$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: CobRWlQdmVycSywpnVVOQxsyJ+Qh0obU1/h/Iz8WfYI= Subject key identifier: DC:B5:57:1C:67:C6:69:82:68:33:8F:95:4F:5C:A9:DF:CC:9F:8D:0D Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 0E629F0FBDDFC5506DC504BEDE1CC803998BE7A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 044C Signing time: Sun 24 Nov 2024 14:41:19 +0000 Manifest this update: Sun 24 Nov 2024 14:36:19 +0000 Manifest next update: Wed 27 Nov 2024 19:42:19 +0000 Files and hashes: 1: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 77mfnCgSnucw48UKGT/imJpoab+aR/Q7MW67xLB0DdM=) 2: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: c3P2M0VXOcWc/kMqDxRrBxNZgSYKuvObUT8WGdbC1Pw=) 3: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: 3Jf+X/nzT5Iw1LCB+CXX+fHFwHBNTzcPXFEnmhsgXuU=) 4: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: WZ4shpL3C8pc0Q1RN+DNNZqdwp4SqV96kPD82gjGY24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:62:9f:0f:bd:df:c5:50:6d:c5:04:be:de:1c:c8:03:99:8b:e7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Nov 24 14:36:19 2024 GMT Not After : Nov 27 19:42:19 2024 GMT Subject: CN=DCB5571C67C6698268338F954F5CA9DFCC9F8D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:63:fc:c4:c7:de:5a:35:83:7f:0d:42:44: 4a:85:2f:51:22:bd:d8:bc:7f:e7:f4:5a:04:60:75: a1:4b:fb:e8:6e:e8:7b:e2:a3:bf:b6:5b:be:5d:9d: f6:5f:22:6f:90:6b:b1:85:08:39:de:48:b5:05:5c: 7a:4c:bb:99:3a:0f:c8:46:44:63:b5:30:a6:ba:c5: 99:2c:9c:31:a8:90:01:9a:13:07:14:76:6a:f7:53: 81:bb:ac:d4:01:8b:42:2b:b8:4d:d5:4d:f6:98:c0: 2b:59:ee:e6:dd:0f:fa:16:f3:a3:c6:fd:8f:8c:16: 45:b3:71:7d:eb:a1:9a:ca:c2:c4:c6:e7:3f:ae:a6: 5a:00:04:6b:49:13:82:74:ad:41:ff:61:00:a6:bd: 44:23:88:b3:42:18:74:1a:a3:0b:1f:3f:62:00:82: b0:ad:3d:23:24:00:5d:36:2c:07:b7:5a:80:9b:b3: 35:9e:69:8a:03:d8:f7:07:80:be:89:d6:73:d5:4b: 11:29:fa:cf:83:2b:f3:f6:2d:de:08:fa:b4:32:be: 5e:8d:da:39:bc:3c:f0:17:16:cf:26:51:8d:9f:f1: a1:86:fe:38:19:5d:3a:19:bc:ee:3f:39:18:6c:d5: 7b:46:5e:aa:31:de:7d:c1:ea:61:04:c7:0e:87:72: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B5:57:1C:67:C6:69:82:68:33:8F:95:4F:5C:A9:DF:CC:9F:8D:0D X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:58:13:1d:e9:48:26:04:bf:b4:14:5f:2a:92:f0:64:1e:67: ce:e0:af:ad:17:03:14:2a:48:ad:5c:f5:9e:65:58:6b:17:e4: 7a:41:f2:dc:19:c4:4c:0a:17:68:e0:cd:82:c4:27:8f:2e:a7: 98:dd:fd:35:63:e8:55:b1:bc:ba:33:6e:f3:5d:db:62:63:6a: 8c:32:69:83:fa:84:e2:76:fc:7c:31:f6:ed:d9:de:4f:3e:cb: 1b:45:0a:4c:f1:f7:97:aa:8f:ba:27:0b:c6:92:87:6a:cc:4e: 0c:16:fc:66:af:ee:0f:40:7f:e7:32:47:b2:1e:3a:1c:a3:54: 12:78:8e:c0:fa:25:c7:e4:ed:61:08:6f:16:f6:15:45:8a:4a: 62:4e:1f:5b:5b:50:61:70:e9:3e:3a:02:2a:ad:1b:c6:c1:cb: fb:42:9f:74:e1:c3:ba:fb:e9:f6:bc:40:8f:43:70:cf:9d:2c: 55:62:b5:f9:97:9d:fa:f1:7a:27:ff:1e:af:85:55:18:3d:71: 1f:31:d8:a2:cf:9d:d9:62:e3:be:de:52:3e:33:42:94:1c:c0: b6:d1:89:b4:1d:c9:78:73:27:8c:46:ec:e8:f6:6f:64:c8:e6: 5e:a5:5b:ba:0b:e9:6d:87:84:7e:5c:8d:c2:f4:94:3f:6c:0d: c4:ff:8b:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmKfD73fxVBtxQS+3hzIA5mL56cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNDExMjQxNDM2MTlaFw0yNDExMjcxOTQyMTlaMDMxMTAvBgNV BAMTKERDQjU1NzFDNjdDNjY5ODI2ODMzOEY5NTRGNUNBOURGQ0M5RjhEMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+q2P8xMfeWjWDfw1CREqFL1Ei vdi8f+f0WgRgdaFL++hu6Hvio7+2W75dnfZfIm+Qa7GFCDneSLUFXHpMu5k6D8hG RGO1MKa6xZksnDGokAGaEwcUdmr3U4G7rNQBi0IruE3VTfaYwCtZ7ubdD/oW86PG /Y+MFkWzcX3roZrKwsTG5z+uploABGtJE4J0rUH/YQCmvUQjiLNCGHQaowsfP2IA grCtPSMkAF02LAe3WoCbszWeaYoD2PcHgL6J1nPVSxEp+s+DK/P2Ld4I+rQyvl6N 2jm8PPAXFs8mUY2f8aGG/jgZXToZvO4/ORhs1XtGXqox3n3B6mEExw6HcjWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3LVXHGfGaYJoM4+VT1yp38yfjQ0wHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVYEx3pSCYEv7QUXyqS8GQeZ87gr60XAxQq SK1c9Z5lWGsX5HpB8twZxEwKF2jgzYLEJ48up5jd/TVj6FWxvLozbvNd22Jjaowy aYP6hOJ2/Hwx9u3Z3k8+yxtFCkzx95eqj7onC8aSh2rMTgwW/Gav7g9Af+cyR7Ie OhyjVBJ4jsD6Jcfk7WEIbxb2FUWKSmJOH1tbUGFw6T46AiqtG8bBy/tCn3Thw7r7 6fa8QI9DcM+dLFVitfmXnfrxeif/Hq+FVRg9cR8x2KLPndli477eUj4zQpQcwLbR ibQdyXhzJ4xG7Oj2b2TI5l6lW7oL6W2HhH5cjcL0lD9sDcT/ixA= -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org