$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: SOminpQWi8r74N3QSbkJhP814xtALNb9CySt3WYlBaQ= Subject key identifier: A9:DF:9E:41:F2:C3:29:00:40:1C:BE:D8:E6:81:0A:E2:95:F4:41:DF Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 32F2D6CE02BFCECF8FA9B6EFBD2EF89D2AD41196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 0126 Signing time: Thu 21 Nov 2024 00:21:51 +0000 Manifest this update: Thu 21 Nov 2024 00:16:51 +0000 Manifest next update: Sun 24 Nov 2024 09:23:51 +0000 Files and hashes: 1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: L1hRzxE9lmcWg/BjtXeL7156zMfMKEw38z3N/7PthNI=) 2: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: iCuE445BiHrqm4IxxIzg+73QX6xB94j0kDVfJpzOBMc=) 3: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: 7LQZxQ5bsgk7K5pp6gI1j/xpoXvt+sM6qalB60i7WUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f2:d6:ce:02:bf:ce:cf:8f:a9:b6:ef:bd:2e:f8:9d:2a:d4:11:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Nov 21 00:16:51 2024 GMT Not After : Nov 24 09:23:51 2024 GMT Subject: CN=A9DF9E41F2C32900401CBED8E6810AE295F441DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:d1:33:56:5f:2c:31:84:af:ec:ef:09:17: be:0f:02:8f:13:97:0d:75:2e:da:07:cb:b4:00:f8: 48:0d:4f:15:19:bc:f3:0a:5d:5d:5d:11:9d:b6:12: 34:9f:24:2a:c7:26:22:c9:c1:ae:e5:77:2a:97:fe: e3:38:66:3d:c4:7f:58:16:55:ec:e7:ed:4f:7f:b8: a9:98:d2:61:32:fe:ae:28:7c:c4:ba:2b:03:72:4f: ca:27:3d:da:5a:e5:e7:53:a7:3c:ec:74:34:32:0b: a0:ff:f1:06:2e:c3:9f:08:c0:0d:30:79:6a:c3:d4: 46:66:bd:04:24:2b:46:35:c2:7e:3f:59:4c:1c:44: 2c:cd:3c:2d:14:b5:34:77:c8:b9:0e:d1:a4:98:21: eb:59:fc:b7:e0:59:6e:ee:e3:85:41:d1:de:8d:f6: d2:bd:c4:71:16:7f:f6:2d:5d:8a:fd:9c:b3:23:15: 60:4c:4c:10:1b:0a:0b:26:af:80:b4:80:11:d2:af: 77:08:d7:68:f1:e1:66:aa:fb:61:be:44:0c:a7:89: 72:98:87:0e:7a:05:0f:07:6a:10:0a:8c:ae:24:b3: a7:63:66:2c:a4:40:4c:3b:d2:9f:b8:fd:69:63:55: cf:a1:4b:25:b2:57:39:ce:90:49:5c:e3:41:61:f0: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DF:9E:41:F2:C3:29:00:40:1C:BE:D8:E6:81:0A:E2:95:F4:41:DF X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:fd:76:5b:05:be:1a:98:19:70:1e:92:b2:ad:80:ed:e4:49: 43:b3:0c:c0:b3:94:30:a6:56:ef:e0:ef:25:2a:61:49:f7:2d: fb:42:4d:d5:3b:56:66:44:51:a0:97:ac:6b:04:d5:55:50:bd: 25:c1:43:72:2e:23:70:be:c2:e5:f9:16:a0:4f:ef:34:2e:33: b9:d4:82:e4:f4:bc:a3:0d:5c:68:84:0a:f9:f2:7e:5e:36:db: 53:dc:75:77:5b:65:51:80:b2:e4:c8:ff:62:db:dc:e9:d7:9e: 7c:69:57:c9:e9:9e:a4:53:2a:9a:b8:22:9d:ab:4c:31:2c:c9: 93:4c:44:14:e3:25:2d:99:bc:f9:1e:c4:d0:3f:ed:01:6b:e2: 94:c7:49:22:7d:84:2f:ad:01:0a:59:28:1d:b5:46:ba:f7:d2: 72:ed:c6:61:e4:7c:a9:87:f5:61:13:8d:66:ea:64:77:80:b1: c3:6b:3a:84:e6:f1:32:a3:c0:b5:b5:04:c0:34:b7:d8:48:eb: df:70:59:31:96:d8:90:09:31:5a:5e:5b:e7:99:cf:3b:be:50: cf:4c:14:b7:a6:91:83:4f:ff:92:24:23:a1:cd:0a:3f:5b:e3: 81:f8:b0:02:e2:0a:5f:f2:1f:f1:a0:07:29:75:4e:e6:b5:09: ee:40:19:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvLWzgK/zs+PqbbvvS74nSrUEZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNDExMjEwMDE2NTFaFw0yNDExMjQwOTIzNTFaMDMxMTAvBgNV BAMTKEE5REY5RTQxRjJDMzI5MDA0MDFDQkVEOEU2ODEwQUUyOTVGNDQxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEk9EzVl8sMYSv7O8JF74PAo8T lw11LtoHy7QA+EgNTxUZvPMKXV1dEZ22EjSfJCrHJiLJwa7ldyqX/uM4Zj3Ef1gW Vezn7U9/uKmY0mEy/q4ofMS6KwNyT8onPdpa5edTpzzsdDQyC6D/8QYuw58IwA0w eWrD1EZmvQQkK0Y1wn4/WUwcRCzNPC0UtTR3yLkO0aSYIetZ/LfgWW7u44VB0d6N 9tK9xHEWf/YtXYr9nLMjFWBMTBAbCgsmr4C0gBHSr3cI12jx4Waq+2G+RAyniXKY hw56BQ8HahAKjK4ks6djZiykQEw70p+4/WljVc+hSyWyVznOkElc40Fh8IAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqd+eQfLDKQBAHL7Y5oEK4pX0Qd8wHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALD9dlsFvhqYGXAekrKtgO3kSUOzDMCzlDCm Vu/g7yUqYUn3LftCTdU7VmZEUaCXrGsE1VVQvSXBQ3IuI3C+wuX5FqBP7zQuM7nU guT0vKMNXGiECvnyfl4221PcdXdbZVGAsuTI/2Lb3OnXnnxpV8npnqRTKpq4Ip2r TDEsyZNMRBTjJS2ZvPkexNA/7QFr4pTHSSJ9hC+tAQpZKB21Rrr30nLtxmHkfKmH 9WETjWbqZHeAscNrOoTm8TKjwLW1BMA0t9hI699wWTGW2JAJMVpeW+eZzzu+UM9M FLemkYNP/5IkI6HNCj9b44H4sALiCl/yH/GgByl1Tua1Ce5AGTY= -----END CERTIFICATE-----Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org