$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: 73G0DxCbKgBMGtC/Lo3Bd0mI6MQ1+oHsyliBD5ehQgE= Subject key identifier: 27:27:B9:FC:5E:A6:49:07:DC:C4:29:4F:BC:86:22:C4:F9:88:23:04 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 61737A8A763945A607FFB70BB778A9AD622EAC36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 041E Signing time: Thu 21 Nov 2024 19:51:05 +0000 Manifest this update: Thu 21 Nov 2024 19:46:05 +0000 Manifest next update: Sun 24 Nov 2024 21:30:05 +0000 Files and hashes: 1: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: r4bbE3J74imEfGNc3Yq/RkOZJXcnua5imBb7qm1BGas=) 2: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: tUMAzKUotcYAUbtUMTgoFxHGBwvsyfndePzkuDEdLXs=) 3: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: FULqUc9OVfsHFelY/OWJ9v0pOikh2oi0bwKOdwPWf1U=) 4: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: T2dV9ECct1Ud7fOAgoF7v8UJVDJx36l7KpwFXhp6Z8U=) 5: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: irZR48VDhc2hc41mkd8akfhrTGrqLIWGk08gbYt8OLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 21:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:73:7a:8a:76:39:45:a6:07:ff:b7:0b:b7:78:a9:ad:62:2e:ac:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Nov 21 19:46:05 2024 GMT Not After : Nov 24 21:30:05 2024 GMT Subject: CN=2727B9FC5EA64907DCC4294FBC8622C4F9882304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:77:ef:9d:36:27:12:99:91:b2:d7:d4:b6: c2:57:7d:3c:f3:88:58:64:10:5c:98:49:32:b1:4e: 0f:82:a1:47:07:c0:ea:73:94:47:16:19:b4:1c:6c: f6:b5:3c:9f:26:46:fb:8a:f1:f4:7b:06:a1:97:22: 36:bd:6d:0e:5a:dc:ac:4c:fb:c1:f8:49:4b:06:69: ad:ab:2f:f2:3d:4f:41:59:47:cc:9e:ae:d6:9e:70: 97:bc:01:d6:c3:0f:70:76:ad:ad:bb:27:fa:e6:65: e9:91:34:05:19:ca:6f:00:05:23:88:17:73:8f:88: bf:b4:57:97:62:45:d0:75:8e:e7:ad:07:c8:b2:81: 02:74:ae:9c:40:37:98:2a:f2:40:d9:0b:c9:58:21: 1c:d0:ff:99:39:5c:c1:34:1b:dd:52:81:72:f7:e7: 60:d7:c4:72:41:b7:89:17:c2:0d:45:39:a5:b6:06: a9:ab:4b:ab:4b:da:4e:c0:04:47:36:c3:e5:94:8c: 52:dd:ca:2b:c7:79:93:86:49:bb:df:d0:db:d5:90: d8:31:81:5a:ad:c6:b9:98:cf:14:b1:aa:6f:dc:d5: 84:0c:d0:73:6e:85:c3:86:02:2b:df:10:51:70:61: d6:36:4e:da:25:a8:c8:6c:71:5f:2c:bf:c4:c2:e4: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:27:B9:FC:5E:A6:49:07:DC:C4:29:4F:BC:86:22:C4:F9:88:23:04 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:43:1c:5e:c7:42:4f:c0:d6:ab:87:e7:e0:32:62:56:99:61: 54:c4:8b:25:f1:4e:fd:87:ab:17:db:73:5b:f4:83:d9:1f:a9: 33:f2:2a:e8:fa:13:e9:b9:a2:9a:a4:7c:bc:68:ab:b4:b8:1d: c4:65:11:d6:03:a5:0e:11:d2:19:c3:bd:35:cb:b9:5b:0f:c1: cf:a1:d7:64:01:50:a2:13:1c:ca:e1:45:ae:fd:74:c1:7c:99: 7a:a5:e1:43:0b:9c:bc:a6:2a:84:1a:ba:73:72:09:da:41:70: 60:fb:0a:bb:19:20:d0:19:3d:8b:26:3a:2b:81:a0:58:03:e9: 02:b2:f2:b4:13:58:41:cd:89:17:96:7d:f1:80:1d:f1:b0:03: 9d:80:f9:b6:d1:4d:1e:e8:2e:42:f1:4e:3b:a0:c6:de:cd:34: 0e:ea:e6:c6:ea:e2:14:d9:b7:77:e0:0e:bb:79:4c:53:e7:37: e7:70:6b:ff:0e:83:1e:20:60:cf:13:83:56:99:6f:f8:47:c8: 28:5a:df:37:f4:82:d3:c5:7b:2f:3a:18:d3:ef:c9:c0:fb:34: 05:92:1a:55:0f:ed:29:9a:79:8f:d4:5c:00:f1:91:18:ee:33: c8:62:b1:97:da:04:be:e6:f9:e2:05:51:c9:3e:b5:02:6c:f3: d6:de:4b:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXN6inY5RaYH/7cLt3iprWIurDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNDExMjExOTQ2MDVaFw0yNDExMjQyMTMwMDVaMDMxMTAvBgNV BAMTKDI3MjdCOUZDNUVBNjQ5MDdEQ0M0Mjk0RkJDODYyMkM0Rjk4ODIzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfnfvnTYnEpmRstfUtsJXfTzz iFhkEFyYSTKxTg+CoUcHwOpzlEcWGbQcbPa1PJ8mRvuK8fR7BqGXIja9bQ5a3KxM +8H4SUsGaa2rL/I9T0FZR8yertaecJe8AdbDD3B2ra27J/rmZemRNAUZym8ABSOI F3OPiL+0V5diRdB1juetB8iygQJ0rpxAN5gq8kDZC8lYIRzQ/5k5XME0G91SgXL3 52DXxHJBt4kXwg1FOaW2BqmrS6tL2k7ABEc2w+WUjFLdyivHeZOGSbvf0NvVkNgx gVqtxrmYzxSxqm/c1YQM0HNuhcOGAivfEFFwYdY2TtolqMhscV8sv8TC5P7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJye5/F6mSQfcxClPvIYixPmIIwQwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANpDHF7HQk/A1quH5+AyYlaZYVTEiyXxTv2H qxfbc1v0g9kfqTPyKuj6E+m5opqkfLxoq7S4HcRlEdYDpQ4R0hnDvTXLuVsPwc+h 12QBUKITHMrhRa79dMF8mXql4UMLnLymKoQaunNyCdpBcGD7CrsZINAZPYsmOiuB oFgD6QKy8rQTWEHNiReWffGAHfGwA52A+bbRTR7oLkLxTjugxt7NNA7q5sbq4hTZ t3fgDrt5TFPnN+dwa/8Ogx4gYM8Tg1aZb/hHyCha3zf0gtPFey86GNPvycD7NAWS GlUP7SmaeY/UXADxkRjuM8hisZfaBL7m+eIFUck+tQJs89beSw8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org