$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: ZI+Hc5OOO7dI/pz+xoCedcdM0fktyUovTw8GmSXIwg8= Subject key identifier: 7C:FC:C4:55:51:08:2E:17:59:6C:18:47:70:C3:66:FD:2A:06:D7:6F Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 1AA37D3151AEED55C6E53D53718023491D42FE66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 0485 Signing time: Sun 24 Nov 2024 13:10:41 +0000 Manifest this update: Sun 24 Nov 2024 13:05:41 +0000 Manifest next update: Wed 27 Nov 2024 19:51:41 +0000 Files and hashes: 1: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: xLmMTjSOjSqS6LykBY4skbTjNzEVrHStJ+4rPzwZUSY=) 2: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: ltcF76PUj6+QyTR7Z9FLhuME36KatZ7GXVJU0DbM+UQ=) 3: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: 1z9zQXbiXOJ+gRqWINPLLxlihaf6MQrGXd1QApL6EDo=) 4: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: Ai7D3RvDxYX2FQX7n3jl8PVIm916gH4mXne2eUMtLic=) 5: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: hUFUn0VmhI4/WVyhCk/ed0i6oyJ6uRhfZe4Gt9CX7Ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a3:7d:31:51:ae:ed:55:c6:e5:3d:53:71:80:23:49:1d:42:fe:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Nov 24 13:05:41 2024 GMT Not After : Nov 27 19:51:41 2024 GMT Subject: CN=7CFCC45551082E17596C184770C366FD2A06D76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:25:10:a0:c7:67:de:bc:29:47:d9:b8:79:6c: c0:89:90:46:82:bd:50:5a:5f:4e:52:93:2e:ac:c2: 54:07:df:d6:0e:a7:f1:e4:5e:7c:f0:4a:44:c2:83: 25:24:6a:15:0e:9c:80:9f:13:87:31:22:5d:d7:47: 54:c7:35:33:48:62:4d:ca:74:21:4b:f6:3e:6b:da: 2f:fa:dd:40:2d:a5:6d:99:aa:8d:a3:39:97:bd:7c: eb:e5:29:be:6a:e9:ff:9c:78:a9:9d:ee:de:a9:4b: 3e:ed:ba:6c:b8:3d:5a:dd:26:2f:5f:51:cd:4d:5e: 2d:f6:79:04:e7:e3:4c:f9:b1:60:e0:6b:7f:c3:bc: b7:c4:4f:a6:74:f8:7b:a8:91:98:44:de:b6:05:91: 89:54:ae:a7:33:fc:07:24:a3:6b:7a:cd:a0:85:e9: a8:7b:53:a4:11:56:60:9e:04:9a:f1:c6:66:84:f8: c1:16:66:6b:95:e6:e3:a7:99:44:df:d7:61:90:08: c9:cf:cc:dd:11:d2:65:a5:c0:23:d2:d6:84:d9:f5: 84:bb:a8:8b:7f:76:67:7e:0f:12:c2:16:d0:52:fe: 66:4c:29:70:35:91:76:0a:2c:65:5a:7f:ab:8e:b8: 21:a0:f1:75:e3:47:c3:77:7c:b9:99:f3:c5:ba:29: 1a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FC:C4:55:51:08:2E:17:59:6C:18:47:70:C3:66:FD:2A:06:D7:6F X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:cb:ff:dc:eb:d3:89:31:d2:7d:e8:35:e4:8e:94:78:ca:56: 16:0b:16:58:c6:b2:10:ac:be:0c:6c:3b:e8:93:df:d1:61:89: cd:b1:97:f3:23:5b:59:9b:e4:d5:e2:75:93:e2:d8:4f:93:2c: 5c:eb:e4:be:b8:7b:11:be:a3:54:f2:1a:31:28:b5:83:ba:f6: 63:f2:ac:03:ea:61:ce:4d:67:f7:05:88:05:b1:3c:08:2f:44: ed:ee:1e:66:50:17:9f:6b:03:63:c9:59:32:32:b1:fd:dc:9a: 53:01:4c:13:0a:98:de:05:82:92:ae:f4:1c:44:84:53:b3:e6: 56:12:48:d1:0e:23:9d:f9:25:d2:f5:92:7d:5a:b6:78:e6:d6: 02:a4:48:a9:bf:32:67:b7:2d:bb:c5:be:b7:d7:2b:4a:bc:8d: 16:eb:d5:53:6c:ab:92:60:c0:02:91:de:df:0e:2b:bd:83:49: 6a:43:95:7d:97:0d:aa:b1:6f:59:48:8a:ee:2f:5d:bc:ca:fd: a6:64:49:2f:14:a7:90:86:31:2b:2e:8d:52:f3:5d:94:1f:c5: 4c:86:6b:90:c6:97:65:71:49:76:e9:14:72:d8:6e:a5:6a:0a: a5:93:de:3d:d8:57:b8:c4:6a:ed:aa:c8:79:01:0f:27:7d:7d: a1:73:6f:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqN9MVGu7VXG5T1TcYAjSR1C/mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNDExMjQxMzA1NDFaFw0yNDExMjcxOTUxNDFaMDMxMTAvBgNV BAMTKDdDRkNDNDU1NTEwODJFMTc1OTZDMTg0NzcwQzM2NkZEMkEwNkQ3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJRCgx2fevClH2bh5bMCJkEaC vVBaX05Sky6swlQH39YOp/HkXnzwSkTCgyUkahUOnICfE4cxIl3XR1THNTNIYk3K dCFL9j5r2i/63UAtpW2Zqo2jOZe9fOvlKb5q6f+ceKmd7t6pSz7tumy4PVrdJi9f Uc1NXi32eQTn40z5sWDga3/DvLfET6Z0+HuokZhE3rYFkYlUrqcz/Acko2t6zaCF 6ah7U6QRVmCeBJrxxmaE+MEWZmuV5uOnmUTf12GQCMnPzN0R0mWlwCPS1oTZ9YS7 qIt/dmd+DxLCFtBS/mZMKXA1kXYKLGVaf6uOuCGg8XXjR8N3fLmZ88W6KRq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfPzEVVEILhdZbBhHcMNm/SoG128wHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPL/9zr04kx0n3oNeSOlHjKVhYLFljGshCs vgxsO+iT39Fhic2xl/MjW1mb5NXidZPi2E+TLFzr5L64exG+o1TyGjEotYO69mPy rAPqYc5NZ/cFiAWxPAgvRO3uHmZQF59rA2PJWTIysf3cmlMBTBMKmN4FgpKu9BxE hFOz5lYSSNEOI535JdL1kn1atnjm1gKkSKm/Mme3LbvFvrfXK0q8jRbr1VNsq5Jg wAKR3t8OK72DSWpDlX2XDaqxb1lIiu4vXbzK/aZkSS8Up5CGMSsujVLzXZQfxUyG a5DGl2VxSXbpFHLYbqVqCqWT3j3YV7jEau2qyHkBDyd9faFzbyU= -----END CERTIFICATE-----Generated at Sun Nov 24 14:55:03 2024 by rpki-client on console-fra.rpki-client.org