$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft File: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft (raw, json) Hash identifier: X6KEdVh+b1pT6iRk7H/6DkWLXt4u47fgYVz+Dj2ZFyg= Subject key identifier: DD:D6:56:03:8A:C3:BD:34:3B:94:CC:F5:E3:84:2F:07:C0:CB:6C:C3 Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Certificate serial: 60E5CF7EC58F59017A3219B6BF52FA1D4103B4C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft Manifest number: 0408 Signing time: Thu 21 Nov 2024 08:50:49 +0000 Manifest this update: Thu 21 Nov 2024 08:45:49 +0000 Manifest next update: Sun 24 Nov 2024 17:03:49 +0000 Files and hashes: 1: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: aV3ZPEDkk9pkPeRsaffKFxqQrrWxvO7+4mI9TdYcewg=) 2: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: WZEcRoBw5pAR5VSb916+kaVDUlS4wq/ib5rS3X/sotw=) 3: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: 3OXjddu9GYm+pnGIRRvw8uTtgTnaQOQocX2ZWf81HfA=) 4: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: UmfhnL8RZYJSndBdwe7iI677EbidAY8O+tflsfoU+/Y=) 5: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl (hash: T9W/KogORHeQTyyXEUnaVTHFVKIs08l97M3kg+Lkh7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e5:cf:7e:c5:8f:59:01:7a:32:19:b6:bf:52:fa:1d:41:03:b4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Validity Not Before: Nov 21 08:45:49 2024 GMT Not After : Nov 24 17:03:49 2024 GMT Subject: CN=DDD656038AC3BD343B94CCF5E3842F07C0CB6CC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:8c:c5:64:66:fe:39:20:8b:e2:5f:41:e5: 80:90:fd:6d:37:43:8d:33:a8:63:56:82:28:ab:d5: 88:9a:e3:1f:d9:1c:6d:67:0e:bd:03:12:fb:f2:c0: 7d:49:47:d3:69:fc:2e:5b:d9:98:ca:a5:88:03:45: a7:af:90:84:78:3a:7c:08:e1:d1:a8:c4:ed:5c:f7: 53:06:6f:2d:d6:1f:ab:3c:93:28:b3:a3:ba:81:00: e8:f2:20:ca:e9:34:57:4d:a9:b9:6d:c3:ce:37:78: b2:e4:ef:99:12:7e:97:f9:eb:5c:02:22:cb:ed:bd: 50:5d:da:24:bd:43:dd:f1:6f:87:00:37:a9:22:52: f0:45:a2:29:fd:0f:91:f7:17:62:68:b9:a0:44:06: f9:83:d3:1f:6b:56:aa:d6:d1:e0:36:44:73:27:22: 5a:a7:fb:5e:76:66:b5:c7:18:28:ba:b3:f2:1e:bd: 09:a8:53:ec:ed:c4:54:8a:5d:62:5c:10:da:f1:c1: 51:b8:db:e5:56:1e:cd:db:26:2a:64:e3:2c:33:37: 7b:11:59:90:e1:86:1b:66:e1:db:96:67:64:f8:51: 56:ce:b4:51:24:6e:c1:f5:26:4f:f0:9c:59:8d:cf: f4:cf:c1:84:14:61:91:dd:8e:fb:91:13:ab:11:d6: 06:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D6:56:03:8A:C3:BD:34:3B:94:CC:F5:E3:84:2F:07:C0:CB:6C:C3 X509v3 Authority Key Identifier: keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ea:70:9b:31:2e:8b:2c:1d:a2:8d:a5:4f:4a:61:fe:52:0d: 75:45:56:3d:b5:c9:12:ad:d6:55:fb:75:b4:92:22:e0:82:57: 6b:c1:fc:52:af:a1:d9:b5:38:00:31:e9:96:9c:71:6b:07:4d: 87:86:14:4b:13:de:f2:a7:0a:e4:3d:0c:8a:d8:e8:16:97:39: 52:d5:d9:4d:2f:76:83:d1:57:85:dc:1b:93:4e:63:65:45:fd: 7f:c4:69:0b:c5:1f:cc:f3:87:52:b0:3c:dd:84:89:b3:96:83: cf:5f:81:b3:75:51:e0:8d:54:c9:11:6a:0b:92:51:b8:64:f5: 05:37:f5:67:35:db:0f:f4:f2:38:a0:c9:b1:75:e8:d3:2c:8d: c5:8f:4b:1c:dd:ae:e7:e4:52:bc:8a:c7:e4:33:9f:fa:56:cd: 5e:53:3c:69:f8:87:68:15:ae:37:a9:50:3d:8e:bd:7d:47:37: e4:10:00:dd:d2:83:89:5c:af:42:b1:a2:3e:86:67:f5:b0:6d: d0:a6:bc:1d:de:52:25:f2:be:76:3d:7b:bf:36:02:eb:43:02: d9:93:29:82:c8:77:46:b6:f0:66:47:55:32:dd:7e:ee:f5:85: 99:ae:c9:c9:b3:0b:17:6c:41:c0:da:50:fa:4a:f1:ca:8d:1e: 8f:7c:27:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOXPfsWPWQF6Mhm2v1L6HUEDtMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0Qy ODlBQkZGOTAeFw0yNDExMjEwODQ1NDlaFw0yNDExMjQxNzAzNDlaMDMxMTAvBgNV BAMTKERERDY1NjAzOEFDM0JEMzQzQjk0Q0NGNUUzODQyRjA3QzBDQjZDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGIzFZGb+OSCL4l9B5YCQ/W03 Q40zqGNWgiir1Yia4x/ZHG1nDr0DEvvywH1JR9Np/C5b2ZjKpYgDRaevkIR4OnwI 4dGoxO1c91MGby3WH6s8kyizo7qBAOjyIMrpNFdNqbltw843eLLk75kSfpf561wC IsvtvVBd2iS9Q93xb4cAN6kiUvBFoin9D5H3F2JouaBEBvmD0x9rVqrW0eA2RHMn Ilqn+152ZrXHGCi6s/IevQmoU+ztxFSKXWJcENrxwVG42+VWHs3bJipk4ywzN3sR WZDhhhtm4duWZ2T4UVbOtFEkbsH1Jk/wnFmNz/TPwYQUYZHdjvuRE6sR1gYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3dZWA4rDvTQ7lMz144QvB8DLbMMwHwYDVR0j BBgwFoAUILFclfozUUAtYOlorR2ezSiav/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTQxOTNjNC00YWJkLTRlMmMtYTFkMC0xYjVjZTMyZTQyMGIvMC8yMEIxNUM5NUZB MzM1MTQwMkQ2MEU5NjhBRDFEOUVDRDI4OUFCRkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0QyODlB QkZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlF Q0QyODlBQkZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXqcJsxLossHaKNpU9KYf5SDXVFVj21yRKt 1lX7dbSSIuCCV2vB/FKvodm1OAAx6ZaccWsHTYeGFEsT3vKnCuQ9DIrY6BaXOVLV 2U0vdoPRV4XcG5NOY2VF/X/EaQvFH8zzh1KwPN2EibOWg89fgbN1UeCNVMkRaguS Ubhk9QU39Wc12w/08jigybF16NMsjcWPSxzdrufkUryKx+Qzn/pWzV5TPGn4h2gV rjepUD2OvX1HN+QQAN3Sg4lcr0Kxoj6GZ/WwbdCmvB3eUiXyvnY9e782AutDAtmT KYLId0a28GZHVTLdfu71hZmuycmzCxdsQcDaUPpK8cqNHo98Jxk= -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org