$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: ShL0U9jA/8WcPag/wQzIViKpb3Y/jAOnavF+dopA5X4= Subject key identifier: 1C:C3:1B:C8:D6:EB:4D:CF:42:B2:F5:16:E2:56:E8:69:B0:B3:2D:EA Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 21DBC6E291BE094E0D72309A74B6D656AF9401A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 0112 Signing time: Fri 22 Nov 2024 15:10:37 +0000 Manifest this update: Fri 22 Nov 2024 15:05:37 +0000 Manifest next update: Mon 25 Nov 2024 20:33:37 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: X/RSOXUq7KW+7LVhNjqX4Q2vYkD2wUSDkeHP3hdjPZw=) 2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: L1nP2+pxchPIkSU0l3/nlJDDpNPW8AazHmyGzOWryzQ=) 3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: K34tzv4In5TfTpgYNTuYA3PKN9jOsj6OuQuov+kvvEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:db:c6:e2:91:be:09:4e:0d:72:30:9a:74:b6:d6:56:af:94:01:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Nov 22 15:05:37 2024 GMT Not After : Nov 25 20:33:37 2024 GMT Subject: CN=1CC31BC8D6EB4DCF42B2F516E256E869B0B32DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:0a:7b:c0:3a:62:77:cf:60:b5:af:1e:34: 56:2a:89:02:2e:22:44:a4:ee:a4:c8:34:eb:8c:1d: 5d:c2:54:a9:21:af:f3:78:b5:3a:53:b1:ba:a3:69: b7:2d:33:0f:e0:f2:f9:9c:f0:43:98:c3:aa:17:fa: 5b:58:70:75:3e:e4:6a:49:eb:35:22:04:47:e9:80: 82:3c:96:d2:72:cb:f0:2f:92:51:af:77:c6:0b:29: 4d:08:c7:93:d7:78:30:98:ce:b3:3b:97:91:e1:76: 43:4f:6d:b8:58:1b:a5:f4:f0:4b:b7:da:24:75:a5: 68:fa:b0:95:db:20:e6:e6:bd:16:ee:db:a1:c0:36: 7a:9c:fc:9b:ef:75:88:f5:f0:1d:06:8d:9a:64:ee: 57:43:55:21:27:a7:5d:95:58:8c:2f:79:b7:a0:62: fb:51:2a:ce:17:c8:b7:46:bc:63:44:4b:8d:53:e5: cb:d0:b5:3e:a9:f5:3e:8b:f7:f6:17:b7:bc:9e:75: aa:ae:f5:06:12:d5:13:7e:24:ba:97:bc:7a:aa:1d: 03:83:af:b4:76:be:95:17:cb:f1:8b:ae:ab:4c:e7: 98:3c:1c:bd:fd:35:d1:9d:8b:38:7f:0e:16:40:85: 4a:e3:c4:15:11:0f:f5:71:bb:3e:a1:c1:8d:fa:8b: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C3:1B:C8:D6:EB:4D:CF:42:B2:F5:16:E2:56:E8:69:B0:B3:2D:EA X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:66:6d:dd:62:95:da:7f:da:9f:f3:43:d1:68:50:f8:cc:83: c8:c4:2f:26:32:73:5d:91:70:f1:f2:6a:6d:61:c2:0b:f8:b3: b3:c2:af:44:46:53:16:90:4a:38:6b:a0:1c:0f:81:bf:3f:31: a4:46:e6:60:21:37:ab:04:31:67:39:9e:dd:0f:41:bc:52:14: ed:97:ea:8e:97:d5:40:f3:4c:42:64:b6:84:2d:05:f9:4e:13: da:50:f4:f5:8d:99:50:95:8a:18:9a:ba:fc:9c:0a:8b:33:5a: 7a:1c:1e:ea:fe:91:17:b1:10:a2:f4:88:e0:5a:36:67:46:23: df:a8:5e:7b:2b:2b:eb:0a:30:3c:cd:c6:f5:a3:1b:ab:55:45: c6:df:5a:63:df:0c:b1:f4:93:e7:1e:8c:08:ad:07:3c:0a:0b: 98:d6:0e:25:8e:68:a0:44:97:01:b2:db:05:2c:a6:db:b1:a3: 31:ea:42:22:8f:ff:a5:ac:7f:46:ad:11:40:e4:cb:99:7e:21: 06:ea:20:0f:31:cf:b8:8a:56:e9:39:54:db:c2:d5:2a:12:0e: 42:db:46:19:12:62:35:12:5d:ff:5a:60:14:2b:ae:b4:e4:80: 9a:71:7f:84:94:2b:07:8a:10:37:44:d3:7c:b9:a5:c1:8b:f7: 32:19:8e:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdvG4pG+CU4NcjCadLbWVq+UAaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNDExMjIxNTA1MzdaFw0yNDExMjUyMDMzMzdaMDMxMTAvBgNV BAMTKDFDQzMxQkM4RDZFQjREQ0Y0MkIyRjUxNkUyNTZFODY5QjBCMzJERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEngp7wDpid89gta8eNFYqiQIu IkSk7qTINOuMHV3CVKkhr/N4tTpTsbqjabctMw/g8vmc8EOYw6oX+ltYcHU+5GpJ 6zUiBEfpgII8ltJyy/AvklGvd8YLKU0Ix5PXeDCYzrM7l5HhdkNPbbhYG6X08Eu3 2iR1pWj6sJXbIObmvRbu26HANnqc/JvvdYj18B0GjZpk7ldDVSEnp12VWIwvebeg YvtRKs4XyLdGvGNES41T5cvQtT6p9T6L9/YXt7yedaqu9QYS1RN+JLqXvHqqHQOD r7R2vpUXy/GLrqtM55g8HL39NdGdizh/DhZAhUrjxBURD/Vxuz6hwY36i61jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHMMbyNbrTc9CsvUW4lboabCzLeowHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpmbd1ildp/2p/zQ9FoUPjMg8jELyYyc12R cPHyam1hwgv4s7PCr0RGUxaQSjhroBwPgb8/MaRG5mAhN6sEMWc5nt0PQbxSFO2X 6o6X1UDzTEJktoQtBflOE9pQ9PWNmVCVihiauvycCoszWnocHur+kRexEKL0iOBa NmdGI9+oXnsrK+sKMDzNxvWjG6tVRcbfWmPfDLH0k+cejAitBzwKC5jWDiWOaKBE lwGy2wUsptuxozHqQiKP/6Wsf0atEUDky5l+IQbqIA8xz7iKVuk5VNvC1SoSDkLb RhkSYjUSXf9aYBQrrrTkgJpxf4SUKweKEDdE03y5pcGL9zIZjgM= -----END CERTIFICATE-----Generated at Fri Nov 22 17:50:10 2024 by rpki-client on console-fra.rpki-client.org