$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: PYzh7n4/goJQnKscq6HTNkqK8ZzaIe6uiIIf7zD+3Go= Subject key identifier: 26:37:A4:E5:65:22:81:D8:78:D1:6A:27:75:D3:B9:C0:7A:8F:63:0C Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 0953E478D71624C6DAC5FFFE1CBC3DF0AEBAD587 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 02A5 Signing time: Thu 21 Nov 2024 12:01:44 +0000 Manifest this update: Thu 21 Nov 2024 11:56:44 +0000 Manifest next update: Sun 24 Nov 2024 12:39:44 +0000 Files and hashes: 1: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: 6VJ/MYCO9xuGaO2E0r07+5Yt+FbEnGyN0t5eMGpo0s4=) 2: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: a7HHXosmkdbcxkht7G/H33DH27Q6JBrJtA+yzgqxOFc=) 3: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 4nF39wRALqFShI2k467oN5qmtzcgwppZaMcdszyLsyY=) 4: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: 9mvwB+Ook70fsomsL5rBOKlk077qIgjq42/zbahljiA=) 5: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: LsAYTUQr5As8qfFqTa+1DZCPoeyEavqXAP87UR2mlIE=) 6: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: DevRUOBrBnLuFdFg+uPjOCH/cIZdiHwciBZvhhEle6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:53:e4:78:d7:16:24:c6:da:c5:ff:fe:1c:bc:3d:f0:ae:ba:d5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Nov 21 11:56:44 2024 GMT Not After : Nov 24 12:39:44 2024 GMT Subject: CN=2637A4E5652281D878D16A2775D3B9C07A8F630C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:a9:f0:02:28:61:17:08:01:5a:8c:2b:03: f7:4e:3b:86:59:30:eb:9e:8d:0b:09:9f:65:69:cc: bd:23:33:3e:e2:89:67:70:ab:e7:1c:c9:a0:a2:18: ae:2a:e6:b0:97:be:12:e4:7b:72:3a:f2:03:1f:d9: b4:05:06:d6:38:f3:2b:9c:4f:a5:5a:25:e9:c4:39: de:26:a5:38:15:2b:10:9f:fb:58:b2:fa:d2:0b:3e: d3:d7:02:03:5f:2e:95:95:07:f3:f2:e1:af:e8:c9: 09:1d:95:8e:db:53:67:b4:72:28:83:93:db:ea:b1: 4d:54:66:43:b6:99:92:4a:95:d2:6a:97:af:07:7c: f9:31:9b:60:72:e1:89:98:51:74:3a:f3:d7:4b:8e: db:3f:8a:d8:a2:d8:2b:d2:c6:c2:7c:62:89:90:4d: 14:1b:1c:6c:19:d2:70:bf:b7:b6:0f:cf:ce:20:19: 6c:65:1b:43:39:38:eb:56:65:38:65:04:41:5c:0b: 52:c7:06:62:1e:0f:4d:fb:4f:ed:e2:d3:72:0c:2f: 64:61:5e:99:08:3f:ae:2b:cc:2d:bb:f5:00:4b:99: ec:a5:b6:2b:2f:0a:ef:6e:98:1d:ac:45:4d:c3:56: c4:80:7a:ba:13:f1:73:3c:6e:4d:c7:76:b9:6a:f3: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:37:A4:E5:65:22:81:D8:78:D1:6A:27:75:D3:B9:C0:7A:8F:63:0C X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:a2:92:d2:8f:cc:35:aa:da:05:10:55:0a:bc:23:f6:eb:e3: 28:ad:2a:fc:06:f3:99:ab:c1:a1:e0:8b:c2:3a:bb:0b:0c:67: 67:17:c3:fb:f8:9f:35:0d:7f:48:ed:42:2f:a9:b9:1a:6c:63: aa:97:b8:f6:cc:06:3f:9e:e0:da:6f:98:ad:ba:0b:b7:39:1b: 12:17:92:34:a9:89:aa:8a:32:b6:ef:75:7a:75:84:6d:06:0d: e6:a0:ba:cc:99:96:3d:cc:e4:5f:35:94:05:6d:3a:eb:eb:87: a8:65:13:ea:5f:6c:c2:07:02:87:79:e2:fe:1a:04:e6:76:9b: d7:69:8b:e7:6b:e8:3b:8d:93:97:6d:63:99:84:1c:09:d2:6f: 01:d7:9b:8c:f8:db:e3:15:3b:d2:54:12:55:67:85:0a:ce:43: 2e:11:04:0a:2e:e4:f4:c1:64:31:cf:71:84:8d:68:7e:f7:a1: 81:50:59:35:68:51:f8:31:b0:8d:f9:2d:ee:d7:71:b0:71:b7: f5:00:63:23:97:ac:6c:d9:de:12:a4:e0:63:d5:23:c1:3b:7c: 21:a1:dc:b4:4a:fc:4d:c2:d0:99:bc:8a:6a:67:6f:d4:39:ad: 07:eb:a0:9e:48:25:2b:62:45:bb:c3:16:ed:72:86:e5:7d:16: 10:c3:35:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVPkeNcWJMbaxf/+HLw98K661YcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNDExMjExMTU2NDRaFw0yNDExMjQxMjM5NDRaMDMxMTAvBgNV BAMTKDI2MzdBNEU1NjUyMjgxRDg3OEQxNkEyNzc1RDNCOUMwN0E4RjYzMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIKnwAihhFwgBWowrA/dOO4ZZ MOuejQsJn2VpzL0jMz7iiWdwq+ccyaCiGK4q5rCXvhLke3I68gMf2bQFBtY48yuc T6VaJenEOd4mpTgVKxCf+1iy+tILPtPXAgNfLpWVB/Py4a/oyQkdlY7bU2e0ciiD k9vqsU1UZkO2mZJKldJql68HfPkxm2By4YmYUXQ689dLjts/itii2CvSxsJ8YomQ TRQbHGwZ0nC/t7YPz84gGWxlG0M5OOtWZThlBEFcC1LHBmIeD037T+3i03IML2Rh XpkIP64rzC279QBLmeyltisvCu9umB2sRU3DVsSAeroT8XM8bk3Hdrlq8+gTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJjek5WUigdh40WonddO5wHqPYwwwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISiktKPzDWq2gUQVQq8I/br4yitKvwG85mr waHgi8I6uwsMZ2cXw/v4nzUNf0jtQi+puRpsY6qXuPbMBj+e4NpvmK26C7c5GxIX kjSpiaqKMrbvdXp1hG0GDeagusyZlj3M5F81lAVtOuvrh6hlE+pfbMIHAod54v4a BOZ2m9dpi+dr6DuNk5dtY5mEHAnSbwHXm4z42+MVO9JUElVnhQrOQy4RBAou5PTB ZDHPcYSNaH73oYFQWTVoUfgxsI35Le7XcbBxt/UAYyOXrGzZ3hKk4GPVI8E7fCGh 3LRK/E3C0Jm8impnb9Q5rQfroJ5IJStiRbvDFu1yhuV9FhDDNXQ= -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:01 2024 by rpki-client on console-fra.rpki-client.org