$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: ft/Q9cgSUbiza3WYaWSXIEMiMOii0pjhZ6mu+/FX3qc= Subject key identifier: 7A:E8:8D:42:0C:76:DF:AC:8E:DB:C4:51:9C:59:A5:46:08:F4:85:6B Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 72E3EC49B30BAAA8AEAC5E80A6C4D5F812F60001 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 0485 Signing time: Wed 20 Nov 2024 20:21:25 +0000 Manifest this update: Wed 20 Nov 2024 20:16:25 +0000 Manifest next update: Sat 23 Nov 2024 23:05:25 +0000 Files and hashes: 1: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: PFQ7FpN31YAHFpzC7fGpvPtUM9Dv0WNkJWYV7s1UY68=) 2: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: dTBfsdBlpmWmjjgh2j9/EzfwPAu0oHz9JWFp/ECFBQ0=) 3: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: YW5mycHoMYt30I/MroADwhTM9WIv2HP4LkWL7TWNYnc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 23:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e3:ec:49:b3:0b:aa:a8:ae:ac:5e:80:a6:c4:d5:f8:12:f6:00:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Nov 20 20:16:25 2024 GMT Not After : Nov 23 23:05:25 2024 GMT Subject: CN=7AE88D420C76DFAC8EDBC4519C59A54608F4856B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:65:8e:f8:c9:2d:86:2e:12:8a:0c:66:c4: 79:c5:1e:2a:8f:d4:8c:29:a9:0a:cc:45:d9:4f:74: 08:fb:4e:c0:0d:e4:d0:fd:9a:61:12:19:73:db:7d: 18:46:55:1a:5e:21:86:18:9d:3e:39:83:d6:f1:53: 89:ef:ea:50:ac:6a:70:c1:e8:55:13:a0:2d:02:8e: cf:c8:45:d2:6b:d4:ad:a2:bd:26:6b:38:39:ba:ef: a9:44:f7:46:4e:24:10:77:ab:7c:0c:ee:ab:fe:1b: 59:0e:a2:64:87:f1:ba:ed:1a:3d:94:54:93:05:75: 92:e4:25:1e:f2:af:ad:96:05:35:2c:54:a8:e4:80: cf:24:62:9d:95:1d:0b:cb:c2:be:52:86:7e:b0:62: b1:81:ec:72:52:00:29:fa:9d:53:e3:15:84:8f:63: 58:f4:a5:82:38:f1:d8:b7:dc:44:f8:a4:36:fd:74: 6c:69:f0:93:a8:19:2a:03:2d:6b:65:eb:58:72:bf: a6:2d:d3:14:90:91:98:9e:2b:b7:6d:99:77:b7:6b: 50:f2:47:9f:c5:cb:0f:e7:20:ed:03:2c:6c:33:b4: 0e:c3:56:b2:09:a1:f7:14:60:be:14:12:30:82:f0: 07:ab:86:35:02:12:73:35:da:8b:8a:ee:bc:d1:f0: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E8:8D:42:0C:76:DF:AC:8E:DB:C4:51:9C:59:A5:46:08:F4:85:6B X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:71:a7:d2:92:d8:85:85:80:04:4c:1e:40:3c:a1:32:3b:8f: ed:0e:0f:43:f9:f5:30:4a:7e:80:53:5c:bc:6c:80:bf:12:f1: 37:ac:f3:b9:be:31:86:0b:8e:92:ea:96:a5:59:3e:c1:35:85: 43:a4:fd:d4:31:a9:83:de:d8:23:5d:02:32:c9:6d:63:41:63: 36:53:89:1b:62:25:4b:fe:8c:c4:8f:bf:32:ae:70:9f:07:58: 34:aa:6c:c2:f1:7f:84:a8:55:22:e4:08:c4:77:bd:e3:d3:b1: f0:bb:57:9f:ee:b4:09:ba:9d:26:c6:aa:bc:33:bf:9e:79:cf: 38:c8:d7:11:7d:63:57:de:3e:26:5e:6e:1d:48:8f:54:22:7c: 3c:bc:4d:f2:4d:ac:00:d7:3f:13:11:43:0d:94:df:f1:5c:f8: 60:b4:ca:2d:9f:93:63:43:bc:fa:70:da:70:3e:b9:1f:49:06: cd:75:68:9c:fc:50:e7:5f:2e:db:46:a7:bf:5b:31:97:60:e3: 6a:b4:16:51:d5:46:b1:05:52:78:ad:ab:b4:3e:58:24:00:dd: 6e:8e:11:70:3a:91:e5:f7:c1:e9:b6:08:f8:eb:da:02:50:13: 9a:d3:48:76:2b:02:a1:34:62:2e:42:65:fb:8f:2f:fa:bd:3e: a9:84:1e:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuPsSbMLqqiurF6ApsTV+BL2AAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNDExMjAyMDE2MjVaFw0yNDExMjMyMzA1MjVaMDMxMTAvBgNV BAMTKDdBRTg4RDQyMEM3NkRGQUM4RURCQzQ1MTlDNTlBNTQ2MDhGNDg1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGl2WO+Mkthi4SigxmxHnFHiqP 1IwpqQrMRdlPdAj7TsAN5ND9mmESGXPbfRhGVRpeIYYYnT45g9bxU4nv6lCsanDB 6FUToC0Cjs/IRdJr1K2ivSZrODm676lE90ZOJBB3q3wM7qv+G1kOomSH8brtGj2U VJMFdZLkJR7yr62WBTUsVKjkgM8kYp2VHQvLwr5Shn6wYrGB7HJSACn6nVPjFYSP Y1j0pYI48di33ET4pDb9dGxp8JOoGSoDLWtl61hyv6Yt0xSQkZieK7dtmXe3a1Dy R5/Fyw/nIO0DLGwztA7DVrIJofcUYL4UEjCC8AerhjUCEnM12ouK7rzR8HRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeuiNQgx236yO28RRnFmlRgj0hWswHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhxp9KS2IWFgARMHkA8oTI7j+0OD0P59TBK foBTXLxsgL8S8Tes87m+MYYLjpLqlqVZPsE1hUOk/dQxqYPe2CNdAjLJbWNBYzZT iRtiJUv+jMSPvzKucJ8HWDSqbMLxf4SoVSLkCMR3vePTsfC7V5/utAm6nSbGqrwz v555zzjI1xF9Y1fePiZebh1Ij1QifDy8TfJNrADXPxMRQw2U3/Fc+GC0yi2fk2ND vPpw2nA+uR9JBs11aJz8UOdfLttGp79bMZdg42q0FlHVRrEFUnitq7Q+WCQA3W6O EXA6keX3wem2CPjr2gJQE5rTSHYrAqE0Yi5CZfuPL/q9PqmEHpM= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:32 2024 by rpki-client on console-fra.rpki-client.org