$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: O7FQkveLsOEAU1KomCe9CBdwXf/rD97JE6/MDpLdXPw= Subject key identifier: B2:23:F6:B4:EE:74:4C:64:0D:F7:4F:84:20:59:0D:CA:0B:48:56:4B Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 13E639EEABDD9F6C2B502689F235754812DE7676 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 0492 Signing time: Fri 22 Nov 2024 09:02:07 +0000 Manifest this update: Fri 22 Nov 2024 08:57:07 +0000 Manifest next update: Mon 25 Nov 2024 18:43:07 +0000 Files and hashes: 1: 3130332e3232392e3136332e302f32342d3234203d3e203539323838.roa (hash: 9t5jaF/sUgSbxY8Cz9RpcIzWHBkh738wIm0sYN9Y18E=) 2: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: XHXYPgamTW9Muchh6ZbH/UiIDp5u3jzHjvNeb6DMVFg=) 3: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: PJNdW/jPDCi4OnaMwTB5HhmqSaNIxJPSQDfjtrHqN5w=) 4: 3130332e3232392e3136312e302f32342d3234203d3e203539323838.roa (hash: K92crqS5iSS81LOQpQQJN8GiwTH5ZwgilSXiuua4MfI=) 5: 3130332e3232392e3136322e302f32342d3234203d3e203539323838.roa (hash: GfzfBdTg8EGjgrPPzHMFf7asLdMNg5rVgiw2FS33DYc=) 6: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: p9nIhhAXDA1VGK03OeTNU5iCdtRuqI9pYS72qu+FFmM=) 7: 3130332e3232392e3136302e302f32342d3234203d3e203539323838.roa (hash: mEzd38YxKhJp+MBizFTrVMus18X/KqN2dgbg6ZALV3A=) 8: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: O8kAH8t08+9DH7Rdkzs7sp0HA8ViQO+3lyriqTCqhRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e6:39:ee:ab:dd:9f:6c:2b:50:26:89:f2:35:75:48:12:de:76:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Nov 22 08:57:07 2024 GMT Not After : Nov 25 18:43:07 2024 GMT Subject: CN=B223F6B4EE744C640DF74F8420590DCA0B48564B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:2d:5a:c0:21:4c:80:92:b3:6f:35:34:0a: d5:ac:02:93:9e:45:46:3f:d3:f5:b3:a4:e5:38:ac: 5f:45:0b:90:49:78:08:29:f4:25:2e:ca:c0:3a:c5: a1:36:7c:3e:5e:d2:8e:a6:31:ba:4a:da:32:71:6d: aa:44:5f:46:cc:79:0f:bf:1f:f4:78:46:09:d7:53: 62:d9:1d:bf:21:d8:9a:3a:5a:29:c8:10:c3:f7:3b: 17:0d:02:74:29:b8:a5:f6:f4:7c:a6:46:db:25:34: c4:e4:fb:d6:96:05:5d:33:33:93:e1:3e:2f:67:37: b1:35:95:ae:ca:d1:b1:7b:c8:be:97:0e:70:b0:51: 45:9b:f7:ee:80:82:8b:99:95:dd:eb:5b:2c:e8:f8: 56:4b:b5:8d:ee:35:0c:c0:7e:59:bf:78:97:46:f6: 56:6f:c5:5d:1b:34:d8:83:ff:1b:84:e5:9b:da:e3: ed:c0:94:38:37:4b:9a:04:ba:7a:af:61:01:6a:89: 99:15:0d:c2:a3:77:60:17:41:c5:5e:9a:cb:55:ba: fb:6b:4c:a9:58:9b:5d:35:1d:ea:f9:d9:f9:a9:5d: 3b:4e:e8:b2:cc:5f:3c:42:76:27:4b:74:11:29:54: 1e:9f:cd:d1:aa:ab:75:f2:ac:5d:43:5f:74:58:13: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:23:F6:B4:EE:74:4C:64:0D:F7:4F:84:20:59:0D:CA:0B:48:56:4B X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f4:a2:70:02:77:15:dd:ac:3c:11:43:74:fa:96:60:5f:8c: 6a:3f:30:19:14:13:8f:78:66:fc:7f:4c:2b:64:b6:72:fb:92: df:37:64:ea:82:80:01:85:09:9e:67:9c:bb:56:be:50:2a:7d: 71:03:26:b2:7f:08:2c:8c:57:34:a0:b3:35:e2:3d:65:93:1d: f9:6d:79:39:7b:32:e0:6d:5f:d7:d4:9a:7d:ee:35:ee:a9:31: 8b:84:4d:94:1e:5e:7c:f7:2c:52:d2:46:25:27:de:49:c2:f8: b8:97:cb:ed:4c:50:51:fc:51:83:a9:6c:f6:30:97:c1:dd:9d: 34:81:21:a6:f5:27:aa:a6:33:1c:69:45:74:4d:3c:70:ba:b4: 57:82:90:46:ba:9f:83:24:78:4e:82:d9:a1:03:0f:54:cc:24: 23:f3:cf:dc:a9:41:2e:70:53:5a:b7:41:b1:0b:fb:df:79:28: af:58:17:eb:e4:bb:9d:4c:6a:d7:ed:0b:a7:bd:00:ac:a9:ff: c7:b4:0b:56:e8:c7:f1:56:0d:81:b0:10:e0:a2:f1:72:04:4b: d9:8c:63:28:1c:83:35:1d:63:10:fc:6e:9c:b1:25:3e:ce:cf: 53:fe:8e:c1:ca:e7:57:8a:81:c3:06:2e:8a:4d:7d:28:1b:61: ee:94:3a:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+Y57qvdn2wrUCaJ8jV1SBLednYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNDExMjIwODU3MDdaFw0yNDExMjUxODQzMDdaMDMxMTAvBgNV BAMTKEIyMjNGNkI0RUU3NDRDNjQwREY3NEY4NDIwNTkwRENBMEI0ODU2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkDy1awCFMgJKzbzU0CtWsApOe RUY/0/WzpOU4rF9FC5BJeAgp9CUuysA6xaE2fD5e0o6mMbpK2jJxbapEX0bMeQ+/ H/R4RgnXU2LZHb8h2Jo6WinIEMP3OxcNAnQpuKX29HymRtslNMTk+9aWBV0zM5Ph Pi9nN7E1la7K0bF7yL6XDnCwUUWb9+6AgouZld3rWyzo+FZLtY3uNQzAflm/eJdG 9lZvxV0bNNiD/xuE5Zva4+3AlDg3S5oEunqvYQFqiZkVDcKjd2AXQcVemstVuvtr TKlYm101Her52fmpXTtO6LLMXzxCdidLdBEpVB6fzdGqq3XyrF1DX3RYE3zRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsiP2tO50TGQN90+EIFkNygtIVkswHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKX0onACdxXdrDwRQ3T6lmBfjGo/MBkUE494 Zvx/TCtktnL7kt83ZOqCgAGFCZ5nnLtWvlAqfXEDJrJ/CCyMVzSgszXiPWWTHflt eTl7MuBtX9fUmn3uNe6pMYuETZQeXnz3LFLSRiUn3knC+LiXy+1MUFH8UYOpbPYw l8HdnTSBIab1J6qmMxxpRXRNPHC6tFeCkEa6n4MkeE6C2aEDD1TMJCPzz9ypQS5w U1q3QbEL+995KK9YF+vku51MatftC6e9AKyp/8e0C1box/FWDYGwEOCi8XIES9mM YygcgzUdYxD8bpyxJT7Oz1P+jsHK51eKgcMGLopNfSgbYe6UOqQ= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org