$ rpki-client -vvf repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft File: 580F61C23A4857BE23095E060FE36642F86DA6E8.mft (raw, json) Hash identifier: PB4czljvqF7dz/sbSIRPUOT1wsm1FnE6sKEO3FYYOII= Subject key identifier: 05:C5:FC:EE:22:28:F6:EE:C0:0C:3E:1B:62:54:91:94:2F:0B:B6:E1 Authority key identifier: 58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 Certificate issuer: /CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Certificate serial: 5CB945A3E952C488667A808B7FE4857649C47DED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft Manifest number: 024D Signing time: Thu 21 Nov 2024 08:10:36 +0000 Manifest this update: Thu 21 Nov 2024 08:05:36 +0000 Manifest next update: Sun 24 Nov 2024 19:51:36 +0000 Files and hashes: 1: 580F61C23A4857BE23095E060FE36642F86DA6E8.crl (hash: wYzMyJE3T7SIA2tW/bsvUX2o/hV6bNXncpSfiBfRT74=) 2: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: qgfha00pYYMcksaq2+JUhPWSf25KpZIfyFc9lsfpKQo=) 3: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: AtSVkFWy+RPF/Rog89oVSGAye/7C+5O/wyn2g4eUns4=) 4: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: SISmoMd9IDy7UIhYINg4jNQmxZBYxELrgbvx7I2ZzYc=) 5: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: vYSSiPVfjHBRD1DbhEq71sSwPeD8q/o4Uv0WnfeglN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b9:45:a3:e9:52:c4:88:66:7a:80:8b:7f:e4:85:76:49:c4:7d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Validity Not Before: Nov 21 08:05:36 2024 GMT Not After : Nov 24 19:51:36 2024 GMT Subject: CN=05C5FCEE2228F6EEC00C3E1B625491942F0BB6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c4:32:e3:1d:81:5f:41:35:37:d8:d6:b5:53: 2c:cc:64:72:85:13:47:31:84:89:62:0d:b4:6e:bb: 0a:87:52:ae:ce:a8:91:42:1e:be:d8:99:52:5b:a8: c4:c1:90:98:d2:b8:30:96:8d:fd:f1:c3:94:21:6b: 49:79:df:98:39:57:a9:d0:40:17:06:5b:e6:d7:e0: 9f:3c:53:f8:b0:e4:05:32:4a:68:c0:04:fd:db:90: 2b:da:42:34:88:cb:d3:cb:66:b4:48:96:83:23:d7: e5:b7:07:a1:9f:d2:4a:54:26:c7:7b:12:08:4c:0b: 83:2f:44:9e:fe:fb:87:7a:68:54:b3:80:89:25:3d: 25:1f:8d:b9:bd:3b:9e:a0:42:79:35:b0:07:cf:0a: cb:da:e5:bd:dd:f3:3a:6d:6d:72:f8:dd:8f:8d:95: 33:13:df:05:ee:b0:f3:72:e8:47:c5:51:14:d5:8f: 86:80:cc:c4:ad:6a:7a:62:a7:ef:7c:d0:74:dc:87: ef:e9:8e:6f:e4:da:68:9d:7c:60:da:34:d8:e5:c8: 0b:8e:5b:9d:29:5f:ea:f4:cc:39:2e:ae:d8:7d:06: d0:ee:1a:64:b8:97:21:78:6b:d0:e9:c9:80:aa:54: 14:7a:87:39:e9:7d:61:59:2e:1c:60:89:35:69:f8: 06:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C5:FC:EE:22:28:F6:EE:C0:0C:3E:1B:62:54:91:94:2F:0B:B6:E1 X509v3 Authority Key Identifier: keyid:58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7b:f1:58:19:00:64:e4:b6:af:ba:f4:78:b9:c3:72:e9:ad: 06:5e:21:0b:57:13:62:da:09:7a:ec:27:6f:64:0c:7c:b0:ff: a1:14:95:d4:7d:f6:76:57:2c:70:0b:c2:43:5c:8a:84:ff:a2: 18:0b:4f:11:5e:00:6f:20:5f:12:c7:42:87:b4:69:d5:cc:b2: 31:89:a4:43:29:26:c4:75:0c:b3:c2:c0:e7:50:7f:ae:9d:7f: 2c:12:6f:5e:60:77:d3:e2:27:cf:e2:d1:74:89:8f:f4:86:27: 7e:e8:c3:ec:b5:7a:5f:6d:cd:b6:a4:d9:e3:c1:aa:e7:ab:7f: 1b:65:32:70:3d:c0:53:62:45:a2:72:fc:65:e9:3e:88:dc:df: 8a:55:97:42:2e:e9:11:f9:4a:39:dd:fb:96:9c:cb:06:d3:52: 86:7c:69:3a:fd:03:af:d4:fe:07:4e:f8:2f:00:f8:da:28:61: bb:1b:10:5c:67:30:47:bc:78:19:20:61:42:e6:d0:e5:cb:b2: 9d:2f:27:65:87:fd:27:6e:68:3c:e0:d6:d5:2e:51:48:85:32: c4:ba:8e:16:e8:2c:f9:2d:d7:c6:db:bb:95:28:ee:a9:dd:76: 0e:30:52:4a:14:20:04:ba:19:49:82:98:23:61:6f:fa:1f:16: 7f:8a:86:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLlFo+lSxIhmeoCLf+SFdknEfe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJG ODZEQTZFODAeFw0yNDExMjEwODA1MzZaFw0yNDExMjQxOTUxMzZaMDMxMTAvBgNV BAMTKDA1QzVGQ0VFMjIyOEY2RUVDMDBDM0UxQjYyNTQ5MTk0MkYwQkI2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsxDLjHYFfQTU32Na1UyzMZHKF E0cxhIliDbRuuwqHUq7OqJFCHr7YmVJbqMTBkJjSuDCWjf3xw5Qha0l535g5V6nQ QBcGW+bX4J88U/iw5AUySmjABP3bkCvaQjSIy9PLZrRIloMj1+W3B6Gf0kpUJsd7 EghMC4MvRJ7++4d6aFSzgIklPSUfjbm9O56gQnk1sAfPCsva5b3d8zptbXL43Y+N lTMT3wXusPNy6EfFURTVj4aAzMStanpip+980HTch+/pjm/k2midfGDaNNjlyAuO W50pX+r0zDkurth9BtDuGmS4lyF4a9DpyYCqVBR6hznpfWFZLhxgiTVp+AaBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBcX87iIo9u7ADD4bYlSRlC8LtuEwHwYDVR0j BBgwFoAUWA9hwjpIV74jCV4GD+NmQvhtpugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDBmOWNjNy00YTY5LTRjOWUtYmJhNi00ZDlhYmI1NmVmZjYvMC81ODBGNjFDMjNB NDg1N0JFMjMwOTVFMDYwRkUzNjY0MkY4NkRBNkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJGODZE QTZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2 NDJGODZEQTZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB78VgZAGTktq+69Hi5w3LprQZeIQtXE2La CXrsJ29kDHyw/6EUldR99nZXLHALwkNcioT/ohgLTxFeAG8gXxLHQoe0adXMsjGJ pEMpJsR1DLPCwOdQf66dfywSb15gd9PiJ8/i0XSJj/SGJ37ow+y1el9tzbak2ePB querfxtlMnA9wFNiRaJy/GXpPojc34pVl0Iu6RH5Sjnd+5acywbTUoZ8aTr9A6/U /gdO+C8A+NooYbsbEFxnMEe8eBkgYULm0OXLsp0vJ2WH/SduaDzg1tUuUUiFMsS6 jhboLPkt18bbu5Uo7qnddg4wUkoUIAS6GUmCmCNhb/ofFn+Khl4= -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:39 2024 by rpki-client on console-fra.rpki-client.org