$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: w+oCOKA8U2Tc9d/URLqzcNPEG2S0bP5JGbcRsXaxrA4= Subject key identifier: 64:37:9B:27:FA:F4:CD:40:03:A8:BF:BF:B5:F8:7E:CD:68:B5:36:A9 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 188CF0F469344FBB0A7B1F833FDAA29EF79E522D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 01E7 Signing time: Sun 24 Nov 2024 23:32:06 +0000 Manifest this update: Sun 24 Nov 2024 23:27:06 +0000 Manifest next update: Thu 28 Nov 2024 00:57:06 +0000 Files and hashes: 1: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: 7dftH2SS+w8RSRd/srYB88ohPuCHagULW4cCu5O4G8Y=) 2: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: +tPkJqpOjRKJQTLstEf17Gi7L/GmTgvUZVqUywmQU+8=) 3: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: i2FN7QGtvjksUmQoiwHbvZAYgN4Vr4/GxLR8X3+OsM8=) 4: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: wnAgc3P0jp807bEqH2g3XM8/raON+QdYRfyIGgrCzFc=) 5: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: +NS9YY9+pvm+gKuTTS1+bnH64U8DgIFgqBnhR5C6R8A=) 6: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: O5QSkCWStc3J8tPYdmKyVWcNhKLvYp1mep54EBTPDMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8c:f0:f4:69:34:4f:bb:0a:7b:1f:83:3f:da:a2:9e:f7:9e:52:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Nov 24 23:27:06 2024 GMT Not After : Nov 28 00:57:06 2024 GMT Subject: CN=64379B27FAF4CD4003A8BFBFB5F87ECD68B536A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:47:98:6b:04:c3:ef:89:67:e6:48:f9:9f: af:64:54:fa:79:f6:5f:64:f5:91:b8:e1:48:69:46: 28:e1:a8:e9:bb:9a:7e:0f:f2:ae:dc:db:08:79:a8: 07:d6:e6:a6:f5:38:02:d0:55:0b:79:87:a5:d8:4a: de:74:90:e1:1c:fe:dd:d1:ac:14:89:10:15:55:36: 4f:4f:41:50:0e:1b:5e:89:7c:0f:83:56:79:14:f4: 73:31:e1:ee:1a:f8:20:58:61:1c:e2:0c:d4:e0:cd: ab:5e:37:2d:a0:4f:e8:3c:25:d8:32:e3:88:fc:e0: 04:51:eb:3f:02:96:76:fa:33:09:54:2b:6d:32:29: d1:2c:8f:5d:d3:f9:df:b4:b9:53:99:65:de:50:71: a0:66:73:f0:19:61:04:5c:ca:ff:b6:ad:d2:81:3e: 3c:b6:a3:52:f1:7b:1f:3d:f3:bc:a1:96:02:1e:f7: 35:d5:2f:1f:03:78:92:af:88:5b:4c:e9:61:99:41: 66:e0:c5:f3:ed:e1:26:a5:5b:27:ee:3d:97:a8:a2: d6:7b:ea:ec:ae:8a:30:e3:ec:f9:8e:da:c8:46:5e: 7a:5b:bf:79:4f:11:96:5c:3f:02:db:5f:7c:ee:2c: e9:88:1a:db:bc:15:6e:32:ec:36:03:01:92:ae:e1: 63:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:37:9B:27:FA:F4:CD:40:03:A8:BF:BF:B5:F8:7E:CD:68:B5:36:A9 X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7d:81:df:40:7d:8f:fa:62:8c:d5:f5:13:52:ab:c7:93:dd: 33:f7:d0:9a:63:20:d8:de:83:49:9f:00:38:ec:86:34:6b:4e: 2b:b0:67:1d:89:d5:54:c0:d0:5e:f2:60:63:e3:ab:e9:aa:e9: 2e:27:f1:80:f7:38:0d:35:fe:e6:98:3f:d5:c2:3f:ec:ea:01: 94:90:3e:56:fc:cf:82:62:06:7d:d8:64:48:44:5f:35:3b:49: bc:dc:8f:58:30:8d:ba:fb:4a:66:c2:b7:4d:d6:1d:7c:3e:94: 1f:97:6d:bd:f2:61:86:33:01:e4:c2:bc:ca:0e:c9:0f:61:17: 85:e9:01:9d:7f:3f:dd:dc:c2:ad:ab:02:35:eb:a8:e5:3f:f6: 89:80:83:08:7c:f9:58:30:8b:66:b5:0e:21:b8:be:b0:60:9d: 73:77:9d:7d:00:bb:3f:f0:94:89:b2:1e:42:7b:37:1b:8e:c7: 51:5c:e7:e1:25:bd:04:2e:0f:20:d9:4d:2f:6b:d4:6c:c7:db: 17:e9:40:06:ba:99:33:e2:c8:46:e0:64:02:a5:54:1a:10:f7: 06:cc:03:2c:e2:30:61:4e:b6:03:89:cb:89:06:9d:92:ff:f5: 1d:61:04:0b:67:c8:95:81:d8:10:b7:fb:e7:d0:12:19:88:eb: c1:29:6b:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIzw9Gk0T7sKex+DP9qinveeUi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNDExMjQyMzI3MDZaFw0yNDExMjgwMDU3MDZaMDMxMTAvBgNV BAMTKDY0Mzc5QjI3RkFGNENENDAwM0E4QkZCRkI1Rjg3RUNENjhCNTM2QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/S0eYawTD74ln5kj5n69kVPp5 9l9k9ZG44UhpRijhqOm7mn4P8q7c2wh5qAfW5qb1OALQVQt5h6XYSt50kOEc/t3R rBSJEBVVNk9PQVAOG16JfA+DVnkU9HMx4e4a+CBYYRziDNTgzateNy2gT+g8Jdgy 44j84ARR6z8Clnb6MwlUK20yKdEsj13T+d+0uVOZZd5QcaBmc/AZYQRcyv+2rdKB Pjy2o1Lxex8987yhlgIe9zXVLx8DeJKviFtM6WGZQWbgxfPt4SalWyfuPZeootZ7 6uyuijDj7PmO2shGXnpbv3lPEZZcPwLbX3zuLOmIGtu8FW4y7DYDAZKu4WNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZDebJ/r0zUADqL+/tfh+zWi1NqkwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABl9gd9AfY/6YozV9RNSq8eT3TP30JpjINje g0mfADjshjRrTiuwZx2J1VTA0F7yYGPjq+mq6S4n8YD3OA01/uaYP9XCP+zqAZSQ Plb8z4JiBn3YZEhEXzU7Sbzcj1gwjbr7SmbCt03WHXw+lB+Xbb3yYYYzAeTCvMoO yQ9hF4XpAZ1/P93cwq2rAjXrqOU/9omAgwh8+Vgwi2a1DiG4vrBgnXN3nX0Auz/w lImyHkJ7NxuOx1Fc5+ElvQQuDyDZTS9r1GzH2xfpQAa6mTPiyEbgZAKlVBoQ9wbM AyziMGFOtgOJy4kGnZL/9R1hBAtnyJWB2BC3++fQEhmI68EpazE= -----END CERTIFICATE-----Generated at Mon Nov 25 00:59:32 2024 by rpki-client on console-ams.rpki-client.org