$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft File: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft (raw, json) Hash identifier: 2oEvumIpQh41oFS685PNcCO08df+nk1qzY+kxdKFV0w= Subject key identifier: 7F:82:AA:CB:5D:96:0E:9E:60:3D:7E:30:19:EC:D9:FB:15:15:A3:6E Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Certificate serial: 05F73CA4A9012175C50E147DC765543DBCD7EB58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft Manifest number: 0217 Signing time: Wed 20 Nov 2024 20:21:59 +0000 Manifest this update: Wed 20 Nov 2024 20:16:59 +0000 Manifest next update: Sun 24 Nov 2024 02:29:59 +0000 Files and hashes: 1: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: hc6ECrtKO1f8LRbUaOngruzuLZGjjKMcrVpSYHLGH+4=) 2: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: 8BH7HUPp+qT0dOPwFMHWiAT720E6kg8wn1sWk04/fIM=) 3: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: ZPi+JZqMM8ZilEO1UdhpjL1kpie3JMIqiKeJGeN+nJU=) 4: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: w9cZPX/3pDPz2+LwzvjA2m3xBMWMxQj8fam9ODXwU7Y=) 5: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl (hash: X85gAQn4Tcsrr6imHPyAVavbaEr5+IYH3pcwr6gS8MI=) 6: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: 5MfpBewFDSPuWTooHE8O1IkKqC/swjstgMNE2K+S+q4=) 7: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: Q0JPOTRHz7S3KCYgxrzfh7sPXe85gqUb+g55+vjlzmE=) 8: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: d/qApoJ7mr0vuB+K0fvN+XpOWjHSmWf3V1Wp1hQdcro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f7:3c:a4:a9:01:21:75:c5:0e:14:7d:c7:65:54:3d:bc:d7:eb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Validity Not Before: Nov 20 20:16:59 2024 GMT Not After : Nov 24 02:29:59 2024 GMT Subject: CN=7F82AACB5D960E9E603D7E3019ECD9FB1515A36E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:09:58:43:80:c5:ab:7d:40:4d:9c:14:8d: 77:a9:32:9a:b8:03:12:02:67:7d:d6:a5:74:c5:7e: fe:5a:53:fc:de:16:85:50:d6:de:45:df:50:79:3a: 0c:e9:87:8a:ca:6c:d8:45:9b:ab:8f:cc:b1:48:24: 94:63:eb:37:b9:d8:89:b2:a8:4a:36:78:8a:1f:de: cd:b4:09:4c:6d:8b:fc:e5:51:2e:45:ee:3b:de:48: 5f:5e:6e:1c:f2:af:b1:4c:1a:87:b5:08:ee:3b:30: dc:02:04:9f:aa:cb:1e:7a:aa:ae:dc:d6:36:05:71: 46:e2:c9:a9:65:4e:0a:71:df:76:0f:c7:28:a3:ab: 44:1a:50:ec:a8:4c:13:3b:12:82:7c:e0:91:75:df: 0d:cd:0a:15:30:e6:65:75:df:f9:c4:6f:02:1d:8c: 6e:78:17:2b:a3:50:a0:5b:fb:6d:72:dc:54:d2:64: f2:65:ec:b5:ff:2c:80:8c:26:2c:e4:d4:36:76:37: 72:fa:0c:8c:2c:bd:f5:02:14:2e:a7:ca:db:67:bf: a2:5a:47:7d:43:75:70:d9:c0:fd:64:eb:f6:3a:09: db:6b:48:21:69:e6:25:65:eb:36:16:df:f3:22:af: c1:3a:bb:ca:0f:08:b4:c7:28:86:ce:63:fd:a0:3f: 73:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:82:AA:CB:5D:96:0E:9E:60:3D:7E:30:19:EC:D9:FB:15:15:A3:6E X509v3 Authority Key Identifier: keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9a:48:d4:62:4a:5d:17:7e:e0:a6:71:47:2b:05:94:b3:8b: a0:d1:48:41:17:e5:a2:14:7d:71:79:80:77:25:e0:7f:a0:75: 90:ce:2d:01:69:39:2b:94:de:99:78:b0:b1:c1:39:a2:54:b3: 0e:7f:e8:02:37:4f:1e:6e:dc:ba:c8:b5:e3:f5:76:fc:37:f8: 30:8d:43:34:36:76:62:ea:05:64:a5:98:cc:50:05:8c:7e:c1: 21:f0:a0:b7:cf:90:98:04:23:65:a7:40:01:6e:f6:77:4e:90: c2:f9:68:fc:cc:03:ad:a6:f0:30:51:11:90:cb:0d:98:c5:90: 2f:8b:4b:ca:c3:a3:ea:92:2b:ff:bf:8d:00:38:48:30:ab:4b: 5c:e3:ff:d9:63:23:92:f1:0a:b3:b6:ae:89:ef:8d:b5:c0:97: 2f:1c:41:0d:f7:db:34:5c:c8:f4:09:e0:41:d8:9b:ff:82:f1: 4b:c8:eb:e6:d9:df:92:a0:2c:aa:ad:8e:23:07:f8:89:3f:cc: 02:88:d6:2f:f0:59:19:97:c7:bc:eb:df:a9:25:bc:ed:24:2f: 6b:8d:f1:b5:3b:f5:30:c5:55:b7:73:fd:89:c4:5b:86:68:6e: ea:4d:9a:d4:17:c9:fe:ed:d5:ac:80:5b:09:90:42:8d:b3:45: 75:fc:0c:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfc8pKkBIXXFDhR9x2VUPbzX61gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw RUIzODRFMTAeFw0yNDExMjAyMDE2NTlaFw0yNDExMjQwMjI5NTlaMDMxMTAvBgNV BAMTKDdGODJBQUNCNUQ5NjBFOUU2MDNEN0UzMDE5RUNEOUZCMTUxNUEzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWwlYQ4DFq31ATZwUjXepMpq4 AxICZ33WpXTFfv5aU/zeFoVQ1t5F31B5Ogzph4rKbNhFm6uPzLFIJJRj6ze52Imy qEo2eIof3s20CUxti/zlUS5F7jveSF9ebhzyr7FMGoe1CO47MNwCBJ+qyx56qq7c 1jYFcUbiyallTgpx33YPxyijq0QaUOyoTBM7EoJ84JF13w3NChUw5mV13/nEbwId jG54FyujUKBb+21y3FTSZPJl7LX/LICMJizk1DZ2N3L6DIwsvfUCFC6nyttnv6Ja R31DdXDZwP1k6/Y6CdtrSCFp5iVl6zYW3/Mir8E6u8oPCLTHKIbOY/2gP3N3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf4Kqy12WDp5gPX4wGezZ+xUVo24wHwYDVR0j BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4 NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz ODRFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkz RkEwRUIzODRFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCaSNRiSl0XfuCmcUcrBZSzi6DRSEEX5aIU fXF5gHcl4H+gdZDOLQFpOSuU3pl4sLHBOaJUsw5/6AI3Tx5u3LrIteP1dvw3+DCN QzQ2dmLqBWSlmMxQBYx+wSHwoLfPkJgEI2WnQAFu9ndOkML5aPzMA62m8DBREZDL DZjFkC+LS8rDo+qSK/+/jQA4SDCrS1zj/9ljI5LxCrO2ronvjbXAly8cQQ332zRc yPQJ4EHYm/+C8UvI6+bZ35KgLKqtjiMH+Ik/zAKI1i/wWRmXx7zr36klvO0kL2uN 8bU79TDFVbdz/YnEW4ZobupNmtQXyf7t1ayAWwmQQo2zRXX8DHc= -----END CERTIFICATE-----Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org