$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json) Hash identifier: sAxoFV/aF/lpoIP8neDt2dtihFHlFSBt6fSY7byTbkY= Subject key identifier: 44:C1:47:84:C2:95:70:0D:C4:50:0C:3F:D7:E8:8E:FA:A8:2A:08:7E Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Certificate serial: 1E2D639CEBBA6C536F122AE5B08E1CBFAF9DF56D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft Manifest number: B7 Signing time: Fri 22 Nov 2024 00:01:53 +0000 Manifest this update: Thu 21 Nov 2024 23:56:53 +0000 Manifest next update: Mon 25 Nov 2024 08:08:53 +0000 Files and hashes: 1: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: /ZMRp/k5nyna7+OV16C6wftA6bpNJZQ65/zvr/LPUR4=) 2: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: zSZcK2ezC0OwcIoirCwbw8lg34i7IQmCM/PoAclIbTc=) 3: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: /A4c0t6Y98cg2lIq++5SQTiV0ECjCxcXz8yePuUy48U=) 4: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 6BP6Wg9K2CydFqVw55iYNyq05rAdRjLr1zk9t4b5GKw=) 5: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: up0+AVH2mt4JJLCc85niO4amdyT9S3dD9wY5K6BLXkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2d:63:9c:eb:ba:6c:53:6f:12:2a:e5:b0:8e:1c:bf:af:9d:f5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Validity Not Before: Nov 21 23:56:53 2024 GMT Not After : Nov 25 08:08:53 2024 GMT Subject: CN=44C14784C295700DC4500C3FD7E88EFAA82A087E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:90:3d:b4:4b:75:54:c1:76:80:cc:9e:3f: e2:78:ee:ef:d3:df:44:ee:ea:94:af:7d:4f:25:7d: 78:0e:7c:7b:72:dc:13:ff:b3:62:78:01:9f:a5:ee: 32:bf:9e:a9:44:7b:4a:c8:bc:61:16:71:02:76:b3: c1:43:b0:d6:be:45:80:b4:62:8b:2b:cb:17:48:f1: 13:91:c0:88:dd:4c:c1:d6:1d:21:f2:3e:ec:e8:28: 58:4c:16:bc:73:51:61:73:4d:4b:32:f5:e1:db:c3: ce:af:94:7a:ce:bd:8c:88:0a:5d:67:4d:b9:ce:10: 65:33:96:04:4a:41:a5:03:5d:a1:fc:63:33:0d:90: d2:fd:b7:66:00:a2:91:c8:98:ed:88:95:37:a2:cf: b9:66:b2:39:af:7c:43:48:6a:88:2e:61:de:20:05: 2c:a4:46:c5:06:48:c6:77:37:62:7e:0e:22:42:15: 8e:c2:c7:7b:83:f4:26:f4:cc:28:f9:d7:95:d2:23: 10:54:8f:26:3c:c5:db:46:c7:e3:e9:66:d5:d5:88: f6:8b:9b:86:f2:30:3b:65:1a:30:07:84:a6:a8:0e: 9d:a5:84:14:43:b0:40:41:21:5b:e2:a9:d6:85:54: 77:87:ce:f2:c6:7f:14:f5:80:ba:07:d1:40:df:64: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C1:47:84:C2:95:70:0D:C4:50:0C:3F:D7:E8:8E:FA:A8:2A:08:7E X509v3 Authority Key Identifier: keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ba:bc:cc:61:82:3a:45:cf:8e:4e:ce:68:95:4f:b7:91:66: 97:6b:44:75:25:82:9c:34:82:2b:46:14:fe:37:30:f9:24:29: d5:4e:b6:90:c1:25:17:04:69:b1:e7:c8:9b:a0:50:8c:bb:49: 1b:92:33:7d:bf:89:5d:df:ab:8a:d7:c6:5d:9a:7d:e7:b2:66: e6:9f:f7:8f:37:8c:83:3a:e3:f8:28:65:da:c8:23:67:b1:a6: 2f:7f:53:8a:89:75:f7:32:84:6e:92:55:f8:76:81:9b:b2:5f: e5:89:48:1e:d7:97:27:fe:47:8a:54:8a:b2:0e:41:f7:43:94: ad:51:0a:02:e4:52:95:96:05:c9:de:51:3f:b7:2a:db:08:c7: a6:b0:9d:f7:63:e1:7f:b3:86:36:22:38:4f:6e:a4:75:52:1a: c0:e8:d4:84:39:29:f1:65:17:f1:11:45:df:39:b7:b5:79:24: 01:cc:a0:26:a5:76:21:6e:64:0d:a0:9a:1b:15:ca:a4:e2:41: 3c:3f:d6:dc:fc:b9:6d:fc:c0:a3:7e:d5:8e:d5:be:16:90:e2: 07:bd:bf:93:bb:4b:ef:83:43:cd:8e:ee:9a:d9:54:8c:0f:58: e2:88:f5:c5:a1:f5:48:2f:5c:4b:13:00:1b:2b:cf:1b:30:de: e6:05:bd:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHi1jnOu6bFNvEirlsI4cv6+d9W0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RC N0UwQkEwQzAeFw0yNDExMjEyMzU2NTNaFw0yNDExMjUwODA4NTNaMDMxMTAvBgNV BAMTKDQ0QzE0Nzg0QzI5NTcwMERDNDUwMEMzRkQ3RTg4RUZBQTgyQTA4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCpA9tEt1VMF2gMyeP+J47u/T 30Tu6pSvfU8lfXgOfHty3BP/s2J4AZ+l7jK/nqlEe0rIvGEWcQJ2s8FDsNa+RYC0 YosryxdI8RORwIjdTMHWHSHyPuzoKFhMFrxzUWFzTUsy9eHbw86vlHrOvYyICl1n TbnOEGUzlgRKQaUDXaH8YzMNkNL9t2YAopHImO2IlTeiz7lmsjmvfENIaoguYd4g BSykRsUGSMZ3N2J+DiJCFY7Cx3uD9Cb0zCj515XSIxBUjyY8xdtGx+PpZtXViPaL m4byMDtlGjAHhKaoDp2lhBRDsEBBIVviqdaFVHeHzvLGfxT1gLoH0UDfZMINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURMFHhMKVcA3EUAw/1+iO+qgqCH4wHwYDVR0j BBgwFoAUDOHhEUbiUdDNUr2DehoKzbfgugwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMC8wQ0UxRTExMTQ2 RTI1MUQwQ0Q1MkJEODM3QTFBMEFDREI3RTBCQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RCN0Uw QkEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBB Q0RCN0UwQkEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEK6vMxhgjpFz45OzmiVT7eRZpdrRHUlgpw0 gitGFP43MPkkKdVOtpDBJRcEabHnyJugUIy7SRuSM32/iV3fq4rXxl2afeeyZuaf 9483jIM64/goZdrII2expi9/U4qJdfcyhG6SVfh2gZuyX+WJSB7Xlyf+R4pUirIO QfdDlK1RCgLkUpWWBcneUT+3KtsIx6awnfdj4X+zhjYiOE9upHVSGsDo1IQ5KfFl F/ERRd85t7V5JAHMoCaldiFuZA2gmhsVyqTiQTw/1tz8uW38wKN+1Y7VvhaQ4ge9 v5O7S++DQ82O7prZVIwPWOKI9cWh9UgvXEsTABsrzxsw3uYFvTw= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org