$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: 5j385HksIHTNkt2I1NkCZXxlPoTrSNEecbEYBrT7usA= Subject key identifier: 46:8B:68:B3:C2:8E:0F:40:54:42:4F:D9:8E:70:E1:B1:8A:79:39:1F Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 0BC9BECA45C12C6389E13C28E5B8CF068E0C98F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 027F Signing time: Fri 22 Nov 2024 01:31:54 +0000 Manifest this update: Fri 22 Nov 2024 01:26:54 +0000 Manifest next update: Mon 25 Nov 2024 09:11:54 +0000 Files and hashes: 1: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: lW7X67fwmECw8f6uOFwcj640yGvhwlBqgUt9YeglsTg=) 2: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: uWSusGbcUVHTz7ytxdLLTAbLCAJbejPZyjiigsETog4=) 3: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: v0HVaWQj08W1Myr6GFwoDx3Lby4cEZzdthgzjRd7E9w=) 4: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: MFT7lTUPB32/8nhRTpi/8ozLAMPCT1daaMi+5rGDJF0=) 5: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: qq/bBbe3IiCxD990Ap9csNsNIb9hOsP2lHF9VR4M/LM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c9:be:ca:45:c1:2c:63:89:e1:3c:28:e5:b8:cf:06:8e:0c:98:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Nov 22 01:26:54 2024 GMT Not After : Nov 25 09:11:54 2024 GMT Subject: CN=468B68B3C28E0F4054424FD98E70E1B18A79391F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:84:50:42:44:52:60:3a:da:e9:a6:0d:90: ca:65:24:90:c6:d0:61:7b:83:5f:d4:a0:b1:2a:34: 6d:c5:f9:b9:e3:3c:9f:25:95:c3:06:72:b0:92:93: 68:2e:5f:c9:2f:ec:b8:b5:9b:6e:35:66:bc:45:15: 3e:f5:40:be:8e:3c:90:2f:5b:92:06:3b:5a:10:f3: 2e:67:40:3d:88:5c:0c:a5:fe:7e:d8:77:8e:a8:03: 2e:37:a8:b0:de:1e:7a:6d:3d:f1:20:30:dd:c7:d0: 7b:29:1a:3e:e4:e4:d4:ca:f6:45:91:81:e8:5b:8f: 58:11:81:1e:c7:fa:a6:05:d4:18:1c:ea:45:a6:a4: d5:55:74:05:31:01:fc:17:e1:56:01:b4:97:e3:b1: 6b:a0:26:9c:bc:04:94:19:ac:78:18:2b:e4:6b:6e: 0f:e0:01:09:c4:97:48:8c:91:25:ae:10:92:c1:73: da:81:07:f3:36:db:fd:ab:5e:34:48:da:37:7a:cb: 66:1e:de:1f:be:a9:6d:ca:aa:79:7e:4a:a8:ae:37: 28:c2:89:46:46:b2:6d:33:67:8d:df:c1:65:8f:8c: ba:0f:f3:98:fb:78:5a:75:fb:81:a7:5b:43:07:2d: a6:5d:2c:30:53:99:d0:b5:a1:0f:f9:44:b6:28:b9: 8b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8B:68:B3:C2:8E:0F:40:54:42:4F:D9:8E:70:E1:B1:8A:79:39:1F X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a3:c3:ab:f6:27:e1:5a:e2:6e:ec:21:a3:c2:40:22:af:62: 7f:73:b4:e6:ab:59:30:d8:0e:7d:22:0a:64:ec:75:e1:82:d2: 67:97:88:80:4a:d4:fc:7e:07:c7:1a:2e:24:33:80:99:7a:46: ae:ed:82:f7:9d:24:6c:d7:86:63:99:20:d4:76:8e:0d:88:1e: fe:e7:a6:fb:73:81:35:5d:68:af:e9:12:8e:cd:00:92:ce:23: 92:26:89:59:6f:d0:52:44:34:2b:35:e2:1c:0f:1e:62:d5:15: b8:48:80:99:4a:13:a7:7c:13:70:5b:c7:0f:ad:4c:6b:78:c6: d5:de:42:64:2f:4f:05:21:af:50:b7:2d:0c:bd:fa:a5:a4:ef: 12:90:0e:ed:88:66:a5:5d:23:49:d0:f4:94:03:d5:47:b6:0b: ae:ec:7c:f7:98:7e:71:78:f8:64:1c:aa:1f:ff:e3:00:8e:a3: a6:25:80:fc:9b:b0:f3:4f:93:f0:45:23:15:1b:99:e0:a9:28: 6e:b8:43:a4:eb:76:08:a5:f8:ab:4a:5d:69:5b:dc:ba:cf:37: b7:cb:b7:e9:e9:7e:df:3a:5b:ab:e1:32:6b:26:d5:4b:9d:26: c8:ec:aa:9f:ac:ce:a4:e8:a4:b1:9a:bc:8a:1f:ba:4e:30:16: d5:ba:05:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8m+ykXBLGOJ4Two5bjPBo4MmPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNDExMjIwMTI2NTRaFw0yNDExMjUwOTExNTRaMDMxMTAvBgNV BAMTKDQ2OEI2OEIzQzI4RTBGNDA1NDQyNEZEOThFNzBFMUIxOEE3OTM5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTEoRQQkRSYDra6aYNkMplJJDG 0GF7g1/UoLEqNG3F+bnjPJ8llcMGcrCSk2guX8kv7Li1m241ZrxFFT71QL6OPJAv W5IGO1oQ8y5nQD2IXAyl/n7Yd46oAy43qLDeHnptPfEgMN3H0HspGj7k5NTK9kWR gehbj1gRgR7H+qYF1Bgc6kWmpNVVdAUxAfwX4VYBtJfjsWugJpy8BJQZrHgYK+Rr bg/gAQnEl0iMkSWuEJLBc9qBB/M22/2rXjRI2jd6y2Ye3h++qW3Kqnl+SqiuNyjC iUZGsm0zZ43fwWWPjLoP85j7eFp1+4GnW0MHLaZdLDBTmdC1oQ/5RLYouYsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURotos8KOD0BUQk/ZjnDhsYp5OR8wHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmjw6v2J+Fa4m7sIaPCQCKvYn9ztOarWTDY Dn0iCmTsdeGC0meXiIBK1Px+B8caLiQzgJl6Rq7tgvedJGzXhmOZINR2jg2IHv7n pvtzgTVdaK/pEo7NAJLOI5ImiVlv0FJENCs14hwPHmLVFbhIgJlKE6d8E3Bbxw+t TGt4xtXeQmQvTwUhr1C3LQy9+qWk7xKQDu2IZqVdI0nQ9JQD1Ue2C67sfPeYfnF4 +GQcqh//4wCOo6YlgPybsPNPk/BFIxUbmeCpKG64Q6Trdgil+KtKXWlb3LrPN7fL t+npft86W6vhMmsm1UudJsjsqp+szqTopLGavIofuk4wFtW6BXQ= -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org