$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json) Hash identifier: ypZPAIlfOlpc/Kw+D19wLfhEz3ro2JPK/VTS7sTDCIc= Subject key identifier: 7E:22:82:21:2D:F3:D1:21:79:75:B0:3E:8B:8C:06:BC:0C:A6:5F:72 Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Certificate serial: 73CEF48508F5349A34ABE7024E34637DBE9DF42D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft Manifest number: 88 Signing time: Wed 20 Nov 2024 11:21:40 +0000 Manifest this update: Wed 20 Nov 2024 11:16:40 +0000 Manifest next update: Sat 23 Nov 2024 18:49:40 +0000 Files and hashes: 1: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: e/1cb/So/Z49L9V38aXVRHEwaV9sfoWhKg0tu48S9TI=) 2: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: PK+0br4XKkmh7I/czDqP0zyJbmUl1cn8Qe030BG2R8s=) 3: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: wRtKcDiC02S0HrZ4vuemM/Fe0PniKJs7vI2ut+NSb14=) 4: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: VxyDNnudqygKgR79hpegf94Yg2WhSQlGNZ9G0Gl3Frg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ce:f4:85:08:f5:34:9a:34:ab:e7:02:4e:34:63:7d:be:9d:f4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Validity Not Before: Nov 20 11:16:40 2024 GMT Not After : Nov 23 18:49:40 2024 GMT Subject: CN=7E2282212DF3D1217975B03E8B8C06BC0CA65F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:cf:4d:dc:0f:5e:b5:64:e6:bc:f0:8a:12: 77:e3:48:31:5b:12:27:9d:71:be:98:87:7c:8a:aa: 6d:64:64:e5:b2:9b:53:38:44:6d:ee:f0:a6:d7:c5: 7d:d9:82:25:e6:55:96:b1:9c:e4:33:5c:00:f5:e6: e2:8e:78:98:7d:8a:ad:66:61:e0:5d:95:4f:73:f1: e4:f1:9c:7f:92:46:3a:06:ab:f5:4d:22:6a:4c:bf: a6:b6:b8:a2:f4:e7:49:da:aa:dd:58:e7:d5:9c:be: 01:07:48:fb:b0:82:89:3f:4e:38:4d:aa:7a:e2:ff: f2:00:55:fd:83:72:41:79:dc:b2:37:34:c5:cf:36: 10:7f:6e:79:b8:e3:d8:c9:c6:e9:f9:80:43:70:5b: 5b:44:52:c6:a1:2f:e3:9f:24:ca:50:8c:8c:7c:d6: a4:fd:e2:bf:b8:71:bf:7d:41:0b:11:52:21:5c:18: 3a:2c:2b:be:0b:99:4f:2c:4f:26:00:dd:21:1a:0f: 5d:44:a0:a7:f9:08:87:aa:f5:26:fe:1d:59:52:6b: 44:4c:73:0c:42:58:c2:f1:f9:18:4a:21:a5:2d:1f: b5:2a:66:dc:72:97:d8:a9:c8:24:39:c1:de:18:d4: 8f:d0:1c:6a:9b:3b:ee:6c:5a:16:ab:78:dc:e2:e2: c1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:22:82:21:2D:F3:D1:21:79:75:B0:3E:8B:8C:06:BC:0C:A6:5F:72 X509v3 Authority Key Identifier: keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4b:b4:6f:1c:33:49:6c:b4:39:4e:1a:c5:53:9f:98:7d:fc: b3:52:a0:c5:73:44:db:11:7e:10:22:e7:51:37:de:9f:83:2c: bb:36:a8:66:42:a7:14:c9:d9:db:13:db:fd:5b:c1:2d:27:5e: 9e:18:b2:3a:84:4b:0c:ce:e7:b1:29:85:b1:d4:8a:6e:9d:69: 28:09:19:b8:54:62:0d:04:e8:39:b5:cb:4e:e4:b6:7e:39:bb: 80:cc:7f:19:4f:bd:d5:83:9e:97:e1:fa:3e:cd:4a:1d:b1:02: 25:d9:23:fb:a7:88:3b:37:1a:17:2e:a1:1c:c2:56:d8:4b:d2: 63:4d:7b:43:31:df:59:9e:62:51:f1:c5:dc:fc:c7:16:40:5f: 58:bb:d0:2e:c5:c8:9d:74:5b:e2:76:3b:25:21:ff:30:56:44: ed:c4:07:53:42:1f:99:0d:c8:8a:4c:09:3c:c4:a9:18:bc:30: 8a:14:62:f9:9b:9a:f2:43:db:dd:ef:a6:eb:3b:59:f8:0c:0c: f0:09:e4:99:0e:ae:57:e4:40:05:d6:06:7e:1d:f8:f3:62:37: 88:4a:b2:26:68:ff:96:9f:7f:2e:58:45:76:ba:76:37:a4:52: 99:b6:cf:45:7a:12:da:60:23:c9:1c:f7:5b:e0:02:dd:9b:0e: 5b:86:5b:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc870hQj1NJo0q+cCTjRjfb6d9C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4 MjdCNUIwMjAeFw0yNDExMjAxMTE2NDBaFw0yNDExMjMxODQ5NDBaMDMxMTAvBgNV BAMTKDdFMjI4MjIxMkRGM0QxMjE3OTc1QjAzRThCOEMwNkJDMENBNjVGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVms9N3A9etWTmvPCKEnfjSDFb Eiedcb6Yh3yKqm1kZOWym1M4RG3u8KbXxX3ZgiXmVZaxnOQzXAD15uKOeJh9iq1m YeBdlU9z8eTxnH+SRjoGq/VNImpMv6a2uKL050naqt1Y59WcvgEHSPuwgok/TjhN qnri//IAVf2DckF53LI3NMXPNhB/bnm449jJxun5gENwW1tEUsahL+OfJMpQjIx8 1qT94r+4cb99QQsRUiFcGDosK74LmU8sTyYA3SEaD11EoKf5CIeq9Sb+HVlSa0RM cwxCWMLx+RhKIaUtH7UqZtxyl9ipyCQ5wd4Y1I/QHGqbO+5sWhareNzi4sEnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfiKCIS3z0SF5dbA+i4wGvAymX3IwHwYDVR0j BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0 Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC NUIwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJB REE4MjdCNUIwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxLtG8cM0lstDlOGsVTn5h9/LNSoMVzRNsR fhAi51E33p+DLLs2qGZCpxTJ2dsT2/1bwS0nXp4YsjqESwzO57EphbHUim6daSgJ GbhUYg0E6Dm1y07ktn45u4DMfxlPvdWDnpfh+j7NSh2xAiXZI/uniDs3GhcuoRzC VthL0mNNe0Mx31meYlHxxdz8xxZAX1i70C7FyJ10W+J2OyUh/zBWRO3EB1NCH5kN yIpMCTzEqRi8MIoUYvmbmvJD293vpus7WfgMDPAJ5JkOrlfkQAXWBn4d+PNiN4hK siZo/5affy5YRXa6djekUpm2z0V6EtpgI8kc91vgAt2bDluGWwc= -----END CERTIFICATE-----Generated at Wed Nov 20 12:07:34 2024 by rpki-client on console-fra.rpki-client.org