$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: 9eH4Q0HzS+ddJUXcst4UUj/qQOBmP33PTpdZAKb7mu4= Subject key identifier: A1:55:93:C9:4A:2F:D2:08:F7:53:64:1A:A7:63:BB:0D:6F:C7:BC:9A Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 7480006D1AF927B4EB411DC9F66DE17F68BB0D92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 016A Signing time: Thu 21 Nov 2024 20:11:54 +0000 Manifest this update: Thu 21 Nov 2024 20:06:54 +0000 Manifest next update: Mon 25 Nov 2024 07:10:54 +0000 Files and hashes: 1: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: RvoSs45sUXz/AneXaI7gGqZ4Aqn903sU2BAbigb/xsE=) 2: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: ZIvgL7/TSUjSQgis1M5EWea31F4jkT0hl76IfkMAhxg=) 3: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: O0kB35ZfI8HAJk//bVJZTEiu/+ctMIoB+u6dUW4r5UY=) 4: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: VHXopS3HYzIHyLvT0GSTkaAyyiVF90ojgUYQl7hfEfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:80:00:6d:1a:f9:27:b4:eb:41:1d:c9:f6:6d:e1:7f:68:bb:0d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Nov 21 20:06:54 2024 GMT Not After : Nov 25 07:10:54 2024 GMT Subject: CN=A15593C94A2FD208F753641AA763BB0D6FC7BC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ca:25:79:f9:46:88:ce:de:82:94:f8:9e:b9: 98:04:89:c6:36:0b:eb:66:b6:9f:ab:2c:2a:29:a0: 0d:28:d0:54:d5:cf:18:23:df:e4:b1:41:ad:11:09: 99:8c:60:e2:92:f5:a6:28:b9:b2:f0:f6:ef:df:40: a4:57:11:15:00:e9:3c:5e:5b:34:8a:e3:57:3a:1a: 04:55:d2:1e:fd:1f:4a:e2:c7:b1:8e:fc:55:fb:70: 60:7d:47:6c:e2:4c:e9:93:bf:c1:1e:2f:66:a4:0d: 41:85:5c:87:e3:15:c3:7a:bb:5a:7c:fb:f6:67:73: f5:c7:a1:66:03:00:86:95:02:41:0d:59:9d:01:f5: 3f:db:07:47:36:e7:38:3c:f9:20:53:db:45:6c:59: 09:97:38:29:64:74:de:86:fe:8a:36:55:a6:96:dc: 54:5a:3a:89:97:f0:85:d2:28:a2:4d:8a:d0:9f:c3: 6a:ac:d2:ae:12:63:b5:c5:e0:90:e3:b1:fd:91:a6: 3f:d6:8e:1a:5b:62:e8:76:dd:28:1a:fb:74:3c:3f: 99:1c:66:36:e4:04:0d:e4:b0:c2:35:62:61:07:04: e0:41:63:3b:4f:fe:cd:b6:c1:70:8d:c9:b6:80:1b: 03:cb:32:b8:cd:0f:59:d8:59:2f:c2:90:89:97:53: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:55:93:C9:4A:2F:D2:08:F7:53:64:1A:A7:63:BB:0D:6F:C7:BC:9A X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fa:02:56:0b:84:7f:c7:f3:63:97:42:28:18:69:c5:ec:c6: a8:69:90:41:ba:4f:9b:40:30:ad:cc:2d:e2:49:5c:62:fd:bb: 1e:6d:ec:29:d0:6a:bd:b3:45:6f:7f:2c:b4:bc:cc:5c:3d:3b: 1d:20:6c:ef:fd:14:49:b9:37:19:07:e6:23:3c:9b:a5:a2:d6: 71:96:4b:68:67:7d:c1:85:2b:66:59:b8:c3:d3:1c:c8:93:0f: 86:84:06:0d:84:66:1d:a6:b6:60:0d:e3:f8:45:ac:db:dd:0c: 7d:71:31:33:ac:74:0a:ea:bf:2b:cb:bd:ee:40:e8:e0:72:4d: 7f:ec:db:e4:86:b0:f4:04:07:be:cd:cc:b4:c1:12:13:d2:df: b6:d2:8f:66:58:d6:0d:fd:8b:7f:44:de:69:90:51:8e:72:e1: 6e:64:5d:5b:d8:94:3b:15:ad:7d:a7:93:41:71:65:4b:b1:a8: d8:a7:63:79:0c:f3:7d:62:a0:9e:7a:44:c6:fe:02:d1:52:3c: 88:82:d3:81:51:68:69:29:37:92:48:04:40:13:b5:24:c7:83: 3b:b0:95:e6:cc:31:2b:9a:bf:63:9f:0d:55:ec:0c:ac:a8:4f: 3f:08:50:9d:71:ab:59:9b:16:83:b1:d0:d7:3f:34:d8:16:f2: 6e:3d:b4:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIAAbRr5J7TrQR3J9m3hf2i7DZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNDExMjEyMDA2NTRaFw0yNDExMjUwNzEwNTRaMDMxMTAvBgNV BAMTKEExNTU5M0M5NEEyRkQyMDhGNzUzNjQxQUE3NjNCQjBENkZDN0JDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnyiV5+UaIzt6ClPieuZgEicY2 C+tmtp+rLCopoA0o0FTVzxgj3+SxQa0RCZmMYOKS9aYoubLw9u/fQKRXERUA6Txe WzSK41c6GgRV0h79H0rix7GO/FX7cGB9R2ziTOmTv8EeL2akDUGFXIfjFcN6u1p8 +/Znc/XHoWYDAIaVAkENWZ0B9T/bB0c25zg8+SBT20VsWQmXOClkdN6G/oo2VaaW 3FRaOomX8IXSKKJNitCfw2qs0q4SY7XF4JDjsf2Rpj/WjhpbYuh23Sga+3Q8P5kc ZjbkBA3ksMI1YmEHBOBBYztP/s22wXCNybaAGwPLMrjND1nYWS/CkImXU+tpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoVWTyUov0gj3U2Qap2O7DW/HvJowHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJr6AlYLhH/H82OXQigYacXsxqhpkEG6T5tA MK3MLeJJXGL9ux5t7CnQar2zRW9/LLS8zFw9Ox0gbO/9FEm5NxkH5iM8m6Wi1nGW S2hnfcGFK2ZZuMPTHMiTD4aEBg2EZh2mtmAN4/hFrNvdDH1xMTOsdArqvyvLve5A 6OByTX/s2+SGsPQEB77NzLTBEhPS37bSj2ZY1g39i39E3mmQUY5y4W5kXVvYlDsV rX2nk0FxZUuxqNinY3kM831ioJ56RMb+AtFSPIiC04FRaGkpN5JIBEATtSTHgzuw lebMMSuav2OfDVXsDKyoTz8IUJ1xq1mbFoOx0Nc/NNgW8m49tJg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org