$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft File: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft (raw, json) Hash identifier: DIIX6mec53Iz5VDms9eJsbu99f65+VrPlB2WIL32I30= Subject key identifier: A8:C0:9E:01:65:79:60:D6:20:72:A5:EA:EE:E4:06:67:59:0B:F2:D2 Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 31B243DD469E6108F5154FFAC4086E333B20784B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft Manifest number: 01BF Signing time: Fri 22 Nov 2024 03:42:18 +0000 Manifest this update: Fri 22 Nov 2024 03:37:18 +0000 Manifest next update: Mon 25 Nov 2024 10:06:18 +0000 Files and hashes: 1: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: ULwn2X/hM4Q5FWRKFhlmMhxFoOG81+KJc0tu7bMjlwI=) 2: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: P+YFIlA5HQxOZarwfNVZcytsk2bEQds3utjug9joblM=) 3: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: VvHlwJjkzp/f4aEvB49xY0cR+dEFdY6LoapVGW4aAes=) 4: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl (hash: ERWKlgKbvYzXPSKBrMdz13qQBxWJFVV8y3WsqKPccno=) 5: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: NylVEzXL/5C7BT5pU6Bs2ehe4F1U33BnM/T+bbxW6JQ=) 6: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: dJybva3DyBfw0oVXQRRuEZV6Qk6dg0iDH+GIP6YtJ2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b2:43:dd:46:9e:61:08:f5:15:4f:fa:c4:08:6e:33:3b:20:78:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Nov 22 03:37:18 2024 GMT Not After : Nov 25 10:06:18 2024 GMT Subject: CN=A8C09E01657960D62072A5EAEEE40667590BF2D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:03:16:d2:2a:08:17:59:5b:59:2a:ac:d1: bc:80:f7:b0:55:2d:f0:de:3b:63:ca:39:f0:5d:1b: 46:92:f7:ea:c4:fe:bb:c0:01:14:59:34:07:6a:e1: 4d:09:fd:43:5c:0f:3a:6e:a1:06:7c:c0:fa:9b:ad: f4:96:d5:65:73:b3:26:e6:93:ae:9b:8a:7c:39:d3: 32:75:ee:8a:f6:7b:31:c8:ab:13:54:2e:80:92:28: 8c:fe:d9:4f:6d:40:e3:55:75:86:3f:18:45:aa:1b: 24:e6:98:23:35:46:7a:28:20:86:12:58:95:cb:dd: a8:15:d2:d0:fb:d0:c4:3b:86:87:9c:a4:15:bc:03: 44:aa:3b:1f:bd:64:84:e6:c1:9d:f0:8b:c8:9b:3f: cb:2c:ff:fd:6e:d4:3a:d7:a2:02:ef:ac:42:da:d2: 7e:44:e7:08:10:2e:79:3c:b7:d5:35:d4:f8:ec:b0: 15:87:68:7e:69:ca:56:79:e4:61:30:03:46:69:c8: 9c:2c:80:48:50:1e:80:da:c3:a3:7a:a5:f2:2a:4b: ee:e9:16:d4:06:20:ad:b7:bf:0e:1a:7b:98:ab:28: c2:a3:48:52:99:ec:dd:28:0b:d4:5a:8a:9e:39:d0: 3d:8d:4d:2b:d3:c0:22:9a:3c:58:49:9d:40:36:0c: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C0:9E:01:65:79:60:D6:20:72:A5:EA:EE:E4:06:67:59:0B:F2:D2 X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:10:84:b4:13:27:5b:3d:ca:5a:63:d4:ef:d8:97:a6:cd:39: 59:e3:bb:47:70:b2:90:5b:2d:02:d5:c8:60:81:55:53:99:50: 41:cb:a2:df:cf:50:80:41:1a:10:4b:5a:55:9b:fc:8b:73:65: fd:e7:4c:7c:d2:9e:0c:4c:b1:26:bc:d1:3b:63:33:a1:e0:98: 33:d3:98:e4:34:75:32:28:0a:4c:9c:71:0e:46:4b:25:03:8a: 46:18:77:17:01:70:36:e5:a5:04:06:70:7c:64:47:0c:d8:43: 65:f2:93:6f:d8:de:f7:2a:19:cb:b7:5c:c6:6d:24:02:4b:36: ff:af:96:1e:73:2e:b0:03:72:6c:97:c7:6a:51:34:e4:e4:77: b4:2c:d6:49:e7:6f:a9:d9:25:aa:67:b8:d1:e7:04:40:dc:49: 42:b6:b2:bd:d4:db:48:42:7f:1f:ac:50:d3:f3:db:bd:eb:96: 6d:58:4b:1a:2b:1f:71:53:80:4e:3b:ab:0a:a0:e4:3d:79:03: 24:c7:cb:77:73:cc:65:c1:e5:69:12:e7:7c:10:14:17:63:7c: c2:ad:ca:b8:24:37:3b:3c:29:b2:77:64:3b:76:f4:cb:4b:f1: 2d:3f:ea:5f:b5:c4:84:fb:b0:bf:f0:76:93:3c:6f:4b:4e:74: a6:97:13:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbJD3UaeYQj1FU/6xAhuMzsgeEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNDExMjIwMzM3MThaFw0yNDExMjUxMDA2MThaMDMxMTAvBgNV BAMTKEE4QzA5RTAxNjU3OTYwRDYyMDcyQTVFQUVFRTQwNjY3NTkwQkYyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILQMW0ioIF1lbWSqs0byA97BV LfDeO2PKOfBdG0aS9+rE/rvAARRZNAdq4U0J/UNcDzpuoQZ8wPqbrfSW1WVzsybm k66binw50zJ17or2ezHIqxNULoCSKIz+2U9tQONVdYY/GEWqGyTmmCM1RnooIIYS WJXL3agV0tD70MQ7hoecpBW8A0SqOx+9ZITmwZ3wi8ibP8ss//1u1DrXogLvrELa 0n5E5wgQLnk8t9U11PjssBWHaH5pylZ55GEwA0ZpyJwsgEhQHoDaw6N6pfIqS+7p FtQGIK23vw4ae5irKMKjSFKZ7N0oC9Raip450D2NTSvTwCKaPFhJnUA2DGJfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqMCeAWV5YNYgcqXq7uQGZ1kL8tIwHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUx MEU0MUY1NTEzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUQhLQTJ1s9ylpj1O/Yl6bNOVnju0dwspBb LQLVyGCBVVOZUEHLot/PUIBBGhBLWlWb/ItzZf3nTHzSngxMsSa80TtjM6HgmDPT mOQ0dTIoCkyccQ5GSyUDikYYdxcBcDblpQQGcHxkRwzYQ2Xyk2/Y3vcqGcu3XMZt JAJLNv+vlh5zLrADcmyXx2pRNOTkd7Qs1knnb6nZJapnuNHnBEDcSUK2sr3U20hC fx+sUNPz273rlm1YSxorH3FTgE47qwqg5D15AyTHy3dzzGXB5WkS53wQFBdjfMKt yrgkNzs8KbJ3ZDt29MtL8S0/6l+1xIT7sL/wdpM8b0tOdKaXE4Y= -----END CERTIFICATE-----Generated at Fri Nov 22 05:48:03 2024 by rpki-client on console-fra.rpki-client.org