$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: 25o/Nn2AvL8VL6bOvAYsGliraqLgqsikij+fc+NEw2Q= Subject key identifier: 73:BC:43:41:06:BA:E2:5D:BF:25:DC:DA:EF:03:4C:70:82:D9:BB:CD Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 42CE85000B8031436847952B9225D3333DBF16B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 0486 Signing time: Thu 21 Nov 2024 15:30:45 +0000 Manifest this update: Thu 21 Nov 2024 15:25:45 +0000 Manifest next update: Sun 24 Nov 2024 17:28:45 +0000 Files and hashes: 1: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: x4cc1kbGeyzVURkk65Vy/+5L5MwnZDAtlAl9vg2PUts=) 2: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: 14jGGBn2Kt0co6w/+KEhuzlWDhDnoT2pTYw5uk4snHY=) 3: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: nVMdTJgkQ4tsBnAzM7wvV5ynqHMd04JacyzKeMw92OQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ce:85:00:0b:80:31:43:68:47:95:2b:92:25:d3:33:3d:bf:16:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Nov 21 15:25:45 2024 GMT Not After : Nov 24 17:28:45 2024 GMT Subject: CN=73BC434106BAE25DBF25DCDAEF034C7082D9BBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:2b:d5:f2:97:8d:87:c4:8e:e7:ac:3e:6b: d5:9f:10:99:7f:02:1a:6e:6b:32:6d:69:b2:b9:04: 5a:dd:8c:85:09:16:93:12:f6:14:19:7b:ac:2d:7a: ae:e8:f9:70:4c:f9:30:54:1a:a3:1f:21:cf:66:74: 6f:7a:ba:6c:d1:8f:ce:f0:6e:c7:6b:ac:55:8e:6a: c1:3c:25:de:85:e8:31:78:a2:44:0d:c0:45:9c:11: 60:10:75:c5:88:e8:51:44:07:4f:0b:8f:1a:54:b7: 20:27:4d:b4:a9:8d:8f:d8:3a:e8:3c:4c:fb:43:f6: fb:f9:65:df:b8:53:e2:7a:69:73:3f:65:cf:75:60: 5e:5e:b3:9e:26:10:5b:60:09:22:a7:c2:ef:e8:69: 25:1c:69:66:67:2f:a6:62:8b:00:64:06:fe:a9:05: 21:a9:e6:ea:67:c2:ac:d5:83:b5:4b:50:9b:9b:53: 5b:54:eb:d4:17:aa:0d:e4:b0:8e:47:b9:83:8f:57: 31:3a:d2:87:be:93:5b:ec:7c:e7:d9:f6:b2:85:e8: 3f:4e:a6:36:ad:98:b7:98:54:81:a7:83:34:13:05: d0:c2:9d:22:f5:45:a9:98:88:6d:39:95:50:f9:58: 11:41:cc:02:f7:6b:62:60:4a:49:ae:2b:a6:d5:08: 03:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BC:43:41:06:BA:E2:5D:BF:25:DC:DA:EF:03:4C:70:82:D9:BB:CD X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a4:72:e1:09:91:43:b8:5b:6b:a2:9d:5f:af:b0:7d:cb:be: 84:30:2f:6a:92:0a:be:36:50:e2:07:58:2a:be:47:ba:57:c7: ea:68:18:6e:d8:79:cf:fb:d6:ac:20:51:cc:de:d1:54:2e:3c: b0:05:83:d6:f1:5c:30:09:bf:e4:4e:73:90:41:81:84:ec:54: 6d:af:8d:0e:13:13:cd:6b:4a:a0:2b:c5:28:19:a3:80:a4:78: e6:63:dd:ac:58:3a:2f:7e:ed:24:04:0f:8a:ff:b9:da:86:cb: c9:39:81:9b:ee:1b:25:62:3c:1b:5d:2c:bd:8b:51:af:d2:c6: 03:48:f9:03:cd:57:55:02:f7:63:df:ce:af:12:a6:e4:0e:81: a0:56:6b:c2:b5:92:a5:5f:8f:1f:13:01:c7:7a:c3:a9:6a:82: 62:d5:1e:99:26:02:b8:c6:81:af:ed:59:4c:ed:f9:88:3b:88: 88:89:30:94:d2:a5:7f:db:a8:6b:49:29:11:0c:11:dd:0e:7c: a8:10:d8:b2:d5:34:e6:4f:a3:f9:06:f7:94:fe:04:7a:6a:84: df:fb:41:6f:99:d1:64:e1:73:10:b3:b0:a4:60:9f:46:d1:35: 48:55:f4:e9:6d:36:8d:d2:45:b7:01:2b:f0:53:b5:67:2b:61: 42:cf:56:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQs6FAAuAMUNoR5UrkiXTMz2/FrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNDExMjExNTI1NDVaFw0yNDExMjQxNzI4NDVaMDMxMTAvBgNV BAMTKDczQkM0MzQxMDZCQUUyNURCRjI1RENEQUVGMDM0QzcwODJEOUJCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYCvV8peNh8SO56w+a9WfEJl/ AhpuazJtabK5BFrdjIUJFpMS9hQZe6wteq7o+XBM+TBUGqMfIc9mdG96umzRj87w bsdrrFWOasE8Jd6F6DF4okQNwEWcEWAQdcWI6FFEB08LjxpUtyAnTbSpjY/YOug8 TPtD9vv5Zd+4U+J6aXM/Zc91YF5es54mEFtgCSKnwu/oaSUcaWZnL6ZiiwBkBv6p BSGp5upnwqzVg7VLUJubU1tU69QXqg3ksI5HuYOPVzE60oe+k1vsfOfZ9rKF6D9O pjatmLeYVIGngzQTBdDCnSL1RamYiG05lVD5WBFBzAL3a2JgSkmuK6bVCAMzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc7xDQQa64l2/Jdza7wNMcILZu80wHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+kcuEJkUO4W2uinV+vsH3LvoQwL2qSCr42 UOIHWCq+R7pXx+poGG7Yec/71qwgUcze0VQuPLAFg9bxXDAJv+ROc5BBgYTsVG2v jQ4TE81rSqArxSgZo4CkeOZj3axYOi9+7SQED4r/udqGy8k5gZvuGyViPBtdLL2L Ua/SxgNI+QPNV1UC92Pfzq8SpuQOgaBWa8K1kqVfjx8TAcd6w6lqgmLVHpkmArjG ga/tWUzt+Yg7iIiJMJTSpX/bqGtJKREMEd0OfKgQ2LLVNOZPo/kG95T+BHpqhN/7 QW+Z0WThcxCzsKRgn0bRNUhV9OltNo3SRbcBK/BTtWcrYULPVlg= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:47 2024 by rpki-client on console-fra.rpki-client.org