$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: eT/1vL2fMa9l8fVzGfgJXwOgAsxAbn7KG5HM7A28eMs= Subject key identifier: 2F:2E:64:9B:97:2A:CD:51:7F:6A:7B:DE:09:20:79:FF:31:32:93:2E Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 649758E7ACED4A7ED129366B431688CC12D8D99E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: 7D Signing time: Thu 21 Nov 2024 09:01:51 +0000 Manifest this update: Thu 21 Nov 2024 08:56:51 +0000 Manifest next update: Sun 24 Nov 2024 14:54:51 +0000 Files and hashes: 1: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: 70k/NLkM/+SvIwtGpNp1VPx6s2tjn/bJ0rM4ZUftdYY=) 2: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: PC+ijrflLlC2CTnSpuRYRRlo2oL0mLRC4JQTsIkbYWw=) 3: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: GSIpN3A/UVfQ4BxfQnmEQMW+C2fjV3PHe2aGLKovfhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:97:58:e7:ac:ed:4a:7e:d1:29:36:6b:43:16:88:cc:12:d8:d9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Nov 21 08:56:51 2024 GMT Not After : Nov 24 14:54:51 2024 GMT Subject: CN=2F2E649B972ACD517F6A7BDE092079FF3132932E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a6:d5:2f:fc:94:61:a7:bc:98:d7:11:25:81: 79:18:0a:f4:63:10:d4:94:21:f1:54:8b:ef:c2:f0: 78:3a:c8:b8:56:93:f1:72:ad:9a:72:c1:0c:07:57: fe:92:2b:3b:42:36:8a:0b:0f:dc:fd:2f:68:4d:d9: 3a:28:90:eb:5d:8e:51:c4:2e:e7:c2:ff:9a:3f:ac: 37:95:c0:4f:bc:5f:5f:c4:37:12:cb:ce:8d:2b:9b: 17:df:63:29:7e:07:2a:83:9a:56:e8:97:4c:46:1d: 9d:52:d9:fe:94:e1:47:dd:0f:be:c7:5e:4e:76:f9: 4f:32:87:2f:5e:f7:3b:00:5b:a0:a1:6f:1a:12:f3: 96:3a:e7:a2:1d:f1:6a:cc:a4:c5:5c:cf:5a:14:2d: 8e:be:a9:d4:77:cc:86:be:ff:42:47:89:9a:4e:28: f7:f7:c5:45:e9:af:02:69:8c:27:d6:6c:e0:0a:16: f1:c4:dd:19:e4:ee:6b:29:50:fd:f8:34:60:e2:8c: f2:c8:ff:26:e1:12:24:17:bc:9d:12:c5:84:a3:a9: 97:68:24:19:ba:19:5f:26:5d:71:18:78:e9:fd:25: 92:e1:5f:0c:a7:52:f9:a7:00:9b:29:4f:17:34:b0: c3:13:d1:09:64:03:f5:ab:55:a3:f4:f2:6a:9f:68: 8e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2E:64:9B:97:2A:CD:51:7F:6A:7B:DE:09:20:79:FF:31:32:93:2E X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f7:5a:3b:04:aa:b2:9e:70:c1:c2:69:6b:69:f3:76:68:20: 2d:5a:b9:d0:78:9f:b5:c4:6e:0d:8a:5f:50:8f:2c:79:1b:ab: ec:d2:e3:dc:a7:71:06:1f:24:53:ce:4e:5b:5c:08:22:3a:d6: d6:f6:72:1f:17:6a:fc:fd:b5:55:58:e4:c2:f2:da:4e:68:ed: 40:99:0c:12:de:11:b5:bb:26:e3:c2:2f:32:31:d8:a3:b1:9c: a5:e6:41:03:ff:15:d8:b7:50:3c:d3:15:a6:fa:c3:b6:7f:b0: 4c:f9:75:90:2c:2f:33:69:40:e0:66:88:7c:bd:b9:bb:d2:ed: 63:3e:2d:57:7d:9d:31:00:a0:68:97:12:0b:c8:71:70:1e:46: 77:40:dc:d6:86:39:2a:ae:41:93:d8:00:f4:f3:11:2a:de:f0: f4:56:0c:4a:2c:c0:1f:ac:39:47:97:c4:2a:37:d2:b7:e3:ea: 20:b6:56:8f:54:2f:a0:13:4b:9d:ad:53:e5:34:c8:de:53:24: b2:21:e1:ad:3e:d6:90:47:e7:9d:f3:38:d8:64:f3:5a:98:fb: 50:7e:1f:af:a8:36:a8:22:1f:01:ab:c7:f3:c6:c0:70:16:45: b9:ee:fa:ac:12:d4:cf:86:90:36:c8:11:33:f1:6e:27:cd:53: 06:f4:b0:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJdY56ztSn7RKTZrQxaIzBLY2Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNDExMjEwODU2NTFaFw0yNDExMjQxNDU0NTFaMDMxMTAvBgNV BAMTKDJGMkU2NDlCOTcyQUNENTE3RjZBN0JERTA5MjA3OUZGMzEzMjkzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvptUv/JRhp7yY1xElgXkYCvRj ENSUIfFUi+/C8Hg6yLhWk/FyrZpywQwHV/6SKztCNooLD9z9L2hN2TookOtdjlHE LufC/5o/rDeVwE+8X1/ENxLLzo0rmxffYyl+ByqDmlbol0xGHZ1S2f6U4UfdD77H Xk52+U8yhy9e9zsAW6ChbxoS85Y656Id8WrMpMVcz1oULY6+qdR3zIa+/0JHiZpO KPf3xUXprwJpjCfWbOAKFvHE3Rnk7mspUP34NGDijPLI/ybhEiQXvJ0SxYSjqZdo JBm6GV8mXXEYeOn9JZLhXwynUvmnAJspTxc0sMMT0QlkA/WrVaP08mqfaI6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULy5km5cqzVF/anveCSB5/zEyky4wHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ73WjsEqrKecMHCaWtp83ZoIC1audB4n7XE bg2KX1CPLHkbq+zS49yncQYfJFPOTltcCCI61tb2ch8Xavz9tVVY5MLy2k5o7UCZ DBLeEbW7JuPCLzIx2KOxnKXmQQP/Fdi3UDzTFab6w7Z/sEz5dZAsLzNpQOBmiHy9 ubvS7WM+LVd9nTEAoGiXEgvIcXAeRndA3NaGOSquQZPYAPTzESre8PRWDEoswB+s OUeXxCo30rfj6iC2Vo9UL6ATS52tU+U0yN5TJLIh4a0+1pBH553zONhk81qY+1B+ H6+oNqgiHwGrx/PGwHAWRbnu+qwS1M+GkDbIETPxbifNUwb0sJQ= -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org