$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: CLbuAcrLGJpviioOhuZqGxdWHzmD4KBsUYclCLg4X2I= Subject key identifier: AF:76:8E:02:10:AE:C8:3B:90:58:49:B3:5C:FF:04:9A:B4:DC:25:7E Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 0711D86B650281DF08F651C51C43D1FCD34F6E1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 0130 Signing time: Thu 21 Nov 2024 16:11:34 +0000 Manifest this update: Thu 21 Nov 2024 16:06:34 +0000 Manifest next update: Mon 25 Nov 2024 02:46:34 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e/jDoMLJpVdueYsDRrBjLtNtEmI6MPmdRcvnXTsu7vU=) 2: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: /ux2kePKCtcJt/H4xt770XYnntc51Gy2zRjOsEI7g3U=) 3: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: TeyG9+d+pSW8wtiZYYZlQF3FErtni34/jF+MzEnLm+o=) 4: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: h0k8rz1v/+LMLzPa9cwssYfHs5GKBPWBZA56yzocfIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:11:d8:6b:65:02:81:df:08:f6:51:c5:1c:43:d1:fc:d3:4f:6e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Nov 21 16:06:34 2024 GMT Not After : Nov 25 02:46:34 2024 GMT Subject: CN=AF768E0210AEC83B905849B35CFF049AB4DC257E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:b3:6f:06:db:35:a0:0b:ae:f3:2d:12:4c: 31:4a:6b:a5:61:bd:5a:43:c3:1a:53:77:6a:a5:a6: 5d:8a:43:46:67:25:16:87:0b:f7:b9:9c:c4:91:29: 1c:39:22:10:12:06:3e:42:40:54:f4:8a:0c:9f:79: 66:44:69:52:8f:16:ed:14:c4:f5:21:b8:cd:54:cb: f9:da:3a:89:4d:70:6d:8a:df:31:1e:52:25:90:4a: 3c:e4:0e:e8:69:67:a7:96:c1:80:67:4c:91:de:d3: 3e:d3:28:74:ca:80:d5:29:3d:6f:d3:10:85:13:ae: 81:d6:ad:fb:57:98:b7:74:a0:b7:22:dd:1b:7c:fe: 3f:06:c9:62:76:5a:d4:e9:f3:84:2b:70:32:89:2a: 6a:4f:da:46:a3:6c:ba:6c:ca:2c:df:98:0f:79:f9: dd:6d:ea:5d:61:cf:fb:50:fa:a2:53:c5:03:9a:26: 09:25:58:29:9a:c0:8b:02:c1:89:40:72:ce:68:7f: 95:cc:97:24:41:62:8d:8b:50:ce:63:82:cc:63:75: 79:42:d3:fc:b6:42:b9:cd:38:39:23:d7:dc:47:cd: 74:f0:21:82:8c:5b:30:f3:38:e2:e8:2d:77:df:7f: 6e:ae:b7:61:7e:2c:4d:18:ae:4e:db:0f:70:18:93: 69:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:76:8E:02:10:AE:C8:3B:90:58:49:B3:5C:FF:04:9A:B4:DC:25:7E X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:66:24:ce:e7:c4:18:bf:b8:e5:da:a9:2d:53:70:38:11:54: 64:fd:82:a0:4c:57:cf:45:2f:76:c6:27:bc:a2:8d:af:e8:f0: 17:3f:5f:d6:6b:e2:99:17:1f:eb:05:07:dd:79:e5:53:48:3c: 5c:6c:7a:fd:49:4d:19:ad:89:b1:c1:b1:3e:a3:08:b1:85:24: b1:d5:e2:8d:c1:1f:00:58:df:87:f5:91:60:90:7f:0d:1a:79: 21:ae:62:04:5b:57:e5:76:84:d4:03:a4:a1:a7:90:f8:34:3c: 43:aa:05:0b:56:b8:2c:c4:50:e7:cb:fd:b2:4c:23:5c:a7:36: 83:c5:db:a2:23:d9:4f:fb:82:02:e3:27:05:8a:ce:92:c2:fb: 64:9c:65:70:4d:73:71:f1:50:d8:b4:69:2c:f7:eb:0e:1b:93: 7f:68:93:20:e9:2e:86:b7:f8:3a:a3:b8:6e:d4:00:db:af:7d: 94:6e:87:b2:d8:6f:42:4d:54:65:93:0a:d5:d4:7c:ea:a6:dc: 9c:c9:59:99:4d:f8:bc:1f:12:4a:d9:bd:a8:cf:b9:bd:fa:08: d1:47:bc:33:05:75:43:13:13:39:00:91:72:a7:d9:55:41:0b: 70:3a:d0:4b:a1:68:19:d5:e9:f4:c2:b9:3a:78:5d:0a:b3:98: 7d:6d:36:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBxHYa2UCgd8I9lHFHEPR/NNPbhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNDExMjExNjA2MzRaFw0yNDExMjUwMjQ2MzRaMDMxMTAvBgNV BAMTKEFGNzY4RTAyMTBBRUM4M0I5MDU4NDlCMzVDRkYwNDlBQjREQzI1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrLNvBts1oAuu8y0STDFKa6Vh vVpDwxpTd2qlpl2KQ0ZnJRaHC/e5nMSRKRw5IhASBj5CQFT0igyfeWZEaVKPFu0U xPUhuM1Uy/naOolNcG2K3zEeUiWQSjzkDuhpZ6eWwYBnTJHe0z7TKHTKgNUpPW/T EIUTroHWrftXmLd0oLci3Rt8/j8GyWJ2WtTp84QrcDKJKmpP2kajbLpsyizfmA95 +d1t6l1hz/tQ+qJTxQOaJgklWCmawIsCwYlAcs5of5XMlyRBYo2LUM5jgsxjdXlC 0/y2QrnNODkj19xHzXTwIYKMWzDzOOLoLXfff26ut2F+LE0Yrk7bD3AYk2nvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr3aOAhCuyDuQWEmzXP8EmrTcJX4wHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFmJM7nxBi/uOXaqS1TcDgRVGT9gqBMV89F L3bGJ7yija/o8Bc/X9Zr4pkXH+sFB9155VNIPFxsev1JTRmtibHBsT6jCLGFJLHV 4o3BHwBY34f1kWCQfw0aeSGuYgRbV+V2hNQDpKGnkPg0PEOqBQtWuCzEUOfL/bJM I1ynNoPF26Ij2U/7ggLjJwWKzpLC+2ScZXBNc3HxUNi0aSz36w4bk39okyDpLoa3 +DqjuG7UANuvfZRuh7LYb0JNVGWTCtXUfOqm3JzJWZlN+LwfEkrZvajPub36CNFH vDMFdUMTEzkAkXKn2VVBC3A60EuhaBnV6fTCuTp4XQqzmH1tNpI= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org