$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: ufjnKsjxGLARGuLbqiAn7gnaiidRQnKo55vBcxZ53Bs= Subject key identifier: E6:E0:BC:17:01:96:B1:A8:EE:71:9B:F3:99:26:0D:32:DE:41:1E:2E Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 263808F8396933CDFC9BAE904401FBED062D336C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 044D Signing time: Thu 21 Nov 2024 18:01:57 +0000 Manifest this update: Thu 21 Nov 2024 17:56:57 +0000 Manifest next update: Sun 24 Nov 2024 23:10:57 +0000 Files and hashes: 1: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: RzoGAVULQKoltyzBYMLW0yi6KDL7goz4wxpNzsi4gCg=) 2: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: vkcujdZ/39Au/wJ2Cd7g42T7SVP95uPuSJkl+n4ENIE=) 3: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: SRwsZydMySikfJ/GCD2mFqd9F0BIlnEhWXoAVYNn6HM=) 4: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: 0LmjGG2pieyR6voyD+CN7UsZXK452ZCIl0xGzRWD7c4=) 5: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: 0xS1n+w9VXczMS13QZF1W/J/5uwMSBEtc22dFFlfKPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:38:08:f8:39:69:33:cd:fc:9b:ae:90:44:01:fb:ed:06:2d:33:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Nov 21 17:56:57 2024 GMT Not After : Nov 24 23:10:57 2024 GMT Subject: CN=E6E0BC170196B1A8EE719BF399260D32DE411E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:0e:87:b2:b5:01:57:a0:86:24:52:7c:ac: 2d:45:03:e5:36:ae:42:2d:b1:b7:58:03:9b:f8:b8: ee:7e:49:a6:d7:5b:c7:bd:21:1e:98:93:50:84:d0: 80:c8:d6:20:dd:36:77:4c:7c:fc:4f:3d:fe:86:5c: 83:c5:14:68:29:37:35:89:38:ac:77:e9:16:89:9a: 26:f1:44:23:c6:9a:76:4e:40:1b:5a:67:92:59:5e: 8e:22:97:34:4d:bb:92:04:c5:ee:ec:c3:a5:56:29: 1d:5d:e7:0c:05:ac:f4:6b:8e:c6:8d:bf:73:f3:87: 69:d3:cc:53:0c:51:2e:67:b7:f3:22:9d:1c:b4:e2: e8:a1:40:5a:8c:7d:c9:99:e0:03:b8:cb:f3:12:8a: 56:78:28:af:8f:f2:4d:78:2b:1e:94:e6:d4:0b:a4: 49:4f:9d:85:21:70:49:a0:5a:bf:00:09:22:db:6d: 74:f1:24:11:ce:9c:52:b3:ab:15:0b:53:af:15:c0: 1f:44:69:b9:92:7e:eb:b9:7f:f4:0e:63:a1:a2:99: 51:62:55:ce:da:7d:38:2c:b5:96:a5:ec:34:5a:0d: 16:72:2c:1a:10:6d:eb:5e:67:77:c8:a8:46:7c:3f: 3e:99:4d:51:80:f4:27:a9:6f:ff:7a:26:81:fb:7e: df:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E0:BC:17:01:96:B1:A8:EE:71:9B:F3:99:26:0D:32:DE:41:1E:2E X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:86:be:4d:4d:35:af:88:3f:90:d6:0f:bc:b5:6e:63:46:f4: c8:5c:74:b5:7b:bf:20:64:b8:3b:61:df:0e:55:c7:93:db:5d: 17:8e:4e:e5:19:2b:8e:c5:2b:fa:31:7f:38:7a:41:be:d3:f4: db:7d:e7:88:fd:aa:68:da:74:14:ab:cd:7b:f2:42:db:d4:cc: 48:aa:cf:1d:dc:9f:24:5c:af:b2:f4:ed:72:70:28:d7:81:c7: 99:d2:8c:2a:1b:f7:55:09:2b:14:f3:6e:de:e8:28:93:3b:15: 7e:4d:a3:ce:a3:79:c0:40:8c:eb:8c:63:b0:1f:8a:88:35:27: 31:1c:3f:14:f9:d6:48:13:22:b5:df:9b:7d:df:ff:96:7d:d8: 8f:f1:12:33:71:e2:2d:b8:e2:c4:95:70:7f:ed:81:26:92:4d: 36:70:4b:c5:42:a3:aa:0a:59:59:0f:8e:83:7e:97:a9:1c:ac: 9c:3e:84:38:1e:f4:ab:fb:21:8d:74:18:29:5b:2f:8a:32:5b: 13:61:89:24:75:d2:79:c9:2f:09:63:15:c0:40:10:bf:cc:1e: 72:38:5b:15:4b:99:94:03:9e:cd:8e:0e:1f:50:da:c3:ac:e8: 65:c4:97:80:14:67:63:19:13:4f:1a:28:b7:f6:cb:e2:89:d6: 82:49:52:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjgI+DlpM838m66QRAH77QYtM2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNDExMjExNzU2NTdaFw0yNDExMjQyMzEwNTdaMDMxMTAvBgNV BAMTKEU2RTBCQzE3MDE5NkIxQThFRTcxOUJGMzk5MjYwRDMyREU0MTFFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pA6HsrUBV6CGJFJ8rC1FA+U2 rkItsbdYA5v4uO5+SabXW8e9IR6Yk1CE0IDI1iDdNndMfPxPPf6GXIPFFGgpNzWJ OKx36RaJmibxRCPGmnZOQBtaZ5JZXo4ilzRNu5IExe7sw6VWKR1d5wwFrPRrjsaN v3Pzh2nTzFMMUS5nt/MinRy04uihQFqMfcmZ4AO4y/MSilZ4KK+P8k14Kx6U5tQL pElPnYUhcEmgWr8ACSLbbXTxJBHOnFKzqxULU68VwB9EabmSfuu5f/QOY6GimVFi Vc7afTgstZal7DRaDRZyLBoQbeteZ3fIqEZ8Pz6ZTVGA9Cepb/96JoH7ft+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5uC8FwGWsajucZvzmSYNMt5BHi4wHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOOGvk1NNa+IP5DWD7y1bmNG9MhcdLV7vyBk uDth3w5Vx5PbXReOTuUZK47FK/oxfzh6Qb7T9Nt954j9qmjadBSrzXvyQtvUzEiq zx3cnyRcr7L07XJwKNeBx5nSjCob91UJKxTzbt7oKJM7FX5No86jecBAjOuMY7Af iog1JzEcPxT51kgTIrXfm33f/5Z92I/xEjNx4i244sSVcH/tgSaSTTZwS8VCo6oK WVkPjoN+l6kcrJw+hDge9Kv7IY10GClbL4oyWxNhiSR10nnJLwljFcBAEL/MHnI4 WxVLmZQDns2ODh9Q2sOs6GXEl4AUZ2MZE08aKLf2y+KJ1oJJUlw= -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:53 2024 by rpki-client on console-fra.rpki-client.org