$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: EMwgJYgz2II1JG24T7z403m/prAU1xwXCZQKeffcFWg= Subject key identifier: A3:D3:DF:82:6D:A9:FA:E3:B9:67:59:9A:CC:FC:21:A8:A6:9C:93:5F Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 63B0B83E60ABF6C215501DBB7ADC5CEEE8365A36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 045B Signing time: Mon 25 Nov 2024 07:00:55 +0000 Manifest this update: Mon 25 Nov 2024 06:55:55 +0000 Manifest next update: Thu 28 Nov 2024 07:54:55 +0000 Files and hashes: 1: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: ls44OG0TlScZudQjWi2hOoJfckGlkJcK1X+4UZNTijw=) 2: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ZQI865FxGh10FmxCAL3EfpXRTSxcXYfsdjKIE28NGOQ=) 3: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: TNpUK4dJFrU18RMU9Zgd4YTXy5oNCmoEosozxJBeWMA=) 4: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: Y7gaI82AtSVkUAooIjt8Q1dotIyDgbsOqmmCJyDGcb4=) 5: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: ZULjTp4+NYAssAp0CZz3FEnycGBYt+NoPkGuUHEyL7E=) 6: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: y5FW1sgnfU+HeLMU5Bqbn06zuZEAtwFBXzjZotq5ERw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 07:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b0:b8:3e:60:ab:f6:c2:15:50:1d:bb:7a:dc:5c:ee:e8:36:5a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Nov 25 06:55:55 2024 GMT Not After : Nov 28 07:54:55 2024 GMT Subject: CN=A3D3DF826DA9FAE3B967599ACCFC21A8A69C935F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:5a:45:3e:6e:38:22:e8:30:5a:04:d9:24: 57:ca:ae:72:7f:1d:ae:c5:d8:1d:46:88:ab:3e:a6: 82:81:68:78:bf:cb:38:8e:3c:81:bd:32:51:14:b5: fc:48:6f:99:db:7f:72:34:73:fb:75:97:b2:a9:09: 13:00:de:fb:db:86:73:01:35:b7:c9:a9:45:41:ac: 04:c7:6b:95:60:15:7e:41:e0:f6:c3:ad:43:9e:16: 4f:0c:b1:9d:94:59:03:f5:1e:30:fd:fe:5f:3c:81: b4:54:90:58:be:01:6e:74:2c:87:fb:3a:ed:fe:f3: b5:c0:b9:67:71:5c:c7:40:fa:b4:4c:29:04:1e:74: 87:5f:54:7a:5d:d1:f3:cf:ae:e3:b7:27:77:26:51: f3:02:87:49:49:14:82:53:d8:3f:b2:83:f6:25:4d: f7:4d:1c:34:51:97:e8:2c:98:fd:74:e6:23:6d:5a: e6:ff:96:45:e3:de:0e:b0:56:23:b1:9b:d6:c4:ac: 36:42:23:ef:82:57:46:fe:d7:b4:fe:58:9a:08:c1: 38:b1:f6:85:97:80:65:b6:f2:b3:0c:b9:77:e6:9b: 89:d5:65:37:8c:f1:db:29:42:c3:02:00:54:67:bd: 23:5e:b9:49:3e:09:09:0c:14:a4:18:36:7b:6f:ec: d5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D3:DF:82:6D:A9:FA:E3:B9:67:59:9A:CC:FC:21:A8:A6:9C:93:5F X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:25:fb:6a:9f:ee:65:c6:97:bf:d7:2b:d0:ee:be:cd:98:58: ba:5e:6b:bf:5b:d5:e4:d7:93:cb:fa:44:6c:0c:5d:c6:16:0d: 87:46:c2:e6:b9:9e:00:68:4f:5b:95:13:c4:85:85:4f:56:ad: 56:3f:99:ac:ef:a8:0b:b9:a4:0c:e9:60:d7:aa:15:87:a4:f6: 69:90:e1:0e:72:2a:f5:9b:a3:eb:be:88:3c:26:3b:1d:9f:e7: e6:24:0b:c1:f3:94:03:81:a1:af:54:7f:19:9e:e3:02:c3:ea: e4:8a:35:90:ad:78:de:98:4c:75:b1:0a:e9:e7:dc:13:de:6c: 48:66:8f:fa:36:cc:45:8c:92:9b:68:39:49:3a:49:e6:28:7d: 02:69:9e:d7:bf:eb:e4:2f:5c:a7:ce:ee:f4:b9:c7:61:13:86: a7:b8:1f:c9:79:fd:cb:ec:4c:1f:1a:5e:d5:c5:01:1e:37:db: 41:c0:98:e5:c1:4d:48:a6:e7:53:61:22:86:4c:50:ba:f8:04: a0:70:0c:e5:75:61:2b:3c:a9:05:ef:3b:8c:61:61:02:94:06: 94:46:f8:f7:ad:3c:30:d7:b1:a9:56:7e:cb:ec:65:cd:e8:08: e7:2f:2b:08:51:04:68:2d:79:9c:23:b3:45:e1:de:4f:17:a9: 02:08:2d:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7C4PmCr9sIVUB27etxc7ug2WjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNDExMjUwNjU1NTVaFw0yNDExMjgwNzU0NTVaMDMxMTAvBgNV BAMTKEEzRDNERjgyNkRBOUZBRTNCOTY3NTk5QUNDRkMyMUE4QTY5QzkzNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qlpFPm44IugwWgTZJFfKrnJ/ Ha7F2B1GiKs+poKBaHi/yziOPIG9MlEUtfxIb5nbf3I0c/t1l7KpCRMA3vvbhnMB NbfJqUVBrATHa5VgFX5B4PbDrUOeFk8MsZ2UWQP1HjD9/l88gbRUkFi+AW50LIf7 Ou3+87XAuWdxXMdA+rRMKQQedIdfVHpd0fPPruO3J3cmUfMCh0lJFIJT2D+yg/Yl TfdNHDRRl+gsmP105iNtWub/lkXj3g6wViOxm9bErDZCI++CV0b+17T+WJoIwTix 9oWXgGW28rMMuXfmm4nVZTeM8dspQsMCAFRnvSNeuUk+CQkMFKQYNntv7NXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo9Pfgm2p+uO5Z1mazPwhqKack18wHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQl+2qf7mXGl7/XK9Duvs2YWLpea79b1eTX k8v6RGwMXcYWDYdGwua5ngBoT1uVE8SFhU9WrVY/mazvqAu5pAzpYNeqFYek9mmQ 4Q5yKvWbo+u+iDwmOx2f5+YkC8HzlAOBoa9Ufxme4wLD6uSKNZCteN6YTHWxCunn 3BPebEhmj/o2zEWMkptoOUk6SeYofQJpnte/6+QvXKfO7vS5x2EThqe4H8l5/cvs TB8aXtXFAR4320HAmOXBTUim51NhIoZMULr4BKBwDOV1YSs8qQXvO4xhYQKUBpRG +PetPDDXsalWfsvsZc3oCOcvKwhRBGgteZwjs0Xh3k8XqQIILZs= -----END CERTIFICATE-----Generated at Mon Nov 25 09:00:39 2024 by rpki-client on console-fra.rpki-client.org