$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: 77LI1mz+zaqG8Sne5DYaKy8AwvJKS5nhS99OO8MnFiA= Subject key identifier: 95:1E:66:CF:25:A4:A6:B2:40:70:20:18:83:B6:FA:62:3D:C6:17:33 Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 1225E1D84F3DB155F9616BC3565A080325E027E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: 12 Signing time: Mon 25 Nov 2024 17:52:09 +0000 Manifest this update: Mon 25 Nov 2024 17:47:09 +0000 Manifest next update: Fri 29 Nov 2024 05:21:09 +0000 Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: YV/07SIZYC4/VtvBJStdBJgRKQnAK1y/gzxul6oggek=) 2: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: 8spj5HO8ezuGf0ikPQnzBm0zaq9D5nPFTRlFy8qfLas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:25:e1:d8:4f:3d:b1:55:f9:61:6b:c3:56:5a:08:03:25:e0:27:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Nov 25 17:47:09 2024 GMT Not After : Nov 29 05:21:09 2024 GMT Subject: CN=951E66CF25A4A6B24070201883B6FA623DC61733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:35:28:4c:ab:9f:d0:e1:32:41:1c:85:b6: 26:40:03:05:86:46:aa:0a:0c:00:ce:2d:5f:26:36: 6d:56:b4:16:bf:8a:76:7b:0d:21:bb:20:d3:cd:82: 4e:13:9d:95:65:ff:ab:b5:e6:f4:9d:77:d2:fb:e5: 2c:e8:ff:73:09:af:27:b8:ec:43:7a:ae:2c:b3:34: 86:bb:81:ce:81:ab:e8:bf:cc:68:44:f4:da:b3:ad: 47:15:28:4e:65:bd:8b:ce:e9:a5:ab:7e:fb:63:45: 68:23:9e:56:b3:d7:4a:6b:36:85:0c:61:6a:49:34: aa:1d:52:2d:f4:69:7f:19:6f:1c:59:b3:77:1a:1d: e0:bc:5f:0e:51:d4:10:eb:51:4c:0e:69:85:55:74: cc:6a:88:18:cc:b7:89:40:78:82:c6:24:a2:ed:d6: 20:a4:41:e6:a2:21:1e:4f:95:23:9d:28:33:a9:d3: 33:6e:1c:b9:8b:95:83:34:e6:e2:8a:72:fa:a5:a0: 65:c7:d0:f2:97:0b:65:b3:9e:a8:fb:88:21:c1:aa: 63:ba:90:55:e6:a1:ce:48:3a:08:ee:6e:42:ac:84: f6:ef:77:1e:83:39:6d:e1:ca:dd:94:d2:b3:c8:73: 1a:51:d7:44:f1:7a:81:9d:91:b7:8e:7e:5e:a3:7e: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1E:66:CF:25:A4:A6:B2:40:70:20:18:83:B6:FA:62:3D:C6:17:33 X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:9c:49:99:63:c2:bb:ed:ca:65:d0:5b:17:46:b2:4e:b8:4f: bc:9e:20:9b:7d:fe:b3:a3:66:e7:64:67:3a:7c:02:f5:cc:46: 75:77:46:0e:97:0a:70:04:58:cb:e2:fd:6b:98:03:04:36:c5: e3:84:1d:cc:89:1b:08:de:03:bd:10:1c:b0:bd:0d:3c:93:a8: 0a:25:f4:cf:44:2d:0e:87:ca:b6:86:fa:05:3b:10:42:07:02: 93:cb:35:75:4c:6c:f1:5d:b5:92:f5:5d:a0:0c:97:51:91:31: 4f:67:66:0d:82:d2:fe:66:d3:e9:33:cf:2e:68:73:f9:b0:3d: 57:54:8a:4d:04:25:20:df:cf:eb:93:dc:03:75:4c:8a:45:e6: e0:8c:42:e0:e8:31:a8:b8:ad:8b:6c:a9:a6:06:94:39:cb:ea: 0e:10:90:ec:3e:9e:33:da:cd:03:35:6f:6a:5c:8b:f6:f4:28: c4:10:73:f9:f4:e5:3c:d5:38:79:a9:c4:4d:41:ab:53:e2:56: 5b:ba:b2:42:63:7a:f5:5b:e7:e8:ba:09:a5:2f:d4:f3:39:5f: d5:c2:35:69:e9:a2:6f:83:90:f5:30:2b:6e:af:fc:67:76:ab: 8a:8c:5b:9c:d4:19:1f:a7:5b:90:31:c4:5c:65:c3:d9:c2:f4: 2a:f1:ba:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEiXh2E89sVX5YWvDVloIAyXgJ+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNDExMjUxNzQ3MDlaFw0yNDExMjkwNTIxMDlaMDMxMTAvBgNV BAMTKDk1MUU2NkNGMjVBNEE2QjI0MDcwMjAxODgzQjZGQTYyM0RDNjE3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfjUoTKuf0OEyQRyFtiZAAwWG RqoKDADOLV8mNm1WtBa/inZ7DSG7INPNgk4TnZVl/6u15vSdd9L75Szo/3MJrye4 7EN6riyzNIa7gc6Bq+i/zGhE9NqzrUcVKE5lvYvO6aWrfvtjRWgjnlaz10prNoUM YWpJNKodUi30aX8ZbxxZs3caHeC8Xw5R1BDrUUwOaYVVdMxqiBjMt4lAeILGJKLt 1iCkQeaiIR5PlSOdKDOp0zNuHLmLlYM05uKKcvqloGXH0PKXC2Wznqj7iCHBqmO6 kFXmoc5IOgjubkKshPbvdx6DOW3hyt2U0rPIcxpR10TxeoGdkbeOfl6jfrkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlR5mzyWkprJAcCAYg7b6Yj3GFzMwHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWcSZljwrvtymXQWxdGsk64T7yeIJt9/rOj ZudkZzp8AvXMRnV3Rg6XCnAEWMvi/WuYAwQ2xeOEHcyJGwjeA70QHLC9DTyTqAol 9M9ELQ6HyraG+gU7EEIHApPLNXVMbPFdtZL1XaAMl1GRMU9nZg2C0v5m0+kzzy5o c/mwPVdUik0EJSDfz+uT3AN1TIpF5uCMQuDoMai4rYtsqaYGlDnL6g4QkOw+njPa zQM1b2pci/b0KMQQc/n05TzVOHmpxE1Bq1PiVlu6skJjevVb5+i6CaUv1PM5X9XC NWnpom+DkPUwK26v/Gd2q4qMW5zUGR+nW5AxxFxlw9nC9Crxutw= -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:15 2024 by rpki-client on console-fra.rpki-client.org