$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: wNJh6DSZitoRmMfqn1BljOb3OK/F6HVURCH13+0EC+g= Subject key identifier: D8:20:C7:40:BB:A3:19:0E:63:CB:0D:E2:26:B9:64:47:D6:AE:DC:B5 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 692D5AFB9729C94A90D6A5D973E07BD4F88711F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 021D Signing time: Thu 21 Nov 2024 18:10:39 +0000 Manifest this update: Thu 21 Nov 2024 18:05:39 +0000 Manifest next update: Mon 25 Nov 2024 01:05:39 +0000 Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: NZfGU8yt/4FgZolHeyqRZ4fGy523dk2yAV0gQzO6ODk=) 2: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: vmSFd2zv8vehhkLSJ5hjwMMfEbdqfv8rXQ5t5KciQa4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:2d:5a:fb:97:29:c9:4a:90:d6:a5:d9:73:e0:7b:d4:f8:87:11:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Nov 21 18:05:39 2024 GMT Not After : Nov 25 01:05:39 2024 GMT Subject: CN=D820C740BBA3190E63CB0DE226B96447D6AEDCB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:07:8e:71:20:61:de:f9:df:af:7c:77:d6: 57:61:92:d2:4d:14:ed:74:58:54:02:69:d7:86:e0: 54:29:9e:9b:f1:f0:d7:b3:98:c1:39:fd:90:62:42: 64:97:cf:62:52:48:e9:eb:e2:ff:23:1d:8c:ef:66: bf:db:b2:2d:92:1e:40:08:24:dd:b6:10:50:d1:d8: 7e:8f:18:d0:3b:6c:a1:ae:7e:2f:0a:0f:e2:af:cc: 1e:86:c6:24:fa:4d:17:be:93:59:98:e4:78:03:02: 7b:1d:45:28:21:55:a7:e5:2b:84:c5:a7:7a:e0:0d: 3d:55:4a:a6:04:de:6b:d3:4c:39:48:07:ae:a9:55: e9:e9:b6:0d:30:3f:a4:20:0e:43:f3:06:25:72:d2: 40:ba:9c:65:c5:3b:69:d5:1c:71:ec:dd:55:c6:5d: aa:fe:dd:f3:2c:b3:f8:b9:33:fc:3c:92:08:9d:9f: b0:0d:f5:77:97:aa:01:47:e0:bd:33:77:45:6f:9f: 0e:94:7c:e2:ba:0c:e9:cb:8f:a2:b8:b1:fb:a0:91: ed:d7:e6:b4:9a:82:c4:85:a1:b3:f9:3c:34:ca:56: b0:ef:db:f3:c2:18:66:db:f3:e0:aa:de:72:e3:48: be:14:e3:88:ed:fc:36:a0:c9:7d:50:dd:ba:15:71: c8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:20:C7:40:BB:A3:19:0E:63:CB:0D:E2:26:B9:64:47:D6:AE:DC:B5 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2b:4f:f0:94:b5:e3:56:9d:66:af:62:34:ed:35:84:d2:44: ae:57:d9:48:83:ae:07:20:cc:93:01:c8:ec:fa:2d:ec:91:88: 07:97:ae:7b:97:d6:21:9d:20:84:55:a0:3b:4f:ae:19:6d:91: dc:fa:7f:9d:30:ff:e0:fa:85:aa:f1:58:29:39:26:9e:d5:14: 2c:fd:23:59:d1:5e:ef:94:20:45:27:dc:9b:90:7e:f7:84:07: d6:a9:1e:ee:3f:32:76:db:9c:c9:0d:05:0c:bd:af:1f:8f:5a: d7:ac:67:39:fa:57:83:3b:44:8f:20:45:19:ff:08:f0:b7:35: 88:22:1a:c9:16:d0:fe:ba:96:94:f3:08:a4:bc:e2:db:72:97: d7:78:ec:5b:02:95:21:2a:72:8f:c9:78:a1:13:45:97:12:27: 89:14:dc:43:bf:c9:e0:3a:42:ac:1a:19:a3:af:10:67:cf:e0: 84:60:c2:9f:dd:f7:3a:7e:31:28:d7:59:d1:f4:02:1a:1e:a4: 51:27:bf:2e:c6:3c:6a:42:55:7b:41:e8:f6:91:aa:e6:79:f5: 82:1b:61:38:36:75:e2:52:4e:2c:3b:a3:65:9a:c6:8e:f9:82: 17:95:19:a5:1c:0c:a4:56:c9:fa:b2:85:cb:1f:48:8d:95:5e: 8c:7a:bb:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaS1a+5cpyUqQ1qXZc+B71PiHEfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNDExMjExODA1MzlaFw0yNDExMjUwMTA1MzlaMDMxMTAvBgNV BAMTKEQ4MjBDNzQwQkJBMzE5MEU2M0NCMERFMjI2Qjk2NDQ3RDZBRURDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdQeOcSBh3vnfr3x31ldhktJN FO10WFQCadeG4FQpnpvx8NezmME5/ZBiQmSXz2JSSOnr4v8jHYzvZr/bsi2SHkAI JN22EFDR2H6PGNA7bKGufi8KD+KvzB6GxiT6TRe+k1mY5HgDAnsdRSghVaflK4TF p3rgDT1VSqYE3mvTTDlIB66pVenptg0wP6QgDkPzBiVy0kC6nGXFO2nVHHHs3VXG Xar+3fMss/i5M/w8kgidn7AN9XeXqgFH4L0zd0Vvnw6UfOK6DOnLj6K4sfugke3X 5rSagsSFobP5PDTKVrDv2/PCGGbb8+Cq3nLjSL4U44jt/DagyX1Q3boVccghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2CDHQLujGQ5jyw3iJrlkR9au3LUwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIorT/CUteNWnWavYjTtNYTSRK5X2UiDrgcg zJMByOz6LeyRiAeXrnuX1iGdIIRVoDtPrhltkdz6f50w/+D6harxWCk5Jp7VFCz9 I1nRXu+UIEUn3JuQfveEB9apHu4/MnbbnMkNBQy9rx+PWtesZzn6V4M7RI8gRRn/ CPC3NYgiGskW0P66lpTzCKS84ttyl9d47FsClSEqco/JeKETRZcSJ4kU3EO/yeA6 QqwaGaOvEGfP4IRgwp/d9zp+MSjXWdH0AhoepFEnvy7GPGpCVXtB6PaRquZ59YIb YTg2deJSTiw7o2Waxo75gheVGaUcDKRWyfqyhcsfSI2VXox6u+w= -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org