$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json) Hash identifier: RnuKUsUZBLQR0GiuYxdTtN+U3o7F3lIJdUAY2CmeMT4= Subject key identifier: CB:90:7E:7F:86:6D:06:58:29:23:E9:A0:5E:1C:00:F2:5A:AC:3E:72 Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 07F0C36E30F1DA4920B5997E8195AA7A37B49238 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft Manifest number: 0112 Signing time: Mon 25 Nov 2024 01:30:39 +0000 Manifest this update: Mon 25 Nov 2024 01:25:39 +0000 Manifest next update: Thu 28 Nov 2024 05:57:39 +0000 Files and hashes: 1: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: MSkQfcYU3SnewBMuI4uBKRwMpwB80w2zmqcLiTZMOhE=) 2: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: YH28o01vhSRs6PijNVwA/SrbRyvDJsddMM7/fGwCfHQ=) 3: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: hGhoeTBR4+q4FW7EHbmgAODj7dkmqM7oI2LDqkBLoXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f0:c3:6e:30:f1:da:49:20:b5:99:7e:81:95:aa:7a:37:b4:92:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Nov 25 01:25:39 2024 GMT Not After : Nov 28 05:57:39 2024 GMT Subject: CN=CB907E7F866D06582923E9A05E1C00F25AAC3E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:72:79:cb:3c:48:4e:11:eb:f1:eb:8e:49: 2e:b6:5e:86:c0:ac:89:e4:b5:34:5b:0c:10:09:dd: ca:6b:ad:91:a0:cb:39:5b:2c:60:e6:3a:a1:7d:13: 4b:56:ad:85:78:aa:05:01:2f:b0:6b:4a:59:85:cf: b1:e5:0f:25:7e:7c:02:dd:e7:32:4c:72:db:9b:02: 85:74:bb:6f:9a:76:63:b9:a2:3a:e7:7f:b8:e3:da: df:3c:d9:38:95:e2:b0:06:ea:e0:fe:6d:cb:36:1b: d8:cf:0c:54:d1:53:3a:0e:db:23:71:03:54:51:24: ba:38:1e:07:bc:a8:18:90:fa:a9:99:c5:8c:76:8d: bf:b1:5f:58:58:51:a9:13:0b:c6:48:64:b2:4b:b5: b4:ec:c0:5f:28:6e:b3:c7:75:48:d3:8a:c3:cb:33: 0e:69:c1:06:03:b1:bd:51:f6:92:e8:73:5f:86:3f: b5:55:2f:ca:ae:b0:3c:0f:51:de:8d:e1:ba:ee:39: fb:e1:f8:f1:de:c5:31:5a:9e:af:97:93:09:55:5d: e6:5d:d0:05:b1:23:50:8d:00:ec:68:fd:27:53:0f: a3:c5:b1:35:3e:6c:61:5e:4e:85:b9:d1:28:24:47: eb:33:51:8a:50:46:25:f6:27:eb:7b:8d:f7:fd:03: f7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:90:7E:7F:86:6D:06:58:29:23:E9:A0:5E:1C:00:F2:5A:AC:3E:72 X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6c:40:53:9e:a9:af:55:33:e0:0a:c6:dc:ac:18:ad:35:c9: 79:ee:a8:98:3b:01:73:1a:ae:6a:70:3e:2e:8e:f3:3c:46:69: 98:e7:f7:fc:0c:c8:d0:4c:78:5e:8c:e4:8b:7d:ca:4a:44:88: 54:7c:6d:33:fd:81:93:8d:44:b2:8c:d3:ac:5a:57:c1:74:4f: 1d:80:66:ef:b8:a6:9e:b0:dd:3f:ae:d2:54:c3:f0:bd:f0:b3: f0:52:25:78:05:1c:d5:8b:14:a8:87:e5:7e:cc:da:ac:c8:4d: 40:cd:bb:05:f1:2e:d2:6c:79:07:ae:3a:08:ce:73:14:22:f9: 84:25:15:dc:fe:ba:2c:65:85:73:d3:b6:16:af:f2:d8:70:bd: bd:8b:a2:eb:66:e2:48:72:06:eb:e7:8a:f0:a1:0c:01:2a:d1: ae:b6:84:e5:e6:e8:6b:1e:4f:4b:87:34:04:f8:39:a9:09:ea: 69:37:10:8d:54:a5:95:3c:4e:45:0f:2e:c2:38:ec:59:a7:a4: da:ae:a4:c6:39:ca:72:7b:dd:f0:fa:56:9e:15:e3:54:98:99: 8f:c4:fe:63:30:5e:bc:20:2c:8c:45:ef:3e:6a:99:fa:0d:bd: 92:a6:38:2f:d6:fc:b1:02:93:72:ae:a2:d5:31:4c:08:6f:6f: 59:20:c5:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/DDbjDx2kkgtZl+gZWqeje0kjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNDExMjUwMTI1MzlaFw0yNDExMjgwNTU3MzlaMDMxMTAvBgNV BAMTKENCOTA3RTdGODY2RDA2NTgyOTIzRTlBMDVFMUMwMEYyNUFBQzNFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IHJ5yzxIThHr8euOSS62XobA rInktTRbDBAJ3cprrZGgyzlbLGDmOqF9E0tWrYV4qgUBL7BrSlmFz7HlDyV+fALd 5zJMctubAoV0u2+admO5ojrnf7jj2t882TiV4rAG6uD+bcs2G9jPDFTRUzoO2yNx A1RRJLo4Hge8qBiQ+qmZxYx2jb+xX1hYUakTC8ZIZLJLtbTswF8obrPHdUjTisPL Mw5pwQYDsb1R9pLoc1+GP7VVL8qusDwPUd6N4bruOfvh+PHexTFanq+XkwlVXeZd 0AWxI1CNAOxo/SdTD6PFsTU+bGFeToW50SgkR+szUYpQRiX2J+t7jff9A/dPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy5B+f4ZtBlgpI+mgXhwA8lqsPnIwHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJE QjU2OTFCODhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1sQFOeqa9VM+AKxtysGK01yXnuqJg7AXMa rmpwPi6O8zxGaZjn9/wMyNBMeF6M5It9ykpEiFR8bTP9gZONRLKM06xaV8F0Tx2A Zu+4pp6w3T+u0lTD8L3ws/BSJXgFHNWLFKiH5X7M2qzITUDNuwXxLtJseQeuOgjO cxQi+YQlFdz+uixlhXPTthav8thwvb2Loutm4khyBuvnivChDAEq0a62hOXm6Gse T0uHNAT4OakJ6mk3EI1UpZU8TkUPLsI47FmnpNqupMY5ynJ73fD6Vp4V41SYmY/E /mMwXrwgLIxF7z5qmfoNvZKmOC/W/LECk3KuotUxTAhvb1kgxTw= -----END CERTIFICATE-----Generated at Mon Nov 25 02:45:36 2024 by rpki-client on console-ams.rpki-client.org