$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json) Hash identifier: Nsq99bQIVeQY8XPyNxjWL/BuMYr6VYCD83cUJdF0xOo= Subject key identifier: 7B:20:7E:F8:7F:0F:FE:26:68:9E:2E:3F:A3:B0:51:5E:CF:34:B1:3C Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 0ED3A459DC580A199982E11FBB4EB265F4891655 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft Manifest number: F4 Signing time: Wed 20 Nov 2024 20:21:07 +0000 Manifest this update: Wed 20 Nov 2024 20:16:07 +0000 Manifest next update: Sat 23 Nov 2024 22:47:07 +0000 Files and hashes: 1: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: fcQPwUouCVaeNmPsgU50oUU5piCrvcz7X4WUkw36Gi0=) 2: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: sSdx6bfz/Cb6HZkpzLLwduFVNFn1g0FyFXb3VTTUPws=) 3: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: BbLwPxFe+tWzZ8sOAXoZbHTuvfXUw6/yE4h7IQcYxzA=) 4: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: znSniW+lPXCPGxomzmN2hrx17CR9++zAKICSSEuO9Vw=) 5: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: Z7MZGS10toSXvLmV5iBfghuNSI8n4mTpT95+VkC6QfE=) 6: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: bOBZGkzqysQJJCz7648wZEJREONFUo+QtRyxjh2BRFw=) 7: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: StsE/FCaGUEI21oTYPqXE9q5Uc/57QhKKXs8dGhbNQk=) 8: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: wop0enhk31jLHWhccpcZJr0EKUzHvqhNyLW2a5pNj2w=) 9: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: BgrpAYav/pUESxArt2NS1teCYs0lWmtbdh6n4DVdjLM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d3:a4:59:dc:58:0a:19:99:82:e1:1f:bb:4e:b2:65:f4:89:16:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Nov 20 20:16:07 2024 GMT Not After : Nov 23 22:47:07 2024 GMT Subject: CN=7B207EF87F0FFE26689E2E3FA3B0515ECF34B13C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:8f:d3:0f:77:9e:8c:11:f0:a7:ca:44:38: 2b:db:66:7a:63:94:98:98:c3:dc:59:4e:11:d3:8a: 41:51:7f:3a:06:22:e0:99:c6:31:4d:48:b3:b4:c8: 1d:37:46:f9:30:ba:fa:4e:7c:0b:10:9f:96:9c:d6: f0:bc:8f:43:38:4a:32:58:bd:f7:55:15:99:e3:b7: 34:e4:e6:42:27:35:3f:3f:4e:9e:e5:74:e5:04:25: 30:f5:db:b7:40:1e:36:a4:38:79:22:64:46:5c:cd: 40:af:c4:9a:ce:81:95:35:99:55:88:90:c0:2a:3a: 16:a1:8c:db:6a:39:29:ce:04:ba:d9:03:34:5a:fa: 86:b4:01:5d:47:56:a5:a0:f8:5d:dc:1f:3b:7f:90: ec:67:07:74:2f:4f:57:54:ab:10:44:67:db:d7:6f: 3c:c2:e3:05:62:97:bb:fc:02:f6:e6:25:7a:09:04: d4:f1:1d:3b:29:a2:fa:d9:89:30:a1:53:a9:01:37: 42:77:5a:bc:ca:14:76:80:17:7e:4c:54:12:69:0b: 1c:de:0e:3e:7b:9c:db:34:18:cc:b0:69:28:e4:5d: 35:cf:8f:1d:aa:fd:3e:5e:b2:92:56:31:8a:ea:93: db:90:ce:fe:83:bf:f8:fd:d8:81:e9:ad:b8:ec:53: 3b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:20:7E:F8:7F:0F:FE:26:68:9E:2E:3F:A3:B0:51:5E:CF:34:B1:3C X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a8:d7:6d:82:13:42:e4:af:b3:5a:40:ad:df:35:3f:db:94: 6d:a1:6e:1a:d9:72:66:4f:5d:4e:f0:2a:22:64:53:eb:e3:b1: 5c:2e:2c:6f:c1:70:2d:1e:b9:3b:35:5e:9d:54:b3:18:5c:b1: cb:ee:3a:95:26:2c:de:1e:d8:63:88:55:50:42:35:1a:5d:5f: da:38:1f:89:96:4d:a8:5a:57:66:08:0d:e0:17:fa:a9:0a:72: 76:4d:db:d0:00:3d:e0:00:9f:38:13:7b:53:9e:79:41:1c:aa: 38:32:ab:e1:7a:9e:4a:5e:03:14:cf:4b:87:91:b9:b3:54:dd: 6c:d4:e4:c7:06:6e:88:84:0e:0c:47:2e:ec:b2:37:b3:16:04: 05:d6:16:e4:db:1e:bf:4f:2f:67:a1:03:22:47:dd:5f:87:73: 6d:35:2b:3a:35:a7:53:78:e4:06:a5:44:79:1f:30:de:88:a1: 03:9b:5a:ca:58:b9:b4:75:29:c3:3a:59:c2:3c:56:cc:7c:68: e7:9e:6f:bc:5b:d1:a3:26:09:61:9c:85:e6:9d:16:48:75:da: cd:83:45:19:03:1f:02:96:20:7a:ee:87:60:56:72:2d:18:76: b6:49:3e:b0:69:02:c5:d8:2a:01:4c:1e:b3:07:09:fa:c7:e5: 86:ec:c3:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDtOkWdxYChmZguEfu06yZfSJFlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNDExMjAyMDE2MDdaFw0yNDExMjMyMjQ3MDdaMDMxMTAvBgNV BAMTKDdCMjA3RUY4N0YwRkZFMjY2ODlFMkUzRkEzQjA1MTVFQ0YzNEIxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4I/TD3eejBHwp8pEOCvbZnpj lJiYw9xZThHTikFRfzoGIuCZxjFNSLO0yB03RvkwuvpOfAsQn5ac1vC8j0M4SjJY vfdVFZnjtzTk5kInNT8/Tp7ldOUEJTD127dAHjakOHkiZEZczUCvxJrOgZU1mVWI kMAqOhahjNtqOSnOBLrZAzRa+oa0AV1HVqWg+F3cHzt/kOxnB3QvT1dUqxBEZ9vX bzzC4wVil7v8AvbmJXoJBNTxHTspovrZiTChU6kBN0J3WrzKFHaAF35MVBJpCxze Dj57nNs0GMywaSjkXTXPjx2q/T5espJWMYrqk9uQzv6Dv/j92IHprbjsUzs7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeyB++H8P/iZoni4/o7BRXs80sTwwHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU1YTFhNDQtMzM3ZC00ZGI0LTkw ZDctNWJkNGYzNzIxNGI4LzAvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4 N0I2MDM5NDQ4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFio122CE0Lkr7NaQK3fNT/blG2hbhrZcmZP XU7wKiJkU+vjsVwuLG/BcC0euTs1Xp1UsxhcscvuOpUmLN4e2GOIVVBCNRpdX9o4 H4mWTahaV2YIDeAX+qkKcnZN29AAPeAAnzgTe1OeeUEcqjgyq+F6nkpeAxTPS4eR ubNU3WzU5McGboiEDgxHLuyyN7MWBAXWFuTbHr9PL2ehAyJH3V+Hc201Kzo1p1N4 5AalRHkfMN6IoQObWspYubR1KcM6WcI8Vsx8aOeeb7xb0aMmCWGcheadFkh12s2D RRkDHwKWIHruh2BWci0YdrZJPrBpAsXYKgFMHrMHCfrH5Ybsw5I= -----END CERTIFICATE-----Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org