$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: 2DAIiKDiIxTLKNUFZhRf6G1JlLnEcKP2VHoknM+9SAI= Subject key identifier: BD:AE:96:B6:DD:1B:F2:DC:D4:35:B6:F9:C8:2E:1D:AC:94:A9:62:F4 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 79B0A439C63AA3456FA84CC8C58BE69EFD9D81D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 0308 Signing time: Fri 22 Nov 2024 17:11:05 +0000 Manifest this update: Fri 22 Nov 2024 17:06:05 +0000 Manifest next update: Tue 26 Nov 2024 01:18:05 +0000 Files and hashes: 1: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: lemOBxzEIaeirJ2dgAmcIfuzlFmLL0UOZ/oRwGDF31c=) 2: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: /+6rFR/CtKXLMWpUolSLlOIypFPDbHoqQJ6CX1X4V1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b0:a4:39:c6:3a:a3:45:6f:a8:4c:c8:c5:8b:e6:9e:fd:9d:81:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Nov 22 17:06:05 2024 GMT Not After : Nov 26 01:18:05 2024 GMT Subject: CN=BDAE96B6DD1BF2DCD435B6F9C82E1DAC94A962F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:1e:ea:6c:68:4c:f7:86:2c:ed:71:67:08: fd:90:5a:e6:a0:b9:9a:94:c4:7d:c6:bd:19:4a:4f: fe:69:26:26:3e:cd:99:c2:1a:e1:eb:17:8d:30:ab: 7e:b3:68:b8:9e:24:d4:dd:61:86:8e:7b:5b:cb:36: e7:7e:14:a1:f4:99:2d:12:7e:8c:20:e5:41:5f:1b: fe:4f:34:60:6b:2f:97:fb:98:55:54:42:3a:43:4e: fa:21:09:f8:04:18:95:17:b3:7b:20:49:55:bf:5a: be:4b:47:3f:ad:55:23:9c:d3:2a:70:0c:79:79:45: 0b:3e:33:24:da:e4:93:53:c7:40:6b:ee:6a:6c:3d: a3:e5:77:2f:59:84:42:dd:c0:07:7e:ef:d6:93:a9: 8c:89:22:96:63:d8:74:82:05:6d:18:4d:ea:30:62: 71:15:81:01:71:32:8a:a8:97:14:4f:46:7b:6a:e4: 28:af:7f:48:b8:06:95:2b:1f:ab:21:1b:09:8c:ef: f7:8c:8d:ba:21:7b:72:df:fd:2a:48:45:2a:22:e9: 2e:ca:37:2a:9c:37:fc:bc:77:6a:b5:a6:5d:da:bf: c3:73:08:31:7d:04:e2:f2:12:16:9b:28:0e:90:98: b6:17:32:ed:f5:4d:5f:ff:ee:2c:87:eb:c9:bc:f3: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:96:B6:DD:1B:F2:DC:D4:35:B6:F9:C8:2E:1D:AC:94:A9:62:F4 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a9:4d:b2:07:b7:3a:49:cd:44:a2:03:a0:67:69:e9:11:54: 72:19:e6:0a:fb:0f:20:3c:30:bb:12:b4:d8:cc:23:8c:8e:cd: f9:b9:4a:12:69:3a:5e:82:b2:4d:ab:be:fb:43:30:68:df:57: 34:fb:ae:9d:71:fd:f2:2e:eb:99:70:d0:c8:39:2c:10:74:91: 16:ff:96:50:df:61:ee:64:08:4f:9c:6d:09:b1:60:a0:ea:d8: ee:10:65:21:69:90:2b:3d:8b:99:d8:4c:54:4c:58:e8:95:47: e5:dd:01:2b:f4:b1:b8:9b:08:e6:f1:c9:f7:23:76:fc:b5:c0: 90:de:8c:3a:05:10:b1:05:e3:72:1f:5c:e6:b9:cf:51:51:49: 05:68:92:fe:f0:bf:f0:b0:6c:52:03:ff:af:b6:58:a0:b3:7c: c2:a9:98:f0:0c:01:5c:fc:43:df:ca:e6:3d:3a:5e:83:3f:34: c1:70:89:85:83:00:33:8c:d0:8b:33:3a:97:db:0c:f9:fa:65: 56:74:cd:9c:d0:4e:5d:6a:dd:18:cd:94:0b:00:db:38:e0:3c: 3f:0c:24:8a:0b:45:ed:30:0d:06:5f:3d:2c:33:8e:0e:c1:0c: 8f:41:77:e6:2d:ea:de:28:ed:7a:6d:94:6e:4a:50:87:39:8b: 63:cb:01:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebCkOcY6o0VvqEzIxYvmnv2dgdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNDExMjIxNzA2MDVaFw0yNDExMjYwMTE4MDVaMDMxMTAvBgNV BAMTKEJEQUU5NkI2REQxQkYyRENENDM1QjZGOUM4MkUxREFDOTRBOTYyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrx7qbGhM94Ys7XFnCP2QWuag uZqUxH3GvRlKT/5pJiY+zZnCGuHrF40wq36zaLieJNTdYYaOe1vLNud+FKH0mS0S fowg5UFfG/5PNGBrL5f7mFVUQjpDTvohCfgEGJUXs3sgSVW/Wr5LRz+tVSOc0ypw DHl5RQs+MyTa5JNTx0Br7mpsPaPldy9ZhELdwAd+79aTqYyJIpZj2HSCBW0YTeow YnEVgQFxMoqolxRPRntq5Civf0i4BpUrH6shGwmM7/eMjbohe3Lf/SpIRSoi6S7K NyqcN/y8d2q1pl3av8NzCDF9BOLyEhabKA6QmLYXMu31TV//7iyH68m884AjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUva6Wtt0b8tzUNbb5yC4drJSpYvQwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+pTbIHtzpJzUSiA6BnaekRVHIZ5gr7DyA8 MLsStNjMI4yOzfm5ShJpOl6Csk2rvvtDMGjfVzT7rp1x/fIu65lw0Mg5LBB0kRb/ llDfYe5kCE+cbQmxYKDq2O4QZSFpkCs9i5nYTFRMWOiVR+XdASv0sbibCObxyfcj dvy1wJDejDoFELEF43IfXOa5z1FRSQVokv7wv/CwbFID/6+2WKCzfMKpmPAMAVz8 Q9/K5j06XoM/NMFwiYWDADOM0IszOpfbDPn6ZVZ0zZzQTl1q3RjNlAsA2zjgPD8M JIoLRe0wDQZfPSwzjg7BDI9Bd+Yt6t4o7XptlG5KUIc5i2PLAYc= -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org