$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: kO/To4kCpQA8x4hvaUB2xKg1IYKpGbTYut/p/UFksWo= Subject key identifier: D3:1F:39:E0:FA:E8:CE:FA:19:2A:D4:78:0E:EB:31:3F:51:B4:24:95 Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 5C8CFBCF64A3F92B16E75EFD9252FD57D2C5AF29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 02ED Signing time: Thu 21 Nov 2024 13:12:07 +0000 Manifest this update: Thu 21 Nov 2024 13:07:07 +0000 Manifest next update: Sun 24 Nov 2024 15:46:07 +0000 Files and hashes: 1: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Fzy1Ohuj04Qx3Xp/VXiKCcDYwuFrI7ixfa8VG/Qhnpo=) 2: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: BCJDJGgPBxehrSOVUlTeZ3Hd/bNsj+F7vv6cYryNkoc=) 3: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: 4RriOrJrgRmm8TVWDrA9B41vx60bIoOBHkOPfEn1Ot0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8c:fb:cf:64:a3:f9:2b:16:e7:5e:fd:92:52:fd:57:d2:c5:af:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Nov 21 13:07:07 2024 GMT Not After : Nov 24 15:46:07 2024 GMT Subject: CN=D31F39E0FAE8CEFA192AD4780EEB313F51B42495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:75:c3:51:6a:c6:60:60:25:4b:43:9e:34:58: b4:4b:b4:bc:8d:02:6e:f8:63:3f:e2:06:1c:c8:44: 5f:50:ff:88:8d:7c:d4:30:fb:b2:cc:6a:3c:d2:b8: ca:71:6b:e0:4e:b4:c9:93:68:65:f5:96:d5:5e:95: 28:4b:4e:7e:11:a0:a3:8c:ac:95:1a:fb:a4:7f:bf: df:0a:06:97:46:c2:50:3c:87:cc:2d:e1:57:cf:20: 3f:29:a1:88:eb:77:5f:3d:e2:eb:ac:47:a0:0d:e6: dd:cd:ce:47:ab:f6:b0:11:9e:3b:99:6e:57:4e:c5: 0c:15:25:e4:a1:38:81:a6:84:d4:2d:52:fa:db:3e: 32:11:39:85:15:b7:88:7c:f5:0f:a0:c5:d8:b4:58: e2:18:5c:d4:7f:b9:02:02:d7:54:9c:a4:4a:4d:1a: 49:e4:ad:c4:aa:dd:f6:e0:c0:96:27:cb:d9:46:d0: 18:9e:28:72:83:fa:14:fc:82:9b:27:68:db:62:a9: 21:96:4c:0f:58:9c:c7:fb:bf:18:f2:48:94:a3:96: 1a:dd:8e:61:73:c7:a5:30:6f:d5:82:f8:b9:9e:8b: 15:d0:ef:39:40:06:3e:4d:d8:04:c4:05:43:4b:67: 04:eb:7f:88:57:df:20:0f:f7:75:ab:6b:cc:9a:2d: f8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1F:39:E0:FA:E8:CE:FA:19:2A:D4:78:0E:EB:31:3F:51:B4:24:95 X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c9:22:3f:24:9a:ce:d7:20:aa:cb:b6:c9:1a:1f:17:4b:ec: 27:65:a5:06:8d:ff:74:17:aa:5a:24:f0:de:0c:64:5b:43:7f: 44:fe:5f:8c:67:e2:26:71:9c:fe:94:73:66:f1:c5:57:65:1f: 4e:d9:8b:04:fb:5c:b1:5e:a7:76:1a:f7:11:72:ab:fb:4a:87: 69:5d:32:83:03:ad:67:bc:53:66:02:89:6e:67:df:bf:ec:55: 11:ee:e2:fe:b9:1b:9c:60:09:2a:b4:a9:af:5b:c3:c5:37:29: a3:4f:5e:5d:f5:9a:c5:a8:a3:34:19:17:e8:e2:36:e8:bf:e5: 5a:a4:82:80:4b:b9:2e:ae:6f:16:98:4c:1e:32:3f:40:1d:69: 4c:6e:f6:78:05:ac:94:8e:1a:49:8b:8a:a3:97:4f:b8:e5:ec: c8:44:55:4d:a3:98:7b:08:b9:f2:8d:95:8f:16:ea:ec:ad:e4: 5a:81:b9:56:30:5d:d7:7d:3f:37:b5:1b:ca:06:f5:df:55:14: e3:b6:d4:7a:b8:15:e1:5e:95:13:fb:aa:f2:88:59:ff:8f:92: 76:1c:6a:b2:39:e6:d8:7b:40:ba:2b:eb:67:a8:28:4b:5e:35: ec:2d:ec:d5:81:6c:33:93:a7:c8:d6:70:34:a2:a8:c3:e0:b7: 70:de:5c:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIz7z2Sj+SsW5179klL9V9LFrykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNDExMjExMzA3MDdaFw0yNDExMjQxNTQ2MDdaMDMxMTAvBgNV BAMTKEQzMUYzOUUwRkFFOENFRkExOTJBRDQ3ODBFRUIzMTNGNTFCNDI0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdcNRasZgYCVLQ540WLRLtLyN Am74Yz/iBhzIRF9Q/4iNfNQw+7LMajzSuMpxa+BOtMmTaGX1ltVelShLTn4RoKOM rJUa+6R/v98KBpdGwlA8h8wt4VfPID8poYjrd1894uusR6AN5t3Nzker9rARnjuZ bldOxQwVJeShOIGmhNQtUvrbPjIROYUVt4h89Q+gxdi0WOIYXNR/uQIC11ScpEpN GknkrcSq3fbgwJYny9lG0BieKHKD+hT8gpsnaNtiqSGWTA9YnMf7vxjySJSjlhrd jmFzx6Uwb9WC+LmeixXQ7zlABj5N2ATEBUNLZwTrf4hX3yAP93Wra8yaLfhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0x854ProzvoZKtR4DusxP1G0JJUwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvJIj8kms7XIKrLtskaHxdL7CdlpQaN/3QX qlok8N4MZFtDf0T+X4xn4iZxnP6Uc2bxxVdlH07ZiwT7XLFep3Ya9xFyq/tKh2ld MoMDrWe8U2YCiW5n37/sVRHu4v65G5xgCSq0qa9bw8U3KaNPXl31msWoozQZF+ji Nui/5VqkgoBLuS6ubxaYTB4yP0AdaUxu9ngFrJSOGkmLiqOXT7jl7MhEVU2jmHsI ufKNlY8W6uyt5FqBuVYwXdd9Pze1G8oG9d9VFOO21Hq4FeFelRP7qvKIWf+PknYc arI55th7QLor62eoKEteNewt7NWBbDOTp8jWcDSiqMPgt3DeXE8= -----END CERTIFICATE-----Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org