$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: mDHAcWuik7KahEEXeVJlybkGLZ+ba68blQ4gdNqBybc= Subject key identifier: 1B:6A:5D:71:0D:8F:1A:AF:C1:4A:D0:42:80:6C:19:AF:F5:C1:CF:12 Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 30CC0B253B24EEC0C177F2742B9E39E7E4CA4F01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: 42 Signing time: Thu 21 Nov 2024 23:31:22 +0000 Manifest this update: Thu 21 Nov 2024 23:26:22 +0000 Manifest next update: Mon 25 Nov 2024 08:58:22 +0000 Files and hashes: 1: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: MLceCoZ/YSr75dOkgyolQvDNfyJZ7lyG6iVLYPSn/zE=) 2: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: Gcco8HMc4fDeDY6SNOtuEepeCd4wmhRWtDSSXTsyywU=) 3: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: gyWJHanxNQG1DzFhuDTy0RtjXEo+5iUbOZzhyP1gSA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:cc:0b:25:3b:24:ee:c0:c1:77:f2:74:2b:9e:39:e7:e4:ca:4f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Nov 21 23:26:22 2024 GMT Not After : Nov 25 08:58:22 2024 GMT Subject: CN=1B6A5D710D8F1AAFC14AD042806C19AFF5C1CF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:e1:30:41:82:cf:99:20:f8:2e:08:39:d6: da:16:b9:e2:ed:d4:75:c2:51:69:b3:76:e5:98:37: d2:3c:ce:6c:37:8a:3b:4b:8a:3a:d6:e3:15:07:f0: 2d:69:f5:a0:73:e0:e8:3e:a9:e6:35:dc:14:1a:57: 1a:76:dd:68:e1:75:4c:17:65:41:de:a9:59:4c:c8: ff:95:de:6d:6c:50:7a:6b:49:2e:60:33:5c:e1:d0: 31:3f:68:f7:90:5e:63:e4:23:2a:c7:1f:85:6e:23: 48:69:65:a3:94:61:5f:7e:45:ad:9e:2d:0c:40:26: 4e:98:c4:d8:ac:a6:2e:8b:46:cf:71:c5:25:46:31: a9:97:30:13:7c:1d:e1:99:1c:fb:8f:fd:33:7e:98: 7b:f1:95:73:30:ed:a6:d6:0f:50:b4:a0:e7:0c:ce: 9a:1b:9c:a8:cb:a5:63:52:41:f6:29:99:d9:35:48: be:4e:d7:53:bf:8a:8e:3e:84:97:15:cd:a7:a8:e9: 29:f1:0e:82:82:f1:a4:1f:fd:34:9f:b3:9a:a9:68: 05:ef:da:f7:09:1b:6e:22:9c:1f:cc:ce:00:b3:d6: b2:08:9a:43:4e:e0:5b:82:69:cc:c6:9c:6a:e1:40: f8:c9:20:74:ee:24:6b:17:13:c3:7c:d3:c2:32:c7: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6A:5D:71:0D:8F:1A:AF:C1:4A:D0:42:80:6C:19:AF:F5:C1:CF:12 X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f8:fe:d0:ee:18:88:e5:4c:85:3a:cc:73:8e:a0:fa:d7:21: 20:a4:c9:cf:55:3f:6e:0d:e9:ee:7c:dc:35:5c:d3:bd:54:bd: ff:01:5e:bc:81:43:5b:c4:4a:08:8f:4d:ac:ed:b1:4f:71:cc: e7:ca:cd:c9:6c:92:53:f2:32:35:09:60:9d:08:16:b7:37:a4: b6:dd:e9:52:09:04:8d:bb:fa:1a:c8:31:84:8e:d3:e7:b1:86: a3:cd:90:77:3e:f8:be:9e:b9:c0:1a:45:3a:ca:77:3c:8b:ce: 24:18:71:4f:5f:9e:95:ed:c1:b5:f3:c8:15:ff:f9:13:e8:76: a4:57:81:c5:da:8a:a4:99:d2:7b:4b:93:be:c7:b3:17:69:5d: 7a:b4:2c:e6:85:c7:71:50:b4:8c:dd:7a:07:a1:f3:c9:0d:a4: 4e:38:b5:41:cc:b8:d3:7f:a5:0d:3f:da:c6:93:1e:6a:4a:51: 02:a9:51:ee:1e:ab:e7:ce:5a:65:ab:b7:c5:11:5f:ee:19:5f: 8b:9f:d2:83:4c:d8:e9:22:9b:db:91:f4:88:a8:23:20:1d:e1: 28:79:40:84:5d:ce:1f:f3:29:47:04:ed:e9:1c:00:ca:13:17: 5f:c8:3e:45:26:fa:17:63:37:4d:c7:6e:d5:ca:be:da:00:92: be:44:80:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMMwLJTsk7sDBd/J0K5455+TKTwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNDExMjEyMzI2MjJaFw0yNDExMjUwODU4MjJaMDMxMTAvBgNV BAMTKDFCNkE1RDcxMEQ4RjFBQUZDMTRBRDA0MjgwNkMxOUFGRjVDMUNGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyOEwQYLPmSD4Lgg51toWueLt 1HXCUWmzduWYN9I8zmw3ijtLijrW4xUH8C1p9aBz4Og+qeY13BQaVxp23WjhdUwX ZUHeqVlMyP+V3m1sUHprSS5gM1zh0DE/aPeQXmPkIyrHH4VuI0hpZaOUYV9+Ra2e LQxAJk6YxNispi6LRs9xxSVGMamXMBN8HeGZHPuP/TN+mHvxlXMw7abWD1C0oOcM zpobnKjLpWNSQfYpmdk1SL5O11O/io4+hJcVzaeo6SnxDoKC8aQf/TSfs5qpaAXv 2vcJG24inB/MzgCz1rIImkNO4FuCaczGnGrhQPjJIHTuJGsXE8N808Iyx1MlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG2pdcQ2PGq/BStBCgGwZr/XBzxIwHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD34/tDuGIjlTIU6zHOOoPrXISCkyc9VP24N 6e583DVc071Uvf8BXryBQ1vESgiPTaztsU9xzOfKzclsklPyMjUJYJ0IFrc3pLbd 6VIJBI27+hrIMYSO0+exhqPNkHc++L6eucAaRTrKdzyLziQYcU9fnpXtwbXzyBX/ +RPodqRXgcXaiqSZ0ntLk77HsxdpXXq0LOaFx3FQtIzdegeh88kNpE44tUHMuNN/ pQ0/2saTHmpKUQKpUe4eq+fOWmWrt8URX+4ZX4uf0oNM2Okim9uR9IioIyAd4Sh5 QIRdzh/zKUcE7ekcAMoTF1/IPkUm+hdjN03HbtXKvtoAkr5EgDA= -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org