$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: aqMaGJagM8zHiisukCDfA9xJuxI/JPdqCiE2OPOJdkA= Subject key identifier: AB:35:79:E3:0D:FB:75:24:53:A5:4A:5B:DC:A5:F4:1E:4C:61:DB:44 Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 50737A88E59C55B1F0B2CD2A5F8923C373C92E1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 048B Signing time: Thu 21 Nov 2024 06:50:04 +0000 Manifest this update: Thu 21 Nov 2024 06:45:04 +0000 Manifest next update: Sun 24 Nov 2024 07:10:04 +0000 Files and hashes: 1: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: b93+pZQmU5PXevCIV8/I+UyyjNhwLNY58iZkuI8/DZY=) 2: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: jKlwcNnnsnial+/jneL8P/DEDv++vIkR3WSchUhE9yQ=) 3: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: MSzljIuYQfz1eIyPrxVgE2dh+zA9wOeElTFbm36ZtIg=) 4: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: ns9PXtaKxgZQCJ0YDRzg3/HGZ6g5Dvk9tgk4KVeFibk=) 5: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: FpCRPN3/sh87yKc8VhdJ2zd+tYzqklLo+UKit0tTGBI=) 6: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: 1A22zscl81y+8Me7JbyI/ImhnylcFUs4kKMger6rCv8=) 7: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: QNOScV9kvLXfJ4ZvrZSU6WwTkajrzvaS7q6+eyoaI+A=) 8: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: s2Z9bMWQLiKwFbH9doRdyOIOSB0aQByVuaUp9ml9odE=) 9: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: AfAE6Sq3DQxMPZ3iNsBxgnE3MeI91A5NdzSsH6qy25c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:73:7a:88:e5:9c:55:b1:f0:b2:cd:2a:5f:89:23:c3:73:c9:2e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Nov 21 06:45:04 2024 GMT Not After : Nov 24 07:10:04 2024 GMT Subject: CN=AB3579E30DFB752453A54A5BDCA5F41E4C61DB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:9b:93:2b:8f:ba:64:a5:09:84:07:b1:ee: d0:5a:e7:7f:a1:c0:56:0d:b5:9c:5c:70:ec:ed:fe: b5:25:09:48:e0:82:31:17:4d:28:4e:a8:d3:ec:13: 18:aa:9c:cc:f9:25:ef:9e:02:0e:14:7d:b3:7a:8a: dd:8e:2b:c0:66:0f:f4:7c:ab:27:a9:11:b9:9f:18: 28:bd:42:a0:43:05:71:4f:dd:43:c2:12:97:63:cb: 4c:8f:ff:fa:f2:9d:0c:0b:d0:a4:49:29:a3:ba:81: 4a:b5:01:01:98:cb:89:db:06:72:07:97:41:53:45: be:8a:8f:82:48:b2:91:a6:de:52:4c:8e:61:d6:6b: f8:8e:0b:cc:1d:5a:cb:36:e4:c9:9b:72:d9:11:14: be:33:f8:3e:47:e4:33:50:d8:40:24:dc:be:c4:61: 78:ca:1e:1c:4a:b5:ba:e1:df:1d:47:cc:07:b1:da: 31:2c:c0:51:a8:a4:6e:d6:2a:48:e3:d6:6a:8a:68: f6:cc:e8:68:84:6a:27:c1:2e:cf:5d:61:60:42:46: 9f:58:e5:be:ff:31:a9:3b:f9:3f:de:0c:48:6f:a8: c0:98:b4:ae:9a:5d:44:21:c5:d7:14:3e:be:7b:86: 50:9c:42:3e:e3:24:79:e9:67:7d:bf:12:a5:b6:a7: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:35:79:E3:0D:FB:75:24:53:A5:4A:5B:DC:A5:F4:1E:4C:61:DB:44 X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:bd:3c:3e:d8:8e:c5:7b:4d:83:79:76:21:da:41:f9:42:fd: 15:cb:38:df:70:b6:f3:f4:23:4e:94:64:f3:96:25:25:0b:8e: 16:48:82:71:3e:74:29:f8:7b:37:33:6d:5a:a7:cf:85:cf:c6: 10:cc:4b:63:a5:98:53:10:db:77:4d:dc:ac:20:03:d9:73:e7: 0a:5b:fc:20:8c:00:75:86:d0:0c:e3:40:03:80:93:5d:ab:69: f9:29:43:7b:0f:11:0e:3b:91:d9:cc:9d:9c:c2:27:d8:51:f8: f0:cb:17:4e:09:b4:2f:66:bd:c6:af:ef:61:f8:f5:a4:d4:ea: 43:9a:36:16:a8:3d:5b:f5:a8:f4:9f:3c:90:33:02:b8:b0:a6: b0:b1:0f:29:66:7d:88:33:26:50:ec:c6:0f:b3:8d:76:1f:2c: 7f:f7:76:98:4a:58:37:8a:5c:33:1d:9f:ae:8a:3b:8b:93:4b: 19:4b:09:c8:fa:9b:13:24:79:26:71:80:85:ca:c5:a7:a4:25: c2:a1:9e:fb:b5:dd:f5:16:c1:7c:16:29:27:4b:f0:61:52:01: 13:d1:1e:44:91:83:8c:f9:45:b0:45:97:fc:ae:73:dc:02:e3: bd:b3:b1:31:c4:18:52:e0:e4:3e:46:4b:9d:99:05:51:e5:fb: df:a8:06:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUHN6iOWcVbHwss0qX4kjw3PJLh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNDExMjEwNjQ1MDRaFw0yNDExMjQwNzEwMDRaMDMxMTAvBgNV BAMTKEFCMzU3OUUzMERGQjc1MjQ1M0E1NEE1QkRDQTVGNDFFNEM2MURCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnM5uTK4+6ZKUJhAex7tBa53+h wFYNtZxccOzt/rUlCUjggjEXTShOqNPsExiqnMz5Je+eAg4UfbN6it2OK8BmD/R8 qyepEbmfGCi9QqBDBXFP3UPCEpdjy0yP//rynQwL0KRJKaO6gUq1AQGYy4nbBnIH l0FTRb6Kj4JIspGm3lJMjmHWa/iOC8wdWss25MmbctkRFL4z+D5H5DNQ2EAk3L7E YXjKHhxKtbrh3x1HzAex2jEswFGopG7WKkjj1mqKaPbM6GiEaifBLs9dYWBCRp9Y 5b7/Mak7+T/eDEhvqMCYtK6aXUQhxdcUPr57hlCcQj7jJHnpZ32/EqW2p1UxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqzV54w37dSRTpUpb3KX0Hkxh20QwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK69PD7YjsV7TYN5diHaQflC/RXLON9wtvP0 I06UZPOWJSULjhZIgnE+dCn4ezczbVqnz4XPxhDMS2OlmFMQ23dN3KwgA9lz5wpb /CCMAHWG0AzjQAOAk12rafkpQ3sPEQ47kdnMnZzCJ9hR+PDLF04JtC9mvcav72H4 9aTU6kOaNhaoPVv1qPSfPJAzAriwprCxDylmfYgzJlDsxg+zjXYfLH/3dphKWDeK XDMdn66KO4uTSxlLCcj6mxMkeSZxgIXKxaekJcKhnvu13fUWwXwWKSdL8GFSARPR HkSRg4z5RbBFl/yuc9wC472zsTHEGFLg5D5GS52ZBVHl+9+oBmQ= -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org