$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: odVsthTrL3sQkQbiCP0ibkwHNE2svwtI1ORnLk8gIco= Subject key identifier: EF:B7:D9:0D:6D:6F:CE:93:8E:11:47:4B:30:48:0A:1E:2C:A7:32:1C Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 38550603840FBACDED8D92B35116C5C0D15EF052 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 01E9 Signing time: Fri 22 Nov 2024 03:03:29 +0000 Manifest this update: Fri 22 Nov 2024 02:58:29 +0000 Manifest next update: Mon 25 Nov 2024 11:34:29 +0000 Files and hashes: 1: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: xHYq3sjEu/VOTUrgvRIFg3jBYhFMGsssIDy1Dx1KlNY=) 2: 3130332e3137302e33332e302f32342d3234203d3e20313432333631.roa (hash: IA7p71+DWlfg2TSnqFnnLYMstbrcym3xiITP/eIVvnw=) 3: 3130332e3137302e33322e302f32332d3233203d3e20313432333631.roa (hash: n4gZ9p5wLBIS47gt9MqDRrCEOzm6EJkO8o6V+1DkaAA=) 4: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: znbFTyEeqFneheEHyCtU6cueBD9RCgsxVLoKXujAquo=) 5: 3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa (hash: SR6dBqPFpfPa5512o9ewxCNXmByH0nhHUznnar/SHSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:55:06:03:84:0f:ba:cd:ed:8d:92:b3:51:16:c5:c0:d1:5e:f0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: Nov 22 02:58:29 2024 GMT Not After : Nov 25 11:34:29 2024 GMT Subject: CN=EFB7D90D6D6FCE938E11474B30480A1E2CA7321C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:7b:6a:18:03:cd:de:1e:7f:c4:9b:95:35: 40:7e:1f:cc:6e:a1:cb:35:b8:0b:63:f6:8d:bc:7f: a0:5e:9e:3e:d7:4a:08:b3:5c:5e:7c:7f:26:1e:4a: af:10:2a:7e:45:f0:4a:1e:c6:3e:f4:09:c0:18:e8: 9f:9d:11:e7:61:ce:4e:b9:1a:6d:92:35:89:9c:a0: ea:a6:ce:55:06:e2:21:21:8b:fa:3e:ea:e7:dc:57: 2a:e9:21:2d:58:10:13:18:3f:f1:e1:74:2e:48:0e: db:95:f3:8b:27:fe:47:9a:aa:76:fe:9d:d9:03:c3: e2:a3:be:34:f8:46:40:86:82:9c:ab:d1:45:43:4a: d1:29:2e:27:ae:a1:89:8f:19:5b:2a:28:2e:43:58: 8b:e7:73:8a:47:10:4a:68:22:27:b1:24:4d:95:96: 99:af:8d:28:31:0f:14:47:21:43:e0:da:22:d0:b2: 9b:81:13:49:ee:7a:38:4d:27:e3:15:f8:a6:d3:21: 10:67:4f:fa:54:33:1f:eb:97:0c:a7:55:b7:fc:e4: e9:86:7a:37:89:95:26:86:4f:f8:9a:38:9d:f0:73: 7f:c5:e4:86:ea:a1:3e:c3:a3:b8:d0:6a:db:2a:bd: 75:b0:42:47:b6:0c:04:86:c8:de:fb:80:2e:20:b7: 6f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B7:D9:0D:6D:6F:CE:93:8E:11:47:4B:30:48:0A:1E:2C:A7:32:1C X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8c:a3:f5:a3:95:1b:99:98:d1:15:99:a8:2b:44:bc:4c:38: b8:28:af:e0:6e:40:2c:34:98:8c:d6:86:bc:bf:2e:62:3e:35: 3c:78:78:27:e5:de:81:a9:50:0f:53:9b:cb:84:ff:bc:d2:fb: 83:c5:42:80:1d:1a:b1:40:b3:31:29:0f:be:d5:e5:56:6a:8b: ab:c7:d0:d0:63:f9:ba:1d:21:f2:71:93:e4:15:08:eb:3f:71: 4f:49:da:74:e2:14:ff:6a:d4:9e:14:8e:9c:1f:08:79:3f:7c: 9d:fa:e1:44:dd:23:2b:66:bb:de:fd:07:d0:97:17:c2:26:af: 55:62:87:62:67:d5:35:76:0e:db:72:50:97:1e:e3:cd:81:13: 70:b0:21:6d:5b:63:d3:27:23:d4:a9:19:9d:cd:fa:4c:b3:76: 00:cc:50:2e:52:be:35:df:f2:1a:c8:1d:c7:de:4c:41:bb:ae: 5a:6a:61:ca:ad:53:dd:0a:3f:a8:25:c3:f3:3e:1b:51:d9:67: e7:ea:51:51:ba:40:03:04:ed:8e:e0:d3:ea:ba:f7:6f:c0:67: a8:a5:e1:4c:e9:64:e7:3a:2d:30:0f:b1:f9:ab:84:23:53:c2: 7b:a8:06:fc:ae:46:5f:fb:82:c8:71:14:97:4c:44:9b:a8:3a: 64:8f:28:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFUGA4QPus3tjZKzURbFwNFe8FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNDExMjIwMjU4MjlaFw0yNDExMjUxMTM0MjlaMDMxMTAvBgNV BAMTKEVGQjdEOTBENkQ2RkNFOTM4RTExNDc0QjMwNDgwQTFFMkNBNzMyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDntqGAPN3h5/xJuVNUB+H8xu ocs1uAtj9o28f6Benj7XSgizXF58fyYeSq8QKn5F8Eoexj70CcAY6J+dEedhzk65 Gm2SNYmcoOqmzlUG4iEhi/o+6ufcVyrpIS1YEBMYP/HhdC5IDtuV84sn/keaqnb+ ndkDw+KjvjT4RkCGgpyr0UVDStEpLieuoYmPGVsqKC5DWIvnc4pHEEpoIiexJE2V lpmvjSgxDxRHIUPg2iLQspuBE0nuejhNJ+MV+KbTIRBnT/pUMx/rlwynVbf85OmG ejeJlSaGT/iaOJ3wc3/F5IbqoT7Do7jQatsqvXWwQke2DASGyN77gC4gt293AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU77fZDW1vzpOOEUdLMEgKHiynMhwwHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2Mo/WjlRuZmNEVmagrRLxMOLgor+BuQCw0 mIzWhry/LmI+NTx4eCfl3oGpUA9Tm8uE/7zS+4PFQoAdGrFAszEpD77V5VZqi6vH 0NBj+bodIfJxk+QVCOs/cU9J2nTiFP9q1J4UjpwfCHk/fJ364UTdIytmu979B9CX F8Imr1Vih2Jn1TV2DttyUJce482BE3CwIW1bY9MnI9SpGZ3N+kyzdgDMUC5SvjXf 8hrIHcfeTEG7rlpqYcqtU90KP6glw/M+G1HZZ+fqUVG6QAME7Y7g0+q692/AZ6il 4UzpZOc6LTAPsfmrhCNTwnuoBvyuRl/7gshxFJdMRJuoOmSPKL8= -----END CERTIFICATE-----Generated at Fri Nov 22 03:51:02 2024 by rpki-client on console-fra.rpki-client.org