$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft File: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft (raw, json) Hash identifier: z4TvofrAy001CNteIap2gffcRhHl7DYjIz0+Yv8p4eY= Subject key identifier: 5A:A9:22:08:D7:D4:1E:50:66:D2:A3:46:EE:26:1C:86:F8:4A:A1:8F Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Certificate serial: AB6942A2A113A05E4C7EA991769CDB82F4EBAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft Manifest number: 01BB Signing time: Wed 20 Nov 2024 19:41:53 +0000 Manifest this update: Wed 20 Nov 2024 19:36:53 +0000 Manifest next update: Sun 24 Nov 2024 05:45:53 +0000 Files and hashes: 1: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: MEZxJgd/hWxPnWbsHzQjzlGPCO/qxP9YMyi3V7a1p9c=) 2: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl (hash: oBfKSXYwZoExitODhIN/ODAHsgNBgL/67J0oM0jNWuU=) 3: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: Sk0wkDqGConkmWy9npP0doI1sV1k0RuaSswpEBtoT8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ab:69:42:a2:a1:13:a0:5e:4c:7e:a9:91:76:9c:db:82:f4:eb:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Validity Not Before: Nov 20 19:36:53 2024 GMT Not After : Nov 24 05:45:53 2024 GMT Subject: CN=5AA92208D7D41E5066D2A346EE261C86F84AA18F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:b7:17:04:0c:bd:ed:4b:ea:bc:6e:ef:2c: 5f:65:9f:98:cb:93:70:b4:78:0b:fb:59:17:68:7d: db:38:2c:4d:ed:79:0c:ec:5c:55:af:15:64:32:be: 8c:40:51:58:51:97:4d:ec:94:69:ec:bf:63:f0:93: 00:74:e6:aa:a3:fb:2a:d4:ff:4f:f6:87:cd:9b:7c: ff:ff:d8:34:f7:9a:07:a1:6c:8f:2d:e5:11:dd:09: d4:7f:61:02:77:52:fd:f0:43:5c:76:8b:c9:a9:5b: 47:41:8d:1b:a8:e4:43:ec:2b:7d:1d:aa:ce:49:ee: 02:32:0b:81:fb:ca:a8:70:53:2a:bd:6a:bd:8d:5b: 47:03:ba:e1:b0:04:16:93:35:90:c4:0c:71:52:44: 7a:bf:89:1c:f1:13:6e:28:40:fd:e8:2c:54:d1:3e: a2:e9:63:94:00:89:d4:95:69:07:6e:3e:f6:1b:3c: cd:50:17:25:58:57:30:98:46:f8:22:0a:7f:8d:7a: 81:a4:7a:20:1d:1c:05:55:8d:7b:79:6c:05:88:a4: 4f:68:10:85:30:60:9e:ba:41:e7:70:18:56:9a:c6: 6a:f2:24:cd:02:1d:78:0e:00:11:f0:c8:11:9b:45: 18:a9:d6:63:54:b2:ff:ac:ab:af:f1:72:87:f5:2b: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A9:22:08:D7:D4:1E:50:66:D2:A3:46:EE:26:1C:86:F8:4A:A1:8F X509v3 Authority Key Identifier: keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c8:4b:52:b3:58:7b:08:ed:21:26:3b:3e:26:66:a4:e7:28: 3e:59:0d:7c:ca:cd:7c:d2:9f:1e:b9:af:ae:c1:ee:24:39:15: f3:fb:7a:79:75:fd:40:bc:e6:fb:77:f6:61:f3:fb:64:91:27: 2f:2e:db:a2:df:47:1f:52:cf:6f:55:41:cf:1d:b4:13:51:32: 28:0e:19:f4:97:a8:2d:16:f5:55:d0:ec:64:52:e8:5a:1c:1e: f5:ad:86:65:37:0f:5d:63:5f:29:66:81:15:e1:2d:6c:d4:0e: 37:5d:f9:56:0b:48:d3:2f:e7:d2:1b:0e:b9:5b:be:03:1c:6f: ae:30:93:c9:44:8c:c7:ff:56:d7:f8:19:4b:39:7e:a0:66:dd: f5:65:c1:18:32:0d:ca:d5:c1:df:bf:e5:18:94:5d:96:d0:94: c8:fa:83:93:89:21:97:29:40:f8:a3:53:81:5d:f9:a1:53:24: ab:98:f0:47:05:2c:b8:6e:40:f2:69:d9:51:68:7d:89:8b:a5: ac:f5:70:31:15:a5:d6:82:05:eb:a4:0b:1b:7e:99:dd:a0:b4: f6:8f:ff:ad:73:1e:44:2f:f7:22:2f:e0:9c:58:9f:3c:2c:0c: 44:fa:17:ee:7a:82:4e:98:91:c8:5b:93:76:c7:95:9d:30:10: 0f:f1:42:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKtpQqKhE6BeTH6pkXac24L0660wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB MTBBMUUyMDAeFw0yNDExMjAxOTM2NTNaFw0yNDExMjQwNTQ1NTNaMDMxMTAvBgNV BAMTKDVBQTkyMjA4RDdENDFFNTA2NkQyQTM0NkVFMjYxQzg2Rjg0QUExOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxrcXBAy97UvqvG7vLF9ln5jL k3C0eAv7WRdofds4LE3teQzsXFWvFWQyvoxAUVhRl03slGnsv2PwkwB05qqj+yrU /0/2h82bfP//2DT3mgehbI8t5RHdCdR/YQJ3Uv3wQ1x2i8mpW0dBjRuo5EPsK30d qs5J7gIyC4H7yqhwUyq9ar2NW0cDuuGwBBaTNZDEDHFSRHq/iRzxE24oQP3oLFTR PqLpY5QAidSVaQduPvYbPM1QFyVYVzCYRvgiCn+NeoGkeiAdHAVVjXt5bAWIpE9o EIUwYJ66QedwGFaaxmryJM0CHXgOABHwyBGbRRip1mNUsv+sq6/xcof1K1LnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqkiCNfUHlBm0qNG7iYchvhKoY8wHwYDVR0j BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB MUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlC RDdBMTBBMUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATIS1KzWHsI7SEmOz4mZqTnKD5ZDXzKzXzS nx65r67B7iQ5FfP7enl1/UC85vt39mHz+2SRJy8u26LfRx9Sz29VQc8dtBNRMigO GfSXqC0W9VXQ7GRS6FocHvWthmU3D11jXylmgRXhLWzUDjdd+VYLSNMv59IbDrlb vgMcb64wk8lEjMf/Vtf4GUs5fqBm3fVlwRgyDcrVwd+/5RiUXZbQlMj6g5OJIZcp QPijU4Fd+aFTJKuY8EcFLLhuQPJp2VFofYmLpaz1cDEVpdaCBeukCxt+md2gtPaP /61zHkQv9yIv4JxYnzwsDET6F+56gk6Ykchbk3bHlZ0wEA/xQsw= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:31 2024 by rpki-client on console-fra.rpki-client.org