$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: obhTkCNvAJPlM48C6pOLfIcVkW8aQESwGye6yWG7u/0= Subject key identifier: 18:87:37:B4:5D:E9:8B:06:0D:F2:CF:15:46:4B:EA:06:52:9D:9C:52 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 0BCE2C60DD7F6A20D27B7F2547043DE5986ABDE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 0107 Signing time: Wed 20 Nov 2024 18:51:51 +0000 Manifest this update: Wed 20 Nov 2024 18:46:51 +0000 Manifest next update: Sun 24 Nov 2024 06:25:51 +0000 Files and hashes: 1: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: NKYv9cqzZkJYZHitq7Fu6i46JnI77zIL+WmU4UnuhZw=) 2: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: TLz1yxR5ee4b/e3IDYBKYGMjTfF/qSNOhivvoOQ0IN4=) 3: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 2KlFaCiGH4FvI5KYZUM/LwzVbKMH9o1Jq6U1bpkh8OA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ce:2c:60:dd:7f:6a:20:d2:7b:7f:25:47:04:3d:e5:98:6a:bd:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Nov 20 18:46:51 2024 GMT Not After : Nov 24 06:25:51 2024 GMT Subject: CN=188737B45DE98B060DF2CF15464BEA06529D9C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:3f:26:dc:c8:b8:a4:37:42:7b:91:ef:3a: 77:24:ef:4b:92:ce:27:38:21:56:b3:fc:08:28:0d: 08:a0:e9:7a:be:17:7f:7c:db:d5:c1:25:59:db:84: fa:16:ee:9a:20:28:23:f7:73:b2:41:7d:d2:07:1f: c2:0b:b6:5d:bb:99:01:f1:0e:4b:d5:21:4d:1b:71: b1:1e:f3:8c:06:16:6d:cd:5e:9b:9f:76:27:3d:2f: fe:4b:14:e4:63:ec:1d:e3:9b:52:d4:17:fc:35:76: 67:9a:39:92:1e:9f:63:14:98:ae:c3:7a:8f:70:a5: 27:23:9a:f7:27:aa:6f:35:00:3b:b7:62:1e:89:cd: 8b:5e:9d:37:12:01:b3:87:99:d0:ea:f4:82:f3:8d: 80:a6:49:77:10:3b:f0:8d:26:72:db:bf:9d:ba:6b: 78:48:46:dc:be:5f:7d:62:da:b1:e5:96:7c:96:9e: aa:56:24:76:a4:dd:48:d0:45:49:82:7d:fe:3b:2b: 14:fc:f6:06:1e:f4:c4:df:1e:48:dd:65:2f:11:89: 7c:40:bc:21:94:13:b2:f2:af:00:5c:19:65:45:6c: c2:ad:68:75:ed:2c:e1:fd:0e:37:77:69:8b:35:0a: 88:b1:b7:11:40:25:07:c9:0b:72:22:9e:78:8d:03: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:87:37:B4:5D:E9:8B:06:0D:F2:CF:15:46:4B:EA:06:52:9D:9C:52 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d5:66:35:74:3e:5b:90:b0:39:87:e1:d2:a4:f0:16:b9:29: 90:e9:60:f6:a3:12:f3:6a:33:8b:43:ae:a9:b7:13:38:c4:38: ff:55:ee:39:86:5e:f4:b5:ce:b8:53:1b:87:0e:85:93:23:21: 8c:50:94:1e:21:25:e1:05:62:f5:75:f5:cf:81:97:dc:77:89: 11:f1:72:c8:d5:0b:61:93:c2:cc:0e:bb:8e:a5:95:f8:8f:b8: 1f:9d:18:2b:62:5f:7c:1b:35:63:e7:9d:91:fd:f1:fe:62:8c: 39:84:ab:b4:c4:b4:25:3c:46:af:0a:eb:68:af:e0:e7:b2:2e: 77:61:86:e2:aa:51:44:0e:96:d0:7b:8b:be:f7:81:2c:57:ac: 67:29:bb:36:87:ff:f2:7c:19:da:1b:bb:0e:cf:75:eb:0a:0e: 44:0f:47:05:b8:f2:3f:89:1f:2b:1d:b4:4b:2b:92:64:4b:69: f9:59:09:aa:b9:62:80:eb:5e:db:37:55:2e:5e:4a:b8:55:72: af:e3:6b:3e:a1:7d:5d:c4:dd:3b:b5:b3:d3:47:2b:46:b9:a9: c5:9d:75:e0:58:cd:3a:7b:e3:36:c3:38:54:c6:9e:62:35:1b: dd:d1:b7:0e:85:8d:31:1b:b3:40:99:29:87:e9:07:32:ff:4e: 97:17:75:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC84sYN1/aiDSe38lRwQ95ZhqvecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNDExMjAxODQ2NTFaFw0yNDExMjQwNjI1NTFaMDMxMTAvBgNV BAMTKDE4ODczN0I0NURFOThCMDYwREYyQ0YxNTQ2NEJFQTA2NTI5RDlDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR1T8m3Mi4pDdCe5HvOnck70uS zic4IVaz/AgoDQig6Xq+F39829XBJVnbhPoW7pogKCP3c7JBfdIHH8ILtl27mQHx DkvVIU0bcbEe84wGFm3NXpufdic9L/5LFORj7B3jm1LUF/w1dmeaOZIen2MUmK7D eo9wpScjmvcnqm81ADu3Yh6JzYtenTcSAbOHmdDq9ILzjYCmSXcQO/CNJnLbv526 a3hIRty+X31i2rHllnyWnqpWJHak3UjQRUmCff47KxT89gYe9MTfHkjdZS8RiXxA vCGUE7LyrwBcGWVFbMKtaHXtLOH9Djd3aYs1CoixtxFAJQfJC3IinniNA6FxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGIc3tF3piwYN8s8VRkvqBlKdnFIwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbVZjV0PluQsDmH4dKk8Ba5KZDpYPajEvNq M4tDrqm3EzjEOP9V7jmGXvS1zrhTG4cOhZMjIYxQlB4hJeEFYvV19c+Bl9x3iRHx csjVC2GTwswOu46llfiPuB+dGCtiX3wbNWPnnZH98f5ijDmEq7TEtCU8Rq8K62iv 4OeyLndhhuKqUUQOltB7i773gSxXrGcpuzaH//J8Gdobuw7PdesKDkQPRwW48j+J HysdtEsrkmRLaflZCaq5YoDrXts3VS5eSrhVcq/jaz6hfV3E3Tu1s9NHK0a5qcWd deBYzTp74zbDOFTGnmI1G93Rtw6FjTEbs0CZKYfpBzL/TpcXdcA= -----END CERTIFICATE-----Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org