$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: kIxAzCl6gXtQW7KGQXupOjBm0JCpauDFNsb02A7AEU0= Subject key identifier: 45:B1:83:33:99:C7:BE:20:93:98:02:87:B4:43:FD:47:56:D2:EE:33 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 45A6E3A45E7E6A04DC464ED29FD955AA63857DC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 0486 Signing time: Thu 21 Nov 2024 05:01:44 +0000 Manifest this update: Thu 21 Nov 2024 04:56:44 +0000 Manifest next update: Sun 24 Nov 2024 14:59:44 +0000 Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: V55U7OK1K2QuY3VVbSyrU+unRMpplldjBPASw8ADm0Y=) 2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: XBLpOc8QLNhoGsvmXEZNep/rcF2zC1JRvYdm6bbhbC8=) 3: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: M8eQrIYoHKI4QrJSn5fFXFJR7PhUYac8EY7GOcmyaWE=) 4: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: vZps53S9h1BnSZoitUW6NSla+4Sd5IFzDyt7UQvpK88=) 5: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: O+E0vEAGDLnl7z+KG7x4Sue7hKqrqtZKZ6CZgDM27EE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a6:e3:a4:5e:7e:6a:04:dc:46:4e:d2:9f:d9:55:aa:63:85:7d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Nov 21 04:56:44 2024 GMT Not After : Nov 24 14:59:44 2024 GMT Subject: CN=45B1833399C7BE2093980287B443FD4756D2EE33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:ed:b3:dc:ac:8a:27:63:da:3f:ee:c1:ce: 5b:cd:6c:bf:0d:5d:ca:49:3b:e8:24:44:5f:f5:42: 0e:29:81:94:3d:44:bb:4a:fe:40:74:7f:7a:dc:ae: 51:35:18:78:82:5d:10:8c:25:05:37:99:92:27:ba: 91:a1:da:f2:bc:b2:f2:7e:a4:11:58:0e:a4:c4:5e: ea:18:a7:df:d8:4d:d6:70:c4:ea:c0:f7:e8:20:7b: 5b:2b:44:38:54:59:44:1e:ca:c2:ab:19:e2:f2:95: cf:62:66:cb:f1:be:8d:6d:cf:b8:df:7c:12:7f:ea: fa:99:f0:41:c0:7a:7f:a6:6d:78:0d:2d:51:13:47: 8a:b8:5c:e4:8c:cc:62:f0:82:64:a6:fb:f1:ac:d0: 34:a9:27:d8:50:b8:3e:9c:4f:94:37:ff:cd:1b:b6: 42:32:1b:2d:db:19:e1:e0:2f:c7:44:c7:60:58:ab: fe:35:83:9f:40:69:85:b6:03:38:0c:00:59:f1:91: 1c:25:2a:91:3f:8b:58:b0:d5:1d:39:7e:33:ea:79: 31:19:b5:bf:df:d1:a6:93:32:58:d1:eb:a4:fa:59: 9e:c3:7c:7b:05:ab:48:76:ff:05:c1:d1:a7:bc:79: b3:67:12:99:a0:39:6e:fc:63:52:aa:98:a9:29:29: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B1:83:33:99:C7:BE:20:93:98:02:87:B4:43:FD:47:56:D2:EE:33 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e9:b6:b6:15:a8:41:f6:ca:d9:43:e7:84:52:b6:5a:60:04: 9b:14:88:0a:ae:ac:0d:94:9b:1c:20:97:9b:e1:8f:a8:5c:42: bd:72:86:0f:df:34:ee:c4:1f:31:55:a3:50:9c:71:da:1e:34: a0:59:da:9f:50:cb:4a:75:c0:d3:51:a0:1d:01:d7:41:27:d1: c1:b8:d5:9a:dd:82:d2:82:f7:5d:bf:5a:05:4e:84:a9:ab:f4: f3:ae:6d:44:14:38:5b:ef:26:1c:c7:74:e1:41:90:48:c1:e6: ca:cf:fe:ca:9f:6f:55:20:27:6d:9f:47:16:1d:0e:49:6b:17: 9c:6c:ee:b7:cf:b4:fa:67:5b:93:0a:a5:43:c4:8c:ec:b7:a7: a0:8b:3a:ed:14:e2:b5:91:c6:e7:9a:46:a5:c0:f0:a8:19:80: 12:f9:3b:9d:f0:41:15:ca:ef:ea:ad:a8:24:c5:7e:fa:de:ea: c4:d1:82:81:1e:bc:90:02:17:90:8c:62:8b:13:43:85:6e:ed: a9:63:51:61:d2:77:0b:dd:36:0d:23:26:76:7e:4a:82:15:63: 16:19:37:6c:93:8f:9b:16:b7:4a:a7:1b:aa:44:17:3d:be:7c: 3c:e9:9d:32:7e:66:c8:54:6f:cb:ec:00:25:cd:3d:b8:19:b5: a1:35:28:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURabjpF5+agTcRk7Sn9lVqmOFfcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNDExMjEwNDU2NDRaFw0yNDExMjQxNDU5NDRaMDMxMTAvBgNV BAMTKDQ1QjE4MzMzOTlDN0JFMjA5Mzk4MDI4N0I0NDNGRDQ3NTZEMkVFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7e2z3KyKJ2PaP+7BzlvNbL8N XcpJO+gkRF/1Qg4pgZQ9RLtK/kB0f3rcrlE1GHiCXRCMJQU3mZInupGh2vK8svJ+ pBFYDqTEXuoYp9/YTdZwxOrA9+gge1srRDhUWUQeysKrGeLylc9iZsvxvo1tz7jf fBJ/6vqZ8EHAen+mbXgNLVETR4q4XOSMzGLwgmSm+/Gs0DSpJ9hQuD6cT5Q3/80b tkIyGy3bGeHgL8dEx2BYq/41g59AaYW2AzgMAFnxkRwlKpE/i1iw1R05fjPqeTEZ tb/f0aaTMljR66T6WZ7DfHsFq0h2/wXB0ae8ebNnEpmgOW78Y1KqmKkpKT8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURbGDM5nHviCTmAKHtEP9R1bS7jMwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTptrYVqEH2ytlD54RStlpgBJsUiAqurA2U mxwgl5vhj6hcQr1yhg/fNO7EHzFVo1CccdoeNKBZ2p9Qy0p1wNNRoB0B10En0cG4 1ZrdgtKC912/WgVOhKmr9POubUQUOFvvJhzHdOFBkEjB5srP/sqfb1UgJ22fRxYd DklrF5xs7rfPtPpnW5MKpUPEjOy3p6CLOu0U4rWRxueaRqXA8KgZgBL5O53wQRXK 7+qtqCTFfvre6sTRgoEevJACF5CMYosTQ4Vu7aljUWHSdwvdNg0jJnZ+SoIVYxYZ N2yTj5sWt0qnG6pEFz2+fDzpnTJ+ZshUb8vsACXNPbgZtaE1KJo= -----END CERTIFICATE-----Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org