$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: jokfeUYlSDpncUMILSL9gaqlCqEqF7xVgrBTJfjIzsY= Subject key identifier: 29:09:35:42:FC:AC:B9:9D:EE:68:4D:E7:2D:9B:23:51:AF:ED:26:5E Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 3D44789F943AD10CC511D855581FFEEAFB7BE150 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 030A Signing time: Fri 22 Nov 2024 07:01:04 +0000 Manifest this update: Fri 22 Nov 2024 06:56:04 +0000 Manifest next update: Mon 25 Nov 2024 07:47:04 +0000 Files and hashes: 1: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: OSsyybAUMPUEKNEvDuD5IZwkifGl3d3mlIDqjGe2c5s=) 2: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: 6QGnVv2K5U5lISnVOT/h4jkMEh+NNaNufpn5Kwo3fQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:44:78:9f:94:3a:d1:0c:c5:11:d8:55:58:1f:fe:ea:fb:7b:e1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Nov 22 06:56:04 2024 GMT Not After : Nov 25 07:47:04 2024 GMT Subject: CN=29093542FCACB99DEE684DE72D9B2351AFED265E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:4b:75:7a:2e:b9:b4:a1:8a:54:13:01:a2: 2a:6c:c4:45:a7:c6:38:06:d9:76:25:0e:8c:61:bd: 6a:64:f9:0f:cf:f2:86:de:67:ff:aa:26:ee:ec:1e: ec:ce:48:ff:ba:4a:5b:b1:55:67:57:d5:c8:88:27: 66:8b:ae:99:e7:ab:6e:6a:04:74:06:0a:e4:42:a1: 60:5e:a8:c0:78:aa:67:08:ca:3b:f9:39:c0:38:49: 50:1c:73:20:db:14:ba:14:1e:48:0b:d7:e7:c3:a7: 90:8d:ac:e3:4f:dd:54:e3:ad:ce:2c:8a:cb:d6:44: 18:d3:8b:4c:81:bb:c9:7d:b8:e4:68:2c:1b:4b:6b: 86:f5:b1:e9:f8:4c:24:36:df:e1:b9:0c:87:93:b7: 5a:3b:b3:d6:09:83:fe:90:66:5d:33:13:9b:25:e9: 61:5d:94:05:d2:f9:e2:21:66:c9:cb:54:ca:82:67: 03:b3:49:08:e5:2e:06:ab:9e:b1:13:62:bc:da:d1: 2d:32:6f:bf:80:15:1a:7a:7a:f6:e0:3b:78:af:f1: a4:0e:10:16:8f:fd:f1:23:40:47:07:27:14:4b:8d: db:f4:2f:0c:0c:b6:03:2d:7d:b7:61:47:16:9c:73: 0c:6c:23:14:54:d8:ee:ee:10:70:79:d9:fc:6f:d1: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:35:42:FC:AC:B9:9D:EE:68:4D:E7:2D:9B:23:51:AF:ED:26:5E X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3c:86:23:dc:9a:9a:2d:d3:23:de:4c:aa:71:d0:db:ec:2a: d9:61:13:8e:d7:a5:0e:66:d6:0b:16:8e:ad:7c:d5:71:c4:f0: 0a:2b:4f:91:37:55:65:e7:c2:23:d0:7d:10:d5:62:05:f4:84: fc:ba:2e:6b:35:04:1a:42:d5:2d:72:13:00:ac:12:f7:f1:32: 97:48:3b:7c:ca:3d:ef:10:b0:9d:67:b8:b0:e3:d7:7b:68:39: c2:27:d5:db:3f:d2:1f:10:a6:d8:a0:ac:9e:43:44:cf:06:29: bf:6a:3c:b7:78:9e:a3:d6:24:eb:f8:53:72:3f:27:a6:c2:30: 68:73:aa:af:3d:1a:eb:5d:3b:f6:ba:84:10:a7:a6:ad:a2:7e: 89:7e:10:ea:89:0a:a0:04:4f:8c:4f:9c:2e:af:73:8d:af:c2: e9:82:03:5f:15:9a:0b:33:6f:33:7f:4a:fb:37:b4:c0:33:60: 8a:46:ae:7b:ef:a0:85:ea:46:16:d8:94:3c:be:68:1a:7b:e7: 62:5e:37:33:a5:d0:57:5f:d3:72:fc:6b:49:4d:4c:39:92:88: 52:2a:96:27:fa:69:dd:03:e9:11:af:93:5f:e5:ee:54:10:30: cd:9c:ea:76:a1:94:0f:9f:45:11:d5:6c:5b:ea:69:ae:28:ee: 5a:96:ff:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUR4n5Q60QzFEdhVWB/+6vt74VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNDExMjIwNjU2MDRaFw0yNDExMjUwNzQ3MDRaMDMxMTAvBgNV BAMTKDI5MDkzNTQyRkNBQ0I5OURFRTY4NERFNzJEOUIyMzUxQUZFRDI2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfz0t1ei65tKGKVBMBoipsxEWn xjgG2XYlDoxhvWpk+Q/P8obeZ/+qJu7sHuzOSP+6SluxVWdX1ciIJ2aLrpnnq25q BHQGCuRCoWBeqMB4qmcIyjv5OcA4SVAccyDbFLoUHkgL1+fDp5CNrONP3VTjrc4s isvWRBjTi0yBu8l9uORoLBtLa4b1sen4TCQ23+G5DIeTt1o7s9YJg/6QZl0zE5sl 6WFdlAXS+eIhZsnLVMqCZwOzSQjlLgarnrETYrza0S0yb7+AFRp6evbgO3iv8aQO EBaP/fEjQEcHJxRLjdv0LwwMtgMtfbdhRxaccwxsIxRU2O7uEHB52fxv0QKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQk1QvysuZ3uaE3nLZsjUa/tJl4wHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHY8hiPcmpot0yPeTKpx0NvsKtlhE47XpQ5m 1gsWjq181XHE8AorT5E3VWXnwiPQfRDVYgX0hPy6Lms1BBpC1S1yEwCsEvfxMpdI O3zKPe8QsJ1nuLDj13toOcIn1ds/0h8QptigrJ5DRM8GKb9qPLd4nqPWJOv4U3I/ J6bCMGhzqq89GutdO/a6hBCnpq2ifol+EOqJCqAET4xPnC6vc42vwumCA18Vmgsz bzN/Svs3tMAzYIpGrnvvoIXqRhbYlDy+aBp752JeNzOl0Fdf03L8a0lNTDmSiFIq lif6ad0D6RGvk1/l7lQQMM2c6nahlA+fRRHVbFvqaa4o7lqW/+Q= -----END CERTIFICATE-----Generated at Fri Nov 22 08:00:09 2024 by rpki-client on console-ams.rpki-client.org