$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: qGGj/ACUfLWQTEVgtAPq+zjq4dJpRJdsug0J4c2NjUI= Subject key identifier: 87:70:F0:C9:B8:8E:43:50:AD:E9:3D:FF:25:B9:76:CB:DE:E3:5C:17 Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 02BE26BB559A55A4DE59652925E4FFFDC1C2F9E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 0127 Signing time: Sun 24 Nov 2024 06:31:23 +0000 Manifest this update: Sun 24 Nov 2024 06:26:23 +0000 Manifest next update: Wed 27 Nov 2024 14:23:23 +0000 Files and hashes: 1: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: jsQ3cGwTb93KQ3+TKRABx0l0miUMW9JXJpLX/A8kMmk=) 2: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: f0ac0M2PbiDKp8geVIwoBY5AfaQ8tzoPZGu7yXlLrZw=) 3: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: msDDpIlttirzrCwl737ixXgByLjhqyNcxb8DUAIHxP0=) 4: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: WPA2QrUeZrym7GUv4/JaUTJ+UMPuBXVi0qNhIq7SGXo=) 5: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: nNuad8Yl+5DS79FNUcwd016nLmtr4jLQKn+fdMMMaDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:be:26:bb:55:9a:55:a4:de:59:65:29:25:e4:ff:fd:c1:c2:f9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Nov 24 06:26:23 2024 GMT Not After : Nov 27 14:23:23 2024 GMT Subject: CN=8770F0C9B88E4350ADE93DFF25B976CBDEE35C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a9:00:1a:55:83:0f:da:e9:f3:19:d7:ad:b1: 18:17:d6:5e:d0:51:33:91:16:39:29:b8:3e:74:8d: a2:0f:30:61:d9:e4:ac:7d:72:33:e3:fd:4d:eb:6c: 9c:7d:8d:de:1e:d1:a9:f3:df:76:bd:01:45:f0:cc: e6:83:75:ed:31:7d:09:76:b6:c7:a4:04:51:ea:10: c2:2f:1a:bd:0f:d1:91:e1:6e:c4:38:c8:b0:2a:a8: b2:3a:fc:90:41:08:b8:78:ab:f2:16:1b:71:92:a7: 9a:b7:68:cf:2a:3f:a4:8c:00:59:95:f8:d4:26:e5: 56:5b:9f:7e:b5:7b:8b:9e:a2:4e:ab:13:54:48:0c: 0a:01:7a:15:53:b8:82:6e:59:ac:15:f6:15:48:d9: 5b:bf:c8:3b:8a:5d:38:19:fe:10:c7:ad:70:e1:83: d1:2a:37:07:f5:56:1a:ed:2d:26:30:92:df:61:d6: c8:f7:3b:e6:59:fe:59:1e:84:a5:c1:e7:e6:42:60: b1:da:45:93:ce:92:15:a3:6f:d9:08:8f:6a:e4:3b: f9:32:bc:77:ec:fa:23:14:e5:0c:e1:ee:d8:aa:96: 87:0f:71:40:66:e8:da:36:a7:7a:af:db:ad:e6:8b: 2b:5b:be:71:09:c6:cf:a3:57:39:01:52:45:5e:e4: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:70:F0:C9:B8:8E:43:50:AD:E9:3D:FF:25:B9:76:CB:DE:E3:5C:17 X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7f:a6:60:e0:78:d8:fc:1b:2b:ff:b7:fb:e0:67:4a:fe:db: 3e:cf:7c:45:df:d9:05:6a:f6:60:69:03:78:89:0e:5c:ec:55: 44:2e:7b:c1:8f:7d:45:1f:6c:55:dc:dc:ec:1f:27:9c:c3:fb: 38:3a:81:8c:9e:0c:bc:b9:b8:f0:d8:e7:d8:f7:aa:8d:25:16: 36:bb:35:7e:89:ee:0a:0e:5b:b6:46:9e:dd:80:2a:47:86:54: 46:f6:1e:9d:b9:a7:02:b4:4b:d7:80:19:e3:1d:5f:58:d7:d1: 72:73:13:fb:1b:0d:aa:c7:f3:e3:e2:ba:2f:7f:ce:81:79:11: 4c:c3:0a:c9:29:04:a8:66:7b:9f:0d:02:0b:61:0c:e0:52:ad: 74:8a:78:9c:48:42:d5:ea:55:4e:80:23:a0:51:dd:4e:4a:df: 53:a2:f8:77:d4:77:61:23:27:df:d0:3e:bb:55:ee:dc:3a:44: da:62:20:dc:6e:a5:38:cb:59:6a:98:5d:97:3a:1a:8c:02:f7: be:04:3b:4c:24:23:55:95:68:28:42:5a:86:cd:52:16:ed:f9: 8a:66:88:f0:1b:15:68:b3:ae:a4:bd:a5:22:a2:1b:dd:05:53: db:8d:33:46:46:f5:75:d5:64:eb:69:5d:bf:ce:50:2c:6e:e2: 83:ba:95:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAr4mu1WaVaTeWWUpJeT//cHC+eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNDExMjQwNjI2MjNaFw0yNDExMjcxNDIzMjNaMDMxMTAvBgNV BAMTKDg3NzBGMEM5Qjg4RTQzNTBBREU5M0RGRjI1Qjk3NkNCREVFMzVDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUqQAaVYMP2unzGdetsRgX1l7Q UTORFjkpuD50jaIPMGHZ5Kx9cjPj/U3rbJx9jd4e0anz33a9AUXwzOaDde0xfQl2 tsekBFHqEMIvGr0P0ZHhbsQ4yLAqqLI6/JBBCLh4q/IWG3GSp5q3aM8qP6SMAFmV +NQm5VZbn361e4ueok6rE1RIDAoBehVTuIJuWawV9hVI2Vu/yDuKXTgZ/hDHrXDh g9EqNwf1VhrtLSYwkt9h1sj3O+ZZ/lkehKXB5+ZCYLHaRZPOkhWjb9kIj2rkO/ky vHfs+iMU5Qzh7tiqlocPcUBm6No2p3qv263miytbvnEJxs+jVzkBUkVe5AEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh3DwybiOQ1Ct6T3/Jbl2y97jXBcwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKd/pmDgeNj8Gyv/t/vgZ0r+2z7PfEXf2QVq 9mBpA3iJDlzsVUQue8GPfUUfbFXc3OwfJ5zD+zg6gYyeDLy5uPDY59j3qo0lFja7 NX6J7goOW7ZGnt2AKkeGVEb2Hp25pwK0S9eAGeMdX1jX0XJzE/sbDarH8+Piui9/ zoF5EUzDCskpBKhme58NAgthDOBSrXSKeJxIQtXqVU6AI6BR3U5K31Oi+HfUd2Ej J9/QPrtV7tw6RNpiINxupTjLWWqYXZc6GowC974EO0wkI1WVaChCWobNUhbt+Ypm iPAbFWizrqS9pSKiG90FU9uNM0ZG9XXVZOtpXb/OUCxu4oO6lY8= -----END CERTIFICATE-----Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org