$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: rhiG4to0bP9F03A28O+gg8uLM/r4RKLZoknDTijJksg= Subject key identifier: 0F:9C:D0:78:CD:F6:83:35:F9:B6:03:C3:27:E6:CE:E6:28:AC:18:E1 Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 5F99F339DC186ADB68DA533305DDF3025120F375 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 014B Signing time: Fri 22 Nov 2024 01:00:46 +0000 Manifest this update: Fri 22 Nov 2024 00:55:46 +0000 Manifest next update: Mon 25 Nov 2024 06:29:46 +0000 Files and hashes: 1: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: IZ8KmdFwK5i2F35Ti/yV73rwyTaK/R/VAzY82jFEZs8=) 2: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: W3CxByDxmTVQgt2sfX0f1KsdGykhPdqPDBUssG/+4Ig=) 3: 3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa (hash: JQnrpdZbIEjOMrJ0gY+bWa1ZiQUgvaTVgcxr/pouQFw=) 4: 3130332e3132362e3131392e302f32342d3234203d3e20313338313136.roa (hash: mb0eVHk5fU6EsN1FHO07Yf907g6iEki+6AgF+Su1t9s=) 5: 3130332e3132362e3131372e302f32342d3234203d3e20313338313136.roa (hash: jIRxROaY+ZsyLOueu1pqPluvRpe9DT1746X5+JI8kKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:99:f3:39:dc:18:6a:db:68:da:53:33:05:dd:f3:02:51:20:f3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Nov 22 00:55:46 2024 GMT Not After : Nov 25 06:29:46 2024 GMT Subject: CN=0F9CD078CDF68335F9B603C327E6CEE628AC18E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ef:29:66:ab:3e:47:37:7e:b4:41:7a:df:08: fa:d8:fe:27:0a:87:24:b5:de:4c:74:4b:e4:ca:e9: 59:e1:18:8e:b5:e9:f8:0f:50:e2:78:28:b1:a9:89: 36:03:d7:24:33:7d:4f:8b:af:50:69:2e:30:ff:f1: 89:fd:3e:94:82:7c:56:87:37:f3:5a:85:17:a5:0d: 31:dc:44:8e:32:78:40:c8:d1:42:73:e9:5b:ef:99: fa:e6:42:d4:65:b3:02:21:23:a3:99:84:de:d9:7d: b0:fb:e0:15:90:1f:e3:1b:e0:77:48:8b:ac:72:7c: 70:2c:87:4d:ca:29:3e:6e:3f:23:3c:4d:1b:72:9d: 00:97:65:9e:55:02:09:2b:45:9f:74:2c:7d:04:35: 54:a1:d3:d1:7f:5c:98:f0:e0:a1:03:42:4d:89:31: 5a:66:44:a0:1c:94:04:e1:34:7d:2d:af:76:0d:fc: 0b:0b:bb:26:df:16:84:70:53:10:fa:6d:c9:a2:7c: 75:79:a0:1d:8b:aa:03:9d:40:f6:90:57:b4:35:af: c9:8b:be:5e:5e:fd:da:3c:70:15:5f:e9:12:b5:e9: d3:73:df:b4:f4:67:70:13:05:80:dd:62:2a:66:71: fa:7e:c4:51:eb:0d:ea:91:6b:36:57:d1:9b:23:68: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9C:D0:78:CD:F6:83:35:F9:B6:03:C3:27:E6:CE:E6:28:AC:18:E1 X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:26:5d:f6:12:1c:f4:5c:67:8d:55:d8:5c:80:83:f1:e9:ed: c1:f9:50:f7:e4:9e:7b:c2:fe:aa:32:5d:e4:5a:98:99:20:63: 0e:63:7d:9b:d7:80:f0:c1:63:93:c4:be:4c:99:d1:75:d7:fa: 71:59:0e:1b:6f:20:34:92:dd:ad:f3:20:d3:f2:98:08:f0:55: 5d:45:b1:80:0c:2e:a3:0d:fb:34:ea:b5:53:5d:fe:b1:e4:59: 34:4f:ba:ba:00:c1:56:e8:5b:f4:5e:3a:ac:99:32:fe:9b:45: d7:df:5d:c3:74:11:58:74:97:52:c0:53:5c:9d:a6:d7:db:ee: d2:80:ea:ba:98:80:ab:9d:35:96:ad:6e:b5:8d:b3:e6:c9:ec: 5f:b8:77:f6:d9:09:51:21:f9:9b:5d:09:9a:50:48:aa:b4:63: 05:09:e8:ed:9a:e7:bb:8d:3d:5a:7c:f4:d5:70:df:9a:3f:83: dd:56:6f:1c:2c:11:4b:2a:6e:52:d5:69:9e:70:5d:f6:b5:d3: 8f:21:3e:f5:34:2d:0c:1c:f5:59:02:20:62:67:b5:cc:97:8e: b4:d3:df:30:c3:30:5b:cd:57:30:5e:af:dc:b8:e7:74:85:3f: ec:8e:f5:cc:73:86:26:0f:e1:a4:c8:b3:e4:b4:f8:1b:dd:9a: 36:51:77:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5nzOdwYatto2lMzBd3zAlEg83UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNDExMjIwMDU1NDZaFw0yNDExMjUwNjI5NDZaMDMxMTAvBgNV BAMTKDBGOUNEMDc4Q0RGNjgzMzVGOUI2MDNDMzI3RTZDRUU2MjhBQzE4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr7ylmqz5HN360QXrfCPrY/icK hyS13kx0S+TK6VnhGI616fgPUOJ4KLGpiTYD1yQzfU+Lr1BpLjD/8Yn9PpSCfFaH N/NahRelDTHcRI4yeEDI0UJz6VvvmfrmQtRlswIhI6OZhN7ZfbD74BWQH+Mb4HdI i6xyfHAsh03KKT5uPyM8TRtynQCXZZ5VAgkrRZ90LH0ENVSh09F/XJjw4KEDQk2J MVpmRKAclAThNH0tr3YN/AsLuybfFoRwUxD6bcmifHV5oB2LqgOdQPaQV7Q1r8mL vl5e/do8cBVf6RK16dNz37T0Z3ATBYDdYipmcfp+xFHrDeqRazZX0ZsjaG1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD5zQeM32gzX5tgPDJ+bO5iisGOEwHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMmXfYSHPRcZ41V2FyAg/Hp7cH5UPfknnvC /qoyXeRamJkgYw5jfZvXgPDBY5PEvkyZ0XXX+nFZDhtvIDSS3a3zINPymAjwVV1F sYAMLqMN+zTqtVNd/rHkWTRPuroAwVboW/ReOqyZMv6bRdffXcN0EVh0l1LAU1yd ptfb7tKA6rqYgKudNZatbrWNs+bJ7F+4d/bZCVEh+ZtdCZpQSKq0YwUJ6O2a57uN PVp89NVw35o/g91WbxwsEUsqblLVaZ5wXfa1048hPvU0LQwc9VkCIGJntcyXjrTT 3zDDMFvNVzBer9y453SFP+yO9cxzhiYP4aTIs+S0+BvdmjZRd+0= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org