$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: 3XLab9rwNa3yUs+yxVMcoARYOc75LsloTSS+m04sEi8= Subject key identifier: 57:D4:9E:FF:2F:BF:28:E4:62:29:56:32:FE:2C:16:F7:B5:4C:0E:1F Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 5949A2C7272381BC1FE1C72B1B6C0681EEB282E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 0185 Signing time: Thu 21 Nov 2024 05:01:30 +0000 Manifest this update: Thu 21 Nov 2024 04:56:29 +0000 Manifest next update: Sun 24 Nov 2024 09:34:29 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: NUPlEw08Zx7YoeB4OqO+Ox+lwPcpmhcKsBziz0RYTAM=) 2: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 5QmpoA9m0mmWsLSv00ogy7OAuITKadv3G3HLB3Oky3o=) 3: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: q/3DQEpTeKu5epDlvVY8O0/98AUfgu7RXU3qZhbGOCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:49:a2:c7:27:23:81:bc:1f:e1:c7:2b:1b:6c:06:81:ee:b2:82:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Nov 21 04:56:29 2024 GMT Not After : Nov 24 09:34:29 2024 GMT Subject: CN=57D49EFF2FBF28E462295632FE2C16F7B54C0E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:d8:24:83:7b:34:13:b9:91:b5:e2:b4:95: 0a:b1:b9:ac:cf:60:e9:10:d8:a6:1a:87:1e:1d:f9: 9e:c5:6e:d0:2b:1a:c9:e5:f8:d2:82:11:75:6b:57: 7b:2e:5a:95:7f:e4:d0:06:3f:ad:75:3d:96:3b:a6: 04:ff:5a:68:5b:d3:c9:13:bf:e0:91:71:4b:4c:aa: 14:72:98:b6:46:12:f5:0a:11:74:70:57:0f:c2:13: d4:30:2b:79:48:60:9b:f5:37:0f:4f:bf:d2:34:1f: 87:0a:33:21:f1:17:40:3f:cf:af:ef:1a:ca:f6:5f: 87:bd:c0:89:3a:a2:b0:c0:75:ad:c4:69:76:46:21: 29:6e:dc:64:c4:41:30:13:93:7d:f1:99:96:2a:c4: f8:d6:a9:4e:78:0f:65:ab:06:82:c4:39:58:2f:f8: 92:33:58:fd:67:95:a0:35:b8:f9:d1:1a:94:85:1c: d6:25:bd:50:6c:c3:90:79:7e:93:a4:82:87:6a:0b: 87:2d:ba:21:09:40:26:f3:62:d5:f5:99:d2:6b:35: 51:58:88:56:3a:79:c9:a2:49:9b:ae:d7:e6:cb:4b: a3:78:45:31:4b:95:51:96:ae:5b:26:70:e7:0b:19: be:57:46:28:d9:ee:c6:a2:cf:cd:58:a1:c0:01:af: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D4:9E:FF:2F:BF:28:E4:62:29:56:32:FE:2C:16:F7:B5:4C:0E:1F X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:15:bf:80:1e:48:2b:29:67:84:d3:d6:8a:22:65:d6:8b:75: 38:00:c7:47:ed:fa:78:b5:dd:78:4b:90:35:20:72:3e:4c:75: 2d:07:f6:b2:56:db:d3:6e:84:31:10:6c:9b:00:93:b1:91:15: ba:b4:2f:98:30:59:50:13:d4:40:f1:11:33:75:38:4b:9b:2b: a5:ab:82:97:c3:7a:b6:d6:3c:3b:0a:f6:4e:3d:f6:41:05:ad: 84:a9:26:71:81:35:11:f4:b0:38:e9:56:28:d7:79:0a:8b:0b: 40:d8:ab:09:09:60:aa:21:ff:3b:e4:0b:5e:de:7a:ca:21:90: 58:a3:7f:d5:b4:03:69:b8:a3:10:8b:84:8b:47:4f:bd:a2:f2: f5:b1:78:e7:1a:fc:50:6c:2d:e4:cd:49:cd:12:ce:59:77:3d: 2d:c5:57:da:fc:d4:77:01:c9:94:d9:72:6a:12:de:da:04:08: e5:09:72:83:65:bd:d5:f3:b7:36:0b:6a:ae:31:8b:47:ce:e7: 59:a4:cc:86:f4:53:07:2f:c4:08:5f:f5:e5:84:9b:aa:35:f1: c3:28:bb:4a:82:e5:5a:de:c3:e1:65:c5:b0:07:6b:99:41:3b: b5:20:05:bf:bb:55:65:25:81:a6:34:bc:66:2d:fc:dc:99:48: 3a:f3:16:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUmixycjgbwf4ccrG2wGge6ygucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNDExMjEwNDU2MjlaFw0yNDExMjQwOTM0MjlaMDMxMTAvBgNV BAMTKDU3RDQ5RUZGMkZCRjI4RTQ2MjI5NTYzMkZFMkMxNkY3QjU0QzBFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VNgkg3s0E7mRteK0lQqxuazP YOkQ2KYahx4d+Z7FbtArGsnl+NKCEXVrV3suWpV/5NAGP611PZY7pgT/Wmhb08kT v+CRcUtMqhRymLZGEvUKEXRwVw/CE9QwK3lIYJv1Nw9Pv9I0H4cKMyHxF0A/z6/v Gsr2X4e9wIk6orDAda3EaXZGISlu3GTEQTATk33xmZYqxPjWqU54D2WrBoLEOVgv +JIzWP1nlaA1uPnRGpSFHNYlvVBsw5B5fpOkgodqC4ctuiEJQCbzYtX1mdJrNVFY iFY6ecmiSZuu1+bLS6N4RTFLlVGWrlsmcOcLGb5XRijZ7saiz81YocABr1ZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV9Se/y+/KORiKVYy/iwW97VMDh8wHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoVv4AeSCspZ4TT1ooiZdaLdTgAx0ft+ni1 3XhLkDUgcj5MdS0H9rJW29NuhDEQbJsAk7GRFbq0L5gwWVAT1EDxETN1OEubK6Wr gpfDerbWPDsK9k499kEFrYSpJnGBNRH0sDjpVijXeQqLC0DYqwkJYKoh/zvkC17e esohkFijf9W0A2m4oxCLhItHT72i8vWxeOca/FBsLeTNSc0Szll3PS3FV9r81HcB yZTZcmoS3toECOUJcoNlvdXztzYLaq4xi0fO51mkzIb0UwcvxAhf9eWEm6o18cMo u0qC5Vrew+FlxbAHa5lBO7UgBb+7VWUlgaY0vGYt/NyZSDrzFho= -----END CERTIFICATE-----Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org