:dd:dd:99:fc:44:bb:d8:6a: 62:2d:04:7b:5e:d9:69:0c:eb:34:1d:79:d6:38:dd: bd:43:a9:18:46:77:b9:07:a1:a0:34:8c:f4:80:7c: b2:7f:89:9d:1e:16:a8:83:5a:07:55:c0:9e:f0:7e: f4:29:a3:bd:c6:e9:28:dd:ef:d1:26:0d:4c:cb:ea: 79:f9:a2:78:0f:d6:03:18:65:fe:71:1c:09:bd:4a: 0d:91:dc:ca:7f:f4:ca:bb:41:66:c4:d4:64:15:05: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:46:C1:66:D9:8D:4A:65:36:D0:1C:3D:71:A2:20:CB:50:4D:46:E7 X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0c:cd:bc:a6:11:65:cf:a0:e2:32:13:5d:cd:5d:0b:73:19: cb:eb:ca:c7:a0:14:a9:37:bb:bb:b0:b3:43:15:2d:58:d9:40: 4c:d5:c1:f7:01:d2:23:82:6b:fd:5f:ec:f2:35:3a:10:fa:fa: 09:83:6a:82:59:98:1d:08:70:63:05:dc:ba:59:d8:e5:6c:5e: 57:eb:87:49:4f:18:5f:9b:5e:28:cd:cd:3a:db:f5:b8:d5:10: 30:95:b1:ed:13:47:1b:b6:a4:22:b7:e1:35:f7:ff:2b:5c:c6: 57:87:25:ee:5e:0c:2a:2b:f3:fb:d0:35:ed:16:16:d6:9a:03: 39:31:5a:bc:96:10:51:e8:d5:2f:f2:9e:d3:12:83:9d:45:c4: 51:ff:e8:47:83:d3:35:e5:4d:10:59:89:b1:ad:45:10:75:c8: f8:7e:95:57:ee:5e:49:e6:7b:0d:47:0b:1c:b4:cc:ff:5d:55: 63:3b:c1:87:9c:3b:f0:d3:0d:d0:48:70:e1:ea:1c:81:72:e6: 46:21:69:79:43:e8:a6:37:a1:f7:c4:59:a8:bf:65:6f:df:c2: 4a:f4:11:db:1a:29:dd:b9:85:e7:1b:6f:fb:da:6e:44:dd:32: d0:98:d4:cc:ad:0e:97:cc:0f:8e:4f:85:5a:8a:94:a5:e4:8a: 5e:82:93:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVe5wwSjLcX5nbmJsFAOHiiyjrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNDA5MjYxMTM2MzVaFw0yNDA5MjkxNTIyMzVaMDMxMTAvBgNV BAMTKEVDNDZDMTY2RDk4RDRBNjUzNkQwMUMzRDcxQTIyMENCNTA0RDQ2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYQymmVpJ4khCSFbv0h2qn2/kl IzxLRoUOF6Zzj18SqWhdeWgtA6HbTx9D+sg61vbPjl/7+KzYSEc3oWO60kaH1TaT SIDTA3cTS357J41yb/X0iQOgR06T/MsfNCvYP8/srgNrYMgCW2SZ2JYpFIgoyR58 W/gqTqwbM/2pJyXg703t2rHEyV1NYUjRqGKbRXr6/4B5x5kMJi9EAtbd3Zn8RLvY amItBHte2WkM6zQdedY43b1DqRhGd7kHoaA0jPSAfLJ/iZ0eFqiDWgdVwJ7wfvQp o73G6Sjd79EmDUzL6nn5ongP1gMYZf5xHAm9Sg2R3Mp/9Mq7QWbE1GQVBVzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7EbBZtmNSmU20Bw9caIgy1BNRucwHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUMzbymEWXPoOIyE13NXQtzGcvrysegFKk3 u7uws0MVLVjZQEzVwfcB0iOCa/1f7PI1OhD6+gmDaoJZmB0IcGMF3LpZ2OVsXlfr h0lPGF+bXijNzTrb9bjVEDCVse0TRxu2pCK34TX3/ytcxleHJe5eDCor8/vQNe0W FtaaAzkxWryWEFHo1S/yntMSg51FxFH/6EeD0zXlTRBZibGtRRB1yPh+lVfuXknm ew1HCxy0zP9dVWM7wYecO/DTDdBIcOHqHIFy5kYhaXlD6KY3offEWai/ZW/fwkr0 EdsaKd25hecbb/vabkTdMtCY1MytDpfMD45PhVqKlKXkil6Ck7I= -----END CERTIFICATE-----Generated at Thu Sep 26 15:17:40 2024 by rpki-client on console-ams.rpki-client.org