$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: Xx7E/tXcgLGSzdOdEsi59uwEi3SyYvPFsjpyeoGBHf0= Subject key identifier: 91:1C:A3:FD:0C:06:B1:E9:7E:79:28:49:2A:1F:F4:BD:06:12:5C:77 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 1B8D63B560B4F267535CFFC70FC6BB0CC0335CF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 041D Signing time: Sun 24 Nov 2024 19:01:46 +0000 Manifest this update: Sun 24 Nov 2024 18:56:46 +0000 Manifest next update: Thu 28 Nov 2024 00:42:46 +0000 Files and hashes: 1: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: SfebsX6N4EHVVbFIZZFTRQ/cWQm9Z3T8NGVqYx1f7QE=) 2: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: NgCvE1hp44YLC96n/lodIlhmLB1FaaOx9l0TuasHSug=) 3: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: okSOnsTLjxdHLCwY+rCd2PFKGFvwdYfmYy2z3ckMn90=) 4: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 1hrs4DLPh6jmKDUQsAVeS3tTO/nLdzEIlT+GiyvpCqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8d:63:b5:60:b4:f2:67:53:5c:ff:c7:0f:c6:bb:0c:c0:33:5c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Nov 24 18:56:46 2024 GMT Not After : Nov 28 00:42:46 2024 GMT Subject: CN=911CA3FD0C06B1E97E7928492A1FF4BD06125C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:28:38:af:51:5c:d6:3f:06:af:0a:df:34: 90:22:7b:6f:f2:0a:66:93:a6:52:bd:99:96:35:1f: 02:c7:42:17:e2:c4:a3:b0:40:93:79:a6:11:2d:84: 1b:06:9c:80:5f:6a:de:1d:9b:3d:a2:9c:be:08:62: 81:03:e0:bf:f9:30:0f:d8:77:ad:e6:28:46:6c:c0: eb:4e:ef:63:e0:48:f2:5b:bd:f5:08:9c:d8:8e:64: f1:50:92:3a:98:1c:72:22:5e:05:89:8e:e7:90:92: ae:55:ab:1a:21:a0:75:81:37:00:8e:a3:e1:20:57: e6:ca:c9:89:ab:9c:4c:da:9c:18:e8:84:42:57:c4: 25:c9:56:b2:92:71:e3:db:31:4e:ca:a8:20:44:64: db:f1:d9:50:8f:52:29:da:7a:8e:06:46:b6:0f:06: 67:ad:e2:1f:12:7b:1a:68:58:23:6f:68:9c:f5:a8: ad:46:9f:d9:2f:b0:81:7e:1e:39:d5:a5:01:0d:5d: 5e:47:18:01:60:b9:ee:3a:fd:87:c5:7c:a7:cb:7d: 0c:51:4f:cd:cb:ae:a5:7a:df:66:c3:d8:cb:d2:b6: 1c:a7:4e:e7:fc:ef:b3:04:2a:b9:49:a0:64:8f:4b: 9b:2e:35:db:d6:64:d5:cd:ca:60:dd:22:73:ae:97: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1C:A3:FD:0C:06:B1:E9:7E:79:28:49:2A:1F:F4:BD:06:12:5C:77 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:8d:b9:14:56:26:fd:db:39:ba:06:2a:c2:67:9e:5d:e6:b0: e0:d0:d9:3c:dd:de:d5:6c:6e:ff:48:72:8e:7b:34:58:77:cc: 60:1d:d0:3e:65:56:71:ae:f7:2a:be:98:cd:65:00:0a:7b:2b: 42:15:d0:ce:7c:ac:ae:36:2f:ba:fc:63:12:c5:d6:53:1f:6d: 4b:1d:96:88:3d:6d:c9:bb:dc:f8:ff:70:9e:7b:c1:1d:8a:03: 06:7c:e2:b4:69:96:55:dc:0c:59:fe:fc:20:6d:3b:1f:8a:f9: e3:4a:c3:e3:71:25:24:08:12:6c:2a:31:8d:8c:07:5a:a9:3b: eb:a2:40:88:33:b7:56:bf:2e:8d:6d:36:ed:c6:20:43:cd:51: e6:69:a1:f1:ae:e8:11:56:d7:57:e0:ad:5a:83:08:89:63:be: fe:b3:c5:3d:c5:a0:98:96:ae:48:92:d7:cc:47:20:f3:61:fa: e3:c7:e1:fd:b9:10:87:d7:a2:db:ef:f3:e5:15:2e:b4:a4:c1: 32:c5:57:56:c8:72:01:52:db:42:ce:a6:24:4f:be:c7:41:d4: b8:74:a7:23:10:61:98:19:bb:30:c2:ef:64:34:73:41:cb:8e: 11:b5:57:f6:1f:27:81:83:46:df:2f:57:cf:58:14:23:2f:d6: 3e:3e:3f:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG41jtWC08mdTXP/HD8a7DMAzXPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNDExMjQxODU2NDZaFw0yNDExMjgwMDQyNDZaMDMxMTAvBgNV BAMTKDkxMUNBM0ZEMEMwNkIxRTk3RTc5Mjg0OTJBMUZGNEJEMDYxMjVDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fSg4r1Fc1j8GrwrfNJAie2/y CmaTplK9mZY1HwLHQhfixKOwQJN5phEthBsGnIBfat4dmz2inL4IYoED4L/5MA/Y d63mKEZswOtO72PgSPJbvfUInNiOZPFQkjqYHHIiXgWJjueQkq5VqxohoHWBNwCO o+EgV+bKyYmrnEzanBjohEJXxCXJVrKScePbMU7KqCBEZNvx2VCPUinaeo4GRrYP Bmet4h8SexpoWCNvaJz1qK1Gn9kvsIF+HjnVpQENXV5HGAFgue46/YfFfKfLfQxR T83LrqV632bD2MvSthynTuf877MEKrlJoGSPS5suNdvWZNXNymDdInOul0wjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkRyj/QwGsel+eShJKh/0vQYSXHcwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWNuRRWJv3bOboGKsJnnl3msODQ2Tzd3tVs bv9Ico57NFh3zGAd0D5lVnGu9yq+mM1lAAp7K0IV0M58rK42L7r8YxLF1lMfbUsd log9bcm73Pj/cJ57wR2KAwZ84rRpllXcDFn+/CBtOx+K+eNKw+NxJSQIEmwqMY2M B1qpO+uiQIgzt1a/Lo1tNu3GIEPNUeZpofGu6BFW11fgrVqDCIljvv6zxT3FoJiW rkiS18xHIPNh+uPH4f25EIfXotvv8+UVLrSkwTLFV1bIcgFS20LOpiRPvsdB1Lh0 pyMQYZgZuzDC72Q0c0HLjhG1V/YfJ4GDRt8vV89YFCMv1j4+P1g= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org