$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: DzZ0QRwO3eVsnQx0O+W+hK3OHQiHtii0gUOH71315QI= Subject key identifier: 8B:94:14:73:FA:D2:C1:6E:55:B5:D2:DA:22:5F:E0:D7:D5:6A:EA:FF Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 47FE59ED8D0722C6C6FFD06FA1D407ED98F199F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 02D5 Signing time: Sun 24 Nov 2024 21:51:47 +0000 Manifest this update: Sun 24 Nov 2024 21:46:47 +0000 Manifest next update: Thu 28 Nov 2024 05:57:47 +0000 Files and hashes: 1: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: vrYCksRo8cqASVGOXhheaT6K6LdNCMKFRYhFeuVX3Wo=) 2: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: maLrBZDA8wb/Db5j+82XJwi9P/P9hfaKnJZBxygGI9k=) 3: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tPNYz7RNY9f6/naya32Z5Cu7LcYC7dUE3TJY0hUwFYA=) 4: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: czRIYK/GpwdnikRQb1D+/gX2NYBeL+mVya8QUuoroRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:fe:59:ed:8d:07:22:c6:c6:ff:d0:6f:a1:d4:07:ed:98:f1:99:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Nov 24 21:46:47 2024 GMT Not After : Nov 28 05:57:47 2024 GMT Subject: CN=8B941473FAD2C16E55B5D2DA225FE0D7D56AEAFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d5:39:61:ba:f5:d4:db:9f:65:cc:0a:a5:8c: 85:16:b8:15:0b:8f:23:3b:2e:be:f7:c6:76:39:5b: 53:01:fc:e7:20:e5:a5:8d:98:9e:a1:d1:c3:0e:00: 92:b9:0b:73:8e:d5:50:f4:9e:fc:60:8a:ad:80:2a: 88:06:3f:30:64:ea:27:46:77:d7:d9:8d:c0:50:f7: e2:5b:de:f2:0f:7b:a6:c2:ab:30:3d:c3:8c:51:c9: 5a:c4:8f:01:73:e1:b6:60:ce:93:e0:52:46:45:c8: a9:92:0b:97:f5:3b:97:63:6c:54:37:7e:6f:3c:1b: 6d:55:9e:79:f7:9f:f1:5e:4a:aa:bb:85:0e:e4:e5: 0a:da:1b:7a:16:d3:c2:c0:b7:5d:81:7a:ef:80:c5: 3c:45:d8:a8:04:99:06:af:19:47:9a:a0:98:9c:08: b7:5e:89:ac:57:99:1a:1a:cf:a5:f4:88:e6:ec:f3: 8a:f9:b5:04:d2:ee:81:1c:d1:76:f3:d2:4c:3e:f0: 7d:1e:03:72:38:68:ac:da:33:67:52:3b:04:dc:b9: 4b:11:94:f3:a2:cf:3c:fd:f4:7c:0b:22:d1:f1:72: 6a:ac:e5:4b:f7:5f:bc:9f:be:ef:42:23:c9:c2:c6: 74:56:31:46:b7:0f:53:78:75:55:7b:7e:b3:4e:32: a5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:94:14:73:FA:D2:C1:6E:55:B5:D2:DA:22:5F:E0:D7:D5:6A:EA:FF X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b8:92:65:bb:70:60:8a:a7:6e:7e:18:eb:d1:8f:64:0c:d9: d3:81:4a:51:9e:48:b2:41:0d:7a:ee:8f:d7:f5:71:4e:04:2e: ec:de:05:10:80:6f:94:77:f7:c2:e0:0e:5f:30:92:48:2e:58: a7:e8:27:f9:90:8e:ab:97:e5:8e:62:bb:c7:0d:44:bf:34:fd: 3e:8d:36:93:48:14:b1:02:23:2a:cb:07:b7:24:2a:68:bf:81: 77:2b:f4:24:25:85:ae:8d:54:d4:43:77:3d:4e:04:e7:f0:7d: 1c:18:66:ea:2b:9a:59:a4:cb:ee:e9:cc:2b:14:34:8e:79:b3: a1:cf:16:dc:6b:a8:21:7e:1d:1b:ea:a8:13:3e:e0:30:49:61: 4b:c4:f6:52:ba:23:0f:4f:ed:eb:73:b4:ac:fe:c5:dc:dc:3e: bf:12:a5:29:d4:5d:56:0d:ae:42:65:7d:5e:99:d6:2a:5a:9b: 9a:7a:12:c3:21:66:54:0e:c5:66:3a:d3:5e:97:10:6c:e3:78: b9:96:1e:3e:39:9b:47:4e:ca:7c:5b:d6:e0:2e:b5:82:e2:28: 05:57:8a:b9:d9:5c:09:29:7c:8f:12:a3:fe:22:c1:10:ea:e1: f0:64:8d:30:7e:80:d8:34:cc:e3:6f:6c:de:b4:31:81:d2:cc: e3:59:61:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/5Z7Y0HIsbG/9BvodQH7ZjxmfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNDExMjQyMTQ2NDdaFw0yNDExMjgwNTU3NDdaMDMxMTAvBgNV BAMTKDhCOTQxNDczRkFEMkMxNkU1NUI1RDJEQTIyNUZFMEQ3RDU2QUVBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu1TlhuvXU259lzAqljIUWuBUL jyM7Lr73xnY5W1MB/Ocg5aWNmJ6h0cMOAJK5C3OO1VD0nvxgiq2AKogGPzBk6idG d9fZjcBQ9+Jb3vIPe6bCqzA9w4xRyVrEjwFz4bZgzpPgUkZFyKmSC5f1O5djbFQ3 fm88G21Vnnn3n/FeSqq7hQ7k5QraG3oW08LAt12Beu+AxTxF2KgEmQavGUeaoJic CLdeiaxXmRoaz6X0iObs84r5tQTS7oEc0Xbz0kw+8H0eA3I4aKzaM2dSOwTcuUsR lPOizzz99HwLItHxcmqs5Uv3X7yfvu9CI8nCxnRWMUa3D1N4dVV7frNOMqVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi5QUc/rSwW5VtdLaIl/g19Vq6v8wHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGq4kmW7cGCKp25+GOvRj2QM2dOBSlGeSLJB DXruj9f1cU4ELuzeBRCAb5R398LgDl8wkkguWKfoJ/mQjquX5Y5iu8cNRL80/T6N NpNIFLECIyrLB7ckKmi/gXcr9CQlha6NVNRDdz1OBOfwfRwYZuormlmky+7pzCsU NI55s6HPFtxrqCF+HRvqqBM+4DBJYUvE9lK6Iw9P7etztKz+xdzcPr8SpSnUXVYN rkJlfV6Z1ipam5p6EsMhZlQOxWY6016XEGzjeLmWHj45m0dOynxb1uAutYLiKAVX irnZXAkpfI8So/4iwRDq4fBkjTB+gNg0zONvbN60MYHSzONZYT4= -----END CERTIFICATE-----Generated at Sun Nov 24 23:56:42 2024 by rpki-client on console-fra.rpki-client.org