$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: KXPjb8iWEG+xmKY71ahu/7ex17u8+vufJBAlzTjN9Sk= Subject key identifier: 05:47:54:B9:F4:D6:8A:EA:3B:5B:1B:05:88:33:60:C6:AA:25:39:0E Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 337F880F606DC3F57EB7B6A13DF323959A86B5F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: 4D Signing time: Sat 23 Nov 2024 23:02:22 +0000 Manifest this update: Sat 23 Nov 2024 22:57:22 +0000 Manifest next update: Wed 27 Nov 2024 00:01:22 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: ED2vOK9zeRK0rdqZ2eLv2tRE69XX1TK/iNLD2rQ69i4=) 2: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: P6ZCKFkJj3dXczDt9pQisn8zQ37NGTNMfWBYwKymzmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7f:88:0f:60:6d:c3:f5:7e:b7:b6:a1:3d:f3:23:95:9a:86:b5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Nov 23 22:57:22 2024 GMT Not After : Nov 27 00:01:22 2024 GMT Subject: CN=054754B9F4D68AEA3B5B1B05883360C6AA25390E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:eb:ef:6c:65:46:c5:18:65:e6:5d:90:36: c7:48:b4:5b:fb:bc:ec:b2:51:ae:69:7a:69:8e:47: a4:7d:25:30:09:44:10:af:cf:b0:4d:61:a3:5b:88: ca:4d:10:46:eb:10:e5:96:30:f6:8d:0f:0f:43:7a: 6b:04:a8:af:1a:29:f4:d7:ef:fb:48:2c:17:0a:fe: 62:a3:c2:20:06:42:7d:22:9d:35:72:a1:c2:af:6a: 8f:e8:f2:86:73:3c:f8:4d:7d:46:c0:1e:d8:c7:c1: ad:0e:6d:5e:0b:01:39:fc:f8:1b:42:ad:40:66:78: 26:2b:6e:e9:ed:79:b0:fa:08:38:b3:cb:3e:70:c5: 7d:0a:57:96:9e:49:77:a9:c0:09:cf:b3:3b:c3:ae: 24:7b:5c:26:06:fa:35:56:4e:3e:75:de:1d:64:cc: 3e:00:3f:4d:a0:10:a0:c8:3d:fa:36:95:0b:e3:c3: a0:80:f5:eb:e2:f2:6c:14:4b:00:85:31:4c:af:48: fc:48:35:fc:3d:00:44:42:ab:62:1e:0a:12:38:90: b8:2c:80:34:22:f4:61:e6:a4:59:7d:31:0e:49:87: 71:47:34:84:4a:5d:41:c4:b2:81:f8:37:93:22:34: 93:f5:6c:82:41:3f:f4:e3:37:12:e0:96:aa:0a:19: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:47:54:B9:F4:D6:8A:EA:3B:5B:1B:05:88:33:60:C6:AA:25:39:0E X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:93:41:7b:17:cc:01:60:bd:68:71:e6:24:85:9a:f6:d8:dc: 79:09:cd:be:85:7d:d3:0b:2e:40:13:2f:7b:6f:16:60:dd:66: df:0d:4d:a8:e8:28:94:ab:2e:3a:0c:7b:71:74:02:d0:33:37: d4:e5:76:8a:19:95:27:ac:cd:a2:9a:4a:6b:f5:6f:b4:77:e5: 5e:6d:90:55:6e:64:24:d4:f6:a8:46:aa:f8:ba:8e:05:2b:57: 70:2c:57:86:d0:4b:39:80:ab:52:47:64:7e:54:a0:41:7f:2a: d9:bd:6d:d2:f7:cb:98:11:11:f6:cb:f4:4d:e9:1f:c4:d8:ec: 5c:03:cd:08:9f:44:dc:d2:7b:13:f9:3e:5a:74:0b:b4:7f:17: ff:52:0b:ca:0b:46:98:1a:91:44:05:9f:20:09:f5:3e:de:f5: 62:ac:90:47:d3:14:fb:22:5e:0e:46:34:db:bd:22:0c:02:83: ce:4c:ba:6d:2f:8c:e9:20:25:5e:66:78:53:4a:92:e0:56:ff: 64:a6:3d:aa:5a:fa:84:3d:88:91:7d:c9:f0:ae:8d:f9:c5:13: 6c:3c:38:a6:63:16:85:12:5f:b3:ab:09:4b:09:8a:b1:bf:d5: e5:f7:68:e4:a8:b4:ee:e7:3e:31:0a:90:d6:bb:4e:e0:45:a6: ab:dc:af:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3+ID2Btw/V+t7ahPfMjlZqGtfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNDExMjMyMjU3MjJaFw0yNDExMjcwMDAxMjJaMDMxMTAvBgNV BAMTKDA1NDc1NEI5RjRENjhBRUEzQjVCMUIwNTg4MzM2MEM2QUEyNTM5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6evvbGVGxRhl5l2QNsdItFv7 vOyyUa5pemmOR6R9JTAJRBCvz7BNYaNbiMpNEEbrEOWWMPaNDw9DemsEqK8aKfTX 7/tILBcK/mKjwiAGQn0inTVyocKvao/o8oZzPPhNfUbAHtjHwa0ObV4LATn8+BtC rUBmeCYrbuntebD6CDizyz5wxX0KV5aeSXepwAnPszvDriR7XCYG+jVWTj513h1k zD4AP02gEKDIPfo2lQvjw6CA9evi8mwUSwCFMUyvSPxINfw9AERCq2IeChI4kLgs gDQi9GHmpFl9MQ5Jh3FHNIRKXUHEsoH4N5MiNJP1bIJBP/TjNxLglqoKGRx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBUdUufTWiuo7WxsFiDNgxqolOQ4wHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmTQXsXzAFgvWhx5iSFmvbY3HkJzb6FfdML LkATL3tvFmDdZt8NTajoKJSrLjoMe3F0AtAzN9TldooZlSeszaKaSmv1b7R35V5t kFVuZCTU9qhGqvi6jgUrV3AsV4bQSzmAq1JHZH5UoEF/Ktm9bdL3y5gREfbL9E3p H8TY7FwDzQifRNzSexP5Plp0C7R/F/9SC8oLRpgakUQFnyAJ9T7e9WKskEfTFPsi Xg5GNNu9IgwCg85Mum0vjOkgJV5meFNKkuBW/2SmPapa+oQ9iJF9yfCujfnFE2w8 OKZjFoUSX7OrCUsJirG/1eX3aOSotO7nPjEKkNa7TuBFpqvcrzo= -----END CERTIFICATE-----Generated at Sun Nov 24 00:14:30 2024 by rpki-client on console-ams.rpki-client.org