$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: Rde+zDMrLAqmlLFAz5VTH0hfsjBwze5BiKPOunTMlKc= Subject key identifier: EC:F9:FF:FE:46:9A:E2:50:0B:BA:5A:F1:54:92:E0:CE:AF:BA:22:44 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 4A7BAB3DC7E9FD0ABA2AA7074B1BD5842A0F1592 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 0489 Signing time: Mon 25 Nov 2024 00:21:14 +0000 Manifest this update: Mon 25 Nov 2024 00:16:14 +0000 Manifest next update: Thu 28 Nov 2024 06:59:14 +0000 Files and hashes: 1: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: mCfvBpYLSdAFu/nC4eGJJ7NjapFwsMIxGFypXPxLn78=) 2: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: xpg71b3kpnQSGJPj2sU9VopRbKel8YsV3A2Q00O2D1E=) 3: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: Zqt9Hlh/od04z7ba0Qt6p0VU1aUw/YRYHF6UhSiZpuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7b:ab:3d:c7:e9:fd:0a:ba:2a:a7:07:4b:1b:d5:84:2a:0f:15:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Nov 25 00:16:14 2024 GMT Not After : Nov 28 06:59:14 2024 GMT Subject: CN=ECF9FFFE469AE2500BBA5AF15492E0CEAFBA2244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b4:bf:03:16:87:4b:02:ef:42:21:8a:1c:aa: 96:ce:bb:fb:9e:83:96:2d:8e:6c:28:b2:f2:de:c5: a6:d4:17:89:b7:92:11:8b:1f:19:e0:39:8a:0a:a8: 22:41:0c:24:43:40:63:95:57:2c:05:bb:1d:ec:07: 1b:0c:cb:cc:c9:23:69:6a:7a:46:eb:09:14:73:40: 9f:cc:d7:65:ea:70:dd:7f:55:8e:8f:04:8b:ad:7e: 8e:04:0d:04:15:30:f5:bd:fd:a6:ff:de:14:22:f9: ee:8d:aa:fc:94:d9:d7:08:bb:32:47:75:29:d2:96: 30:e6:0a:b2:b0:7d:1d:e4:52:04:d7:eb:9c:ea:cb: 28:87:01:57:53:90:0f:ee:a8:49:66:51:f3:4e:01: 51:44:2b:39:d7:f7:1c:13:f7:c9:89:53:c4:33:be: e8:b3:7c:d3:8d:a9:47:3c:ce:0e:0a:be:26:e4:90: b6:27:47:06:52:1f:7d:d1:e1:f8:68:fa:cf:21:19: 00:0f:ec:fa:6a:14:b8:d4:6d:ea:b3:30:4b:0f:61: ea:c4:47:23:b0:16:18:f3:2f:94:c2:d9:6f:39:6f: a1:60:db:ad:93:bc:90:f1:c3:4f:18:f2:6f:a2:30: 53:9e:fe:15:11:3e:21:40:e4:19:fa:18:ae:08:c6: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F9:FF:FE:46:9A:E2:50:0B:BA:5A:F1:54:92:E0:CE:AF:BA:22:44 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:2f:d1:f7:9b:98:2e:2c:50:c8:1f:21:95:4e:67:47:2f:cf: c6:6c:8c:44:c4:a2:7b:e2:0e:29:60:1a:bb:93:7a:33:1a:bd: 5b:2d:9d:9c:13:64:9d:28:78:99:df:99:27:de:52:0e:c0:6d: 81:eb:24:ef:b5:7a:eb:8a:48:b7:b3:4d:15:6a:de:9b:27:d4: 58:f0:96:3d:85:cc:2b:d5:ee:c3:69:66:0b:13:b0:18:90:b9: d1:34:1f:61:84:66:82:5c:b1:cb:57:5d:5e:ca:3a:5b:5b:96: ac:b1:a9:a3:00:a7:6c:bb:d6:98:11:0e:d9:71:d2:2b:6f:e9: a0:8b:d6:9a:a2:c8:e7:b0:ac:90:a8:9a:6a:68:af:1d:2a:2a: d6:1a:a7:9a:ae:c3:e7:0c:ae:4d:88:d5:89:40:d5:40:e9:6f: e5:b5:e7:a0:4f:bd:3e:c0:ba:fe:f7:26:7b:10:25:3e:fe:c5: 53:4f:4c:77:d6:b5:06:fa:40:16:df:f0:a8:a2:9f:e1:5c:87: 14:19:e7:5f:56:db:95:00:5b:eb:43:67:1d:49:b6:ff:96:43: 00:25:65:ae:4b:36:85:8d:b7:17:b5:97:80:70:7a:31:74:29: 99:6e:64:cb:b3:20:33:b2:b9:90:b3:e4:2c:c0:a0:7a:4a:7c: e9:b5:74:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnurPcfp/Qq6KqcHSxvVhCoPFZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNDExMjUwMDE2MTRaFw0yNDExMjgwNjU5MTRaMDMxMTAvBgNV BAMTKEVDRjlGRkZFNDY5QUUyNTAwQkJBNUFGMTU0OTJFMENFQUZCQTIyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6tL8DFodLAu9CIYocqpbOu/ue g5YtjmwosvLexabUF4m3khGLHxngOYoKqCJBDCRDQGOVVywFux3sBxsMy8zJI2lq ekbrCRRzQJ/M12XqcN1/VY6PBIutfo4EDQQVMPW9/ab/3hQi+e6NqvyU2dcIuzJH dSnSljDmCrKwfR3kUgTX65zqyyiHAVdTkA/uqElmUfNOAVFEKznX9xwT98mJU8Qz vuizfNONqUc8zg4KvibkkLYnRwZSH33R4fho+s8hGQAP7PpqFLjUbeqzMEsPYerE RyOwFhjzL5TC2W85b6Fg262TvJDxw08Y8m+iMFOe/hURPiFA5Bn6GK4IxoYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Pn//kaa4lALulrxVJLgzq+6IkQwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYv0febmC4sUMgfIZVOZ0cvz8ZsjETEonvi DilgGruTejMavVstnZwTZJ0oeJnfmSfeUg7AbYHrJO+1euuKSLezTRVq3psn1Fjw lj2FzCvV7sNpZgsTsBiQudE0H2GEZoJcsctXXV7KOltblqyxqaMAp2y71pgRDtlx 0itv6aCL1pqiyOewrJCommporx0qKtYap5quw+cMrk2I1YlA1UDpb+W156BPvT7A uv73JnsQJT7+xVNPTHfWtQb6QBbf8Kiin+FchxQZ519W25UAW+tDZx1Jtv+WQwAl Za5LNoWNtxe1l4BwejF0KZluZMuzIDOyuZCz5CzAoHpKfOm1dD8= -----END CERTIFICATE-----Generated at Mon Nov 25 00:59:34 2024 by rpki-client on console-ams.rpki-client.org