$ rpki-client -vvf repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft File: 0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft (raw, json) Hash identifier: vgk9GPw0XKQUKDVnF9UW1xzw5qiHXvhjKbrJNw2EZRw= Subject key identifier: 69:6A:F0:5C:AD:CC:72:AA:FB:20:E0:2D:9B:FE:F1:A9:EF:4C:28:23 Authority key identifier: 0B:B4:E9:52:78:9A:C5:02:FA:0C:FB:95:C2:E0:3F:43:44:97:BF:E3 Certificate issuer: /CN=0BB4E952789AC502FA0CFB95C2E03F434497BFE3 Certificate serial: 2286492BA4E792A21CDAAD36447B8846750C48EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft Manifest number: 36 Signing time: Sun 24 Nov 2024 04:52:09 +0000 Manifest this update: Sun 24 Nov 2024 04:47:09 +0000 Manifest next update: Wed 27 Nov 2024 06:50:09 +0000 Files and hashes: 1: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: W7WMatvzYXuALvuTzGQVbHotqWD0nd56JaqQ7uT/XBU=) 2: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: 68fT/6O+GQIrkXJcp+Dg6OpaZLLbbrSI6G1YMP9fXt0=) 3: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: i5RZxjcZhVQvmnAc/gMhyUIUY8n5jdbL7g9L8hbgD/Y=) 4: 0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl (hash: KSqQ8UfMld+uRxEj1ysNxKSM4kWVBRRT3ZyxMtBs8WE=) 5: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: 9LNgGVv86zEnKjQNsGSTYEvVvGQkNogYzW1V+EdhwJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:86:49:2b:a4:e7:92:a2:1c:da:ad:36:44:7b:88:46:75:0c:48:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB4E952789AC502FA0CFB95C2E03F434497BFE3 Validity Not Before: Nov 24 04:47:09 2024 GMT Not After : Nov 27 06:50:09 2024 GMT Subject: CN=696AF05CADCC72AAFB20E02D9BFEF1A9EF4C2823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:9b:7b:9e:65:38:c5:f3:53:03:da:e0:6f: 34:91:cf:52:00:f1:73:67:2e:4b:a4:66:d8:a8:16: e8:70:bf:e6:29:57:67:fc:75:1e:24:4a:74:46:9a: 89:49:1f:6b:59:e7:71:6f:7d:11:00:e9:4d:8d:42: 92:c2:55:af:25:15:dd:c4:26:56:2f:2f:33:17:69: e2:84:54:48:e2:2d:cd:d4:fe:86:fb:21:65:b9:fb: d9:f4:f0:84:35:4b:c2:24:2c:37:e8:42:66:ee:8d: 3a:40:bd:d7:e5:62:ca:c5:21:eb:3e:7d:da:81:58: d8:aa:4c:e3:60:0d:aa:46:fa:89:a7:3f:82:63:99: a3:51:8e:17:e5:2f:14:cb:49:4a:91:01:05:3f:a9: 0a:dd:7a:92:a2:3e:a0:6b:a9:bc:90:a3:64:62:e5: 51:df:5f:3a:c7:fb:20:cd:8c:e9:20:b8:7c:b0:e5: 6e:a8:f3:57:9a:fe:b9:2d:4e:1a:fd:30:3a:e6:4c: a0:31:c3:e2:12:d3:30:07:96:dc:7b:88:fb:39:43: e7:4c:fe:f8:dc:47:5c:7a:8b:47:d1:05:c0:a1:b6: 43:a5:87:73:cf:5a:da:78:3a:1d:85:3c:56:34:f1: 15:aa:01:dc:70:eb:39:a0:cc:e9:2a:29:8b:b7:a2: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6A:F0:5C:AD:CC:72:AA:FB:20:E0:2D:9B:FE:F1:A9:EF:4C:28:23 X509v3 Authority Key Identifier: keyid:0B:B4:E9:52:78:9A:C5:02:FA:0C:FB:95:C2:E0:3F:43:44:97:BF:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:73:97:ea:13:67:b9:af:49:af:72:d6:1f:64:54:57:a1:f4: 9f:27:38:03:5b:9a:26:46:c3:bb:19:9b:60:65:6c:6c:d4:35: d4:3e:48:0a:72:31:1a:2b:0b:35:24:dd:40:24:d6:8d:af:9a: 59:b4:c2:0e:17:ea:0d:bf:55:59:95:31:29:c4:30:de:a1:fe: b5:a0:31:30:7c:a2:de:13:77:be:04:d6:75:27:f6:3e:0c:56: da:a7:5e:0d:bd:7c:94:b1:16:19:fe:7a:09:b8:fc:21:04:95: d8:e9:f6:8b:f4:db:8e:f5:c2:ba:d9:23:22:5f:5c:9e:6b:c4: 65:98:15:5d:c5:26:94:7c:66:77:81:60:e4:bf:2b:e0:a7:26: 2f:90:7e:e0:df:be:84:b8:aa:29:a2:2a:15:47:99:19:65:a5: 29:b6:95:6f:56:61:76:cc:b5:f4:da:93:4b:1d:22:4f:52:7c: 11:38:a6:67:3f:bf:8c:af:84:ba:dc:d9:a4:e2:98:ec:b6:aa: 80:a5:60:ac:ed:40:b5:a7:a3:ad:7b:6d:7d:3d:24:42:28:a2: a8:be:b1:c4:4b:4c:c0:c8:10:87:84:ff:04:a9:da:90:eb:f4: af:5a:2e:f7:60:72:d4:b3:62:01:fc:8e:d6:29:c5:88:45:e2: a0:33:a6:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIoZJK6TnkqIc2q02RHuIRnUMSOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNGNDM0 NDk3QkZFMzAeFw0yNDExMjQwNDQ3MDlaFw0yNDExMjcwNjUwMDlaMDMxMTAvBgNV BAMTKDY5NkFGMDVDQURDQzcyQUFGQjIwRTAyRDlCRkVGMUE5RUY0QzI4MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Ept7nmU4xfNTA9rgbzSRz1IA 8XNnLkukZtioFuhwv+YpV2f8dR4kSnRGmolJH2tZ53FvfREA6U2NQpLCVa8lFd3E JlYvLzMXaeKEVEjiLc3U/ob7IWW5+9n08IQ1S8IkLDfoQmbujTpAvdflYsrFIes+ fdqBWNiqTONgDapG+omnP4JjmaNRjhflLxTLSUqRAQU/qQrdepKiPqBrqbyQo2Ri 5VHfXzrH+yDNjOkguHyw5W6o81ea/rktThr9MDrmTKAxw+IS0zAHltx7iPs5Q+dM /vjcR1x6i0fRBcChtkOlh3PPWtp4Oh2FPFY08RWqAdxw6zmgzOkqKYu3otJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaWrwXK3Mcqr7IOAtm/7xqe9MKCMwHwYDVR0j BBgwFoAUC7TpUniaxQL6DPuVwuA/Q0SXv+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjcyZWNhNC03M2FkLTRlMGItYTZhNi03YTY1Njk4YjczYmUvMC8wQkI0RTk1Mjc4 OUFDNTAyRkEwQ0ZCOTVDMkUwM0Y0MzQ0OTdCRkUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNGNDM0NDk3 QkZFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNG NDM0NDk3QkZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpzl+oTZ7mvSa9y1h9kVFeh9J8nOANbmiZG w7sZm2BlbGzUNdQ+SApyMRorCzUk3UAk1o2vmlm0wg4X6g2/VVmVMSnEMN6h/rWg MTB8ot4Td74E1nUn9j4MVtqnXg29fJSxFhn+egm4/CEEldjp9ov02471wrrZIyJf XJ5rxGWYFV3FJpR8ZneBYOS/K+CnJi+QfuDfvoS4qimiKhVHmRllpSm2lW9WYXbM tfTak0sdIk9SfBE4pmc/v4yvhLrc2aTimOy2qoClYKztQLWno617bX09JEIooqi+ scRLTMDIEIeE/wSp2pDr9K9aLvdgctSzYgH8jtYpxYhF4qAzpvc= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org