$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: mwa9xz7S7HizI2yr9SICduGO75+eujD756pE8doD70o= Subject key identifier: 5E:4C:DB:C2:B8:01:71:7A:63:99:6E:2D:3B:B6:B7:7E:CF:3E:33:9C Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 20BF28A08E3E2E4184713AF87AAF3BB053A176B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 01BB Signing time: Wed 20 Nov 2024 18:01:47 +0000 Manifest this update: Wed 20 Nov 2024 17:56:47 +0000 Manifest next update: Sun 24 Nov 2024 03:14:47 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 8bkqGMhF3/nCIAOPQ3Fxu2QvfK1q2EogVCcqPteQCkA=) 2: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: 9j1djNRTqTZSTBUAXbvJdocIBOB9V4s2Pv4gE5xCjHs=) 3: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: oe3+G3GKBTVJ9QDasdiCnqAmOETVV5egAA+7QZGJTcM=) 4: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: ZLRkLGPYq1htFpMAfCpdbC+01ZHWklqVZGY4MZ/dBH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bf:28:a0:8e:3e:2e:41:84:71:3a:f8:7a:af:3b:b0:53:a1:76:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Nov 20 17:56:47 2024 GMT Not After : Nov 24 03:14:47 2024 GMT Subject: CN=5E4CDBC2B801717A63996E2D3BB6B77ECF3E339C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:20:d8:a0:8e:69:ad:2b:be:00:c6:61:08:81: cf:b8:5b:c9:7e:e5:ed:7b:25:0d:fa:37:05:f2:17: 02:40:6d:6d:15:da:bf:23:ec:cc:e5:9e:9c:5f:6d: 21:8a:03:58:88:da:4e:7d:20:a2:e5:de:e6:a6:a3: 53:43:de:4f:5a:d8:0c:af:b8:34:6f:a0:60:1f:58: 5e:20:08:b6:41:88:ce:55:ed:09:a4:97:71:79:92: 13:29:d9:12:fc:81:b5:a6:a0:7b:0f:36:3c:69:c0: 07:e9:ac:21:d6:05:64:7f:4e:a1:83:40:1c:e5:81: b5:89:81:90:3b:0e:9d:fb:85:ca:74:0e:64:52:e6: b8:bd:f3:f1:3c:ee:2b:67:ef:ec:6d:93:8a:b6:90: e5:5f:39:6d:51:ee:b5:79:fc:29:23:43:f9:34:6b: 33:7c:26:b1:21:3e:1b:77:81:ab:b6:cc:70:cf:d6: c9:34:ff:c1:6f:d9:b1:10:f5:bd:cc:26:bd:73:77: 11:ac:22:04:0c:0c:2e:4d:f3:35:e4:c6:28:a9:73: d6:b5:58:f7:9b:3b:cb:42:46:11:5d:45:6a:54:c3: 36:be:d3:9b:7a:9a:af:0b:10:76:54:98:9f:45:db: 25:18:3a:73:53:b7:b5:d5:f6:5d:47:6e:26:11:06: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4C:DB:C2:B8:01:71:7A:63:99:6E:2D:3B:B6:B7:7E:CF:3E:33:9C X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:60:24:b7:c7:81:e6:0d:a3:45:1a:2c:02:82:f1:8b:5e:c7: a7:9b:1a:79:64:91:7a:fd:2b:06:c2:68:ca:db:2d:ea:4d:ef: d9:75:cf:04:56:f9:80:00:71:32:1c:cd:e9:e1:31:02:87:1f: b1:97:21:0d:cb:9c:d5:4a:82:a1:8e:f6:5f:01:ee:9a:2b:2d: 47:3e:d6:81:be:ac:07:bb:41:ba:82:f5:6f:b6:6f:be:59:4d: cc:c3:87:e7:81:f8:34:e4:29:a9:2d:d6:71:e3:c5:47:2b:6b: dd:7d:5f:26:91:bc:17:ca:23:bd:8f:da:5b:4d:c6:af:03:29: 52:b7:54:00:a1:7c:96:b1:a5:3f:9b:3c:92:ce:21:5c:12:fb: 32:a5:a3:6f:ea:78:f5:2b:f5:5b:e0:f1:08:1b:f0:22:fb:99: 8e:17:37:cd:ae:fa:95:46:9f:40:b6:01:f8:84:9d:ff:04:5a: 76:02:18:46:60:aa:f1:0d:86:9c:9e:59:8b:a2:ab:75:39:20: fd:2b:e7:d8:65:92:6b:da:0f:fc:96:8f:19:78:b6:5c:d7:a9: b2:63:19:b5:73:f7:73:7b:63:f8:65:c6:92:c9:67:2e:d6:da: 9e:e9:67:60:72:45:63:7b:a2:44:5c:67:19:c0:38:1e:dd:83: fd:7a:8d:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIL8ooI4+LkGEcTr4eq87sFOhdrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNDExMjAxNzU2NDdaFw0yNDExMjQwMzE0NDdaMDMxMTAvBgNV BAMTKDVFNENEQkMyQjgwMTcxN0E2Mzk5NkUyRDNCQjZCNzdFQ0YzRTMzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqINigjmmtK74AxmEIgc+4W8l+ 5e17JQ36NwXyFwJAbW0V2r8j7MzlnpxfbSGKA1iI2k59IKLl3uamo1ND3k9a2Ayv uDRvoGAfWF4gCLZBiM5V7Qmkl3F5khMp2RL8gbWmoHsPNjxpwAfprCHWBWR/TqGD QBzlgbWJgZA7Dp37hcp0DmRS5ri98/E87itn7+xtk4q2kOVfOW1R7rV5/CkjQ/k0 azN8JrEhPht3gau2zHDP1sk0/8Fv2bEQ9b3MJr1zdxGsIgQMDC5N8zXkxiipc9a1 WPebO8tCRhFdRWpUwza+05t6mq8LEHZUmJ9F2yUYOnNTt7XV9l1HbiYRBvrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXkzbwrgBcXpjmW4tO7a3fs8+M5wwHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxgJLfHgeYNo0UaLAKC8Ytex6ebGnlkkXr9 KwbCaMrbLepN79l1zwRW+YAAcTIczenhMQKHH7GXIQ3LnNVKgqGO9l8B7porLUc+ 1oG+rAe7QbqC9W+2b75ZTczDh+eB+DTkKakt1nHjxUcra919XyaRvBfKI72P2ltN xq8DKVK3VAChfJaxpT+bPJLOIVwS+zKlo2/qePUr9Vvg8Qgb8CL7mY4XN82u+pVG n0C2AfiEnf8EWnYCGEZgqvENhpyeWYuiq3U5IP0r59hlkmvaD/yWjxl4tlzXqbJj GbVz93N7Y/hlxpLJZy7W2p7pZ2ByRWN7okRcZxnAOB7dg/16ja4= -----END CERTIFICATE-----Generated at Wed Nov 20 18:59:24 2024 by rpki-client on console-ams.rpki-client.org