$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: z+h8hiQih3xTGjaaWXD68a9u2+SBnboWOkrwGUgXoXo= Subject key identifier: D7:31:DC:29:D5:96:BB:B1:BC:78:99:3B:C3:FB:FD:8C:F7:35:BF:CF Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 4119CDEFB531C5AE2B55ACFA49FDBBF1704BA40D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 0231 Signing time: Sat 23 Nov 2024 21:42:31 +0000 Manifest this update: Sat 23 Nov 2024 21:37:31 +0000 Manifest next update: Wed 27 Nov 2024 07:18:31 +0000 Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 0vXpxdXBoxtpu0xcyCU+AYUkP5Qq7RrqqwsILvqbx7A=) 2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: cIWJPD4vFIaNN++xwCseSU+6qGyPGPbMFSdRGubDN50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:19:cd:ef:b5:31:c5:ae:2b:55:ac:fa:49:fd:bb:f1:70:4b:a4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Nov 23 21:37:31 2024 GMT Not After : Nov 27 07:18:31 2024 GMT Subject: CN=D731DC29D596BBB1BC78993BC3FBFD8CF735BFCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:80:b9:d2:67:fd:81:7f:bb:95:f7:f9:97: 2f:8d:0c:19:ff:18:61:8b:fa:28:62:31:c4:95:8a: f7:e3:88:d6:f3:72:cc:8e:f5:1d:0b:68:4c:ad:a9: 81:db:1b:62:d4:ef:ba:60:22:42:c7:89:b3:27:75: 0d:3d:2a:1c:35:63:f3:63:13:ec:b6:35:b8:14:9d: 09:ac:9f:e5:f2:04:6c:87:4e:2e:c0:19:da:6e:41: d8:1b:38:5a:e8:a3:c4:2f:41:4a:ad:9a:86:cc:16: ec:29:14:eb:6e:95:4c:2e:40:46:7d:20:08:84:a4: 18:b3:ed:fa:b1:e8:eb:42:a2:f2:6a:d9:b0:18:b2: 43:c6:62:68:79:be:8d:0b:c4:56:8c:a3:7a:e5:2a: 37:0c:a6:f8:34:69:f2:09:a4:bb:61:54:5f:92:53: 65:fc:f3:c0:90:e4:65:23:68:6d:a1:a6:c5:e3:a1: 6b:72:4f:6d:1f:6c:ed:d3:3d:c2:bc:b6:c4:20:46: ce:87:45:b3:42:9f:85:b2:ba:7e:f7:ca:95:61:29: e2:99:1f:e7:65:39:53:a9:32:74:1a:88:69:a0:77: e2:77:1e:bb:95:52:5e:74:2e:e2:91:e2:1f:30:56: 9a:07:2d:53:2a:30:02:00:0a:d7:70:fe:7f:ad:9b: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:31:DC:29:D5:96:BB:B1:BC:78:99:3B:C3:FB:FD:8C:F7:35:BF:CF X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6f:b7:7d:c6:4f:15:ba:8e:3a:f5:cc:66:aa:f4:b4:ca:d0: f7:87:fb:27:4a:d4:1e:ee:cb:49:00:56:7b:7e:a1:07:dc:eb: ca:d5:e7:6a:2d:3c:8a:2f:9a:eb:76:ec:fe:d1:8c:bd:21:2f: 8c:50:52:70:1d:04:6c:96:8a:e4:74:80:7b:27:d9:69:0a:2b: e3:97:96:2f:7f:7d:0b:c4:7d:0f:08:3f:1d:5e:7e:21:ab:a8: d4:84:9a:d5:b2:e3:89:41:74:f2:83:7d:82:38:96:22:d3:c2: 32:0f:05:24:93:4f:38:8d:34:54:81:6f:29:ea:95:b1:cb:95: 82:28:e1:69:5f:b4:ab:58:12:79:98:f9:f0:bc:d1:13:ec:5a: fa:5b:a6:4d:0a:dd:6f:a9:81:1c:bd:ed:32:f4:ed:9f:10:04: 26:aa:89:2d:77:cb:12:ff:be:d5:0e:02:67:58:14:fc:eb:5f: 01:9a:b1:0e:51:c9:0f:83:2a:69:49:2d:90:2e:b3:23:b8:31: b1:1d:85:ad:b2:df:7d:f8:f4:49:bb:00:ee:12:3a:92:80:8b: 74:36:9c:46:ee:9f:d9:42:2d:eb:61:83:c5:00:05:65:92:05: 61:42:ea:2d:41:cd:d2:38:7a:a2:24:e5:45:ba:5d:fa:bb:09: 68:cc:82:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRnN77Uxxa4rVaz6Sf278XBLpA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNDExMjMyMTM3MzFaFw0yNDExMjcwNzE4MzFaMDMxMTAvBgNV BAMTKEQ3MzFEQzI5RDU5NkJCQjFCQzc4OTkzQkMzRkJGRDhDRjczNUJGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkIC50mf9gX+7lff5ly+NDBn/ GGGL+ihiMcSVivfjiNbzcsyO9R0LaEytqYHbG2LU77pgIkLHibMndQ09Khw1Y/Nj E+y2NbgUnQmsn+XyBGyHTi7AGdpuQdgbOFroo8QvQUqtmobMFuwpFOtulUwuQEZ9 IAiEpBiz7fqx6OtCovJq2bAYskPGYmh5vo0LxFaMo3rlKjcMpvg0afIJpLthVF+S U2X888CQ5GUjaG2hpsXjoWtyT20fbO3TPcK8tsQgRs6HRbNCn4Wyun73ypVhKeKZ H+dlOVOpMnQaiGmgd+J3HruVUl50LuKR4h8wVpoHLVMqMAIACtdw/n+tmz+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1zHcKdWWu7G8eJk7w/v9jPc1v88wHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1vt33GTxW6jjr1zGaq9LTK0PeH+ydK1B7u y0kAVnt+oQfc68rV52otPIovmut27P7RjL0hL4xQUnAdBGyWiuR0gHsn2WkKK+OX li9/fQvEfQ8IPx1efiGrqNSEmtWy44lBdPKDfYI4liLTwjIPBSSTTziNNFSBbynq lbHLlYIo4WlftKtYEnmY+fC80RPsWvpbpk0K3W+pgRy97TL07Z8QBCaqiS13yxL/ vtUOAmdYFPzrXwGasQ5RyQ+DKmlJLZAusyO4MbEdha2y33349Em7AO4SOpKAi3Q2 nEbun9lCLethg8UABWWSBWFC6i1BzdI4eqIk5UW6Xfq7CWjMglY= -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:09 2024 by rpki-client on console-fra.rpki-client.org