$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: 8XysJRh2pNvlylY5n5uQKnZgxuXG8ZDPNlmffhZC8Xs= Subject key identifier: 01:38:31:50:17:4C:87:C8:9B:05:8F:79:CD:70:3E:8D:34:6F:BA:25 Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 0174DA1A021C14815454DC078773F010B70DA59A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: 42 Signing time: Wed 20 Nov 2024 06:01:22 +0000 Manifest this update: Wed 20 Nov 2024 05:56:22 +0000 Manifest next update: Sat 23 Nov 2024 12:55:22 +0000 Files and hashes: 1: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: 4mTO/rv4fZUA+t8BfSGS/FztmFDpqzYAmuVshtaxFgM=) 2: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: 26rnjK9eYkp33Y9bkl7edYflefIWXm8RJLQlXSnj6cQ=) 3: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: fSYAaBJeAhXypfTbKMG0EHTcxCrDe3+KTEel11RmWqM=) 4: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: QnRJ2uTyElbf7k1wpeY2ebpOhKDECfc+5dRNroBDh1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 12:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:74:da:1a:02:1c:14:81:54:54:dc:07:87:73:f0:10:b7:0d:a5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Nov 20 05:56:22 2024 GMT Not After : Nov 23 12:55:22 2024 GMT Subject: CN=01383150174C87C89B058F79CD703E8D346FBA25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:67:74:9d:14:4c:02:fe:4f:4f:ab:f5:2a:fc: 58:fb:7c:18:d6:f6:84:7c:c2:6d:d2:8d:e7:fb:64: 29:4c:4f:43:6b:a2:60:11:61:3f:03:38:6b:e7:fc: dc:9c:cb:5a:35:86:e3:c7:f6:40:02:63:15:9d:99: 60:d0:d6:64:ac:f0:ad:9d:80:52:f3:34:85:15:b9: 77:86:e9:43:cc:12:8e:30:8e:b5:08:83:2b:f9:38: fd:a8:9c:40:6b:b1:84:16:92:f2:a7:85:33:10:a0: f9:2c:d1:30:51:86:03:e2:36:fe:3c:9c:8b:47:b0: 68:17:fe:d8:b1:db:42:52:dc:4b:78:ee:7c:3e:05: 29:e7:00:a6:50:26:5b:cb:c6:22:d9:9c:7c:e4:66: fc:64:cc:59:e2:89:79:a8:6a:a3:b4:af:34:34:76: 86:6b:03:bb:52:e3:c0:7b:ea:21:17:0a:9e:61:5b: 45:59:bf:ac:c1:c2:a8:d7:29:a2:57:99:a6:01:1a: 71:3b:a0:fb:f7:24:00:f6:d7:84:89:04:b9:30:89: 9b:40:95:cb:04:4d:86:8c:55:9c:a5:17:42:4d:75: 12:98:87:96:c2:25:40:3e:b7:0d:25:78:ee:02:86: e9:f8:43:18:e8:1d:e8:3c:01:8e:b5:8c:17:f5:8a: 80:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:38:31:50:17:4C:87:C8:9B:05:8F:79:CD:70:3E:8D:34:6F:BA:25 X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5e:23:23:33:1f:93:a9:dd:61:6f:fb:68:f7:7f:9f:27:f5: b1:04:9a:fe:26:2e:84:07:be:d2:61:38:6f:d1:06:8f:39:4a: de:61:ba:c1:cf:44:fd:84:f5:33:8c:de:7c:39:b7:8d:d6:4a: b2:ca:17:c0:c6:05:46:e2:20:6a:b0:da:13:ac:a4:16:e1:b8: 0f:1a:4a:69:67:47:dc:e5:e4:f1:b5:17:04:74:1d:90:65:19: 3e:8d:d9:0f:42:09:83:71:e0:4d:93:4a:e9:83:68:46:89:91: af:fe:e3:5f:88:16:b7:7d:35:70:cc:c4:d4:6e:dc:5b:5f:f1: e0:cd:97:eb:14:ae:8a:06:e5:3b:a6:f2:0f:b7:94:1f:bd:65: d6:49:87:0f:69:b4:22:e0:21:06:1f:4f:f6:c7:aa:1a:2d:02: 30:85:5d:34:40:49:90:a5:b7:01:ae:2f:46:d8:c7:7e:39:08: 0b:e1:d1:90:a0:05:d2:5f:74:d9:22:29:41:b0:a1:ad:3b:38: be:ed:f2:23:fa:a7:8b:13:f1:50:e1:c8:65:83:24:23:7b:86: 5e:e2:ff:8c:39:86:b9:be:07:61:b2:33:e1:1c:0e:4c:8a:10: e4:14:ac:8b:d5:b7:f7:f6:b1:98:b0:4f:4b:dc:6d:e6:0d:47: 7d:fc:0d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXTaGgIcFIFUVNwHh3PwELcNpZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNDExMjAwNTU2MjJaFw0yNDExMjMxMjU1MjJaMDMxMTAvBgNV BAMTKDAxMzgzMTUwMTc0Qzg3Qzg5QjA1OEY3OUNENzAzRThEMzQ2RkJBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkZ3SdFEwC/k9Pq/Uq/Fj7fBjW 9oR8wm3Sjef7ZClMT0NromARYT8DOGvn/Nycy1o1huPH9kACYxWdmWDQ1mSs8K2d gFLzNIUVuXeG6UPMEo4wjrUIgyv5OP2onEBrsYQWkvKnhTMQoPks0TBRhgPiNv48 nItHsGgX/tix20JS3Et47nw+BSnnAKZQJlvLxiLZnHzkZvxkzFniiXmoaqO0rzQ0 doZrA7tS48B76iEXCp5hW0VZv6zBwqjXKaJXmaYBGnE7oPv3JAD214SJBLkwiZtA lcsETYaMVZylF0JNdRKYh5bCJUA+tw0leO4Chun4QxjoHeg8AY61jBf1ioCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUATgxUBdMh8ibBY95zXA+jTRvuiUwHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFeIyMzH5Op3WFv+2j3f58n9bEEmv4mLoQH vtJhOG/RBo85St5husHPRP2E9TOM3nw5t43WSrLKF8DGBUbiIGqw2hOspBbhuA8a SmlnR9zl5PG1FwR0HZBlGT6N2Q9CCYNx4E2TSumDaEaJka/+41+IFrd9NXDMxNRu 3Ftf8eDNl+sUrooG5Tum8g+3lB+9ZdZJhw9ptCLgIQYfT/bHqhotAjCFXTRASZCl twGuL0bYx345CAvh0ZCgBdJfdNkiKUGwoa07OL7t8iP6p4sT8VDhyGWDJCN7hl7i /4w5hrm+B2GyM+EcDkyKEOQUrIvVt/f2sZiwT0vcbeYNR338DXA= -----END CERTIFICATE-----Generated at Wed Nov 20 07:27:42 2024 by rpki-client on console-fra.rpki-client.org