$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json) Hash identifier: pEVzaGck+RjGjSVHwR0P1WfNZViW5qwOc5YWD2La+G0= Subject key identifier: 42:BC:A0:ED:43:B2:9A:F4:3F:D2:09:9B:9C:10:9B:B4:88:D0:64:BE Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 0EA0FF7F6ED42772464E3AA2E9D0894AD8D64242 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft Manifest number: 21 Signing time: Sun 24 Nov 2024 16:21:24 +0000 Manifest this update: Sun 24 Nov 2024 16:16:24 +0000 Manifest next update: Thu 28 Nov 2024 00:08:24 +0000 Files and hashes: 1: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: dlaibkgS6XxGVgp3Edjs1R1E//rBWjQ8t35DFq74m5s=) 2: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: bRxB1/XYWBuRDsFTyowa+aqFQkf4scGUR4oQ2TVJrXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a0:ff:7f:6e:d4:27:72:46:4e:3a:a2:e9:d0:89:4a:d8:d6:42:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Nov 24 16:16:24 2024 GMT Not After : Nov 28 00:08:24 2024 GMT Subject: CN=42BCA0ED43B29AF43FD2099B9C109BB488D064BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:96:2e:e2:ad:f2:9e:55:07:92:49:2c:4f:5f: 74:d7:71:72:8c:60:2a:a7:b0:b3:cd:82:59:ab:9d: c2:b3:1a:ed:95:1f:8f:e5:52:e9:f1:b1:e9:dd:a8: 47:1f:a7:4f:0c:4d:17:5f:3d:fa:2f:18:bd:5c:c4: 9b:9f:6f:27:23:e2:1e:5a:a8:8c:26:1c:31:cf:62: 6a:c3:d7:7c:91:2c:ec:4e:3f:8a:8d:ee:af:32:ba: e6:60:2e:f4:ea:c4:47:13:db:43:9e:b0:f7:ba:bd: ec:03:b6:40:15:1a:fa:a4:91:aa:47:12:e5:ce:41: 88:6a:04:69:b9:d7:f1:0c:3b:b6:3d:f7:93:cd:74: 5f:a6:9b:51:3b:46:21:64:38:33:65:cd:65:ab:d0: 6f:46:76:29:8a:2d:cf:1f:88:95:58:81:1e:e8:38: 7e:e9:da:3c:cf:52:19:f5:83:ce:1c:e5:39:dc:1c: d9:4f:d8:6d:0f:43:6a:c4:7f:5e:67:74:62:38:50: 0f:24:76:f4:8c:d0:ba:50:d1:66:58:4c:aa:bc:db: de:fb:e7:cc:b7:cf:c8:ca:95:14:a0:43:5b:a5:bf: 46:74:c1:dd:4a:08:ec:a4:ae:7f:a1:88:86:65:8d: e4:f0:8c:54:1d:c0:52:2f:1d:fc:09:c2:76:91:7e: fa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BC:A0:ED:43:B2:9A:F4:3F:D2:09:9B:9C:10:9B:B4:88:D0:64:BE X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:77:26:ee:1d:3d:f4:3e:cf:c3:df:60:89:bf:a3:53:1b:cf: 03:01:7f:3e:b3:e9:e0:51:74:8f:9a:35:db:b3:2b:89:13:9f: 0c:d3:54:f7:16:17:37:c8:a9:94:cf:20:75:c7:32:3a:25:a3: b2:d2:dc:59:51:bd:3a:b2:40:7e:b9:a0:98:ce:ca:08:0b:e8: 75:e1:4f:30:50:e5:c9:da:3e:11:53:6a:c1:e3:ea:3e:b2:87: 37:d5:ce:03:5c:d5:dd:2e:3f:91:5e:9f:04:54:24:23:2b:aa: 0a:7c:5a:43:03:b4:c9:d7:aa:8a:09:8f:d1:c1:88:ac:3c:18: 77:10:39:c6:9b:eb:bf:51:43:9e:7b:7b:52:b4:0e:46:ca:f6: 34:fb:2c:54:9b:9e:00:f2:2f:ca:e7:32:6c:f1:f7:70:03:6f: c5:bf:95:44:66:55:27:3a:c6:38:57:ac:fa:bb:f1:77:d0:95: 02:a4:53:f0:44:e7:d9:65:7a:8d:d1:14:35:c0:64:69:a0:8b: ca:4a:e5:f9:ed:d2:dc:cb:ae:cc:73:56:23:fc:0d:ee:99:a1: 94:f7:4f:51:81:8c:7e:cd:fa:52:ba:7c:4c:5c:7e:1c:f7:6c: ae:fb:8c:24:7f:54:d4:da:c7:84:bb:59:75:4a:c2:d1:ae:30: 80:ad:c0:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqD/f27UJ3JGTjqi6dCJStjWQkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNDExMjQxNjE2MjRaFw0yNDExMjgwMDA4MjRaMDMxMTAvBgNV BAMTKDQyQkNBMEVENDNCMjlBRjQzRkQyMDk5QjlDMTA5QkI0ODhEMDY0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnli7irfKeVQeSSSxPX3TXcXKM YCqnsLPNglmrncKzGu2VH4/lUunxsendqEcfp08MTRdfPfovGL1cxJufbycj4h5a qIwmHDHPYmrD13yRLOxOP4qN7q8yuuZgLvTqxEcT20OesPe6vewDtkAVGvqkkapH EuXOQYhqBGm51/EMO7Y995PNdF+mm1E7RiFkODNlzWWr0G9GdimKLc8fiJVYgR7o OH7p2jzPUhn1g84c5TncHNlP2G0PQ2rEf15ndGI4UA8kdvSM0LpQ0WZYTKq82977 58y3z8jKlRSgQ1ulv0Z0wd1KCOykrn+hiIZljeTwjFQdwFIvHfwJwnaRfvonAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQryg7UOymvQ/0gmbnBCbtIjQZL4wHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMz NTEyNTJBOTcxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJp3Ju4dPfQ+z8PfYIm/o1MbzwMBfz6z6eBR dI+aNduzK4kTnwzTVPcWFzfIqZTPIHXHMjolo7LS3FlRvTqyQH65oJjOyggL6HXh TzBQ5cnaPhFTasHj6j6yhzfVzgNc1d0uP5FenwRUJCMrqgp8WkMDtMnXqooJj9HB iKw8GHcQOcab679RQ557e1K0DkbK9jT7LFSbngDyL8rnMmzx93ADb8W/lURmVSc6 xjhXrPq78XfQlQKkU/BE59lleo3RFDXAZGmgi8pK5fnt0tzLrsxzViP8De6ZoZT3 T1GBjH7N+lK6fExcfhz3bK77jCR/VNTax4S7WXVKwtGuMICtwFc= -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org