$ rpki-client -vvf repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft File: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft (raw, json) Hash identifier: 7FZhyqTit6RB91RTPa4X5BmW2SxQY1koMT2p6zWUxs0= Subject key identifier: 25:2B:AA:3E:B9:A5:49:9B:88:C4:DB:D0:D2:18:BF:13:CF:6C:63:78 Authority key identifier: 9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F Certificate issuer: /CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Certificate serial: 31A220A8528BB2185788BB6988288C0ADA7D019B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft Manifest number: B4 Signing time: Sat 23 Nov 2024 00:10:41 +0000 Manifest this update: Sat 23 Nov 2024 00:05:41 +0000 Manifest next update: Tue 26 Nov 2024 00:31:41 +0000 Files and hashes: 1: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: VSK8xHWFoAIqAfrfPnMHrz4hewwhCd2DZdkebu8f7l0=) 2: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: dR97kutQJDfdqRMw3g6v2Ivop1oOeZPQjWSUUweIFKQ=) 3: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl (hash: mVti3WT5A5FjqlcHuxesS5oi5jdH95kthTItxzvxcVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a2:20:a8:52:8b:b2:18:57:88:bb:69:88:28:8c:0a:da:7d:01:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Validity Not Before: Nov 23 00:05:41 2024 GMT Not After : Nov 26 00:31:41 2024 GMT Subject: CN=252BAA3EB9A5499B88C4DBD0D218BF13CF6C6378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:59:c1:04:87:73:c4:d0:c0:9c:f7:2c:77: c1:92:90:3f:0f:e3:1b:15:d2:99:c7:94:15:38:a8: 87:63:60:05:9c:34:66:69:14:4e:9e:ac:e0:36:f1: ef:d0:06:25:5f:16:28:2a:4f:17:c7:0e:01:f1:69: 7a:09:00:ef:81:06:77:11:fa:bc:da:f3:a1:d7:10: 36:03:b7:5d:2f:3b:26:82:a8:7e:f3:10:2f:c4:99: f8:49:ba:c8:d8:b7:26:33:49:22:4f:d2:c3:eb:76: 92:62:a8:3b:c0:72:ce:10:41:cb:04:d8:eb:54:2d: b7:8c:8a:3e:6a:d2:36:0e:7d:7b:6e:2b:0f:21:75: e9:87:2b:18:c9:20:29:93:be:2f:e9:f1:4f:a6:1d: 08:8f:41:ab:4b:ad:11:f0:52:6b:07:e1:90:82:e6: 3b:6c:84:c3:2a:af:2d:16:5a:c0:7d:6f:99:04:e7: f8:b3:60:4f:27:16:d6:2a:ae:cd:fd:f1:fd:92:2d: 27:2c:bf:4c:b3:20:c8:44:81:e4:33:79:e1:03:e9: 31:13:02:ef:77:d8:c6:67:82:70:e9:45:a1:39:4c: 86:71:e6:5c:5c:c4:6e:4c:bc:29:38:39:f9:34:9e: 16:ef:8e:43:f6:45:23:5a:cf:c3:6e:42:b2:dd:df: 09:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2B:AA:3E:B9:A5:49:9B:88:C4:DB:D0:D2:18:BF:13:CF:6C:63:78 X509v3 Authority Key Identifier: keyid:9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f6:9e:c2:95:78:83:52:ef:8d:9d:b7:29:6a:aa:7f:b2:71: 94:02:7f:fd:7b:42:14:ff:77:b2:7f:33:12:20:60:43:c3:90: 02:06:1b:58:8f:c3:31:b1:05:81:b4:36:06:1f:98:bc:2c:00: f1:49:da:88:64:07:93:cd:7d:99:89:0e:69:1f:fe:6b:10:b3: e0:25:e5:4f:66:f7:09:fd:a7:33:8e:be:6d:08:9c:9c:d2:5f: f9:dd:48:2a:a5:32:b7:e9:64:d5:67:0d:19:d4:79:a8:3a:e2: 8f:eb:46:9d:6b:3c:71:d1:f5:f0:65:0a:f1:1e:8c:18:8c:49: ca:72:89:0a:62:65:02:93:03:9c:07:27:b4:50:c3:8b:fd:00: 64:40:6c:07:ca:28:23:3d:21:cf:36:d7:17:1e:8d:20:70:99: 07:cb:d5:77:8e:6a:81:9d:c5:e1:07:cb:25:09:18:ec:ef:e9: 67:b1:27:b6:a9:5a:a8:af:7c:35:96:46:23:99:83:8e:f2:46: ee:9c:56:0d:0c:95:3d:6e:b6:51:b7:c0:4a:f9:dd:64:5d:ad: 64:ad:e8:a7:d7:c2:de:3b:8d:04:58:21:7e:3f:05:14:d4:6c: cb:ed:f6:e7:f6:a5:7c:a9:d4:1c:9c:6d:96:b6:f1:50:c2:6a: 0c:91:e1:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMaIgqFKLshhXiLtpiCiMCtp9AZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMy RTRBN0M1RjAeFw0yNDExMjMwMDA1NDFaFw0yNDExMjYwMDMxNDFaMDMxMTAvBgNV BAMTKDI1MkJBQTNFQjlBNTQ5OUI4OEM0REJEMEQyMThCRjEzQ0Y2QzYzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjuFnBBIdzxNDAnPcsd8GSkD8P 4xsV0pnHlBU4qIdjYAWcNGZpFE6erOA28e/QBiVfFigqTxfHDgHxaXoJAO+BBncR +rza86HXEDYDt10vOyaCqH7zEC/EmfhJusjYtyYzSSJP0sPrdpJiqDvAcs4QQcsE 2OtULbeMij5q0jYOfXtuKw8hdemHKxjJICmTvi/p8U+mHQiPQatLrRHwUmsH4ZCC 5jtshMMqry0WWsB9b5kE5/izYE8nFtYqrs398f2SLScsv0yzIMhEgeQzeeED6TET Au932MZngnDpRaE5TIZx5lxcxG5MvCk4Ofk0nhbvjkP2RSNaz8NuQrLd3wkTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJSuqPrmlSZuIxNvQ0hi/E89sY3gwHwYDVR0j BBgwFoAUmve9BH88VPnOWCbckZbCoy5KfF8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTdmYjE3ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC85QUY3QkQwNDdG M0M1NEY5Q0U1ODI2REM5MTk2QzJBMzJFNEE3QzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMyRTRB N0M1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMy QTMyRTRBN0M1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIj2nsKVeINS742dtylqqn+ycZQCf/17QhT/ d7J/MxIgYEPDkAIGG1iPwzGxBYG0NgYfmLwsAPFJ2ohkB5PNfZmJDmkf/msQs+Al 5U9m9wn9pzOOvm0InJzSX/ndSCqlMrfpZNVnDRnUeag64o/rRp1rPHHR9fBlCvEe jBiMScpyiQpiZQKTA5wHJ7RQw4v9AGRAbAfKKCM9Ic821xcejSBwmQfL1XeOaoGd xeEHyyUJGOzv6WexJ7apWqivfDWWRiOZg47yRu6cVg0MlT1utlG3wEr53WRdrWSt 6KfXwt47jQRYIX4/BRTUbMvt9uf2pXyp1BycbZa28VDCagyR4cI= -----END CERTIFICATE-----Generated at Sat Nov 23 00:47:42 2024 by rpki-client on console-fra.rpki-client.org