$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: /3AqAvc3PH8C/Ah3NP5nm4mkI86bVRRukuiFGoLBGcE= Subject key identifier: BA:E5:2C:54:B0:DA:D3:1B:38:3E:D6:C0:C6:92:00:28:A8:D0:4B:CB Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 7888340B040055C58DF15103AD5E8EB24C4724CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: 2F Signing time: Wed 20 Nov 2024 19:00:00 +0000 Manifest this update: Wed 20 Nov 2024 18:55:00 +0000 Manifest next update: Sat 23 Nov 2024 22:10:00 +0000 Files and hashes: 1: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: CBQ7BcTAX1WXp7Ylcc4yi/0Cf14WakzZ7YKG6S9yjVU=) 2: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: hU7QhysSSVwPd/23HAM+lF9y7cZi7u/40uuDd7B0c/s=) 3: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: 1H3IKAx7UXRMU3wtvDvmP+OHRrM19D65H1BvyoXZOOA=) 4: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: 1k/F9QvhsWyHzMYSAMED8rAGgh3NCF/Y7RiQpGt2sak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:88:34:0b:04:00:55:c5:8d:f1:51:03:ad:5e:8e:b2:4c:47:24:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Nov 20 18:55:00 2024 GMT Not After : Nov 23 22:10:00 2024 GMT Subject: CN=BAE52C54B0DAD31B383ED6C0C6920028A8D04BCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:9b:0e:b1:3a:fd:ad:19:93:fc:72:0f:21: be:02:9b:84:b3:17:87:9e:9e:42:2c:0a:05:58:e9: fc:87:fd:e6:14:10:61:29:81:04:60:ff:39:bc:12: 50:69:6c:78:d5:b5:23:9c:8a:f0:ab:23:ec:e8:cf: 06:84:a6:3b:33:38:4b:f5:4c:0b:39:9e:8d:bc:2f: 41:d5:a4:c4:87:ae:58:81:7c:40:06:92:d2:56:f9: f9:6c:b7:6b:88:d5:af:3f:52:c2:9f:8c:15:a2:b8: 12:77:9e:39:21:8c:86:f0:2d:f9:12:aa:3b:61:84: 20:a2:d4:7e:46:b1:89:c1:ec:74:c7:78:d5:54:06: 92:36:cc:7f:e4:51:b7:d8:83:57:bb:ec:ec:84:8e: 6b:b0:60:10:e9:d6:d1:bf:fd:c2:2b:2d:ad:ac:40: f5:3e:5d:65:75:1d:02:84:59:2f:0d:26:6a:7a:1d: 9b:00:7e:88:20:dd:c1:db:5f:f1:79:f2:4d:80:4d: 7f:06:d4:0a:3b:98:ef:74:51:3f:05:e8:e5:09:5b: fb:a0:fc:b5:3e:96:3a:7c:d1:ce:85:4b:52:8f:e9: b2:d5:91:4f:1c:43:39:d4:d3:65:24:82:bc:4e:48: 83:5c:93:f3:a5:fd:15:15:12:df:3c:d7:3e:f3:d1: 1d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E5:2C:54:B0:DA:D3:1B:38:3E:D6:C0:C6:92:00:28:A8:D0:4B:CB X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:6f:04:cb:ac:83:5e:d5:5a:98:d4:65:46:0c:c5:d8:f5:65: 1f:0c:4f:b6:5c:e3:6a:d4:38:28:45:74:69:9e:36:95:fb:bf: 87:d6:a4:dc:92:6a:c8:a4:8a:1c:78:a6:86:d5:d0:2a:d9:44: 6c:6a:27:80:9e:c2:e0:22:e4:f8:c3:04:3d:a2:08:81:8d:e3: 2d:a2:55:d3:4d:ea:65:52:c8:37:a6:47:de:d7:96:50:73:9a: 3a:14:4d:59:56:86:54:c7:ab:4c:b0:80:f3:8f:cc:33:04:57: 65:e7:7e:4a:f3:01:f4:21:2c:a4:82:54:77:b2:a8:9d:96:a7: 22:1b:55:7a:95:2c:bf:98:bb:1a:71:9c:49:4f:e4:ab:a4:80: 3e:d9:75:44:93:0f:5f:01:1c:05:6f:2a:88:02:81:a1:ca:a1: 92:1d:1d:e5:67:9b:c0:b9:96:24:06:5c:1a:65:35:92:e7:c9: 93:34:8f:0e:22:65:d8:cb:76:4d:98:c5:9b:b2:6c:09:d5:47: 1b:86:e5:e0:c8:87:3a:10:6a:77:72:09:3f:1d:b9:1a:25:e8: e5:aa:7c:ef:b8:36:09:de:a1:f2:65:24:2d:af:bf:1d:a9:e2: 49:01:8f:bc:88:e8:98:22:15:e7:8f:14:38:8b:e8:cd:e0:c3: 75:db:e6:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIg0CwQAVcWN8VEDrV6OskxHJM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNDExMjAxODU1MDBaFw0yNDExMjMyMjEwMDBaMDMxMTAvBgNV BAMTKEJBRTUyQzU0QjBEQUQzMUIzODNFRDZDMEM2OTIwMDI4QThEMDRCQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSRpsOsTr9rRmT/HIPIb4Cm4Sz F4eenkIsCgVY6fyH/eYUEGEpgQRg/zm8ElBpbHjVtSOcivCrI+zozwaEpjszOEv1 TAs5no28L0HVpMSHrliBfEAGktJW+flst2uI1a8/UsKfjBWiuBJ3njkhjIbwLfkS qjthhCCi1H5GsYnB7HTHeNVUBpI2zH/kUbfYg1e77OyEjmuwYBDp1tG//cIrLa2s QPU+XWV1HQKEWS8NJmp6HZsAfogg3cHbX/F58k2ATX8G1Ao7mO90UT8F6OUJW/ug /LU+ljp80c6FS1KP6bLVkU8cQznU02UkgrxOSINck/Ol/RUVEt881z7z0R2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuuUsVLDa0xs4PtbAxpIAKKjQS8swHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhvBMusg17VWpjUZUYMxdj1ZR8MT7Zc42rU OChFdGmeNpX7v4fWpNySasikihx4pobV0CrZRGxqJ4CewuAi5PjDBD2iCIGN4y2i VdNN6mVSyDemR97XllBzmjoUTVlWhlTHq0ywgPOPzDMEV2XnfkrzAfQhLKSCVHey qJ2WpyIbVXqVLL+YuxpxnElP5KukgD7ZdUSTD18BHAVvKogCgaHKoZIdHeVnm8C5 liQGXBplNZLnyZM0jw4iZdjLdk2YxZuybAnVRxuG5eDIhzoQandyCT8duRol6OWq fO+4NgneofJlJC2vvx2p4kkBj7yI6JgiFeePFDiL6M3gw3Xb5pw= -----END CERTIFICATE-----Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org