$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: s6VpOt71oVEa4CdC1i5ACOKWlNGij8U5EQ/himTbvzI= Subject key identifier: 80:3D:8D:87:36:93:C5:E2:74:1D:43:0F:31:82:C4:9A:21:2C:38:24 Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 1E67056E1AC4C8BD5D6578A6D7E9F90A8497F77C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 0488 Signing time: Fri 22 Nov 2024 05:40:02 +0000 Manifest this update: Fri 22 Nov 2024 05:35:02 +0000 Manifest next update: Mon 25 Nov 2024 08:22:02 +0000 Files and hashes: 1: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uDKGCmtuAh53SMb+C/Ryy+REf5CV1In4kTPm6c1f6Xc=) 2: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: imJTliY28qNv1lKNAZDzzIlAGldGiVIuuxF6gl7nan0=) 3: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: 3PS0oz/pScPQzie5Mti3z4hmWgtkSmXElwu/lAFPvxo=) 4: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: 5sv2BLrXUR7pP0OPvmvfvyofoGM5DTSkOAndTrP63eU=) 5: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: cb1+UtU0B63HE5/QKD2FCjn1IpWHPQJZXXC6USKJKHE=) 6: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: WidEb5Qk7hi5vGeR2fyuZGCUmZH1CLGfw5gxZCIPVm0=) 7: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: FN6+5NNDjjCg/L/3NxmUSu0MngpOvmvYVmNJq1k+Tmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:67:05:6e:1a:c4:c8:bd:5d:65:78:a6:d7:e9:f9:0a:84:97:f7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Nov 22 05:35:02 2024 GMT Not After : Nov 25 08:22:02 2024 GMT Subject: CN=803D8D873693C5E2741D430F3182C49A212C3824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:57:4a:18:fe:ec:29:75:eb:a0:d6:52:1a: 1e:36:84:63:ae:b9:56:fe:2f:1b:01:bc:39:65:48: c0:ee:61:38:82:a2:a0:62:cd:53:45:43:b4:87:75: 60:53:5c:2c:fc:70:a3:24:79:36:e5:5a:97:01:39: de:2f:66:72:4e:c9:b9:a4:ea:59:e3:ed:f0:c1:6e: 9b:b5:19:2a:5c:02:cc:9e:69:78:9d:7c:5e:16:27: 6e:ff:7e:68:62:49:47:ae:c9:19:6d:8d:f6:a2:66: 16:4f:ef:ce:30:1f:7c:c0:88:83:82:f8:d9:9a:f4: 1d:2f:9e:2a:e1:60:0e:9a:c2:cf:c8:dc:a2:e8:cd: 61:52:d7:9a:5d:ef:a9:a3:89:df:9f:b6:27:22:eb: 68:20:21:43:28:56:71:c9:42:db:56:e6:e1:91:08: ac:55:d1:ec:89:6d:60:0b:2b:7e:f8:8b:bf:30:c5: 7f:04:a2:44:ec:71:1d:52:be:c3:67:a3:6f:c7:9a: 44:ec:14:f6:bc:3d:5c:f2:3e:6b:f8:04:b1:cf:d6: f9:20:14:19:93:d6:6a:6d:bf:ad:ac:46:25:4a:26: ce:4d:a6:aa:7d:d3:85:1e:2a:90:25:db:49:12:dc: f5:8d:db:a7:b9:52:d6:54:c6:33:ee:8c:69:1e:c3: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3D:8D:87:36:93:C5:E2:74:1D:43:0F:31:82:C4:9A:21:2C:38:24 X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:84:96:92:78:bc:a8:7e:8f:b0:74:28:38:fc:92:af:f0:7b: 94:56:ec:b2:59:85:5c:4b:c9:b9:b1:db:02:f4:bf:34:5e:33: 4e:ba:8d:32:1e:f6:de:ad:9a:32:c1:74:bd:61:86:ea:e2:18: c6:d7:5b:c4:0a:30:28:bb:19:08:64:85:4e:c4:c6:7c:45:7f: 02:33:ca:ed:90:a0:ac:59:7a:f5:24:d3:9e:f4:9e:1c:0c:3a: 9e:10:c6:f7:83:f9:dc:fa:33:6a:7f:2e:9c:f4:5d:a2:56:c4: 74:75:6a:a6:ed:4b:61:2d:49:1d:64:66:46:a0:5c:bb:12:0d: 5f:84:ba:a5:3f:47:f3:8e:b1:d9:2f:39:08:58:05:1f:f2:80: 9f:df:14:62:5f:f8:60:73:ac:97:ae:63:eb:84:bb:e5:f0:bd: 37:1e:b3:74:4a:9e:4a:a6:1e:32:e5:d1:7d:69:28:e6:72:d0: a6:c4:35:c2:b6:8b:e2:41:54:89:bc:a0:7d:4b:3e:25:cf:ae: c1:49:f0:d8:05:94:26:c4:19:3b:df:d7:66:d9:aa:39:6b:23: 5e:9d:15:cc:b6:8f:f7:00:2e:c4:31:4d:95:a5:d1:85:84:5b: a0:f5:c3:42:d2:d9:23:46:4c:a4:fb:6c:8f:b9:15:25:45:f9: 4f:6d:e9:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmcFbhrEyL1dZXim1+n5CoSX93wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNDExMjIwNTM1MDJaFw0yNDExMjUwODIyMDJaMDMxMTAvBgNV BAMTKDgwM0Q4RDg3MzY5M0M1RTI3NDFENDMwRjMxODJDNDlBMjEyQzM4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HVdKGP7sKXXroNZSGh42hGOu uVb+LxsBvDllSMDuYTiCoqBizVNFQ7SHdWBTXCz8cKMkeTblWpcBOd4vZnJOybmk 6lnj7fDBbpu1GSpcAsyeaXidfF4WJ27/fmhiSUeuyRltjfaiZhZP784wH3zAiIOC +Nma9B0vnirhYA6aws/I3KLozWFS15pd76mjid+ftici62ggIUMoVnHJQttW5uGR CKxV0eyJbWALK374i78wxX8EokTscR1SvsNno2/HmkTsFPa8PVzyPmv4BLHP1vkg FBmT1mptv62sRiVKJs5Npqp904UeKpAl20kS3PWN26e5UtZUxjPujGkew+eRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgD2NhzaTxeJ0HUMPMYLEmiEsOCQwHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKElpJ4vKh+j7B0KDj8kq/we5RW7LJZhVxL ybmx2wL0vzReM066jTIe9t6tmjLBdL1hhuriGMbXW8QKMCi7GQhkhU7ExnxFfwIz yu2QoKxZevUk0570nhwMOp4QxveD+dz6M2p/Lpz0XaJWxHR1aqbtS2EtSR1kZkag XLsSDV+EuqU/R/OOsdkvOQhYBR/ygJ/fFGJf+GBzrJeuY+uEu+XwvTces3RKnkqm HjLl0X1pKOZy0KbENcK2i+JBVIm8oH1LPiXPrsFJ8NgFlCbEGTvf12bZqjlrI16d Fcy2j/cALsQxTZWl0YWEW6D1w0LS2SNGTKT7bI+5FSVF+U9t6SI= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:39 2024 by rpki-client on console-ams.rpki-client.org