$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft File: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft (raw, json) Hash identifier: 1aFFE+xjLWapFyd3H99dg+hN4twd4Bx0f4ZxmK077VU= Subject key identifier: AC:F8:7F:23:2B:77:B6:A9:68:C6:7A:7F:75:43:A1:9F:B4:63:3A:F0 Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 Certificate issuer: /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Certificate serial: 6949D8DDC04445A91B472959378DBEBCEB1DB8A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft Manifest number: 0177 Signing time: Fri 22 Nov 2024 00:02:09 +0000 Manifest this update: Thu 21 Nov 2024 23:57:09 +0000 Manifest next update: Mon 25 Nov 2024 02:49:09 +0000 Files and hashes: 1: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: oJEFqaMFMo78kr1npS3ZjHZL2rtf/xk2Bseql9PkyRU=) 2: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: YhTrW66adFthR0IefdRJ8E51+cDhVzxqdg4nPy2KBzw=) 3: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: t8aG55RbMcqjxnaTHmZPqaZDl4lrVMlqNWSnzULjb0A=) 4: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl (hash: 1uTdZKI0T//htFeA4MEX3Qasqlve2cfk2gaKuIoqp9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:49:d8:dd:c0:44:45:a9:1b:47:29:59:37:8d:be:bc:eb:1d:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Validity Not Before: Nov 21 23:57:09 2024 GMT Not After : Nov 25 02:49:09 2024 GMT Subject: CN=ACF87F232B77B6A968C67A7F7543A19FB4633AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:42:66:2c:bb:a0:d3:12:6f:e1:73:59:ed:f5: 43:92:8f:f7:71:d7:3d:64:75:7c:93:38:b5:cf:36: 64:72:6c:b5:04:cd:0c:84:77:ee:b3:af:2d:fc:87: b2:d6:68:55:7b:d9:16:f4:69:b3:d0:35:cf:40:b7: e1:4d:b9:3a:bd:9f:9c:97:fc:95:d0:c1:5e:21:4b: 11:0d:dc:07:2d:3c:0e:40:1d:a7:29:4c:5b:93:99: 26:7e:ca:36:07:41:35:2d:a2:cf:74:1f:09:ee:df: 11:d9:da:22:10:f8:88:46:cd:5e:71:ab:8e:24:e6: f3:19:9f:c6:7c:57:52:07:cc:92:d7:f1:92:44:c4: b4:60:2e:be:59:84:10:d0:f9:45:ee:bc:1c:92:ff: 34:ca:48:2a:90:78:37:02:d3:c8:c2:ca:17:32:d3: ff:83:83:35:69:12:46:33:3d:16:14:88:eb:d0:44: 8b:16:c3:9f:f4:8f:2f:4b:e9:43:bf:51:af:34:be: 26:19:c7:bb:11:92:6e:40:ec:1e:60:f9:2b:1f:88: d4:ac:f6:dd:0e:9d:fa:f8:e2:4d:f9:66:58:31:f6: 90:e1:c0:7f:5f:6f:d2:90:0a:d5:8b:22:76:fa:74: 7e:55:52:ee:39:9c:e6:fe:5a:79:ff:3e:6c:d8:aa: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F8:7F:23:2B:77:B6:A9:68:C6:7A:7F:75:43:A1:9F:B4:63:3A:F0 X509v3 Authority Key Identifier: keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:84:39:a1:f8:48:2f:ba:7d:09:12:da:2e:73:96:3e:e3:dc: 9b:0e:51:4a:aa:8b:a3:be:7b:49:fb:40:db:82:49:29:14:fb: c8:16:06:2b:b9:9a:36:c7:37:5d:b6:6b:2d:f9:a0:f3:cc:25: 39:58:24:8f:22:ad:f5:ae:69:a5:ce:a8:9f:eb:53:fa:ae:d8: 68:c7:f8:26:01:44:93:ce:7d:5d:e7:78:57:f5:f6:c9:82:f5: e0:60:8c:fc:a0:10:b9:4a:c2:2f:a7:1b:d0:ae:0b:67:1c:44: c5:65:77:d2:40:ba:0e:6f:67:94:8b:83:b0:36:80:96:5c:dd: 19:dc:ef:3f:80:33:b2:94:ee:0c:1f:ad:7c:56:95:7a:2b:b5: 8c:60:e8:8b:33:18:4a:f1:e7:49:f2:f8:0f:7a:c7:1a:eb:30: 69:ca:a7:13:53:0d:08:51:4c:52:98:4a:69:80:2f:fc:37:97: 7c:0a:a6:db:12:b1:df:d8:0f:0c:9b:14:8c:2b:d2:30:10:bd: cf:d7:80:56:c6:1d:78:e7:51:f9:81:cf:cd:9b:67:19:fb:89: 5b:7d:b9:4e:47:f5:d7:86:41:fe:86:4e:f3:31:7a:07:41:1d: bc:d9:57:4c:e1:ad:db:e3:ab:20:71:5b:05:05:d1:32:6b:8e: 52:12:51:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUnY3cBERakbRylZN42+vOsduKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5 ODI1NERCMjAeFw0yNDExMjEyMzU3MDlaFw0yNDExMjUwMjQ5MDlaMDMxMTAvBgNV BAMTKEFDRjg3RjIzMkI3N0I2QTk2OEM2N0E3Rjc1NDNBMTlGQjQ2MzNBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnQmYsu6DTEm/hc1nt9UOSj/dx 1z1kdXyTOLXPNmRybLUEzQyEd+6zry38h7LWaFV72Rb0abPQNc9At+FNuTq9n5yX /JXQwV4hSxEN3ActPA5AHacpTFuTmSZ+yjYHQTUtos90Hwnu3xHZ2iIQ+IhGzV5x q44k5vMZn8Z8V1IHzJLX8ZJExLRgLr5ZhBDQ+UXuvByS/zTKSCqQeDcC08jCyhcy 0/+DgzVpEkYzPRYUiOvQRIsWw5/0jy9L6UO/Ua80viYZx7sRkm5A7B5g+SsfiNSs 9t0Onfr44k35Zlgx9pDhwH9fb9KQCtWLInb6dH5VUu45nOb+Wnn/PmzYqoPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrPh/Iyt3tqloxnp/dUOhn7RjOvAwHwYDVR0j BBgwFoAUtel7cfr6JP+PorGjNVjYCpglTbIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWVkMDk4Yi00OWIxLTRmNTMtYjc1YS0yNzNlMTFjMjUxNDkvMC9CNUU5N0I3MUZB RkEyNEZGOEZBMkIxQTMzNTU4RDgwQTk4MjU0REIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5ODI1 NERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4 MEE5ODI1NERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyEOaH4SC+6fQkS2i5zlj7j3JsOUUqqi6O+ e0n7QNuCSSkU+8gWBiu5mjbHN122ay35oPPMJTlYJI8irfWuaaXOqJ/rU/qu2GjH +CYBRJPOfV3neFf19smC9eBgjPygELlKwi+nG9CuC2ccRMVld9JAug5vZ5SLg7A2 gJZc3Rnc7z+AM7KU7gwfrXxWlXortYxg6IszGErx50ny+A96xxrrMGnKpxNTDQhR TFKYSmmAL/w3l3wKptsSsd/YDwybFIwr0jAQvc/XgFbGHXjnUfmBz82bZxn7iVt9 uU5H9deGQf6GTvMxegdBHbzZV0zhrdvjqyBxWwUF0TJrjlISUY8= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org