$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: iXuaMWsihedb/dPVyDkQUf3NQ4Wyze0VQ+YHytGeKOc= Subject key identifier: 4C:16:77:99:A1:E5:C2:CA:69:8D:E8:8F:41:B7:CC:CA:42:70:68:38 Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 0828FE37E720A77B83DC52C19EB6D3993723911E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 0484 Signing time: Fri 22 Nov 2024 08:31:47 +0000 Manifest this update: Fri 22 Nov 2024 08:26:47 +0000 Manifest next update: Mon 25 Nov 2024 17:31:47 +0000 Files and hashes: 1: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: ayWxpT8yZl1hhBQSv+ekeM1m9KqAyHCeTFs073YkKvk=) 2: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: sLu7RqiRGzYnQBrSMZHIelJFjQSR1Hs3pZgdklGokNI=) 3: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: 0EdQn3Y6HL0C7K/wWB9rXN6cQ4xMMl1/NLEbhLCGGII=) 4: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: IQUiR0JlPz/+uykrQRdA9C7xBIr9HwH3lFNNO16XUss=) 5: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: j8AfGsExf9Z1d3r0akft+56xnsz2WsBFBLfSdrsxdS8=) 6: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: AzI/2bJav2Aj60o9IPwEY1AeK6Tbpch8Oq7GrpIqn/o=) 7: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: DhsUJ+0QPmB3umy124lOVAjIsaGFsn7lzyzelnOboow=) 8: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: PxZnjWPfJrMlHFV+vFpu4lzDV/NqacyuVyPH6Bygl6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:28:fe:37:e7:20:a7:7b:83:dc:52:c1:9e:b6:d3:99:37:23:91:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Nov 22 08:26:47 2024 GMT Not After : Nov 25 17:31:47 2024 GMT Subject: CN=4C167799A1E5C2CA698DE88F41B7CCCA42706838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:ef:e5:be:ec:60:b2:04:dd:c8:26:5d:35: 15:51:1b:62:1f:4a:b7:94:d2:e2:d4:64:db:ca:8f: da:b9:3c:02:9f:ea:02:b1:1b:b4:ff:b9:6b:20:3c: 20:dc:a8:dc:8c:e6:34:04:69:60:e4:9e:bb:80:61: b7:ac:ee:46:b9:11:86:e6:cd:2d:86:16:d6:68:64: 8a:5c:b6:fd:6c:c8:36:8e:17:d3:c1:eb:06:0e:c1: 12:56:07:a4:16:10:88:20:27:50:87:d8:90:6f:3d: 23:e1:81:d9:5c:c2:fe:a6:e7:9f:1d:82:5a:54:68: 17:ca:6f:fe:a3:1c:c0:07:60:24:21:2a:4c:58:c2: be:9b:eb:f9:cf:0d:45:7a:ce:c0:f6:9f:ec:fc:ec: f8:26:1a:5d:d3:06:b0:0b:5c:b8:6e:4f:58:c9:85: d3:c3:c8:13:51:32:e2:18:d9:b0:8f:a9:24:ed:aa: 41:01:45:3f:5b:c4:79:3f:9d:18:fd:52:3c:c6:52: 23:5a:f2:93:5d:05:61:e5:fd:2f:97:e7:a9:01:95: d8:23:69:74:5b:e8:46:0f:3d:33:a9:27:8d:77:27: d7:bd:fb:14:c6:14:f8:32:3c:55:08:fc:32:bc:63: 32:d2:7f:68:e5:9a:c6:ed:0e:50:ed:b7:08:38:a8: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:16:77:99:A1:E5:C2:CA:69:8D:E8:8F:41:B7:CC:CA:42:70:68:38 X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c7:d7:c6:56:e1:27:e2:de:13:73:05:c6:da:08:32:ac:a6: bd:29:45:40:a1:96:ff:1c:ec:9d:e1:9e:ad:66:1a:6d:3f:d6: d5:56:39:05:6a:9c:ea:94:cc:b4:73:f4:ae:bf:5b:91:da:41: 64:75:a5:50:6d:bc:1c:c2:ad:73:bf:9c:9e:e7:52:d8:95:20: c0:f7:34:0a:7e:ca:62:af:53:de:3d:8a:1f:74:4f:a7:2e:43: 4a:72:25:59:00:92:ba:f7:30:1f:1f:81:5c:7b:89:6f:ad:a8: 89:96:3b:76:84:0e:a9:71:64:8e:60:37:ed:8a:b5:79:58:af: a4:00:43:67:7f:f7:37:80:90:e4:7c:dc:e9:a6:a6:ad:59:4c: 46:d0:d8:79:57:8b:25:b5:e1:3a:bb:53:de:5c:c9:7a:55:35: 40:61:38:17:ac:e4:34:b4:25:6e:16:59:1d:f0:3c:61:88:f8: cb:df:f0:ae:7e:4f:d0:cb:2b:5d:12:2e:4c:5e:e2:68:31:82: 07:59:18:e0:2c:71:70:de:bb:c8:34:b3:d7:2f:b7:eb:34:c8: ab:5a:bd:4c:4a:47:c3:90:44:49:b8:08:09:d2:8f:08:e6:1d: 17:f9:1b:f4:50:06:23:99:50:e0:0b:88:32:f6:f7:56:d8:8b: b4:32:cb:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCj+N+cgp3uD3FLBnrbTmTcjkR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNDExMjIwODI2NDdaFw0yNDExMjUxNzMxNDdaMDMxMTAvBgNV BAMTKDRDMTY3Nzk5QTFFNUMyQ0E2OThERTg4RjQxQjdDQ0NBNDI3MDY4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHH+/lvuxgsgTdyCZdNRVRG2If SreU0uLUZNvKj9q5PAKf6gKxG7T/uWsgPCDcqNyM5jQEaWDknruAYbes7ka5EYbm zS2GFtZoZIpctv1syDaOF9PB6wYOwRJWB6QWEIggJ1CH2JBvPSPhgdlcwv6m558d glpUaBfKb/6jHMAHYCQhKkxYwr6b6/nPDUV6zsD2n+z87PgmGl3TBrALXLhuT1jJ hdPDyBNRMuIY2bCPqSTtqkEBRT9bxHk/nRj9UjzGUiNa8pNdBWHl/S+X56kBldgj aXRb6EYPPTOpJ413J9e9+xTGFPgyPFUI/DK8YzLSf2jlmsbtDlDttwg4qJ+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTBZ3maHlwsppjeiPQbfMykJwaDgwHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3H18ZW4Sfi3hNzBcbaCDKspr0pRUChlv8c 7J3hnq1mGm0/1tVWOQVqnOqUzLRz9K6/W5HaQWR1pVBtvBzCrXO/nJ7nUtiVIMD3 NAp+ymKvU949ih90T6cuQ0pyJVkAkrr3MB8fgVx7iW+tqImWO3aEDqlxZI5gN+2K tXlYr6QAQ2d/9zeAkOR83Ommpq1ZTEbQ2HlXiyW14Tq7U95cyXpVNUBhOBes5DS0 JW4WWR3wPGGI+Mvf8K5+T9DLK10SLkxe4mgxggdZGOAscXDeu8g0s9cvt+s0yKta vUxKR8OQREm4CAnSjwjmHRf5G/RQBiOZUOALiDL291bYi7Qyy3Q= -----END CERTIFICATE-----Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org