$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: 8Y7nitdMEvKY7NALBS0ZTNqK4sA6EJWFn7j5jugsAE0= Subject key identifier: E6:28:27:C8:15:14:1F:97:05:E9:24:5F:E5:3E:37:A0:6C:59:7E:76 Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 2F1B2E4303092FC40D02E782CFAD57E2C10D13E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 0159 Signing time: Fri 22 Nov 2024 17:50:53 +0000 Manifest this update: Fri 22 Nov 2024 17:45:53 +0000 Manifest next update: Mon 25 Nov 2024 23:02:53 +0000 Files and hashes: 1: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: jgoQG83OGqOQ5bfCalQG8C0ODXrmVRj9zDn3cJfKnV4=) 2: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: uqEKgFzvDNuLN+AfEqspTdiFykCZ1lJjO1EBDcl9W+M=) 3: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: NPBqi/Dy5zHHE50UdV8hxAgf6f3LNP5NNYri51dK12o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1b:2e:43:03:09:2f:c4:0d:02:e7:82:cf:ad:57:e2:c1:0d:13:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Nov 22 17:45:53 2024 GMT Not After : Nov 25 23:02:53 2024 GMT Subject: CN=E62827C815141F9705E9245FE53E37A06C597E76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:3f:de:54:33:d8:3d:56:cc:07:f2:34:38: 45:d6:1b:e9:73:b4:cc:b9:a1:6a:85:cb:a1:c3:7c: 58:e8:c4:25:5b:61:ea:e0:6c:0d:58:3c:b7:3a:2b: 77:7f:05:96:e4:93:61:02:8d:76:a8:15:ef:90:27: e9:dc:e2:00:58:30:b5:cf:40:d5:22:e3:06:6e:3c: ae:c1:ed:f1:4f:14:28:66:54:16:52:20:fc:e4:9b: 7f:44:25:bb:a8:67:9e:54:a0:f5:76:cd:0c:55:d0: 17:66:cd:61:12:dd:3f:2a:97:29:8a:54:c2:02:46: 54:4c:d4:24:27:02:99:c5:96:d6:33:5c:91:8e:b4: ca:ea:86:51:ba:71:9a:e7:22:b0:e2:86:79:cf:9d: 7e:0d:6d:f4:8a:9f:05:02:4c:4b:ce:53:7f:50:fc: 2e:cf:ff:10:36:ec:5b:75:df:5c:27:22:9b:99:97: e1:db:a7:b9:03:6f:ba:81:c3:43:a7:49:79:08:42: 2d:e2:cc:4e:2c:cf:fe:38:b1:dd:71:50:f1:d5:58: 73:e5:5d:51:59:0c:21:79:f9:04:b4:bf:fe:f7:98: de:06:27:92:a1:e0:43:ae:a7:8b:0c:3b:fc:70:4c: 25:fb:f7:20:8c:07:e3:2e:49:08:f3:f9:6b:8e:80: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:28:27:C8:15:14:1F:97:05:E9:24:5F:E5:3E:37:A0:6C:59:7E:76 X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1f:99:5a:f4:d9:8c:96:86:d2:a5:25:54:96:83:32:4a:bd: be:38:e8:36:c6:2c:84:95:d9:ed:80:4f:45:8b:6f:9f:52:da: 9b:3e:df:5d:9a:c1:fc:82:07:08:e5:17:fd:9a:71:51:cb:af: c7:a6:41:65:c3:fc:ca:92:86:fe:43:c1:fc:3b:1e:fd:8a:37: fa:3c:38:e1:6c:48:91:73:1e:3c:f0:f5:46:9a:ba:c9:9c:eb: 4f:a5:99:91:b0:b3:66:e9:13:40:a2:00:bf:56:dd:a4:83:81: fd:7b:bc:8f:f7:3d:cf:2a:6c:09:dc:35:42:86:68:00:00:03: d1:5b:58:0a:a9:38:7f:3d:87:01:7e:7e:37:8a:ca:d4:0b:82: f0:9c:f1:8a:b1:29:f2:16:50:70:61:6f:55:93:1e:9c:aa:84: ca:12:99:a3:a1:75:fb:59:ba:9d:07:82:f9:87:8a:8a:ac:79: 2d:9c:87:1b:f7:a4:df:06:e8:99:36:91:00:ed:5e:c5:26:a4: a6:49:ca:57:08:23:56:44:20:0f:fb:83:ea:79:ab:21:c7:32: eb:c9:3a:7a:1e:16:dd:fa:38:88:e0:b5:f0:96:d2:56:b9:b4: ef:c8:44:fc:53:05:a7:36:40:5e:5d:21:a6:1a:f7:ff:a2:a1: 24:5e:0d:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxsuQwMJL8QNAueCz61X4sENE+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNDExMjIxNzQ1NTNaFw0yNDExMjUyMzAyNTNaMDMxMTAvBgNV BAMTKEU2MjgyN0M4MTUxNDFGOTcwNUU5MjQ1RkU1M0UzN0EwNkM1OTdFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcOT/eVDPYPVbMB/I0OEXWG+lz tMy5oWqFy6HDfFjoxCVbYergbA1YPLc6K3d/BZbkk2ECjXaoFe+QJ+nc4gBYMLXP QNUi4wZuPK7B7fFPFChmVBZSIPzkm39EJbuoZ55UoPV2zQxV0BdmzWES3T8qlymK VMICRlRM1CQnApnFltYzXJGOtMrqhlG6cZrnIrDihnnPnX4NbfSKnwUCTEvOU39Q /C7P/xA27Ft131wnIpuZl+Hbp7kDb7qBw0OnSXkIQi3izE4sz/44sd1xUPHVWHPl XVFZDCF5+QS0v/73mN4GJ5Kh4EOup4sMO/xwTCX79yCMB+MuSQjz+WuOgLLjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ignyBUUH5cF6SRf5T43oGxZfnYwHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUfmVr02YyWhtKlJVSWgzJKvb446DbGLISV 2e2AT0WLb59S2ps+312awfyCBwjlF/2acVHLr8emQWXD/MqShv5Dwfw7Hv2KN/o8 OOFsSJFzHjzw9Uaausmc60+lmZGws2bpE0CiAL9W3aSDgf17vI/3Pc8qbAncNUKG aAAAA9FbWAqpOH89hwF+fjeKytQLgvCc8YqxKfIWUHBhb1WTHpyqhMoSmaOhdftZ up0HgvmHioqseS2chxv3pN8G6Jk2kQDtXsUmpKZJylcII1ZEIA/7g+p5qyHHMuvJ OnoeFt36OIjgtfCW0la5tO/IRPxTBac2QF5dIaYa9/+ioSReDfc= -----END CERTIFICATE-----Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org