$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: Tc/5PlBBclMt/CpdNVJwJQ3NwcSRI6vN/Uiof5w7fXw= Subject key identifier: 98:C1:3D:A5:02:D7:EA:91:8E:1D:5B:6B:4C:25:77:E2:C2:68:66:73 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 1499BC5FF301B4058D88AD9058F9FEFFAD7FC6B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 0265 Signing time: Mon 25 Nov 2024 12:50:39 +0000 Manifest this update: Mon 25 Nov 2024 12:45:39 +0000 Manifest next update: Thu 28 Nov 2024 13:44:39 +0000 Files and hashes: 1: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: xE3oRPGKTbYV5fZNgJUHs0yPjx9pBS4i2nGCIMFMIu8=) 2: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: WKmcvn8bAO9Eii6CFLm7I5z8vpQacNIDvmfF6K6iO9c=) 3: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: D5y/dOOdbevGbXtghOHQINTcjdbypBLwek1XQ3CqPYE=) 4: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: Bup7LELWa0M49WEmJBOXwO3r0+CyN1znNANGE751Xcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 13:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:99:bc:5f:f3:01:b4:05:8d:88:ad:90:58:f9:fe:ff:ad:7f:c6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Nov 25 12:45:39 2024 GMT Not After : Nov 28 13:44:39 2024 GMT Subject: CN=98C13DA502D7EA918E1D5B6B4C2577E2C2686673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:fa:94:52:32:c7:0e:b0:c8:13:71:02:74: 1a:c3:b9:b1:aa:da:64:a1:5a:21:1b:50:02:ac:29: 22:ab:d1:16:46:e5:06:8d:32:48:39:03:f5:ff:1c: 85:e1:18:70:5e:16:81:de:a4:63:f3:99:bd:ee:de: b4:91:f2:31:f0:b2:f6:8a:a6:98:94:b0:a3:5a:da: ce:6e:2c:2a:e2:86:65:09:e6:27:64:90:15:6a:82: f4:43:5f:fc:3e:33:db:65:6a:f8:71:6b:6b:ef:df: 36:bd:26:27:c1:2e:c0:5d:cc:12:f8:e3:09:08:c1: 60:0b:3b:25:42:ea:5f:11:2b:a3:a9:c2:58:90:3e: a4:40:0a:81:15:1f:a7:1e:d4:49:40:f7:4e:d2:c4: 49:84:49:c5:18:d2:b0:81:8d:54:6e:12:bd:8a:66: bf:67:9c:5e:90:46:94:a8:b1:37:df:6a:a1:59:97: 8d:8b:85:44:53:bb:45:fc:f4:66:87:ee:46:91:ab: 82:3d:61:41:e9:d9:de:13:aa:5b:5f:1e:9e:2c:dc: 31:04:e7:e9:d1:d5:fb:65:f8:e5:a9:86:a4:06:7d: bb:53:d6:cb:a0:b9:40:25:11:6a:30:dd:dc:4a:df: 37:87:a8:3b:93:51:47:7b:28:f8:28:90:18:de:46: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C1:3D:A5:02:D7:EA:91:8E:1D:5B:6B:4C:25:77:E2:C2:68:66:73 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:03:fe:9c:a6:fc:2a:3c:1e:46:b9:f9:6b:fc:30:66:df:6c: 3e:e7:ea:af:43:76:10:2d:01:33:e3:c0:d5:8c:13:f2:84:83: 87:cc:a8:5f:13:c9:1c:84:75:f2:5a:c4:23:f0:04:62:86:22: 28:10:37:f7:03:0e:bf:59:5d:98:f8:c5:0d:a0:5f:b5:7c:1c: 1d:b7:51:58:11:06:3c:fd:2d:76:cb:0a:a9:8e:5f:a1:88:47: 2f:02:81:a1:02:2a:fb:65:6f:0c:32:62:d4:db:15:b0:db:2d: 09:1d:8e:29:9d:ad:e8:b8:81:2e:04:3f:2c:3a:3e:0b:ea:fa: 0f:da:48:50:32:61:60:23:d4:04:08:d5:8e:a1:7f:da:36:47: ce:81:98:7f:98:35:ca:2b:ff:d2:68:56:36:1c:09:71:41:4f: 1b:2a:cb:cb:b2:66:8d:0c:1a:8b:b2:53:3f:f7:c5:4e:56:59: ee:99:cc:18:fb:5e:18:e3:91:3b:c0:6b:36:b5:0e:a6:de:0e: 01:eb:3f:02:ae:fb:14:cd:01:fa:d9:b5:78:07:5a:f6:fc:53: 49:3d:da:7b:fa:8a:0e:57:92:f4:47:56:71:7c:d6:9d:c0:b2: 91:55:87:68:9d:32:8b:09:67:ca:aa:be:d9:15:f7:d4:3e:ab: 2c:07:2f:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJm8X/MBtAWNiK2QWPn+/61/xrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNDExMjUxMjQ1MzlaFw0yNDExMjgxMzQ0MzlaMDMxMTAvBgNV BAMTKDk4QzEzREE1MDJEN0VBOTE4RTFENUI2QjRDMjU3N0UyQzI2ODY2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3PqUUjLHDrDIE3ECdBrDubGq 2mShWiEbUAKsKSKr0RZG5QaNMkg5A/X/HIXhGHBeFoHepGPzmb3u3rSR8jHwsvaK ppiUsKNa2s5uLCrihmUJ5idkkBVqgvRDX/w+M9tlavhxa2vv3za9JifBLsBdzBL4 4wkIwWALOyVC6l8RK6OpwliQPqRACoEVH6ce1ElA907SxEmEScUY0rCBjVRuEr2K Zr9nnF6QRpSosTffaqFZl42LhURTu0X89GaH7kaRq4I9YUHp2d4TqltfHp4s3DEE 5+nR1ftl+OWphqQGfbtT1suguUAlEWow3dxK3zeHqDuTUUd7KPgokBjeRntzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmME9pQLX6pGOHVtrTCV34sJoZnMwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYD/pym/Co8Hka5+Wv8MGbfbD7n6q9DdhAt ATPjwNWME/KEg4fMqF8TyRyEdfJaxCPwBGKGIigQN/cDDr9ZXZj4xQ2gX7V8HB23 UVgRBjz9LXbLCqmOX6GIRy8CgaECKvtlbwwyYtTbFbDbLQkdjimdrei4gS4EPyw6 Pgvq+g/aSFAyYWAj1AQI1Y6hf9o2R86BmH+YNcor/9JoVjYcCXFBTxsqy8uyZo0M GouyUz/3xU5WWe6ZzBj7XhjjkTvAaza1DqbeDgHrPwKu+xTNAfrZtXgHWvb8U0k9 2nv6ig5XkvRHVnF81p3AspFVh2idMosJZ8qqvtkV99Q+qywHL2U= -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org