$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft File: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json) Hash identifier: RvZMiWp0mH1eUYyouL5TJDtk6cHptwWoyQbtYbIy1HU= Subject key identifier: F0:64:AA:C2:1D:5C:23:01:A8:6B:80:8A:E1:92:42:DF:B6:69:46:07 Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 4D01A28F60357BD55B5178883B88C6A166B22ACC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft Manifest number: 0455 Signing time: Fri 22 Nov 2024 14:11:53 +0000 Manifest this update: Fri 22 Nov 2024 14:06:53 +0000 Manifest next update: Mon 25 Nov 2024 19:19:53 +0000 Files and hashes: 1: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: BbNU/RW3/wTKV9McBC9SK1MgMnMflh4YTyCpxbu1f9g=) 2: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: 6KCjwhIMaBoSnWdYTAfbyiG4caN7x9gbB7jQ004mrGI=) 3: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: UaGmn4kTfe+1TDn5eCuN9O53yKjU57F4Hz3jxRXHWWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:01:a2:8f:60:35:7b:d5:5b:51:78:88:3b:88:c6:a1:66:b2:2a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Nov 22 14:06:53 2024 GMT Not After : Nov 25 19:19:53 2024 GMT Subject: CN=F064AAC21D5C2301A86B808AE19242DFB6694607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:eb:8f:86:d8:98:5f:7b:73:86:dc:1c:09: 88:b4:ec:aa:d9:52:cc:d1:a5:c8:bd:be:47:f2:be: d0:95:45:7c:8b:32:70:ee:b6:72:4e:c0:b1:d1:be: 54:20:02:4b:45:63:4a:2f:e9:f0:11:1c:f8:b3:cf: fd:4d:c5:e1:de:9d:53:75:05:7c:ba:23:6f:ba:54: 80:c0:20:12:20:bb:49:f6:cb:8d:3b:96:6c:7b:b1: 80:d3:cf:66:32:96:b0:16:81:f8:61:ff:77:33:2d: 62:52:d0:0b:c8:ff:76:3b:cd:05:00:83:77:82:d7: 3c:24:6c:a9:3c:1f:67:98:44:dc:8a:72:83:bb:03: 48:cf:ae:18:05:9c:5b:29:c0:86:b6:04:87:83:e3: f1:ed:98:c1:96:12:8c:54:ec:b4:84:11:f6:8c:2c: 4c:4c:b1:46:15:82:71:da:81:f6:0b:85:46:33:a9: c6:2b:60:5a:c4:f3:6c:0e:18:fd:1e:b4:26:92:8b: 02:c0:6e:84:c6:49:41:4e:f1:58:e7:a0:52:6c:7e: cc:d5:d1:74:e9:f0:f6:a4:67:66:ff:a0:0a:5a:f0: 6b:f5:19:e6:02:93:53:0e:74:a2:a5:4d:75:33:fe: 6f:df:83:77:62:3f:0b:fc:b6:11:ae:f4:9a:e7:83: 08:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:64:AA:C2:1D:5C:23:01:A8:6B:80:8A:E1:92:42:DF:B6:69:46:07 X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:57:0f:3e:af:4b:ca:dc:03:bb:ad:12:e7:68:3d:e1:69:91: 36:c9:e9:6d:60:d3:50:19:35:a9:35:06:a5:05:eb:f5:40:93: a9:f6:c0:42:92:55:b9:eb:b6:c7:f6:01:75:90:8e:88:4c:aa: 65:33:f3:96:61:09:94:60:26:ec:9b:bb:7c:94:49:d5:93:bc: 50:b9:a4:33:88:68:af:f8:67:b7:fb:08:bb:90:6c:52:97:4e: 74:67:5f:23:d0:8b:a0:4a:46:8e:bc:f1:e7:41:a5:0b:7a:91: 20:af:b7:de:52:de:e2:c3:92:50:bd:72:dc:99:c7:95:21:60: bc:6b:2f:13:04:bf:3a:24:3d:a7:ff:72:69:0f:77:39:02:e7: 91:1f:92:f6:d2:6d:84:4f:06:bd:a2:0e:d9:85:bf:4a:6f:3c: e4:8c:bd:c2:35:e9:91:b2:40:3a:d4:bb:1e:09:e7:a5:13:fe: 82:1f:8c:53:4f:02:f6:56:1f:ff:20:fd:b0:e2:79:b3:2d:88: fe:d2:21:e0:9c:f0:2d:5a:4b:b1:56:5d:15:41:6e:6c:18:2a: e4:48:93:8b:48:43:d0:0d:59:dd:61:dc:60:b2:c3:4f:4c:09: 12:48:ed:15:3b:81:40:43:4e:15:99:60:80:96:fd:98:42:23: 9e:cd:3e:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQGij2A1e9VbUXiIO4jGoWayKswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNDExMjIxNDA2NTNaFw0yNDExMjUxOTE5NTNaMDMxMTAvBgNV BAMTKEYwNjRBQUMyMUQ1QzIzMDFBODZCODA4QUUxOTI0MkRGQjY2OTQ2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBP+uPhtiYX3tzhtwcCYi07KrZ UszRpci9vkfyvtCVRXyLMnDutnJOwLHRvlQgAktFY0ov6fARHPizz/1NxeHenVN1 BXy6I2+6VIDAIBIgu0n2y407lmx7sYDTz2YylrAWgfhh/3czLWJS0AvI/3Y7zQUA g3eC1zwkbKk8H2eYRNyKcoO7A0jPrhgFnFspwIa2BIeD4/HtmMGWEoxU7LSEEfaM LExMsUYVgnHagfYLhUYzqcYrYFrE82wOGP0etCaSiwLAboTGSUFO8VjnoFJsfszV 0XTp8PakZ2b/oApa8Gv1GeYCk1MOdKKlTXUz/m/fg3diPwv8thGu9JrngwhdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8GSqwh1cIwGoa4CK4ZJC37ZpRgcwHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2 QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9XDz6vS8rcA7utEudoPeFpkTbJ6W1g01AZ Nak1BqUF6/VAk6n2wEKSVbnrtsf2AXWQjohMqmUz85ZhCZRgJuybu3yUSdWTvFC5 pDOIaK/4Z7f7CLuQbFKXTnRnXyPQi6BKRo688edBpQt6kSCvt95S3uLDklC9ctyZ x5UhYLxrLxMEvzokPaf/cmkPdzkC55EfkvbSbYRPBr2iDtmFv0pvPOSMvcI16ZGy QDrUux4J56UT/oIfjFNPAvZWH/8g/bDiebMtiP7SIeCc8C1aS7FWXRVBbmwYKuRI k4tIQ9ANWd1h3GCyw09MCRJI7RU7gUBDThWZYICW/ZhCI57NPkM= -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:38 2024 by rpki-client on console-ams.rpki-client.org