$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft File: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft (raw, json) Hash identifier: IzUaG5C5K0HltlhWJSe6+aWCaYw7kg+ljR6fcdlxYYc= Subject key identifier: E1:9D:97:36:AA:56:C7:6E:C1:D0:B8:22:41:25:D2:AB:B5:C1:43:77 Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Certificate serial: 3AEBD434946E0E45696E3FD7C6224F797C0B46B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft Manifest number: 04F4 Signing time: Fri 22 Nov 2024 00:21:43 +0000 Manifest this update: Fri 22 Nov 2024 00:16:43 +0000 Manifest next update: Mon 25 Nov 2024 09:30:43 +0000 Files and hashes: 1: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl (hash: hrqRffnEuEm2WRYleAboAHcBGmXwX8nI4Vk1XND7+fI=) 2: AS137342.roa (hash: Cn0+d7SlJE+Eqac99WwtfTIDDoNuKt/LX5KuAeR6Pmk=) 3: AS38511.roa (hash: V7DSRdFvPPolW2PhomEmxwSTUmsHE2rHj14s1RjCWNs=) 4: AS137379.roa (hash: Z4MIJUqMOvirE2SHUjhYz08IiUGc/JsWL19e9jt5EIs=) 5: AS56242.roa (hash: Cp+oC3UzlNuIpBOitsjAmArAsajIyniI40Cn7KQpxEY=) 6: AS59281.roa (hash: 3OoTAmlO4zWNGL/bSRhl8jP1S0EccRMZ9zeQlEN9DAw=) 7: AS58552.roa (hash: MZoojIqcN+c7SmQuo2XmvprVkNtlihLiP1r/EcApeTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:eb:d4:34:94:6e:0e:45:69:6e:3f:d7:c6:22:4f:79:7c:0b:46:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Validity Not Before: Nov 22 00:16:43 2024 GMT Not After : Nov 25 09:30:43 2024 GMT Subject: CN=E19D9736AA56C76EC1D0B8224125D2ABB5C14377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:20:6f:4b:99:6c:07:37:94:0b:73:36:bd:54: b4:4a:5a:cc:8c:97:c3:b2:d2:d4:28:44:1a:c5:ce: 6c:ea:9e:1f:91:93:c9:e7:56:74:08:0c:db:a6:27: 78:87:ad:d0:bb:17:a5:e2:53:65:a6:37:92:f8:83: 00:d3:19:61:4c:ca:0a:15:7a:20:ab:62:1e:5c:33: 41:90:ac:5a:36:b9:02:03:46:fd:9f:e3:84:5a:ae: 75:17:71:cc:61:33:88:b2:27:40:6a:b5:97:36:3a: 09:d4:43:f4:ee:21:dd:c5:56:fa:00:95:a3:ad:3a: 74:b8:93:5c:33:06:c6:b1:bc:25:2b:d5:1d:17:23: 93:41:2d:fa:b5:b0:25:97:00:05:52:34:57:39:4d: 76:a7:c2:b1:e9:e4:5c:9d:06:d9:07:5a:04:18:94: 53:00:28:0b:e3:ec:e1:28:6f:d3:79:64:13:ad:77: 44:7f:c7:dc:07:07:55:44:95:88:7c:59:94:88:51: d3:a2:24:42:46:56:1e:2e:66:26:4e:7f:fa:38:af: b1:6d:4d:12:04:8a:93:35:31:da:99:66:5a:4a:96: 79:3b:6c:5d:be:c7:00:dd:5f:90:cf:e9:33:e5:8e: c5:9e:b9:c6:12:f2:b5:49:48:03:0a:8b:e3:df:9e: 13:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9D:97:36:AA:56:C7:6E:C1:D0:B8:22:41:25:D2:AB:B5:C1:43:77 X509v3 Authority Key Identifier: keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1f:7e:48:a8:9c:80:f4:52:24:ed:3a:da:04:7d:a8:5f:d3: 34:2e:ee:bb:1d:c3:14:81:e8:14:9c:f0:be:d8:e7:10:49:2a: 26:03:1b:2e:9b:d4:d5:eb:1d:6a:9b:30:1e:8f:a9:3e:96:02: e7:3c:1e:37:eb:f1:36:2b:4a:4f:ae:6b:e6:12:90:a2:67:f6: b9:41:e8:b5:2e:86:ba:c3:06:93:87:d6:8c:00:9a:32:f8:7a: fb:62:00:18:32:65:53:d8:01:50:90:5e:8e:1b:e4:21:c5:38: de:4f:ef:bf:a8:99:fd:cb:bb:ab:de:f9:08:45:45:14:d9:2b: 0c:33:4b:06:55:7c:e5:bb:a7:65:4e:25:b5:81:9b:6a:53:db: 2c:b3:07:af:d0:30:f8:72:b4:6e:da:a2:ad:a2:8f:65:61:93: 7f:56:44:6f:f3:8f:8d:dc:cd:99:65:c6:37:a6:ae:0b:36:c9: 4a:bd:5a:e6:d5:57:1f:2e:ec:b0:84:f5:62:d7:ad:63:a5:d7: 8f:f8:c3:09:3b:91:6b:92:36:68:cd:e3:bc:a5:1d:90:4e:60: b7:b8:3f:35:18:5e:e0:74:d2:3d:67:5f:fe:ca:34:cd:1d:61: c9:83:32:94:01:1d:64:29:a8:ad:86:b8:ab:57:b8:ad:20:79: 1d:ad:bc:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuvUNJRuDkVpbj/XxiJPeXwLRrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF N0FCQzE3RjAeFw0yNDExMjIwMDE2NDNaFw0yNDExMjUwOTMwNDNaMDMxMTAvBgNV BAMTKEUxOUQ5NzM2QUE1NkM3NkVDMUQwQjgyMjQxMjVEMkFCQjVDMTQzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIG9LmWwHN5QLcza9VLRKWsyM l8Oy0tQoRBrFzmzqnh+Rk8nnVnQIDNumJ3iHrdC7F6XiU2WmN5L4gwDTGWFMygoV eiCrYh5cM0GQrFo2uQIDRv2f44RarnUXccxhM4iyJ0BqtZc2OgnUQ/TuId3FVvoA laOtOnS4k1wzBsaxvCUr1R0XI5NBLfq1sCWXAAVSNFc5TXanwrHp5FydBtkHWgQY lFMAKAvj7OEob9N5ZBOtd0R/x9wHB1VElYh8WZSIUdOiJEJGVh4uZiZOf/o4r7Ft TRIEipM1MdqZZlpKlnk7bF2+xwDdX5DP6TPljsWeucYS8rVJSAMKi+PfnhMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Z2XNqpWx27B0LgiQSXSq7XBQ3cwHwYDVR0j BBgwFoAUkWm5tlJs0UmE3eOkLiTdj+erwX8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC85MTY5QjlCNjUy NkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3QUJDMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZFN0FC QzE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE OEZFN0FCQzE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMffkionID0UiTtOtoEfahf0zQu7rsdwxSB 6BSc8L7Y5xBJKiYDGy6b1NXrHWqbMB6PqT6WAuc8Hjfr8TYrSk+ua+YSkKJn9rlB 6LUuhrrDBpOH1owAmjL4evtiABgyZVPYAVCQXo4b5CHFON5P77+omf3Lu6ve+QhF RRTZKwwzSwZVfOW7p2VOJbWBm2pT2yyzB6/QMPhytG7aoq2ij2Vhk39WRG/zj43c zZllxjemrgs2yUq9WubVVx8u7LCE9WLXrWOl14/4wwk7kWuSNmjN47ylHZBOYLe4 PzUYXuB00j1nX/7KNM0dYcmDMpQBHWQpqK2GuKtXuK0geR2tvDY= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org