$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft File: F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json) Hash identifier: x0rzgPlI4iC6tl0qGEy2GMMVtzL0NnVlnzHmoHS+jvc= Subject key identifier: B0:1A:7A:B2:3A:C8:74:65:A9:E7:8D:C5:0D:E1:BC:4E:5D:72:A2:DA Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Certificate serial: 0A70FDE080D13F9DA4385933945A7AC54AD02961 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft Manifest number: 01A7 Signing time: Sun 24 Nov 2024 10:22:23 +0000 Manifest this update: Sun 24 Nov 2024 10:17:23 +0000 Manifest next update: Wed 27 Nov 2024 18:41:23 +0000 Files and hashes: 1: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: 0HrmaIWLMVJ522C0uZ3ctQptadI235WIoKRs1xErZ34=) 2: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: JbWzlg1lnWum+3WuBwswrM9CMw427j/ZXnbxFo3i/MI=) 3: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: g8j3QsNdTx5h5RhwrBDdHPiJQ5DQq1ztMNmOp23RnXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:70:fd:e0:80:d1:3f:9d:a4:38:59:33:94:5a:7a:c5:4a:d0:29:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Validity Not Before: Nov 24 10:17:23 2024 GMT Not After : Nov 27 18:41:23 2024 GMT Subject: CN=B01A7AB23AC87465A9E78DC50DE1BC4E5D72A2DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:8d:f7:d7:b9:91:bf:0a:0b:06:db:a4:81: e1:a0:ec:95:11:89:d9:96:e2:b9:6e:f8:0e:4f:ce: ca:80:03:60:cb:1b:3a:24:07:9a:51:a7:d4:9b:8a: df:e7:53:ef:68:11:ca:ea:04:5a:09:a7:a0:15:19: e2:a4:fc:a6:9a:d3:5c:88:20:ff:dd:7f:c0:61:58: 26:0e:01:b9:e3:5c:77:73:f5:9c:af:0d:13:25:9f: 3c:65:f6:f9:73:5c:69:2e:c5:5f:c7:35:17:b6:5b: db:d8:78:63:82:80:67:71:07:2c:28:71:be:f5:b2: cd:13:b3:bd:c0:8f:5c:90:c0:5a:16:dd:13:a6:c4: 31:d6:90:e2:c9:da:72:b4:e5:95:da:a1:2d:47:0a: ef:98:f9:76:24:33:1d:cb:36:b7:94:d2:14:68:da: b0:8e:40:5d:cc:bf:5d:80:79:b9:3c:38:04:16:2b: 54:fe:ed:7d:db:f1:d8:29:c4:59:a6:06:ad:2d:f6: 65:d8:3d:f3:1b:5d:81:b3:35:52:94:2f:18:32:62: e2:3c:7c:9a:97:89:40:d5:17:df:8a:02:e6:66:d5: 55:b5:b3:3e:d6:b0:df:f3:2c:ac:38:9b:08:1a:94: 66:10:3f:81:35:50:f0:bb:3a:fe:57:15:8d:d3:2f: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1A:7A:B2:3A:C8:74:65:A9:E7:8D:C5:0D:E1:BC:4E:5D:72:A2:DA X509v3 Authority Key Identifier: keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ad:38:42:4d:ac:bf:09:4d:ab:f2:77:af:87:70:fd:3b:72: f0:c6:21:39:b7:5a:87:08:8f:33:0d:67:77:c3:a2:f9:9b:d3: 83:39:0a:46:99:d0:6c:35:69:14:34:9a:3b:79:b9:46:0a:19: 05:21:de:0d:dd:6a:f2:49:63:d4:35:73:09:e1:d4:30:63:4d: 13:84:89:0e:0c:b4:69:30:e0:6a:15:04:f8:be:a3:65:a8:66: 6b:5d:85:28:e7:1e:ba:8f:c6:c3:85:17:4c:65:84:01:07:77: 2e:c2:50:05:d4:2d:e4:4e:0b:1e:e1:9e:e2:eb:e6:2b:f0:3f: 23:74:ee:2c:97:8e:59:02:35:46:06:00:0d:9a:3a:2f:0f:81: 49:cb:6f:4a:e6:5c:41:e1:c6:74:17:43:c2:33:14:d0:20:f6: e2:0a:9a:92:b9:d2:b8:b6:e7:e4:c1:ab:d5:64:d6:3b:97:a2: 80:3a:e6:f4:4d:c3:2b:25:95:61:38:d2:e7:e6:5d:22:ee:08: 8e:af:4f:6b:64:43:c3:af:0e:ff:a5:68:a2:fc:d2:f9:9d:a7: d3:17:76:73:9d:69:2a:88:0f:0e:00:fc:ad:65:c0:36:db:f8: ea:17:cf:3d:f8:62:6e:4e:a2:90:73:16:cf:55:aa:37:b7:d3: 32:2e:48:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnD94IDRP52kOFkzlFp6xUrQKWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1 OTY4MDMyNDAeFw0yNDExMjQxMDE3MjNaFw0yNDExMjcxODQxMjNaMDMxMTAvBgNV BAMTKEIwMUE3QUIyM0FDODc0NjVBOUU3OERDNTBERTFCQzRFNUQ3MkEyREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lI3317mRvwoLBtukgeGg7JUR idmW4rlu+A5PzsqAA2DLGzokB5pRp9Sbit/nU+9oEcrqBFoJp6AVGeKk/Kaa01yI IP/df8BhWCYOAbnjXHdz9ZyvDRMlnzxl9vlzXGkuxV/HNRe2W9vYeGOCgGdxBywo cb71ss0Ts73Aj1yQwFoW3ROmxDHWkOLJ2nK05ZXaoS1HCu+Y+XYkMx3LNreU0hRo 2rCOQF3Mv12Aebk8OAQWK1T+7X3b8dgpxFmmBq0t9mXYPfMbXYGzNVKULxgyYuI8 fJqXiUDVF9+KAuZm1VW1sz7WsN/zLKw4mwgalGYQP4E1UPC7Ov5XFY3TL8HfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsBp6sjrIdGWp543FDeG8Tl1yotowHwYDVR0j BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1 NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4 MDMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0 RjY1OTY4MDMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+tOEJNrL8JTavyd6+HcP07cvDGITm3WocI jzMNZ3fDovmb04M5CkaZ0Gw1aRQ0mjt5uUYKGQUh3g3davJJY9Q1cwnh1DBjTROE iQ4MtGkw4GoVBPi+o2WoZmtdhSjnHrqPxsOFF0xlhAEHdy7CUAXULeROCx7hnuLr 5ivwPyN07iyXjlkCNUYGAA2aOi8PgUnLb0rmXEHhxnQXQ8IzFNAg9uIKmpK50ri2 5+TBq9Vk1juXooA65vRNwysllWE40ufmXSLuCI6vT2tkQ8OvDv+laKL80vmdp9MX dnOdaSqIDw4A/K1lwDbb+OoXzz34Ym5OopBzFs9Vqje30zIuSCY= -----END CERTIFICATE-----Generated at Sun Nov 24 11:34:09 2024 by rpki-client on console-fra.rpki-client.org