$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: WYqViEaL+AkkLYHapc+Mz1ECWXUdvDSENqSlqSAaF5M= Subject key identifier: 37:0A:9E:5B:72:E1:8E:0E:71:BE:05:8B:76:C7:9A:B3:29:71:85:FA Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 2C29EAD4159E419413E1AB4020650C00179A43CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 0118 Signing time: Thu 21 Nov 2024 09:21:08 +0000 Manifest this update: Thu 21 Nov 2024 09:16:08 +0000 Manifest next update: Sun 24 Nov 2024 16:57:08 +0000 Files and hashes: 1: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: wqjblhIuvAMPwPaIwFtObEssF7KIl5fdywAhszOgrIw=) 2: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: kert8DjZFZG3h4rCknF6lI82qh6y9UTKORk1t7qqQVA=) 3: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: Vr4tOqBHMx+pXspqYTw5pGaMtShJonlHRJz67jtX2Uo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:29:ea:d4:15:9e:41:94:13:e1:ab:40:20:65:0c:00:17:9a:43:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Nov 21 09:16:08 2024 GMT Not After : Nov 24 16:57:08 2024 GMT Subject: CN=370A9E5B72E18E0E71BE058B76C79AB3297185FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:37:2a:73:d1:50:a0:58:68:47:9d:92:79:31: 84:60:e0:7f:9d:cc:10:1e:f7:7d:84:32:80:fc:8e: d4:72:29:d9:bc:c6:d0:dc:5d:c8:48:9c:e0:18:6f: cc:ae:92:a2:76:8d:33:11:44:7f:d7:5b:7a:65:c4: 08:b7:92:a2:6a:8f:7a:e0:34:c3:31:fc:34:1e:a8: b5:da:2a:70:a1:59:51:5b:aa:0b:74:e5:5b:e8:d4: 47:af:63:78:f8:69:0a:2a:65:01:e8:57:b3:40:72: 45:0a:c4:e9:30:5a:3b:05:56:db:55:d9:9d:1d:41: 71:76:98:8a:42:5f:cf:ba:07:4c:9c:85:5f:b0:3a: 88:71:ed:9c:fe:9e:40:5a:36:9a:05:e1:6c:24:47: 90:66:fd:28:58:e6:62:24:05:75:43:b4:c8:8a:6e: 38:73:28:64:df:05:df:bd:5f:ea:38:35:81:38:82: ee:cc:4c:22:77:ae:7f:ef:ea:b1:61:02:fa:81:e7: 6a:a9:9f:ca:51:04:de:bb:cd:ad:b0:ac:50:f1:76: 3a:ef:95:e8:6f:1c:8a:a3:a0:f9:14:c9:77:d9:2b: e7:fe:40:a6:49:f4:14:bb:ba:24:76:21:95:c2:39: c9:1e:75:3d:3a:3d:8e:19:5c:27:dd:af:a9:e6:3b: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0A:9E:5B:72:E1:8E:0E:71:BE:05:8B:76:C7:9A:B3:29:71:85:FA X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:96:f4:f2:9b:4f:d8:78:9c:75:26:e2:9f:d6:82:0a:97:6d: de:15:fe:77:13:2f:f8:cc:6d:e1:0f:24:3e:4f:43:04:dc:af: 29:f9:32:b9:ca:7e:ec:57:d1:3b:f3:03:a0:aa:f3:60:cc:ca: 81:a8:80:4c:bd:35:ae:86:d8:6d:28:63:64:31:40:5e:62:12: a9:df:46:c3:80:9d:35:a4:55:4e:44:58:24:ef:7f:53:61:51: 51:a4:bf:6a:78:ae:02:39:da:33:52:af:4b:8a:ee:40:9b:ef: 8f:89:34:eb:3e:6c:d4:ac:32:ea:0c:72:ae:37:01:83:8b:9a: 46:47:e8:14:b2:8d:3a:fb:04:e8:ad:7f:24:f4:98:e2:70:6f: 06:be:2d:12:36:fa:04:60:47:17:42:00:54:2e:c2:cd:83:3a: 0d:13:9a:be:ca:b3:71:ac:54:78:03:4a:df:86:5c:b3:47:25: 69:56:d5:ce:eb:95:5d:19:84:a2:75:e9:75:0e:e1:c3:04:4d: a6:92:d0:13:e4:af:82:7a:29:c0:4a:01:18:52:6c:53:cb:04: e5:94:1b:f8:6c:07:21:50:2e:bb:c0:1c:9f:aa:ab:74:bd:95: 25:d4:86:1c:ca:da:50:10:4b:78:c0:11:7f:6a:06:2c:66:0c: 37:5e:33:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCnq1BWeQZQT4atAIGUMABeaQ8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNDExMjEwOTE2MDhaFw0yNDExMjQxNjU3MDhaMDMxMTAvBgNV BAMTKDM3MEE5RTVCNzJFMThFMEU3MUJFMDU4Qjc2Qzc5QUIzMjk3MTg1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNypz0VCgWGhHnZJ5MYRg4H+d zBAe932EMoD8jtRyKdm8xtDcXchInOAYb8yukqJ2jTMRRH/XW3plxAi3kqJqj3rg NMMx/DQeqLXaKnChWVFbqgt05Vvo1EevY3j4aQoqZQHoV7NAckUKxOkwWjsFVttV 2Z0dQXF2mIpCX8+6B0ychV+wOohx7Zz+nkBaNpoF4WwkR5Bm/ShY5mIkBXVDtMiK bjhzKGTfBd+9X+o4NYE4gu7MTCJ3rn/v6rFhAvqB52qpn8pRBN67za2wrFDxdjrv lehvHIqjoPkUyXfZK+f+QKZJ9BS7uiR2IZXCOckedT06PY4ZXCfdr6nmO8aRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNwqeW3Lhjg5xvgWLdseasylxhfowHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2W9PKbT9h4nHUm4p/WggqXbd4V/ncTL/jM beEPJD5PQwTcryn5MrnKfuxX0TvzA6Cq82DMyoGogEy9Na6G2G0oY2QxQF5iEqnf RsOAnTWkVU5EWCTvf1NhUVGkv2p4rgI52jNSr0uK7kCb74+JNOs+bNSsMuoMcq43 AYOLmkZH6BSyjTr7BOitfyT0mOJwbwa+LRI2+gRgRxdCAFQuws2DOg0Tmr7Ks3Gs VHgDSt+GXLNHJWlW1c7rlV0ZhKJ16XUO4cMETaaS0BPkr4J6KcBKARhSbFPLBOWU G/hsByFQLrvAHJ+qq3S9lSXUhhzK2lAQS3jAEX9qBixmDDdeMyA= -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org