$ rpki-client -vvf repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft File: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft (raw, json) Hash identifier: Uj60GHqH1krHbIqFu9Do8tsC0Ei6GCQx3cQaXS2JxD4= Subject key identifier: 31:6F:60:87:FE:E2:51:2B:F9:14:3D:A3:BD:1A:8C:BF:05:24:86:B3 Authority key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB Certificate issuer: /CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Certificate serial: 11C6E535FEB2FDA131BDF5F39A3C2E1DE4A8E0D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft Manifest number: 56 Signing time: Sun 24 Nov 2024 10:21:04 +0000 Manifest this update: Sun 24 Nov 2024 10:16:04 +0000 Manifest next update: Wed 27 Nov 2024 16:20:04 +0000 Files and hashes: 1: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl (hash: 6jx8xJY0TPP6gQtJ6erg347spsnBC6nFcTQ81gUFqLo=) 2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: ABqsMeXfL8j7jSTQPe5p6pryIp+gFqsnjqoUXOdJcq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c6:e5:35:fe:b2:fd:a1:31:bd:f5:f3:9a:3c:2e:1d:e4:a8:e0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Validity Not Before: Nov 24 10:16:04 2024 GMT Not After : Nov 27 16:20:04 2024 GMT Subject: CN=316F6087FEE2512BF9143DA3BD1A8CBF052486B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:05:5a:91:c2:9e:53:86:5e:90:27:ad:12: 76:60:fa:25:79:64:b1:60:62:1c:26:51:e9:96:3a: 42:30:1e:4e:d3:59:46:f1:ce:28:4f:86:f3:dd:59: 87:8c:a4:50:28:ff:b3:e5:f6:19:e5:74:3c:23:03: 5e:ee:c6:a5:ce:fc:9f:9d:34:1a:77:dd:01:c7:d8: 06:81:a5:6b:b3:77:7d:4d:c7:78:42:54:5f:8e:15: 6b:c0:02:10:d4:8b:c0:da:23:53:87:ac:69:25:3e: 21:17:bc:55:b3:2b:78:84:2d:11:fb:c2:96:c4:2c: 45:5d:0f:12:a8:ed:fb:a1:3b:12:bf:69:d0:17:19: 97:e7:e5:de:a3:17:05:46:b1:b4:f3:a0:8a:d8:13: f9:ba:9e:7f:5f:b4:b9:d9:58:26:ee:83:36:a2:bf: 4b:0a:cb:8b:81:03:4e:0f:bd:eb:ff:1c:b5:f1:73: 95:64:d4:3b:0f:9f:38:83:99:3f:92:69:1f:67:55: 89:e4:a6:3a:9a:aa:8f:ef:4a:55:8f:73:02:52:6d: 80:69:52:bc:e8:b9:4c:e1:d1:a7:91:7c:d5:1c:dd: e1:03:64:7e:10:2a:44:26:58:cd:35:7d:04:2d:c3: d0:ce:ed:9b:d8:0e:3b:9b:ea:50:b3:0d:ea:db:ae: ce:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6F:60:87:FE:E2:51:2B:F9:14:3D:A3:BD:1A:8C:BF:05:24:86:B3 X509v3 Authority Key Identifier: keyid:5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:61:4e:6c:d3:e3:68:ee:56:00:c4:4f:91:aa:a3:8d:62:a2: d3:04:cc:e2:b4:d2:aa:10:bc:6c:ab:9b:74:56:02:6d:ad:44: 20:24:c2:a4:95:43:81:2b:30:1d:81:8f:f7:d1:2d:ba:e9:7a: ee:85:c6:6c:bf:fa:a5:77:45:f6:b6:e8:22:80:fa:d1:b4:77: 9a:4f:bb:0a:1f:6e:cb:c0:67:90:95:b6:a3:80:ba:99:68:4d: 51:e3:b0:42:ba:50:46:db:5f:d5:3b:49:29:35:3c:b2:34:0c: f7:12:ed:ff:63:81:07:00:28:bb:73:d7:cd:92:ce:55:c9:77: d2:42:22:9e:96:8e:c9:c0:52:a5:b3:3d:37:d7:ab:63:b2:4d: 89:a5:19:23:76:b9:40:bd:c4:74:74:fe:83:4b:4a:19:11:08: 7f:b6:dd:c7:4a:4b:4a:fe:0e:5b:3b:83:2c:8c:bc:f9:f1:69: e7:78:78:33:5d:99:66:0f:d5:38:e6:f5:21:1c:5c:6d:76:22: c8:b8:83:9b:b9:13:f3:19:0a:74:a5:2c:32:d5:60:5f:5b:b7: c9:54:95:86:2b:2d:d2:08:f8:41:65:50:ba:38:8b:fb:57:d7: a4:71:c3:6e:0c:f1:6a:ee:c2:70:f6:a4:af:3a:fa:e9:db:d3: 91:3e:6a:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcblNf6y/aExvfXzmjwuHeSo4NgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RE NEE5ODRFQjAeFw0yNDExMjQxMDE2MDRaFw0yNDExMjcxNjIwMDRaMDMxMTAvBgNV BAMTKDMxNkY2MDg3RkVFMjUxMkJGOTE0M0RBM0JEMUE4Q0JGMDUyNDg2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3AVakcKeU4ZekCetEnZg+iV5 ZLFgYhwmUemWOkIwHk7TWUbxzihPhvPdWYeMpFAo/7Pl9hnldDwjA17uxqXO/J+d NBp33QHH2AaBpWuzd31Nx3hCVF+OFWvAAhDUi8DaI1OHrGklPiEXvFWzK3iELRH7 wpbELEVdDxKo7fuhOxK/adAXGZfn5d6jFwVGsbTzoIrYE/m6nn9ftLnZWCbugzai v0sKy4uBA04Pvev/HLXxc5Vk1DsPnziDmT+SaR9nVYnkpjqaqo/vSlWPcwJSbYBp UrzouUzh0aeRfNUc3eEDZH4QKkQmWM01fQQtw9DO7ZvYDjub6lCzDerbrs7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMW9gh/7iUSv5FD2jvRqMvwUkhrMwHwYDVR0j BBgwFoAUWo1N7F/Cm+biSQRi9YCQPdSphOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZWNmNWQ5NC03ZjFmLTQzYmYtYjdhYS0yMjBmMGMxNTZlYzAvMC81QThENERFQzVG QzI5QkU2RTI0OTA0NjJGNTgwOTAzREQ0QTk4NEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RENEE5 ODRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3 YWEtMjIwZjBjMTU2ZWMwLzAvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkw M0RENEE5ODRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9hTmzT42juVgDET5Gqo41iotMEzOK00qoQ vGyrm3RWAm2tRCAkwqSVQ4ErMB2Bj/fRLbrpeu6Fxmy/+qV3Rfa26CKA+tG0d5pP uwofbsvAZ5CVtqOAuploTVHjsEK6UEbbX9U7SSk1PLI0DPcS7f9jgQcAKLtz182S zlXJd9JCIp6WjsnAUqWzPTfXq2OyTYmlGSN2uUC9xHR0/oNLShkRCH+23cdKS0r+ Dls7gyyMvPnxaed4eDNdmWYP1Tjm9SEcXG12Isi4g5u5E/MZCnSlLDLVYF9bt8lU lYYrLdII+EFlULo4i/tX16Rxw24M8WruwnD2pK86+unb05E+ahw= -----END CERTIFICATE-----Generated at Sun Nov 24 11:34:09 2024 by rpki-client on console-fra.rpki-client.org