$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: iPWx9z5Yn9jJdhfbjFb9vLUA/l0UV/DFErVSkOP2Lds= Subject key identifier: 51:72:C4:C4:EE:68:78:05:52:B1:76:B0:E6:49:CF:8E:D1:38:30:B0 Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 3C755460E0984BC50098C8ED3A8F9BE991DFB61B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: 43 Signing time: Wed 20 Nov 2024 18:21:04 +0000 Manifest this update: Wed 20 Nov 2024 18:16:04 +0000 Manifest next update: Sun 24 Nov 2024 05:19:04 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: LkrFwqOPpzs5zV0cqzRbshMZbX2t2BtkJfrTGNSvUxE=) 2: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: BfBDrjW6+lr+uRZ7WmCC+rxMtSoSO5j89DFC47ia1yg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:75:54:60:e0:98:4b:c5:00:98:c8:ed:3a:8f:9b:e9:91:df:b6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Nov 20 18:16:04 2024 GMT Not After : Nov 24 05:19:04 2024 GMT Subject: CN=5172C4C4EE68780552B176B0E649CF8ED13830B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:31:ca:cf:b0:3a:9c:ef:61:14:35:6c:72: c1:79:c3:ef:86:93:fb:7a:ae:23:a9:ce:6e:1a:cb: 52:f5:17:a6:76:0b:b2:64:d2:1e:01:e4:7d:18:51: 4c:be:be:c0:7e:62:b4:85:2f:a3:4e:d8:1a:1f:0a: 59:52:63:ee:6b:55:de:52:61:fb:ee:b1:aa:02:b8: 5d:25:31:5e:e7:3f:0b:97:68:19:0b:dc:79:c2:6c: 9f:43:85:75:ce:a0:a6:58:09:c6:f1:ff:86:96:13: 86:51:b8:ac:ba:47:3d:be:1e:1e:ea:fb:8a:00:75: a2:53:76:c1:ae:23:a0:25:53:ef:c3:34:a1:f5:32: 5f:f5:ca:b3:84:09:63:ab:a3:30:19:53:a9:08:60: bd:20:ff:cb:df:3e:89:15:8c:47:35:42:cd:0e:02: 1c:9d:14:a9:e7:f9:91:4c:ad:30:29:6e:7b:2e:d2: a3:e6:b4:56:c4:3e:1b:c5:f0:df:c1:5b:dd:a2:13: 13:f9:fa:30:b3:91:0d:3d:6b:a0:da:54:e5:9d:20: d3:ac:d5:80:1f:42:ae:ca:16:36:15:9b:92:d2:50: bd:e3:07:23:f3:bf:1a:90:b3:da:1c:51:b9:f4:e1: 82:c8:fe:3b:3b:71:cb:3b:c8:a9:4a:1c:ea:fb:fd: 26:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:72:C4:C4:EE:68:78:05:52:B1:76:B0:E6:49:CF:8E:D1:38:30:B0 X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:88:b8:12:a1:a5:35:3a:69:3a:d3:5f:e5:4c:71:45:1e:d7: c7:71:54:0d:ef:40:5c:7a:16:30:e4:73:14:29:81:0f:3b:ec: 49:c8:a7:81:f4:0e:c8:9a:24:5c:b2:ca:ac:2e:92:8c:4c:e1: 2b:e7:1d:81:64:7d:49:d8:cc:3a:d9:d0:6e:22:28:a3:45:80: 44:73:1e:b5:45:11:b0:60:47:14:51:2b:8f:c1:3e:ef:19:54: 91:01:91:96:36:f4:5e:95:6b:59:ec:03:90:7f:6e:38:ab:52: 2b:57:ff:ad:c8:31:d7:f3:6c:1a:ee:21:63:48:bd:50:e0:ab: 36:cf:51:db:39:2f:3d:0b:fb:6b:2d:b1:1c:1e:53:4e:06:e5: aa:21:3f:a1:3c:32:8d:12:bd:6d:c3:67:a7:10:0d:4e:88:7e: 0b:7d:94:39:01:1d:95:d3:87:35:81:9c:a1:45:c7:ec:53:86: a4:75:ea:48:6d:d5:26:3c:0e:d5:a7:62:59:d6:89:35:36:1c: 67:c9:53:c3:bc:5a:64:2a:f0:d6:23:a6:6e:07:b9:98:ec:a0: 35:51:d8:0f:4e:70:72:e0:1d:16:c9:eb:7b:2b:7f:8b:c9:1e: ea:1f:05:21:46:94:a5:2d:2d:48:b5:3d:8f:0f:78:03:39:3b: b7:cb:8e:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPHVUYOCYS8UAmMjtOo+b6ZHfthswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNDExMjAxODE2MDRaFw0yNDExMjQwNTE5MDRaMDMxMTAvBgNV BAMTKDUxNzJDNEM0RUU2ODc4MDU1MkIxNzZCMEU2NDlDRjhFRDEzODMwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhDHKz7A6nO9hFDVscsF5w++G k/t6riOpzm4ay1L1F6Z2C7Jk0h4B5H0YUUy+vsB+YrSFL6NO2BofCllSY+5rVd5S YfvusaoCuF0lMV7nPwuXaBkL3HnCbJ9DhXXOoKZYCcbx/4aWE4ZRuKy6Rz2+Hh7q +4oAdaJTdsGuI6AlU+/DNKH1Ml/1yrOECWOrozAZU6kIYL0g/8vfPokVjEc1Qs0O AhydFKnn+ZFMrTApbnsu0qPmtFbEPhvF8N/BW92iExP5+jCzkQ09a6DaVOWdINOs 1YAfQq7KFjYVm5LSUL3jByPzvxqQs9ocUbn04YLI/js7ccs7yKlKHOr7/Sa3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUXLExO5oeAVSsXaw5knPjtE4MLAwHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGIuBKhpTU6aTrTX+VMcUUe18dxVA3vQFx6 FjDkcxQpgQ877EnIp4H0DsiaJFyyyqwukoxM4SvnHYFkfUnYzDrZ0G4iKKNFgERz HrVFEbBgRxRRK4/BPu8ZVJEBkZY29F6Va1nsA5B/bjirUitX/63IMdfzbBruIWNI vVDgqzbPUds5Lz0L+2stsRweU04G5aohP6E8Mo0SvW3DZ6cQDU6Ifgt9lDkBHZXT hzWBnKFFx+xThqR16kht1SY8DtWnYlnWiTU2HGfJU8O8WmQq8NYjpm4HuZjsoDVR 2A9OcHLgHRbJ63srf4vJHuofBSFGlKUtLUi1PY8PeAM5O7fLjgI= -----END CERTIFICATE-----Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org