$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft File: C453630F1ABE5FF992F948A75DB4587776AD02EC.mft (raw, json) Hash identifier: 9NkuBvdYgYgnhLtoIk2Dyvs3GOQc3wWyOUxhma8FkBI= Subject key identifier: F9:CD:E7:80:AF:DE:5F:63:F1:80:22:DE:06:81:A8:B3:13:E6:4D:34 Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 1E36F71DBA3BDC37A623B45DE940F4553BB23280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft Manifest number: 5B Signing time: Thu 21 Nov 2024 16:21:07 +0000 Manifest this update: Thu 21 Nov 2024 16:16:07 +0000 Manifest next update: Sun 24 Nov 2024 18:37:07 +0000 Files and hashes: 1: C453630F1ABE5FF992F948A75DB4587776AD02EC.crl (hash: ce/NmuZPqG9Lqsj4h8wFKPU5PvmUfjN/zreQX2OT89E=) 2: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: wamhsBz//EPBaIxlON2oWzeWgxlr1NAD3XrCOJ7CCzY=) 3: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: HWv43/lGQA3zuN61fiauVO9bfPbiLEUzUDy28en+btM=) 4: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: 0DOfWeqjfqxK+dz4JWxf20Rpc5VV4htMDEtmcjdPHYI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:36:f7:1d:ba:3b:dc:37:a6:23:b4:5d:e9:40:f4:55:3b:b2:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Nov 21 16:16:07 2024 GMT Not After : Nov 24 18:37:07 2024 GMT Subject: CN=F9CDE780AFDE5F63F18022DE0681A8B313E64D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:00:3d:f7:59:85:b7:53:89:4a:cc:ea:07: 4a:85:b6:a7:a9:40:e4:2c:a0:71:88:5b:39:2e:99: bb:34:21:59:76:44:c9:a4:36:6e:5b:af:ed:82:ae: 6b:19:f3:6a:ab:b8:73:35:b8:d7:af:7d:83:09:72: 8f:7f:48:b0:fa:5a:66:95:b6:62:70:c0:a3:cf:6b: fb:25:e7:fb:12:7c:9b:82:e7:d0:cb:39:25:0a:e8: 27:77:94:b4:1d:a3:a6:94:1c:d9:22:5b:37:62:15: 6d:d2:51:86:e0:9e:60:5f:30:58:d2:b3:9b:ba:ba: 1c:00:57:92:a7:77:7d:2d:f5:f9:45:20:b5:0c:51: f2:4a:d6:3d:0e:e5:f6:66:10:5f:6a:d1:43:9c:54: 1a:a6:62:2a:41:a7:d3:ce:e2:85:56:bb:69:a9:47: 06:02:d1:f2:26:fd:c6:95:f7:fe:e2:dc:c9:fc:1d: 3e:45:11:a4:66:c0:91:6a:91:3d:95:2e:f3:31:32: 92:0e:b4:6d:5e:d4:41:f4:79:e5:f3:97:65:f7:1a: fa:28:33:1e:f5:fe:ce:1a:ef:86:26:ed:c7:47:5e: 85:dc:03:1b:73:83:fa:17:2b:d3:c8:ba:dd:6f:c5: 56:ab:56:df:df:17:bf:9c:93:28:30:c5:33:2e:7b: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CD:E7:80:AF:DE:5F:63:F1:80:22:DE:06:81:A8:B3:13:E6:4D:34 X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:c5:08:c9:69:e9:42:3e:1a:77:68:d0:a6:0e:31:32:2f:8a: 1b:ef:4b:c2:53:23:e2:ae:c0:e9:0e:7c:c8:2d:69:37:48:a2: f3:22:e4:90:33:d2:33:0a:98:de:9f:66:4b:4a:f2:2c:02:fb: d8:cb:02:e9:56:35:f0:e2:1b:e9:c8:f8:2f:fa:4e:6c:86:18: 82:ca:6f:9d:b9:39:6f:e9:38:35:9c:60:60:b0:1b:64:06:5b: 84:4e:81:77:3c:a6:d0:cc:c6:b7:9b:86:be:18:ed:87:e0:a7: 7b:fc:f6:44:71:41:55:03:81:34:ce:e1:8b:bd:7e:89:6f:e6: 08:1a:01:a0:cf:3f:65:c2:cf:a4:84:55:0d:b3:2c:81:36:8a: 34:13:fc:8c:38:33:f5:8e:61:be:94:fa:9a:ec:4c:0b:96:93: a2:93:ce:da:38:d1:fe:9a:df:ad:fa:60:f0:ff:97:13:f1:80: 5c:39:9e:d9:0c:a4:63:4b:53:9f:50:8b:80:30:83:a6:0d:4d: c7:59:ab:cc:49:7f:5e:ac:bc:7e:bc:03:0a:46:d6:f7:f0:20: b2:6e:01:bc:fe:d0:24:0f:6e:b1:1a:e1:60:0e:3e:0c:f0:f1: c7:06:cc:4f:6b:65:a6:11:c9:e9:3a:f8:d8:9d:0e:c2:7f:4c: 9f:97:cf:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjb3Hbo73DemI7Rd6UD0VTuyMoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNDExMjExNjE2MDdaFw0yNDExMjQxODM3MDdaMDMxMTAvBgNV BAMTKEY5Q0RFNzgwQUZERTVGNjNGMTgwMjJERTA2ODFBOEIzMTNFNjREMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4igA991mFt1OJSszqB0qFtqep QOQsoHGIWzkumbs0IVl2RMmkNm5br+2CrmsZ82qruHM1uNevfYMJco9/SLD6WmaV tmJwwKPPa/sl5/sSfJuC59DLOSUK6Cd3lLQdo6aUHNkiWzdiFW3SUYbgnmBfMFjS s5u6uhwAV5Knd30t9flFILUMUfJK1j0O5fZmEF9q0UOcVBqmYipBp9PO4oVWu2mp RwYC0fIm/caV9/7i3Mn8HT5FEaRmwJFqkT2VLvMxMpIOtG1e1EH0eeXzl2X3Gvoo Mx71/s4a74Ym7cdHXoXcAxtzg/oXK9PIut1vxVarVt/fF7+ckygwxTMue3YPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+c3ngK/eX2PxgCLeBoGosxPmTTQwHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4 Nzc3NkFEMDJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMnFCMlp6UI+Gndo0KYOMTIvihvvS8JTI+Ku wOkOfMgtaTdIovMi5JAz0jMKmN6fZktK8iwC+9jLAulWNfDiG+nI+C/6TmyGGILK b525OW/pODWcYGCwG2QGW4ROgXc8ptDMxrebhr4Y7Yfgp3v89kRxQVUDgTTO4Yu9 folv5ggaAaDPP2XCz6SEVQ2zLIE2ijQT/Iw4M/WOYb6U+prsTAuWk6KTzto40f6a 3636YPD/lxPxgFw5ntkMpGNLU59Qi4Awg6YNTcdZq8xJf16svH68AwpG1vfwILJu Abz+0CQPbrEa4WAOPgzw8ccGzE9rZaYRyek6+NidDsJ/TJ+Xz9g= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org