$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: i+aA5+ZE8/ThP45/mV9U3F1DwTolUFUUxWeHkaPtUOY= Subject key identifier: 0E:25:33:A0:3E:16:C4:B1:97:72:D0:2F:81:27:91:E6:4D:85:BF:AB Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 3B4BA3F41FD90BB5CB1A84AAACA71B686FBE1E6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 0276 Signing time: Fri 22 Nov 2024 02:22:28 +0000 Manifest this update: Fri 22 Nov 2024 02:17:28 +0000 Manifest next update: Mon 25 Nov 2024 10:58:28 +0000 Files and hashes: 1: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: /mZXNu9+SQReAU7jMOiZ9/UmtltzHLxdMGIPnZIiib4=) 2: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: C+T8dBvggaTCEh5/1ll1reorawVQeZDheWzvM6XklTw=) 3: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: JCNF2AqA+9yLiNsXD2G46cVY5ai2iXqfYKsqNNx0uaI=) 4: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 18b0Gg5/45qsHWWMKCPhmvKnsrcZsZ/fmda1ZKbjIBk=) 5: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: kPaKCzbfTu6Kb7lNVFVqCdSC7iBWhY5WqPXZPd+gQ/s=) 6: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: FrHSWZownm6A7T3AZIhQ7h7eaOkOIIg4+temM4RnNJ4=) 7: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: IXux5BvkTuomSLlcfO/atgRq6FYsd2lPJysl7WoyMqY=) 8: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: Em18K+MRLc18yaX14YQfb1826gcDLLiSRdz/WlnRnnE=) 9: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: PFT/I5Pel+5sQuLcawrLr6PpqKDsdF0SndcUapiKZ68=) 10: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: 4N83F1FY8HtDNTq6OMGSFNYU4XLLuDbuSDKgz6IAVpA=) 11: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: ae4O0AtYse0yRkTQsAXYp92EBw2Zh6JfYntTF84Qbd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 10:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4b:a3:f4:1f:d9:0b:b5:cb:1a:84:aa:ac:a7:1b:68:6f:be:1e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Nov 22 02:17:28 2024 GMT Not After : Nov 25 10:58:28 2024 GMT Subject: CN=0E2533A03E16C4B19772D02F812791E64D85BFAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:9d:2a:29:6d:73:c9:d4:18:5c:11:94:8f: 6e:a8:c3:2d:47:ff:36:85:a3:0b:03:68:d2:48:6e: 7f:3e:40:b5:3b:34:14:d1:2a:72:c3:e1:49:af:ac: 88:1e:b9:20:ef:cd:81:64:4a:20:6e:13:04:bd:aa: 00:99:08:3f:bf:00:d6:0a:87:66:ef:e5:28:1f:ae: 3b:4a:76:a7:5d:6d:84:90:51:54:32:34:aa:2a:e3: dc:36:5a:5f:c5:51:bc:40:38:b7:04:f0:5e:6f:d1: 21:0d:79:05:6b:99:ac:5e:18:6b:55:2b:ad:f9:0d: 03:91:e6:56:1c:c6:a3:fe:92:9d:e2:b9:64:9e:c2: fa:52:d0:a8:ca:de:5c:d8:f3:e5:0f:6d:fe:83:cf: cf:39:4c:af:81:fa:b6:45:99:77:8e:31:2f:0a:7c: 0d:29:34:e4:b6:ec:7b:83:06:5e:58:13:7a:26:9e: ad:1b:d8:4e:c2:e1:c5:00:90:84:fc:48:75:2e:56: 95:e7:5b:e1:a3:8a:c5:70:cf:fa:ac:38:19:95:e3: 6b:1a:e8:7e:cb:ef:84:56:97:a7:cd:1e:2c:f4:42: cf:1f:bb:6a:9a:c2:64:45:57:cc:96:a0:3e:8f:3e: 91:3e:b8:1d:fc:7f:eb:4a:f9:d2:21:73:14:bd:9c: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:33:A0:3E:16:C4:B1:97:72:D0:2F:81:27:91:E6:4D:85:BF:AB X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e0:05:06:04:24:7e:2a:fc:58:6e:5a:fc:e3:54:b0:ab:5f: a2:04:7a:16:b7:37:03:3d:34:04:35:a7:a7:f6:3b:c2:14:5b: 86:fa:27:e7:99:71:37:e5:22:da:fc:3e:34:b0:38:86:7b:66: 3e:e4:de:30:d5:c6:da:00:d3:cf:f6:96:a9:d3:03:52:c1:25: f9:97:17:bf:1a:ca:50:37:0d:16:00:b4:ac:9f:97:9a:aa:6b: c8:5b:64:d1:a9:d0:e1:95:05:90:f4:79:68:8a:47:65:ea:15: 91:33:23:58:18:d4:58:b7:44:f0:6b:ec:d0:cc:87:b1:7a:c4: 43:f7:9d:fd:7f:00:7d:5f:ee:95:a7:1e:cf:05:fb:cf:89:95: a3:ad:b5:e9:4b:dd:65:81:42:7a:fa:d7:93:82:7e:09:5f:77: 53:fb:cf:1b:92:4b:c4:2c:5b:d1:78:be:90:0f:2a:48:19:8f: 97:8b:0a:d9:74:e6:b8:20:38:1c:07:b8:cd:e0:cc:9f:9c:61: 7d:a3:81:7f:89:8f:45:1f:b0:d0:95:0c:a8:cf:76:25:e5:d3: 58:42:ec:b4:29:5a:3d:bd:e7:46:c1:24:73:85:80:4c:2b:fc: b2:a0:fa:dd:05:06:31:8d:aa:41:f4:82:5a:c8:70:d2:23:46: 5c:a1:b3:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0uj9B/ZC7XLGoSqrKcbaG++Hm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNDExMjIwMjE3MjhaFw0yNDExMjUxMDU4MjhaMDMxMTAvBgNV BAMTKDBFMjUzM0EwM0UxNkM0QjE5NzcyRDAyRjgxMjc5MUU2NEQ4NUJGQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dp0qKW1zydQYXBGUj26owy1H /zaFowsDaNJIbn8+QLU7NBTRKnLD4UmvrIgeuSDvzYFkSiBuEwS9qgCZCD+/ANYK h2bv5SgfrjtKdqddbYSQUVQyNKoq49w2Wl/FUbxAOLcE8F5v0SENeQVrmaxeGGtV K635DQOR5lYcxqP+kp3iuWSewvpS0KjK3lzY8+UPbf6Dz885TK+B+rZFmXeOMS8K fA0pNOS27HuDBl5YE3omnq0b2E7C4cUAkIT8SHUuVpXnW+GjisVwz/qsOBmV42sa 6H7L74RWl6fNHiz0Qs8fu2qawmRFV8yWoD6PPpE+uB38f+tK+dIhcxS9nCirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDiUzoD4WxLGXctAvgSeR5k2Fv6swHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHgBQYEJH4q/FhuWvzjVLCrX6IEeha3NwM9 NAQ1p6f2O8IUW4b6J+eZcTflItr8PjSwOIZ7Zj7k3jDVxtoA08/2lqnTA1LBJfmX F78aylA3DRYAtKyfl5qqa8hbZNGp0OGVBZD0eWiKR2XqFZEzI1gY1Fi3RPBr7NDM h7F6xEP3nf1/AH1f7pWnHs8F+8+JlaOttelL3WWBQnr615OCfglfd1P7zxuSS8Qs W9F4vpAPKkgZj5eLCtl05rggOBwHuM3gzJ+cYX2jgX+Jj0UfsNCVDKjPdiXl01hC 7LQpWj2950bBJHOFgEwr/LKg+t0FBjGNqkH0glrIcNIjRlyhs/Y= -----END CERTIFICATE-----Generated at Fri Nov 22 03:51:02 2024 by rpki-client on console-fra.rpki-client.org