$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json) Hash identifier: 9hkB7aW14PVQtrBGg9o+6qZTljLA8F3Oqq7AjvZsGoo= Subject key identifier: A0:BA:DE:5C:3C:73:38:F6:32:83:DD:E3:E2:FC:4F:88:1C:4B:10:E6 Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Certificate serial: 662F7D6F2EA85B31FDF5DCC52D97148274584086 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft Manifest number: 03CE Signing time: Mon 25 Nov 2024 08:41:18 +0000 Manifest this update: Mon 25 Nov 2024 08:36:18 +0000 Manifest next update: Thu 28 Nov 2024 15:50:18 +0000 Files and hashes: 1: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: 00mlPRkBXbs9pzifoVbJJUu5vpt1fPUsGzr4e2iLEMU=) 2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: MMjEYaklE81WaDCrUueGQmjdNC6x98nzJuWl2kfKoDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2f:7d:6f:2e:a8:5b:31:fd:f5:dc:c5:2d:97:14:82:74:58:40:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Validity Not Before: Nov 25 08:36:18 2024 GMT Not After : Nov 28 15:50:18 2024 GMT Subject: CN=A0BADE5C3C7338F63283DDE3E2FC4F881C4B10E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:7c:0c:7f:73:7a:13:b0:40:61:e1:45:b4: 79:64:93:36:b8:c6:c4:24:69:e0:90:e4:85:66:a2: 5c:0a:4a:c6:c2:fa:e7:0b:7f:4c:f3:8c:8a:3e:be: f6:20:79:70:58:af:f4:73:ac:3d:66:da:29:cd:ac: 23:aa:6e:8a:21:63:b3:61:f7:1b:ae:db:11:eb:0a: 35:0d:6b:59:20:d7:52:1a:b7:4b:37:2b:30:2d:47: 25:59:34:03:1a:a8:f1:a6:34:52:db:21:87:cd:05: 83:ad:5d:05:54:75:f2:35:22:6f:65:41:e1:48:e0: 3e:ad:90:9e:e7:4f:3a:73:51:da:e7:50:c8:f7:50: c0:d5:a9:4b:11:25:1e:9d:97:b0:06:a1:c1:5e:29: 8f:90:70:09:42:cf:44:65:50:ae:55:98:bf:26:9c: cc:9f:07:e7:74:ef:77:88:7c:99:ba:57:4e:ed:66: 33:8a:1e:16:95:71:ed:c6:1b:0b:da:92:9f:b6:87: 01:c0:b3:dc:b5:6f:99:79:8e:22:9d:b9:cf:10:3c: 40:81:2f:f5:22:7c:67:88:b5:4c:a3:2d:eb:17:3b: 51:67:fe:33:df:03:bb:bd:5b:9d:f7:8d:e7:43:3b: 44:5c:9d:3a:49:47:e8:07:c1:87:43:fe:22:e6:30: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BA:DE:5C:3C:73:38:F6:32:83:DD:E3:E2:FC:4F:88:1C:4B:10:E6 X509v3 Authority Key Identifier: keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ee:af:3d:27:d8:6c:2b:36:8e:90:42:6d:8c:9a:84:80:ba: 84:4d:42:11:13:d6:e5:19:2e:2b:b7:10:db:38:46:01:54:ec: 60:16:66:2d:ad:9f:a9:a8:91:28:ee:d9:b6:1a:a7:78:59:31: a8:62:10:70:2e:65:48:0d:35:54:ab:52:10:82:4a:1d:fa:66: ad:37:31:8e:15:3b:2d:95:30:ea:ab:59:f6:20:ae:b9:61:4b: 5c:d4:71:7b:3d:c4:74:5e:b6:45:87:6e:e3:19:dc:0e:34:03: 02:bf:03:de:1e:98:2f:59:34:e3:e7:52:5c:dc:f2:22:60:a0: 10:f5:25:80:c3:85:8a:00:27:e3:b5:97:d9:45:a9:77:8b:2a: e2:66:73:6d:f7:1b:14:4a:d6:45:50:58:d2:f0:82:47:a1:68: bd:e0:7f:63:8e:ab:a2:53:13:38:2e:f5:03:36:96:0c:a9:3c: e4:a9:49:88:a3:dd:62:0a:89:d5:23:23:cd:d3:88:23:bb:0c: f5:0d:e5:13:a4:37:94:52:df:ff:0b:37:76:19:9d:8b:50:7b: 74:2a:b9:bb:4a:50:f8:8b:e2:af:ac:0c:af:e2:59:92:db:c5: 18:ef:e3:8d:43:ef:97:b4:6f:2d:cb:52:c2:43:22:86:b2:f4: d2:48:8c:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZi99by6oWzH99dzFLZcUgnRYQIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1 NkJGMDIzMjAeFw0yNDExMjUwODM2MThaFw0yNDExMjgxNTUwMThaMDMxMTAvBgNV BAMTKEEwQkFERTVDM0M3MzM4RjYzMjgzRERFM0UyRkM0Rjg4MUM0QjEwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IHwMf3N6E7BAYeFFtHlkkza4 xsQkaeCQ5IVmolwKSsbC+ucLf0zzjIo+vvYgeXBYr/RzrD1m2inNrCOqboohY7Nh 9xuu2xHrCjUNa1kg11Iat0s3KzAtRyVZNAMaqPGmNFLbIYfNBYOtXQVUdfI1Im9l QeFI4D6tkJ7nTzpzUdrnUMj3UMDVqUsRJR6dl7AGocFeKY+QcAlCz0RlUK5VmL8m nMyfB+d073eIfJm6V07tZjOKHhaVce3GGwvakp+2hwHAs9y1b5l5jiKduc8QPECB L/UifGeItUyjLesXO1Fn/jPfA7u9W533jedDO0RcnTpJR+gHwYdD/iLmMHlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLreXDxzOPYyg93j4vxPiBxLEOYwHwYDVR0j BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2 NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG MDIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUw N0U1NkJGMDIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7urz0n2GwrNo6QQm2MmoSAuoRNQhET1uUZ Liu3ENs4RgFU7GAWZi2tn6mokSju2bYap3hZMahiEHAuZUgNNVSrUhCCSh36Zq03 MY4VOy2VMOqrWfYgrrlhS1zUcXs9xHRetkWHbuMZ3A40AwK/A94emC9ZNOPnUlzc 8iJgoBD1JYDDhYoAJ+O1l9lFqXeLKuJmc233GxRK1kVQWNLwgkehaL3gf2OOq6JT Ezgu9QM2lgypPOSpSYij3WIKidUjI83TiCO7DPUN5ROkN5RS3/8LN3YZnYtQe3Qq ubtKUPiL4q+sDK/iWZLbxRjv441D75e0by3LUsJDIoay9NJIjEA= -----END CERTIFICATE-----Generated at Mon Nov 25 10:55:39 2024 by rpki-client on console-ams.rpki-client.org