$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: qY21FbmiwkieADt+h4PJks4MGRCdpxebcGDPFcHl6c8= Subject key identifier: 12:F5:A4:79:25:9F:CF:93:DC:A6:22:C1:96:7F:70:34:40:4F:CE:B7 Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 07D731AEE22DFDC417AC56505A770A97DADDCF6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: 20 Signing time: Sun 24 Nov 2024 21:01:04 +0000 Manifest this update: Sun 24 Nov 2024 20:56:04 +0000 Manifest next update: Thu 28 Nov 2024 02:19:04 +0000 Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: eKpLvQj+nJ5uGcmLTs3lDM32/li8MSIqi4cPxxFaj5s=) 2: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: YvfPaeqpPaU+b0IC5Xj4A8+S+7iTCi2OFlHCtRHoqwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d7:31:ae:e2:2d:fd:c4:17:ac:56:50:5a:77:0a:97:da:dd:cf:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Nov 24 20:56:04 2024 GMT Not After : Nov 28 02:19:04 2024 GMT Subject: CN=12F5A479259FCF93DCA622C1967F7034404FCEB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:5f:44:c3:c2:36:6a:bc:51:18:a3:24:c1: bf:61:c8:d1:dc:b1:91:44:9e:9f:31:67:fe:21:22: 42:ec:ba:0b:e1:3d:e4:fe:49:31:9c:8f:21:c0:f3: da:53:0f:bb:c9:d7:7a:4d:f3:9a:6f:fb:31:36:cf: 89:e0:eb:11:08:1f:7d:01:77:11:45:99:c9:c1:87: 69:c6:35:b4:34:7c:c6:af:72:4f:4b:77:c6:a7:b8: 1f:37:bc:d1:bf:70:d8:47:b7:77:e2:ea:18:09:53: 3d:02:00:f3:1e:1c:62:be:cf:3e:ce:b4:74:40:52: d0:b8:c4:7e:7b:e6:d2:b7:5e:08:79:38:56:04:68: c3:1d:d7:40:3a:7b:d8:24:8d:33:0c:44:16:b7:19: 13:77:bf:f0:29:30:f2:29:f6:c8:0d:9e:f5:9e:2c: 96:fa:e4:7d:f9:50:67:5e:a3:a8:3c:e2:cc:7b:8c: ea:72:4e:fe:e3:29:15:c3:41:0e:f2:08:89:72:24: c7:e0:f7:15:9a:42:6a:fd:28:ff:58:53:42:5d:5d: 29:85:5e:fe:31:7d:b5:3c:ef:13:cf:fa:b9:39:33: 98:a3:3f:eb:25:c5:7d:be:16:20:90:b7:3e:b5:88: 82:ea:b0:48:b5:00:d3:ca:dd:11:ce:97:b5:07:01: d2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F5:A4:79:25:9F:CF:93:DC:A6:22:C1:96:7F:70:34:40:4F:CE:B7 X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:95:1a:04:c1:74:1f:a6:99:a7:20:14:8c:51:85:92:a4:4b: d3:d7:59:1d:a8:e4:db:63:86:f9:b7:d4:95:ee:d7:a2:c1:be: 74:7f:8e:da:4f:c4:41:84:45:8b:27:25:bf:7d:27:fb:61:1a: 26:49:48:b1:48:8f:32:b3:db:0a:83:92:ff:5c:36:89:11:2e: f3:d6:ec:eb:89:b5:ef:27:80:a5:60:f3:80:b1:43:97:ed:b0: e8:7c:0e:a4:d1:e5:bb:b9:1d:e5:04:16:ee:75:3f:72:74:1c: 40:74:d0:c5:0f:81:54:d8:ba:4e:ff:5a:db:a8:21:8e:b4:19: 3a:8e:e6:ee:a0:05:ab:b6:e5:4a:9a:80:dc:43:f3:2e:ce:dd: fe:b4:7d:05:01:fe:e4:3e:ea:47:01:97:72:80:7b:25:13:50: 0d:6f:04:51:19:7d:ee:c2:6c:9c:a6:73:a5:da:d4:46:97:36: 29:d8:04:a0:50:9e:d2:8f:76:bd:87:b8:0e:20:d2:60:29:2f: 67:c3:3b:b4:ad:15:ef:8a:ba:33:ca:f3:10:a5:11:fb:0b:66: 14:59:21:fe:8c:52:cf:6b:1c:36:44:79:01:1c:6c:1e:07:8f: 6e:d4:cc:8d:50:35:e9:b2:24:95:da:42:2b:e7:d0:ee:b1:dd: f3:4d:68:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB9cxruIt/cQXrFZQWncKl9rdz24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNDExMjQyMDU2MDRaFw0yNDExMjgwMjE5MDRaMDMxMTAvBgNV BAMTKDEyRjVBNDc5MjU5RkNGOTNEQ0E2MjJDMTk2N0Y3MDM0NDA0RkNFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpF9Ew8I2arxRGKMkwb9hyNHc sZFEnp8xZ/4hIkLsugvhPeT+STGcjyHA89pTD7vJ13pN85pv+zE2z4ng6xEIH30B dxFFmcnBh2nGNbQ0fMavck9Ld8anuB83vNG/cNhHt3fi6hgJUz0CAPMeHGK+zz7O tHRAUtC4xH575tK3Xgh5OFYEaMMd10A6e9gkjTMMRBa3GRN3v/ApMPIp9sgNnvWe LJb65H35UGdeo6g84sx7jOpyTv7jKRXDQQ7yCIlyJMfg9xWaQmr9KP9YU0JdXSmF Xv4xfbU87xPP+rk5M5ijP+slxX2+FiCQtz61iILqsEi1ANPK3RHOl7UHAdLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEvWkeSWfz5PcpiLBln9wNEBPzrcwHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeVGgTBdB+mmacgFIxRhZKkS9PXWR2o5Ntj hvm31JXu16LBvnR/jtpPxEGERYsnJb99J/thGiZJSLFIjzKz2wqDkv9cNokRLvPW 7OuJte8ngKVg84CxQ5ftsOh8DqTR5bu5HeUEFu51P3J0HEB00MUPgVTYuk7/Wtuo IY60GTqO5u6gBau25UqagNxD8y7O3f60fQUB/uQ+6kcBl3KAeyUTUA1vBFEZfe7C bJymc6Xa1EaXNinYBKBQntKPdr2HuA4g0mApL2fDO7StFe+KujPK8xClEfsLZhRZ If6MUs9rHDZEeQEcbB4Hj27UzI1QNemyJJXaQivn0O6x3fNNaOg= -----END CERTIFICATE-----Generated at Sun Nov 24 22:10:13 2024 by rpki-client on console-fra.rpki-client.org