$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: wHroYLB6WsnFCQ7Co/Zj+Fp+QgPCr/AM6ys2dNeDeaQ= Subject key identifier: 57:20:F0:3F:AE:3D:C1:46:81:4C:67:5D:76:85:34:98:BA:35:FC:C4 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 03723745BC3062FAE48498FA33A2DEF79F03C6BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: 35 Signing time: Fri 27 Sep 2024 00:52:00 +0000 Manifest this update: Fri 27 Sep 2024 00:47:00 +0000 Manifest next update: Mon 30 Sep 2024 12:19:00 +0000 Files and hashes: 1: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: FEhjZkMiGLlLLnkMlvhdRq66NHYMIVeWK07ZVTOZp+M=) 2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: gRswT0x3O6GcGZIvbZdYbGTZFJLbdzQZujtUrtLFlm4=) 3: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: EkS7OKheUt3LRHGVUy/toAf2Zzo1UQ/P+Htovtyaul8=) 4: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: /98MLFLi0kiWuGxGiywhSbj3ZdX9t0rrFDtPGZH2n4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Sep 2024 12:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:72:37:45:bc:30:62:fa:e4:84:98:fa:33:a2:de:f7:9f:03:c6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Sep 27 00:47:00 2024 GMT Not After : Sep 30 12:19:00 2024 GMT Subject: CN=5720F03FAE3DC146814C675D76853498BA35FCC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:a8:39:26:92:b9:a9:87:c3:87:98:58:34: 3c:1a:23:1f:d7:e5:24:08:4d:ba:7d:ff:d5:4d:00: 7d:48:e4:29:42:57:7f:89:ad:f5:06:49:41:db:7c: f4:f9:5b:03:ec:fe:b3:89:9c:6f:58:02:3a:6c:86: 52:64:73:a7:ea:d0:f0:02:a7:78:cd:b1:95:98:d2: 71:1e:7f:15:63:4d:2f:14:c7:68:96:67:79:d4:e4: d1:ee:7b:e5:3d:89:dc:3f:2a:39:c6:f5:7c:82:07: 4f:55:a1:0b:44:fb:dc:74:e5:44:5f:0d:9e:71:da: 76:30:7c:28:fa:b9:49:2d:9e:9f:83:82:8b:5c:d6: e4:32:c3:6d:67:7f:a5:63:ea:59:12:d0:fd:97:11: 0f:c8:19:45:3d:9c:6f:aa:de:94:a7:3a:76:c5:33: e9:c8:3b:fe:55:01:02:f7:bc:93:a7:94:fd:02:b8: cb:2d:5d:e2:38:d2:62:fd:3c:e3:94:3d:af:3b:62: 62:d9:ff:7a:17:77:92:0f:ac:e8:bb:7b:02:7c:6d: 94:aa:bd:b8:2a:c9:a0:5d:1d:bb:6d:1e:da:9f:ae: 00:10:3a:cd:fd:fb:d3:6a:96:d5:a9:a6:69:60:be: 93:f7:b1:5d:39:75:07:fb:6c:b6:d1:0a:96:00:0b: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:20:F0:3F:AE:3D:C1:46:81:4C:67:5D:76:85:34:98:BA:35:FC:C4 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:96:5b:3c:6c:b0:40:dd:8a:e1:46:c2:b8:ee:e8:83:74:26: a3:9d:78:d8:cf:e9:46:d2:1b:c4:4a:8c:38:a1:f4:77:92:36: d0:27:63:82:af:b4:f0:34:b0:fc:37:d6:0d:16:1e:a5:d1:62: a3:ba:d7:ed:6e:5a:3f:25:5b:71:89:a9:27:f9:3e:c8:74:97: 3a:d7:d5:f8:3a:ec:ff:4b:54:f7:c2:90:78:d9:a1:21:0c:ce: 4d:e8:d3:7f:dd:12:bc:d7:91:c1:12:2a:8b:ac:6c:15:14:ee: 02:18:38:38:37:a8:93:ef:c6:b8:49:a2:c4:03:1d:14:9b:3e: 93:60:de:7d:40:b3:27:30:78:86:91:de:1e:ef:2d:13:36:73: d2:e9:50:5a:12:3f:e6:06:61:25:b8:8a:8f:b6:6d:22:e3:18: d0:69:e2:81:ea:2a:40:f7:68:35:40:28:18:20:1a:51:ce:6b: 1f:4f:62:b4:b9:d8:70:e9:5f:7f:9e:69:98:1c:bd:44:2d:84: cc:9a:ab:db:bc:17:57:9c:fc:3b:67:24:06:8f:9e:94:0f:da: 81:bc:88:eb:d3:18:a9:21:b1:32:f3:03:9f:57:df:04:2c:4e: 25:41:2d:92:29:34:cb:34:cb:46:ba:6a:99:63:bf:53:72:fc: f9:b8:62:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3I3RbwwYvrkhJj6M6Le958DxrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNDA5MjcwMDQ3MDBaFw0yNDA5MzAxMjE5MDBaMDMxMTAvBgNV BAMTKDU3MjBGMDNGQUUzREMxNDY4MTRDNjc1RDc2ODUzNDk4QkEzNUZDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw46g5JpK5qYfDh5hYNDwaIx/X 5SQITbp9/9VNAH1I5ClCV3+JrfUGSUHbfPT5WwPs/rOJnG9YAjpshlJkc6fq0PAC p3jNsZWY0nEefxVjTS8Ux2iWZ3nU5NHue+U9idw/KjnG9XyCB09VoQtE+9x05URf DZ5x2nYwfCj6uUktnp+Dgotc1uQyw21nf6Vj6lkS0P2XEQ/IGUU9nG+q3pSnOnbF M+nIO/5VAQL3vJOnlP0CuMstXeI40mL9POOUPa87YmLZ/3oXd5IPrOi7ewJ8bZSq vbgqyaBdHbttHtqfrgAQOs39+9NqltWppmlgvpP3sV05dQf7bLbRCpYAC855AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVyDwP649wUaBTGdddoU0mLo1/MQwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGWWzxssEDdiuFGwrju6IN0JqOdeNjP6UbS G8RKjDih9HeSNtAnY4KvtPA0sPw31g0WHqXRYqO61+1uWj8lW3GJqSf5Psh0lzrX 1fg67P9LVPfCkHjZoSEMzk3o03/dErzXkcESKousbBUU7gIYODg3qJPvxrhJosQD HRSbPpNg3n1AsycweIaR3h7vLRM2c9LpUFoSP+YGYSW4io+2bSLjGNBp4oHqKkD3 aDVAKBggGlHOax9PYrS52HDpX3+eaZgcvUQthMyaq9u8F1ec/DtnJAaPnpQP2oG8 iOvTGKkhsTLzA59X3wQsTiVBLZIpNMs0y0a6apljv1Ny/Pm4YgU= -----END CERTIFICATE-----Generated at Fri Sep 27 03:15:04 2024 by rpki-client on console-fra.rpki-client.org