$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: /aBnl153np0R2hAj5udZ4SpgZvPHXQrPZ1P7pmVxGiA= Subject key identifier: 17:1A:47:90:6B:2D:8F:3F:29:E8:4E:2A:3C:9A:C5:B8:15:C3:53:40 Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 1C6F8582318C62E68BCDA50940534C397C926E6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: EC Signing time: Fri 22 Nov 2024 02:01:40 +0000 Manifest this update: Fri 22 Nov 2024 01:56:40 +0000 Manifest next update: Mon 25 Nov 2024 05:09:40 +0000 Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: tRQ8BcXAAHvOWAUrArBXozhkS5T6SXLbxEzuq6THVpM=) 2: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: jz+dGBsY+NdFy+dMEyQpYcAnykv78vfh/hMgGUWzEL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6f:85:82:31:8c:62:e6:8b:cd:a5:09:40:53:4c:39:7c:92:6e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Nov 22 01:56:40 2024 GMT Not After : Nov 25 05:09:40 2024 GMT Subject: CN=171A47906B2D8F3F29E84E2A3C9AC5B815C35340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:c0:e0:86:1d:56:e2:42:f9:1d:45:84:de: f6:77:f1:c8:85:24:04:c5:04:d4:86:05:5b:dd:de: f9:0e:f3:3a:5c:40:d1:35:b6:21:f3:a1:e7:c1:6c: 2c:5e:14:ef:34:2d:e1:82:91:4f:72:7a:73:ba:f3: a9:b2:14:15:5d:c3:5b:0c:0c:d4:fe:87:56:3e:5c: e2:a8:28:03:b2:22:a4:68:76:8f:04:65:a2:cd:9e: 91:6a:fa:35:75:49:ae:54:47:54:76:6d:a5:ff:6a: ff:71:36:03:9b:45:02:06:ad:41:a8:e6:e5:7d:c4: c6:9d:8e:08:08:0e:95:30:4a:dd:d7:1e:94:d1:d9: 31:ce:6a:87:9b:d1:8a:64:29:fe:be:55:c7:43:17: 6f:56:85:36:bd:b4:0d:20:77:5a:5a:0d:4c:88:22: 00:ac:46:c8:87:d8:05:79:1a:48:df:41:12:b8:13: 40:80:2f:48:0a:83:4f:c7:09:f3:1e:2c:e6:71:0d: 80:36:65:9a:35:98:3e:bc:d4:a3:a1:94:23:9f:85: 59:5a:f1:2a:0d:47:42:0e:bc:21:ff:00:c1:7c:42: ab:4e:8b:bb:70:31:14:36:03:4d:14:2f:b0:a0:6f: 59:c6:8e:16:48:b3:d0:a9:b9:e9:43:19:4b:e5:c8: 3f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1A:47:90:6B:2D:8F:3F:29:E8:4E:2A:3C:9A:C5:B8:15:C3:53:40 X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:58:aa:b7:fe:9c:9a:83:2f:95:5f:7f:f0:f4:bd:06:a7:74: 40:38:1a:5d:23:2f:49:e7:91:2d:77:fe:42:e0:48:1e:0e:36: 5f:d9:21:34:c9:9c:ac:ed:a2:bf:c8:f4:40:23:a0:e4:dd:07: ad:2f:66:29:2d:c0:18:ae:35:18:99:4e:90:70:7d:ed:b3:d9: ba:78:d3:f4:a8:54:36:f8:c8:95:3c:26:15:87:0e:25:b8:e8: 73:c0:85:b1:e4:db:61:73:70:1f:f8:d4:24:5d:d2:33:35:97: 2d:c8:47:e9:e1:56:a3:56:c6:16:97:cd:13:da:e2:e1:51:18: 43:f2:8d:42:c5:1e:fd:91:41:e8:f1:cb:9f:4b:33:dc:28:55: 40:bd:40:44:6c:0b:3e:b4:ff:3a:65:dd:45:6e:1b:9b:c4:c5: 37:c7:69:55:a1:60:db:ab:73:a5:c3:d9:c4:2c:5b:ad:76:81: 68:92:e1:38:a8:f1:da:ba:78:e1:5e:27:54:51:d5:91:fd:11: 24:ae:00:07:5c:2f:3d:8a:72:72:94:a6:4a:71:86:15:f6:eb: 13:c0:26:31:6a:78:6b:b1:43:fa:69:8d:82:4c:47:07:55:86: 8c:6d:8d:ef:be:5a:28:0b:ca:b5:39:16:24:63:f0:82:77:c1: a6:6a:76:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHG+FgjGMYuaLzaUJQFNMOXySbm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNDExMjIwMTU2NDBaFw0yNDExMjUwNTA5NDBaMDMxMTAvBgNV BAMTKDE3MUE0NzkwNkIyRDhGM0YyOUU4NEUyQTNDOUFDNUI4MTVDMzUzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+cDghh1W4kL5HUWE3vZ38ciF JATFBNSGBVvd3vkO8zpcQNE1tiHzoefBbCxeFO80LeGCkU9yenO686myFBVdw1sM DNT+h1Y+XOKoKAOyIqRodo8EZaLNnpFq+jV1Sa5UR1R2baX/av9xNgObRQIGrUGo 5uV9xMadjggIDpUwSt3XHpTR2THOaoeb0YpkKf6+VcdDF29WhTa9tA0gd1paDUyI IgCsRsiH2AV5GkjfQRK4E0CAL0gKg0/HCfMeLOZxDYA2ZZo1mD681KOhlCOfhVla 8SoNR0IOvCH/AMF8QqtOi7twMRQ2A00UL7Cgb1nGjhZIs9CpuelDGUvlyD/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFxpHkGstjz8p6E4qPJrFuBXDU0AwHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVYqrf+nJqDL5Vff/D0vQandEA4Gl0jL0nn kS13/kLgSB4ONl/ZITTJnKztor/I9EAjoOTdB60vZiktwBiuNRiZTpBwfe2z2bp4 0/SoVDb4yJU8JhWHDiW46HPAhbHk22FzcB/41CRd0jM1ly3IR+nhVqNWxhaXzRPa 4uFRGEPyjULFHv2RQejxy59LM9woVUC9QERsCz60/zpl3UVuG5vExTfHaVWhYNur c6XD2cQsW612gWiS4Tio8dq6eOFeJ1RR1ZH9ESSuAAdcLz2KcnKUpkpxhhX26xPA JjFqeGuxQ/ppjYJMRwdVhoxtje++WigLyrU5FiRj8IJ3waZqdmk= -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org