$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json) Hash identifier: ESGQhV9CuG6iiZP8pJ+cjULBahylOqxueOjcoF3DBbo= Subject key identifier: 61:99:A2:A9:3E:DE:9F:65:08:56:FB:74:D7:54:8E:FD:F1:87:9E:29 Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 538D61D54BDFF0C452D953C86C8551A6FA30293C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft Manifest number: 01A9 Signing time: Sat 23 Nov 2024 22:01:37 +0000 Manifest this update: Sat 23 Nov 2024 21:56:37 +0000 Manifest next update: Wed 27 Nov 2024 02:53:37 +0000 Files and hashes: 1: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: M68RXQd5jJ+tOw7H+Op2qX1NvK1KAjfaLkm00qLbmQ0=) 2: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: 5BDMmZPmZ5K29gsN0DGQYT7KddrcdWWE/vWjWLjqRGY=) 3: C70A343932991281F91796DB87B011987603BBF4.crl (hash: T5q05+3n2vd5I/ijB0zq92rRN3W0wbsKSaQYuKBLX7Q=) 4: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: hl492HzutALAAQJU70eEDXrbfvOLocfrbDGoutzErNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8d:61:d5:4b:df:f0:c4:52:d9:53:c8:6c:85:51:a6:fa:30:29:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Nov 23 21:56:37 2024 GMT Not After : Nov 27 02:53:37 2024 GMT Subject: CN=6199A2A93EDE9F650856FB74D7548EFDF1879E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:74:4f:94:ea:22:43:75:0b:3c:63:3f:fd: cc:4d:0a:4f:0e:83:4b:29:65:0d:36:9b:92:c7:4f: 8f:69:2e:9b:b6:8e:4e:f0:7c:0d:fa:b2:fc:25:9e: ce:d1:d3:0a:f7:7f:f4:7d:58:4e:46:04:9e:19:94: a3:e5:db:f3:6a:de:ab:72:5d:73:0e:17:d9:1d:49: 75:28:32:25:5f:6d:ed:08:0d:4b:7b:74:d3:9e:40: 3c:d4:ef:a0:e1:3d:6b:cf:ab:23:63:a9:57:f0:46: c8:0d:65:f2:c8:1c:23:2d:96:f9:e6:c8:d6:18:64: c2:e3:64:a3:f4:b3:78:22:08:ac:b7:d4:86:e5:30: db:5d:27:05:f9:04:be:0b:e0:e4:4b:fc:4e:cf:28: cc:f9:0e:2a:86:95:43:ee:86:06:0a:6b:2c:41:bf: d1:c7:d4:31:95:70:1d:cc:94:b9:8f:55:5c:00:b3: d3:0f:32:f6:0d:20:9a:54:c8:8b:31:2f:44:df:11: 7c:c0:22:68:f8:d3:ef:21:71:06:12:07:57:29:08: b7:a1:5b:b0:22:5c:07:1f:ac:9b:bb:7f:6d:02:64: cc:d1:51:3f:ef:8b:4a:a8:2f:fa:57:30:c8:f3:91: 6d:18:95:e8:f7:1c:dd:63:7e:d0:15:e6:25:f9:f8: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:A2:A9:3E:DE:9F:65:08:56:FB:74:D7:54:8E:FD:F1:87:9E:29 X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0e:a1:00:bf:a5:2c:92:37:4b:bb:d1:25:c0:cd:41:0b:2a: 3a:e9:7b:25:98:b5:ee:0f:b6:31:80:3e:f5:cf:11:fa:44:fd: 0e:25:45:1a:84:7c:c6:3f:c6:e1:3b:c7:d7:0c:a4:7e:ce:0e: 31:7a:46:41:a0:a3:e5:47:8f:58:8b:e4:58:e8:c6:63:48:b9: 3b:70:56:b3:39:52:fb:99:a0:c6:da:e9:18:65:17:55:bb:58: 59:48:40:9f:5c:70:69:ec:d0:5a:c5:c8:c5:a1:80:84:de:cb: 49:df:86:95:0b:d0:f6:83:eb:89:63:4d:22:81:bf:4a:2c:c5: 22:8f:24:8b:f3:00:42:ca:c8:0a:f8:5d:8e:e7:56:18:98:44: 81:94:c2:67:5e:56:20:aa:9b:ca:d5:dc:5d:69:28:5a:1e:7b: c5:a0:1f:a0:4b:fd:a5:59:0b:43:8d:7f:45:c5:97:42:82:5f: c5:08:f3:b9:8f:6f:2e:5d:c7:5f:54:2f:24:5f:36:7a:de:03: cf:4b:c2:cc:be:6e:95:aa:b3:bc:87:90:e6:be:0f:60:20:7d: 08:55:72:0d:d6:cd:bf:f3:0b:9f:f5:ec:f8:f4:2a:85:f7:48: 6f:da:7c:24:46:e0:01:11:f2:f9:63:19:23:e5:33:15:3b:4c: 7d:0b:26:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU41h1Uvf8MRS2VPIbIVRpvowKTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNDExMjMyMTU2MzdaFw0yNDExMjcwMjUzMzdaMDMxMTAvBgNV BAMTKDYxOTlBMkE5M0VERTlGNjUwODU2RkI3NEQ3NTQ4RUZERjE4NzlFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8XRPlOoiQ3ULPGM//cxNCk8O g0spZQ02m5LHT49pLpu2jk7wfA36svwlns7R0wr3f/R9WE5GBJ4ZlKPl2/Nq3qty XXMOF9kdSXUoMiVfbe0IDUt7dNOeQDzU76DhPWvPqyNjqVfwRsgNZfLIHCMtlvnm yNYYZMLjZKP0s3giCKy31IblMNtdJwX5BL4L4ORL/E7PKMz5DiqGlUPuhgYKayxB v9HH1DGVcB3MlLmPVVwAs9MPMvYNIJpUyIsxL0TfEXzAImj40+8hcQYSB1cpCLeh W7AiXAcfrJu7f20CZMzRUT/vi0qoL/pXMMjzkW0Ylej3HN1jftAV5iX5+BS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYZmiqT7en2UIVvt011SO/fGHnikwHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDEx OTg3NjAzQkJGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIOoQC/pSySN0u70SXAzUELKjrpeyWYte4P tjGAPvXPEfpE/Q4lRRqEfMY/xuE7x9cMpH7ODjF6RkGgo+VHj1iL5FjoxmNIuTtw VrM5UvuZoMba6RhlF1W7WFlIQJ9ccGns0FrFyMWhgITey0nfhpUL0PaD64ljTSKB v0osxSKPJIvzAELKyAr4XY7nVhiYRIGUwmdeViCqm8rV3F1pKFoee8WgH6BL/aVZ C0ONf0XFl0KCX8UI87mPby5dx19ULyRfNnreA89Lwsy+bpWqs7yHkOa+D2AgfQhV cg3Wzb/zC5/17Pj0KoX3SG/afCRG4AER8vljGSPlMxU7TH0LJoc= -----END CERTIFICATE-----Generated at Sun Nov 24 00:14:31 2024 by rpki-client on console-ams.rpki-client.org