$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: ScWc9AQtDDkvhSCCY+MMNu3Ag7kTNpLm7e98idhuu3g= Subject key identifier: 5D:26:50:42:EA:5E:02:F2:06:BA:FC:E7:90:FA:64:75:93:0B:15:E5 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 13A97778B92092E2C621513809BD14B8D0D42DA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 01C7 Signing time: Thu 21 Nov 2024 09:51:23 +0000 Manifest this update: Thu 21 Nov 2024 09:46:23 +0000 Manifest next update: Sun 24 Nov 2024 20:37:23 +0000 Files and hashes: 1: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: ouXIX9GF2bsN7u33KTbYLbJVbRNSQKEsMqHEdl/mkaw=) 2: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: a6VL+tiLvDrEiMJJCa/pziVeimnvEFdLlrcQ5dxhup0=) 3: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: QxcRI59eBP9vOZvPd8UtIm8nunAIQZZkvPnGGZ6af2w=) 4: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: VNXiSw/mkVU/eaep8UiaH3pF3+R/bpIMEPNGotq1Wno=) 5: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: dqH/h3KP8VbL1imk1+sCwLW1Fbde9SEkgS3WsJD6a4Q=) 6: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: 9QQ+2QkEe5ZH/Gx9crXFjTQMx7fu4j8ocdzuLtt+l68=) 7: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 7O8N58po+0JxePzNZclEQ2AJgxG8+dzNwmbyqc3JseQ=) 8: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 5099uAR6KmDcIfNiZmfT8BCVcKIiSE/bkHtUTKJ/KOQ=) 9: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: +AMBcTRDOItbHkoJjd3Z20zd7vvhBKXQR154gJmvfP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a9:77:78:b9:20:92:e2:c6:21:51:38:09:bd:14:b8:d0:d4:2d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Nov 21 09:46:23 2024 GMT Not After : Nov 24 20:37:23 2024 GMT Subject: CN=5D265042EA5E02F206BAFCE790FA6475930B15E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:2c:f9:2d:18:50:33:0b:4d:c4:19:6c:72: 6b:2c:58:63:c1:cb:b7:26:92:af:af:c9:07:a6:6e: 3d:50:ad:74:05:6e:d1:6c:f2:6e:3e:e1:17:a9:d5: f1:8e:bf:de:22:90:bb:32:b9:a5:ba:e0:75:b9:42: 37:4b:1b:db:df:49:42:1b:81:4a:4f:13:56:15:44: 5e:a5:6d:f8:b8:ac:20:72:65:68:ef:ac:ad:db:88: 72:67:2b:73:ae:a6:f6:12:5f:b9:c7:4c:ce:fd:0e: a3:b0:44:15:a8:85:18:5c:4f:56:cd:23:c2:78:0c: 44:d9:a6:9c:53:b3:61:e4:06:3f:91:98:cb:6f:d7: c0:83:c6:fa:8f:90:09:a3:9f:13:fd:16:7a:9e:28: 1d:99:8f:17:36:c1:9b:d8:ca:03:af:18:42:a9:74: 00:90:79:7c:fb:b8:29:51:2f:48:44:9f:4c:b7:f2: df:f9:de:2c:2a:5d:1b:ec:32:6c:0c:3f:9f:ed:10: 20:e3:e5:0e:fd:4c:a7:d3:39:22:76:3a:b5:f8:61: 82:77:a8:90:3c:80:24:2b:c2:3f:2b:3c:8e:ba:31: 0c:14:8a:bb:c7:78:0a:5c:6b:98:1c:8a:27:f6:f4: 4c:70:82:b9:ef:81:de:52:9d:a8:c7:66:c7:8c:79: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:26:50:42:EA:5E:02:F2:06:BA:FC:E7:90:FA:64:75:93:0B:15:E5 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a9:82:60:fb:08:e1:54:c6:32:61:a9:43:78:8b:56:65:cb: 1a:48:ac:8f:81:ff:ae:a6:6c:95:c3:31:23:28:2b:44:76:88: ae:88:24:9e:14:1d:62:6a:61:64:f0:09:a7:53:60:74:73:77: 97:88:c7:3d:2f:04:52:94:bb:45:09:94:39:14:2a:8f:b5:cb: 6d:ad:c5:52:7d:78:3e:83:83:50:5e:46:ff:f3:8e:85:4c:e2: 49:1e:71:41:58:cc:cd:ca:a0:84:81:45:54:80:d8:89:ae:66: ac:d3:8e:4f:a2:97:8e:36:f7:8e:fb:85:fe:4c:de:10:48:f0: fe:65:f0:cb:c1:de:2a:90:07:53:02:a7:98:cb:42:cf:07:00: 92:24:6f:db:8b:83:1e:94:c9:3b:d0:1b:38:9d:68:b0:a8:93: 6d:1f:e1:f6:25:8e:57:3b:29:68:39:80:09:65:02:09:69:b3: 11:c3:29:2e:fd:b9:a7:e8:37:fc:af:0e:d7:be:bf:85:24:35: 60:ca:32:58:4d:f7:bb:8f:ef:78:ba:f9:af:c5:85:98:80:92: 99:29:5c:d8:91:41:c7:90:55:a1:8a:61:ad:15:57:81:d4:65: 10:17:0b:46:e2:ef:d0:4f:13:df:a6:0d:b9:63:e6:a9:89:9c: 82:fb:67:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6l3eLkgkuLGIVE4Cb0UuNDULaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNDExMjEwOTQ2MjNaFw0yNDExMjQyMDM3MjNaMDMxMTAvBgNV BAMTKDVEMjY1MDQyRUE1RTAyRjIwNkJBRkNFNzkwRkE2NDc1OTMwQjE1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+Cz5LRhQMwtNxBlscmssWGPB y7cmkq+vyQembj1QrXQFbtFs8m4+4Rep1fGOv94ikLsyuaW64HW5QjdLG9vfSUIb gUpPE1YVRF6lbfi4rCByZWjvrK3biHJnK3OupvYSX7nHTM79DqOwRBWohRhcT1bN I8J4DETZppxTs2HkBj+RmMtv18CDxvqPkAmjnxP9FnqeKB2Zjxc2wZvYygOvGEKp dACQeXz7uClRL0hEn0y38t/53iwqXRvsMmwMP5/tECDj5Q79TKfTOSJ2OrX4YYJ3 qJA8gCQrwj8rPI66MQwUirvHeApca5gciif29Exwgrnvgd5SnajHZseMefEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXSZQQupeAvIGuvznkPpkdZMLFeUwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmpgmD7COFUxjJhqUN4i1ZlyxpIrI+B/66m bJXDMSMoK0R2iK6IJJ4UHWJqYWTwCadTYHRzd5eIxz0vBFKUu0UJlDkUKo+1y22t xVJ9eD6Dg1BeRv/zjoVM4kkecUFYzM3KoISBRVSA2ImuZqzTjk+il4429477hf5M 3hBI8P5l8MvB3iqQB1MCp5jLQs8HAJIkb9uLgx6UyTvQGzidaLCok20f4fYljlc7 KWg5gAllAglpsxHDKS79uafoN/yvDte+v4UkNWDKMlhN97uP73i6+a/FhZiAkpkp XNiRQceQVaGKYa0VV4HUZRAXC0bi79BPE9+mDblj5qmJnIL7Z9U= -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:50 2024 by rpki-client on console-ams.rpki-client.org