$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: VdJjaHfpycw2b7znFYPddYm4uBA+UMErK6s61+Iq1AY= Subject key identifier: CE:01:2C:B7:52:37:AD:59:E9:44:C3:A6:C8:AB:67:25:DD:01:11:19 Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 3718F7FA24E7C8A4025B8B25FD865973D0211811 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: 11 Signing time: Thu 21 Nov 2024 05:20:05 +0000 Manifest this update: Thu 21 Nov 2024 05:15:05 +0000 Manifest next update: Sun 24 Nov 2024 09:53:05 +0000 Files and hashes: 1: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: iMRx2/fycoUNnADpURoZKgG+Fnid0mUKuiDUMMFE+zs=) 2: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: qQpFLnjSrZjdy07FM2TviIie4W5UxekPgT0NJm9BT0c=) 3: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: WF2EQ4NoWy0FUwj/4wZEsZYgK5I+o6WegPxbWofx25Q=) 4: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: C5wGHhmJgC98/5vm0kVq5lmCeSUAxHMwIVbBGfkLxeQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:18:f7:fa:24:e7:c8:a4:02:5b:8b:25:fd:86:59:73:d0:21:18:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Nov 21 05:15:05 2024 GMT Not After : Nov 24 09:53:05 2024 GMT Subject: CN=CE012CB75237AD59E944C3A6C8AB6725DD011119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bf:53:a7:15:5b:23:fc:2d:ee:db:1f:60:20: d8:11:c4:1f:9c:8f:8d:f6:db:10:c1:84:f7:fe:56: 3e:95:89:06:92:63:ba:e4:e8:0f:d6:16:f4:fc:53: b4:17:30:2d:16:7e:3a:b8:ee:df:7c:14:ac:19:86: 28:29:00:14:87:a0:83:49:35:c0:ad:2e:5a:df:fb: 8a:93:6e:a4:6d:ba:4a:55:fe:90:14:14:e2:9e:32: 10:68:0e:76:6d:ad:76:2f:5d:91:54:0d:3b:a4:00: bb:b8:3e:fb:0b:30:57:24:93:82:03:c1:9d:aa:b5: 36:d2:c4:0b:80:df:89:c8:2e:39:d5:59:18:5b:a5: 48:e4:37:c2:35:19:16:c0:c2:b4:70:ad:76:4c:2e: 5e:a9:f4:19:fb:52:13:67:c3:dd:af:7c:fc:ad:ff: 05:3e:14:29:51:72:3d:58:d4:9b:b9:36:16:b5:df: 7a:ca:33:9b:ed:08:88:a1:74:8f:85:ad:52:c9:72: 05:2b:ed:9a:55:ad:91:4a:3f:97:f7:00:8f:a9:c1: 03:e5:94:11:bc:e9:4f:87:9f:77:6b:80:54:ec:3b: 8b:25:57:7e:16:4e:0d:1b:c6:aa:b0:0f:44:43:fd: 71:af:5b:ba:05:a9:ae:b1:4a:8b:6e:38:6b:2e:0d: 0d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:01:2C:B7:52:37:AD:59:E9:44:C3:A6:C8:AB:67:25:DD:01:11:19 X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0a:fc:4d:68:31:c9:ca:b6:21:67:a3:9c:fa:7d:9f:7c:9a: c8:80:e5:bb:3f:e3:13:32:51:77:89:dc:25:f3:0e:f2:d1:80: 48:5b:85:e0:50:cf:67:b4:25:8a:69:58:98:f7:f6:1b:d4:4d: c5:4d:6c:28:e0:3f:1c:09:cd:fd:47:9e:a2:fc:f8:00:7c:cc: dc:7c:dd:55:d9:ab:9b:41:48:88:4f:24:68:b9:b0:30:c8:79: f7:8c:73:14:ea:a7:bb:c7:ef:d6:a9:e0:16:05:f8:df:6e:c5: 2b:0d:3f:c8:4c:54:6e:9d:34:2d:93:58:56:cf:23:3b:60:81: b4:3c:c3:23:68:ce:01:78:c4:f2:90:d9:f9:3b:d5:ea:92:8b: 19:d0:cd:3e:7c:cb:31:8c:31:f8:fa:e3:2d:64:3c:2e:86:65: 24:5d:bf:b1:4f:79:50:44:af:83:38:f0:9a:02:8d:0a:85:38: 87:fb:ba:b5:41:48:cf:06:78:30:90:f2:fc:0b:97:db:98:84: e6:ed:f2:e3:22:18:87:66:15:89:2b:2a:c8:ad:41:b9:be:ad: 86:da:2e:5a:d4:38:49:fd:69:0e:92:83:d0:d8:99:4b:07:3f: 22:32:5b:0c:ee:85:2b:31:97:d0:f3:1b:9a:47:f9:62:27:02: 05:ff:e5:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxj3+iTnyKQCW4sl/YZZc9AhGBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNDExMjEwNTE1MDVaFw0yNDExMjQwOTUzMDVaMDMxMTAvBgNV BAMTKENFMDEyQ0I3NTIzN0FENTlFOTQ0QzNBNkM4QUI2NzI1REQwMTExMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwv1OnFVsj/C3u2x9gINgRxB+c j4322xDBhPf+Vj6ViQaSY7rk6A/WFvT8U7QXMC0Wfjq47t98FKwZhigpABSHoINJ NcCtLlrf+4qTbqRtukpV/pAUFOKeMhBoDnZtrXYvXZFUDTukALu4PvsLMFckk4ID wZ2qtTbSxAuA34nILjnVWRhbpUjkN8I1GRbAwrRwrXZMLl6p9Bn7UhNnw92vfPyt /wU+FClRcj1Y1Ju5Nha133rKM5vtCIihdI+FrVLJcgUr7ZpVrZFKP5f3AI+pwQPl lBG86U+Hn3drgFTsO4slV34WTg0bxqqwD0RD/XGvW7oFqa6xSotuOGsuDQ0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzgEst1I3rVnpRMOmyKtnJd0BERkwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIK/E1oMcnKtiFno5z6fZ98msiA5bs/4xMy UXeJ3CXzDvLRgEhbheBQz2e0JYppWJj39hvUTcVNbCjgPxwJzf1HnqL8+AB8zNx8 3VXZq5tBSIhPJGi5sDDIefeMcxTqp7vH79ap4BYF+N9uxSsNP8hMVG6dNC2TWFbP IztggbQ8wyNozgF4xPKQ2fk71eqSixnQzT58yzGMMfj64y1kPC6GZSRdv7FPeVBE r4M48JoCjQqFOIf7urVBSM8GeDCQ8vwLl9uYhObt8uMiGIdmFYkrKsitQbm+rYba LlrUOEn9aQ6Sg9DYmUsHPyIyWwzuhSsxl9DzG5pH+WInAgX/5S0= -----END CERTIFICATE-----Generated at Thu Nov 21 06:48:39 2024 by rpki-client on console-fra.rpki-client.org