$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: yiGGicjXTOW3epyDIIsa8A8gnh1/6hcbqlFnDB1VCTs= Subject key identifier: 59:B5:B9:D1:D4:15:28:09:60:E9:00:08:E4:33:BD:F6:E7:DB:36:6A Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 143685D66A80898CF51B121BC38889D3B77C7017 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 028B Signing time: Sun 24 Nov 2024 18:20:57 +0000 Manifest this update: Sun 24 Nov 2024 18:15:57 +0000 Manifest next update: Wed 27 Nov 2024 18:48:57 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: t7Kw5bsPWHGz8nUwHFHPUXAKPZ93ibwF+3w9lJY35M4=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: +ESPL9RiV1kXE5HVVZEJFevVqgb2FPlNrLYphfud9Dg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:36:85:d6:6a:80:89:8c:f5:1b:12:1b:c3:88:89:d3:b7:7c:70:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Nov 24 18:15:57 2024 GMT Not After : Nov 27 18:48:57 2024 GMT Subject: CN=59B5B9D1D415280960E90008E433BDF6E7DB366A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:ea:1f:3d:51:1e:12:3e:b6:87:cb:03:e5: f3:db:ee:01:e6:6d:3d:c5:ab:a1:ca:7f:65:55:5f: 26:e2:27:b1:c5:ee:8e:d7:86:94:f2:60:15:b3:1a: e8:95:8a:ce:b9:04:2a:7e:77:b7:40:6d:ee:6a:44: 1d:2f:fa:73:97:e4:98:03:e0:64:05:1e:2b:e1:2e: c2:96:97:f5:50:ab:40:69:d9:b8:0a:06:c0:76:ee: 79:e1:f8:76:8c:3f:f4:99:30:4b:32:0e:94:0e:d2: 46:5d:bd:f2:36:61:22:2a:ec:6a:e9:08:e1:63:16: 41:79:f5:74:83:49:8a:6c:94:a7:af:f1:37:1b:df: e2:d0:6a:75:e4:4d:c1:56:ff:3f:5d:8e:55:45:bd: b9:47:0e:59:3c:da:4d:ae:89:32:44:57:af:b8:06: 74:a1:ca:fd:ff:80:d4:7f:15:7d:ec:33:be:86:b7: c2:64:83:aa:5b:b4:ad:ab:62:02:b0:65:76:3e:37: f7:90:7a:dc:38:72:f2:78:0e:c3:f6:dd:53:48:53: 3d:4a:01:d5:4f:51:82:33:85:69:61:68:42:5a:37: 8b:45:a3:50:e0:5b:fd:85:fc:20:46:c0:96:c5:77: fd:ab:06:74:a8:18:ee:7e:66:98:4a:ab:ab:f3:35: 2f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B5:B9:D1:D4:15:28:09:60:E9:00:08:E4:33:BD:F6:E7:DB:36:6A X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bc:e3:cd:8c:74:5c:90:c7:d3:41:c4:81:12:b7:2a:d2:b9: 3b:f1:f7:12:31:f8:b8:73:2d:56:ce:c3:2a:0c:52:45:77:f1: 1d:c7:37:a1:94:55:01:fc:5e:bc:6b:1c:44:d7:df:94:99:61: 2e:32:bb:1c:17:64:a5:63:96:67:0b:46:8c:36:38:5f:68:5d: 12:3a:67:11:c3:7c:f3:f7:e5:15:5d:0d:1e:1a:c4:5d:7c:07: dd:45:c3:62:88:14:11:ae:31:9b:a2:2a:fe:31:c5:02:30:9b: 10:88:88:91:04:44:ca:2a:e4:4e:52:2f:62:81:65:d7:06:a3: ac:2d:4b:7f:a6:fe:0a:e7:74:7d:bd:2c:32:53:43:da:84:af: 44:44:58:51:cb:aa:1b:4e:b7:b6:0c:f6:a9:8a:73:57:a9:21: e0:14:3d:ce:bb:e2:01:86:33:20:04:90:ea:3c:e3:ee:f3:6a: 17:75:73:b6:7d:45:86:3c:e3:8f:5e:a9:6f:04:5f:f6:d3:d0: f0:28:d1:03:23:48:bd:fb:ee:71:23:46:bd:73:1e:51:9a:b3: ea:06:75:41:14:81:92:a8:58:fb:43:30:50:d6:76:ba:63:a8: 0b:67:6d:72:f1:5c:34:a6:dc:8a:f8:41:01:f4:bd:4c:d0:48: c2:e0:f1:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDaF1mqAiYz1GxIbw4iJ07d8cBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNDExMjQxODE1NTdaFw0yNDExMjcxODQ4NTdaMDMxMTAvBgNV BAMTKDU5QjVCOUQxRDQxNTI4MDk2MEU5MDAwOEU0MzNCREY2RTdEQjM2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+geofPVEeEj62h8sD5fPb7gHm bT3Fq6HKf2VVXybiJ7HF7o7XhpTyYBWzGuiVis65BCp+d7dAbe5qRB0v+nOX5JgD 4GQFHivhLsKWl/VQq0Bp2bgKBsB27nnh+HaMP/SZMEsyDpQO0kZdvfI2YSIq7Grp COFjFkF59XSDSYpslKev8Tcb3+LQanXkTcFW/z9djlVFvblHDlk82k2uiTJEV6+4 BnShyv3/gNR/FX3sM76Gt8Jkg6pbtK2rYgKwZXY+N/eQetw4cvJ4DsP23VNIUz1K AdVPUYIzhWlhaEJaN4tFo1DgW/2F/CBGwJbFd/2rBnSoGO5+ZphKq6vzNS//AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWbW50dQVKAlg6QAI5DO99ufbNmowHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy8482MdFyQx9NBxIEStyrSuTvx9xIx+Lhz LVbOwyoMUkV38R3HN6GUVQH8XrxrHETX35SZYS4yuxwXZKVjlmcLRow2OF9oXRI6 ZxHDfPP35RVdDR4axF18B91Fw2KIFBGuMZuiKv4xxQIwmxCIiJEERMoq5E5SL2KB ZdcGo6wtS3+m/grndH29LDJTQ9qEr0REWFHLqhtOt7YM9qmKc1epIeAUPc674gGG MyAEkOo84+7zahd1c7Z9RYY8449eqW8EX/bT0PAo0QMjSL377nEjRr1zHlGas+oG dUEUgZKoWPtDMFDWdrpjqAtnbXLxXDSm3Ir4QQH0vUzQSMLg8YA= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org