$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: 7MlmQ/IptmBJsN62PvkPfLfg/Ku5VLS9P1IwRLD6Y2w= Subject key identifier: E5:73:5A:F3:78:44:EF:14:85:73:09:27:8B:7B:8D:11:BA:95:36:22 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 112D0D08EAF9091D69882A97EA206129F27E5C14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 02E6 Signing time: Thu 21 Nov 2024 07:01:30 +0000 Manifest this update: Thu 21 Nov 2024 06:56:30 +0000 Manifest next update: Sun 24 Nov 2024 14:54:30 +0000 Files and hashes: 1: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: +ZL/jR4jkHL38m4yhCnPzcMy2A6pqHCMxHZrb0m8ttA=) 2: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: aea2W9WYQPl/1TtNtg5p/r8zRHe+55gj7tNmZIC5BG8=) 3: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: EGLSsOTW0jmHsz7Qh1MWvurFIxr2WBcyQoHqYU1ooYE=) 4: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: eGHescIF8V6PsSzvK6My5G8+PIgGbhX48jpyJcE2624=) 5: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: /MTGWDFkdF8+bcyOdT2M3uhXce+PMDgT+WzP97luiZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2d:0d:08:ea:f9:09:1d:69:88:2a:97:ea:20:61:29:f2:7e:5c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Nov 21 06:56:30 2024 GMT Not After : Nov 24 14:54:30 2024 GMT Subject: CN=E5735AF37844EF14857309278B7B8D11BA953622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:94:33:a6:08:8c:c0:af:7f:ea:06:1f:4d:22: 7b:56:8a:d9:06:d5:46:4d:17:b4:ed:70:81:81:77: 88:dd:2c:ff:a0:98:91:03:b9:55:de:04:4a:48:e8: 8e:b1:77:cf:fb:58:56:d2:ef:b8:31:10:f4:dd:3c: cd:92:f8:fa:ee:33:ce:8b:9e:44:52:51:26:8d:08: 97:46:1f:65:05:0a:b2:99:13:0d:db:f3:c2:cb:df: 59:10:f4:5b:65:4f:53:9c:fe:e8:24:4b:e5:d0:5c: 6b:3d:4e:eb:24:c0:8d:e5:80:38:63:b5:92:1f:72: a4:b6:c8:4e:6f:3b:09:cf:d2:62:2c:66:5d:0b:a7: ea:26:b2:06:67:38:94:4a:ba:eb:39:41:3b:64:a9: 06:37:2c:49:85:0b:98:3f:a5:4e:c3:b1:e2:88:85: f7:e1:71:4c:47:0d:fb:77:97:ba:68:7a:17:f3:36: df:ef:1e:16:53:58:e8:28:cc:15:53:43:85:7f:cd: 22:f2:31:8f:85:ba:90:3e:9c:bc:9a:f3:9b:f3:bd: b6:15:7e:40:f1:97:e4:74:50:67:f5:b3:6c:52:c3: ed:f3:21:40:71:5b:b2:89:79:cb:23:ef:7e:b2:bc: 45:f6:9c:57:e0:fa:32:00:41:9d:05:0d:14:a6:a7: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:73:5A:F3:78:44:EF:14:85:73:09:27:8B:7B:8D:11:BA:95:36:22 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c3:cf:7f:86:63:74:8a:46:91:6a:71:e2:bf:65:32:c3:28: a1:74:78:be:f5:c3:c9:8c:19:47:88:a1:01:b0:24:ea:7f:95: 05:19:dc:0d:f7:db:c2:cf:26:42:5b:8e:88:e9:c2:71:ad:ee: 74:97:5e:56:31:b5:95:24:c5:95:31:67:cd:7d:7c:36:18:d1: ac:43:e2:a8:83:00:a6:cd:54:53:10:b9:30:2f:c2:df:fe:fb: ba:99:4b:cd:0c:3c:59:69:85:ea:9e:61:31:bb:ba:b7:99:6f: 26:7c:50:49:7f:28:8e:da:ed:fc:e7:aa:79:79:84:16:27:0f: a2:3d:95:7d:63:cf:d0:e4:c2:0c:42:84:87:3e:2d:5b:21:37: 6b:7c:c8:5e:0d:7a:07:52:42:fc:b6:0d:d5:3e:07:f5:b9:ee: 2e:1e:1f:40:7e:b8:28:19:a7:74:22:ec:42:32:b7:34:de:aa: 0c:61:28:9c:eb:d3:ff:2f:d2:5c:91:0a:d6:85:26:72:a3:c4: f4:7e:8a:e5:3e:b2:1c:c9:0f:25:0f:9f:9b:99:c4:14:0e:59: 81:88:ad:48:de:b7:a9:89:82:17:d5:13:b2:e8:7f:3c:18:4b: e3:ee:23:a3:c2:7d:e9:e7:12:62:44:a0:2c:8d:78:18:5f:72: 79:68:80:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUES0NCOr5CR1piCqX6iBhKfJ+XBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNDExMjEwNjU2MzBaFw0yNDExMjQxNDU0MzBaMDMxMTAvBgNV BAMTKEU1NzM1QUYzNzg0NEVGMTQ4NTczMDkyNzhCN0I4RDExQkE5NTM2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmlDOmCIzAr3/qBh9NIntWitkG 1UZNF7TtcIGBd4jdLP+gmJEDuVXeBEpI6I6xd8/7WFbS77gxEPTdPM2S+PruM86L nkRSUSaNCJdGH2UFCrKZEw3b88LL31kQ9FtlT1Oc/ugkS+XQXGs9TuskwI3lgDhj tZIfcqS2yE5vOwnP0mIsZl0Lp+omsgZnOJRKuus5QTtkqQY3LEmFC5g/pU7DseKI hffhcUxHDft3l7poehfzNt/vHhZTWOgozBVTQ4V/zSLyMY+FupA+nLya85vzvbYV fkDxl+R0UGf1s2xSw+3zIUBxW7KJecsj736yvEX2nFfg+jIAQZ0FDRSmp01rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5XNa83hE7xSFcwkni3uNEbqVNiIwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/Dz3+GY3SKRpFqceK/ZTLDKKF0eL71w8mM GUeIoQGwJOp/lQUZ3A3328LPJkJbjojpwnGt7nSXXlYxtZUkxZUxZ819fDYY0axD 4qiDAKbNVFMQuTAvwt/++7qZS80MPFlpheqeYTG7ureZbyZ8UEl/KI7a7fznqnl5 hBYnD6I9lX1jz9DkwgxChIc+LVshN2t8yF4NegdSQvy2DdU+B/W57i4eH0B+uCgZ p3Qi7EIytzTeqgxhKJzr0/8v0lyRCtaFJnKjxPR+iuU+shzJDyUPn5uZxBQOWYGI rUjet6mJghfVE7LofzwYS+PuI6PCfennEmJEoCyNeBhfcnlogLc= -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:04 2024 by rpki-client on console-ams.rpki-client.org