$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: pbHOUHrRzBj6SLGzQZVVnY2e6aSoAkDOATjL+iQtWoE= Subject key identifier: 1B:F2:E0:88:E8:31:F4:46:C1:67:B5:65:E4:F7:9B:47:21:81:96:40 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 61A597278C3B6D9CE3FE59C46ACFE3E4FC58C5E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 0135 Signing time: Wed 20 Nov 2024 15:31:26 +0000 Manifest this update: Wed 20 Nov 2024 15:26:26 +0000 Manifest next update: Sun 24 Nov 2024 00:06:26 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: 8fcVvUOnHnEDxc1LP+W4ikZfxvy9KJkdRccQg7Mp1b8=) 2: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: 4UN0UiPpUiozwj3WauIjNoRRgCv6AUp05HcJnbFfO30=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: kwgZlAehoInBl32w+IZeJMWxeIEAZ8IfMVtQyqbqAN8=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: cWHJAdhMo3cUB7SJI/qLeHQjD7fvumO0S0ippQ4UQLg=) 5: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: nepxzQwvJ312nV9iZgEKlOIPKHQAkqWcvRmCemfI68k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a5:97:27:8c:3b:6d:9c:e3:fe:59:c4:6a:cf:e3:e4:fc:58:c5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Nov 20 15:26:26 2024 GMT Not After : Nov 24 00:06:26 2024 GMT Subject: CN=1BF2E088E831F446C167B565E4F79B4721819640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d2:5b:e6:51:c1:f0:d1:8a:44:e0:17:0f:42: 29:2f:42:ae:f5:07:9e:df:e9:c5:ee:a4:a1:96:05: aa:2f:d1:26:fe:d3:1c:a6:04:b7:4a:59:41:03:bc: 60:b1:0d:83:cb:29:c4:c6:56:cd:ee:61:21:94:67: 3b:d6:37:d8:2b:5f:28:7a:62:64:ad:57:ce:65:64: 45:ad:45:b4:d3:30:10:4e:a8:1b:7b:4a:34:8e:73: d0:59:7d:ae:d3:c8:35:46:eb:03:8d:cb:94:78:ce: bf:57:5b:14:b1:fc:c1:5c:b4:cb:2f:d4:43:a3:7d: 56:fc:b8:c8:67:97:e4:9c:86:c2:f4:e0:3c:6e:10: 8b:98:33:3c:17:02:b9:ff:ff:a9:27:e1:ba:dd:a8: e1:f4:01:e6:45:0c:09:59:b6:ee:49:7d:24:20:82: 65:1e:6e:55:42:41:4b:0d:22:7b:f7:a0:b9:4f:56: 1d:45:4f:6c:76:b1:1d:c9:6b:b1:91:bc:d9:c9:d4: b6:0f:3e:32:a2:62:54:0a:55:b1:ed:33:c5:f8:e1: a7:5f:e4:df:4f:52:68:98:2a:af:06:64:e8:2d:04: 38:6c:71:6a:c1:5a:44:18:c1:09:44:7a:5b:52:fc: 8b:c0:8e:36:b0:87:44:0b:c2:81:bd:7d:38:5f:e9: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F2:E0:88:E8:31:F4:46:C1:67:B5:65:E4:F7:9B:47:21:81:96:40 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:0f:4c:d6:db:cc:3d:73:ec:0f:a8:bf:d9:d0:e5:2e:09:d6: a3:71:c4:3d:05:66:ed:9d:ac:54:ed:68:24:3c:f4:1c:a5:f9: 2b:90:92:b4:20:c2:8b:49:98:5e:2a:81:61:b3:ff:8f:41:ab: f7:58:14:72:ce:7b:84:3c:57:29:54:2a:86:0a:d0:5e:c8:f7: 15:86:f4:59:d5:04:47:ed:cd:cb:2d:c5:4d:36:7d:e2:73:84: b0:46:e6:43:6f:5d:8b:d0:9b:df:65:c0:23:1b:b0:58:04:c0: 1f:f7:12:ab:38:10:f7:ef:a9:86:e3:7b:a6:19:40:63:38:5e: 83:07:cc:9c:f8:8d:38:e2:8d:c7:40:23:3f:6b:18:87:a8:82: 9c:20:86:b6:94:95:9a:85:3c:3e:c1:a9:16:39:68:5f:d2:67: cb:cc:59:b9:38:02:d9:2a:8c:d6:c9:fd:77:af:39:34:6a:90: 51:79:ba:6f:19:37:02:f1:d5:a4:6f:82:e0:4b:9b:23:03:d9: 25:ae:01:26:27:16:c2:25:f3:7f:33:b2:5a:74:dc:de:ce:c7: b2:51:7d:aa:de:2f:0a:56:40:60:5b:ea:4d:36:7d:97:62:27: 05:46:98:a8:87:2d:75:a6:67:66:f2:04:f3:70:ce:b6:01:12: ad:2c:ec:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaWXJ4w7bZzj/lnEas/j5PxYxeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNDExMjAxNTI2MjZaFw0yNDExMjQwMDA2MjZaMDMxMTAvBgNV BAMTKDFCRjJFMDg4RTgzMUY0NDZDMTY3QjU2NUU0Rjc5QjQ3MjE4MTk2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0lvmUcHw0YpE4BcPQikvQq71 B57f6cXupKGWBaov0Sb+0xymBLdKWUEDvGCxDYPLKcTGVs3uYSGUZzvWN9grXyh6 YmStV85lZEWtRbTTMBBOqBt7SjSOc9BZfa7TyDVG6wONy5R4zr9XWxSx/MFctMsv 1EOjfVb8uMhnl+SchsL04DxuEIuYMzwXArn//6kn4brdqOH0AeZFDAlZtu5JfSQg gmUeblVCQUsNInv3oLlPVh1FT2x2sR3Ja7GRvNnJ1LYPPjKiYlQKVbHtM8X44adf 5N9PUmiYKq8GZOgtBDhscWrBWkQYwQlEeltS/IvAjjawh0QLwoG9fThf6XPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG/LgiOgx9EbBZ7Vl5PebRyGBlkAwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcPTNbbzD1z7A+ov9nQ5S4J1qNxxD0FZu2d rFTtaCQ89Byl+SuQkrQgwotJmF4qgWGz/49Bq/dYFHLOe4Q8VylUKoYK0F7I9xWG 9FnVBEftzcstxU02feJzhLBG5kNvXYvQm99lwCMbsFgEwB/3Eqs4EPfvqYbje6YZ QGM4XoMHzJz4jTjijcdAIz9rGIeogpwghraUlZqFPD7BqRY5aF/SZ8vMWbk4Atkq jNbJ/XevOTRqkFF5um8ZNwLx1aRvguBLmyMD2SWuASYnFsIl838zslp03N7Ox7JR fareLwpWQGBb6k02fZdiJwVGmKiHLXWmZ2byBPNwzrYBEq0s7EI= -----END CERTIFICATE-----Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org