$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: kfyDNfARGjZMCW4nRD3JN3zATba5xqdxeT5PWIEYfFI= Subject key identifier: 46:A8:2F:F4:ED:83:CF:EE:C4:D7:DB:27:9D:51:A8:2B:FD:97:F6:DD Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 22238B495941012A6B94DDDACB1B7C356D6341FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0482 Signing time: Wed 20 Nov 2024 16:22:13 +0000 Manifest this update: Wed 20 Nov 2024 16:17:13 +0000 Manifest next update: Sat 23 Nov 2024 23:40:13 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 3IyEShEeofzEZUvsp/9YLk7A3IOTw4ew58ZAJ0GoCYA=) 2: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: tZ9O9jaZOAQtWG+S94wZvA2gqOuzCKIKS3Pq6KkfutA=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 8iuxlfUHlShVLXZPa/rNG/34daU402Tq6bUHq+eNs5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:23:8b:49:59:41:01:2a:6b:94:dd:da:cb:1b:7c:35:6d:63:41:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Nov 20 16:17:13 2024 GMT Not After : Nov 23 23:40:13 2024 GMT Subject: CN=46A82FF4ED83CFEEC4D7DB279D51A82BFD97F6DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:ee:3b:86:a6:24:de:83:33:7a:69:47:a7: f9:6e:ac:3f:28:40:fd:f7:c9:1c:83:71:38:90:e2: 50:d1:fe:0c:ab:c8:f5:98:60:1e:9c:28:95:f6:38: d4:bb:97:f6:55:c8:06:ff:e0:91:94:0d:ae:e4:0d: d8:48:fa:6c:e7:05:81:38:55:a8:96:f2:d9:af:95: 4b:87:4a:cf:be:70:83:09:d4:9f:d7:b5:b2:13:bd: 0c:fd:a3:52:a4:d3:94:2c:16:7e:c7:7d:da:a0:03: cc:4a:0a:f5:29:c9:f2:b8:ff:ca:f8:1c:0c:44:aa: 10:62:1c:2d:c6:8b:26:7a:d4:4a:e7:c6:aa:a6:ed: 62:df:2b:7f:7b:46:f4:8d:36:a2:f3:b7:d4:da:41: 42:db:9d:01:7d:54:74:f8:04:39:06:f7:1d:21:1a: 97:ec:03:04:f4:d8:54:f1:c3:5c:04:fa:40:5c:f8: 27:f5:b6:82:88:a6:d9:4a:4e:73:aa:8a:ff:66:76: d1:da:9b:fc:4b:71:59:fc:c8:7b:7f:f4:77:eb:ca: d2:7f:e4:14:01:48:a3:3c:e1:a8:ad:60:02:a3:9f: 50:6b:20:26:4f:aa:6d:05:ff:fb:ac:70:01:43:23: c5:f8:3c:cc:fb:9e:87:5d:59:25:b7:55:d8:2a:53: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A8:2F:F4:ED:83:CF:EE:C4:D7:DB:27:9D:51:A8:2B:FD:97:F6:DD X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:bb:26:38:48:3d:23:b6:b6:06:64:2a:26:69:7e:9d:4c:01: 87:c4:3b:fd:02:bc:47:ee:e0:6c:a5:ab:96:30:0f:54:a9:be: 7a:dd:bc:0d:8f:e3:7e:74:10:b6:63:aa:62:d4:14:84:e9:de: 74:9a:95:28:52:ee:cc:67:5b:78:50:3c:8f:cc:dd:e7:4d:e9: e3:7c:d1:9d:84:db:1d:ce:3e:72:f9:2e:67:9b:c0:52:8a:e0: e9:60:7c:0e:54:37:7a:9c:65:df:6d:64:2c:6c:d2:40:85:5c: ad:0f:83:aa:f1:02:21:fa:d1:6b:2f:c7:9e:ae:23:24:0b:37: 60:9d:f1:b5:81:08:3d:47:f0:49:f4:bc:ab:05:26:c6:e2:c8: a4:5e:85:78:76:cf:64:8d:c5:23:73:28:be:ed:76:7a:f6:ba: 4c:60:bf:86:14:14:cd:81:f5:bf:d1:14:9c:67:fc:e4:06:fe: fc:63:f2:08:c8:c8:d8:11:71:a5:bc:a9:29:fa:32:61:53:fc: c7:60:b7:94:c1:a9:22:fd:26:3c:6d:70:59:f7:1d:14:c7:0c: 66:2b:1a:5b:15:3c:cc:d4:15:53:81:74:49:3b:4b:c6:c2:d0: 66:a7:ef:8e:2e:ad:d8:9e:e9:cc:e5:64:78:fa:d2:b2:c6:7c: 69:db:4a:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIiOLSVlBASprlN3ayxt8NW1jQf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNDExMjAxNjE3MTNaFw0yNDExMjMyMzQwMTNaMDMxMTAvBgNV BAMTKDQ2QTgyRkY0RUQ4M0NGRUVDNEQ3REIyNzlENTFBODJCRkQ5N0Y2REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jO47hqYk3oMzemlHp/lurD8o QP33yRyDcTiQ4lDR/gyryPWYYB6cKJX2ONS7l/ZVyAb/4JGUDa7kDdhI+mznBYE4 VaiW8tmvlUuHSs++cIMJ1J/XtbITvQz9o1Kk05QsFn7HfdqgA8xKCvUpyfK4/8r4 HAxEqhBiHC3GiyZ61Ernxqqm7WLfK397RvSNNqLzt9TaQULbnQF9VHT4BDkG9x0h GpfsAwT02FTxw1wE+kBc+Cf1toKIptlKTnOqiv9mdtHam/xLcVn8yHt/9HfrytJ/ 5BQBSKM84aitYAKjn1BrICZPqm0F//uscAFDI8X4PMz7noddWSW3VdgqU2M/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURqgv9O2Dz+7E19snnVGoK/2X9t0wHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGC7JjhIPSO2tgZkKiZpfp1MAYfEO/0CvEfu 4Gylq5YwD1SpvnrdvA2P4350ELZjqmLUFITp3nSalShS7sxnW3hQPI/M3edN6eN8 0Z2E2x3OPnL5LmebwFKK4OlgfA5UN3qcZd9tZCxs0kCFXK0Pg6rxAiH60Wsvx56u IyQLN2Cd8bWBCD1H8En0vKsFJsbiyKRehXh2z2SNxSNzKL7tdnr2ukxgv4YUFM2B 9b/RFJxn/OQG/vxj8gjIyNgRcaW8qSn6MmFT/Mdgt5TBqSL9JjxtcFn3HRTHDGYr GlsVPMzUFVOBdEk7S8bC0Gan744urdie6czlZHj60rLGfGnbSgI= -----END CERTIFICATE-----Generated at Wed Nov 20 18:42:09 2024 by rpki-client on console-fra.rpki-client.org