$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft File: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft (raw, json) Hash identifier: NbgtUkDKpM7/H30mnuw02RnCpJvlDmUKSlxfdC6VRDQ= Subject key identifier: F9:D8:63:C9:FC:42:19:AD:7B:91:CB:E8:C2:CD:D1:CA:63:17:FD:59 Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 Certificate issuer: /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Certificate serial: 50420640E654ACE8B93328CC59F689B85EADD524 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft Manifest number: 42 Signing time: Wed 20 Nov 2024 17:21:25 +0000 Manifest this update: Wed 20 Nov 2024 17:16:25 +0000 Manifest next update: Sun 24 Nov 2024 02:56:25 +0000 Files and hashes: 1: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: AQ/XbNtQ/usULfQJtLCL3mFKNbrAAIw3wfJcq0cJVZw=) 2: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: Y/doWNbWUjrAfR7a7RLOOLbQ7NMKmQyXcM9/LNTkG10=) 3: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: xMz0teE1p1kEY5ZQ5XTsbcBvNPdZWzBVIbvjKuWV4qU=) 4: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl (hash: HdGTtCt3OOrGTaH+lJpMqbYm8fJEtCJ5dK+O9LJ3t9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:42:06:40:e6:54:ac:e8:b9:33:28:cc:59:f6:89:b8:5e:ad:d5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Validity Not Before: Nov 20 17:16:25 2024 GMT Not After : Nov 24 02:56:25 2024 GMT Subject: CN=F9D863C9FC4219AD7B91CBE8C2CDD1CA6317FD59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:80:d5:b9:0c:68:68:0f:ac:d6:ed:30:d9: 7a:ab:ee:e8:29:a7:bb:d8:dd:6a:56:80:3c:6e:c5: 62:57:0e:18:9e:a8:fe:fc:9a:c6:28:6b:89:5d:09: d3:bb:4f:c1:b2:f7:6e:94:57:64:b4:3d:e0:b9:39: e4:e6:1a:a7:49:23:00:95:78:df:f3:df:6b:c0:2b: 2c:bb:ca:57:fd:a7:68:fe:e8:1d:b6:b9:2f:82:34: 6a:ec:e2:36:fa:34:b8:1a:32:c5:ec:b1:fe:ce:ab: 5c:b1:51:46:64:b9:d1:85:94:27:4c:2e:9a:ec:a5: e8:0b:2d:1b:f6:2d:97:66:23:aa:a4:be:a9:18:82: 70:14:b5:d6:a7:12:39:cb:96:4e:0c:c9:4a:ff:8e: 5e:0e:90:ad:6c:5d:f7:a3:83:a8:61:06:75:ab:b5: fe:ef:84:7e:a5:d1:dc:da:af:8e:a6:27:db:5a:6e: 00:e9:4f:d6:b2:87:db:03:33:8d:d7:0f:02:41:fa: 3b:fd:79:51:c2:09:c4:92:71:b3:57:1e:2d:3c:8c: 13:8d:9e:5c:53:26:93:9d:df:23:92:e4:e1:91:9c: 65:45:67:13:7b:f0:02:67:7d:da:f1:00:16:fe:82: b3:e5:fb:55:cd:f2:e1:1b:f0:d9:fe:58:a0:de:57: 8e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D8:63:C9:FC:42:19:AD:7B:91:CB:E8:C2:CD:D1:CA:63:17:FD:59 X509v3 Authority Key Identifier: keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3e:5f:90:47:d5:53:68:9d:75:70:8e:c3:44:46:07:0e:6e: a3:55:a9:e3:cd:f1:8e:a6:f6:20:b3:a9:57:37:a4:31:80:83: fd:33:f0:b3:1c:d9:67:49:28:29:46:4d:f6:54:a2:27:94:fd: ec:09:f5:bf:4b:a7:96:e6:14:69:8f:43:d2:b9:4e:8f:76:48: 53:0d:92:03:f8:a5:63:82:e5:7d:40:78:a9:9f:df:69:20:a8: ae:fc:c4:c8:8f:ca:69:69:08:8d:99:25:5c:2a:ce:01:e9:68: 0c:08:a0:4e:85:5a:21:76:9a:c3:60:32:57:92:85:0f:1e:93: ee:34:36:22:81:57:ce:bb:64:14:87:a1:3e:27:24:af:94:7b: ea:47:90:b1:4e:77:8e:9e:ee:28:83:f0:d5:83:c6:20:1b:ec: 88:b2:bb:f1:b2:e2:26:3d:94:eb:43:05:24:ad:19:77:d9:25: 86:d2:91:98:79:ed:f5:c2:23:f7:74:fa:f8:c4:ae:f6:2b:0d: 5d:f1:94:e2:3a:39:c4:61:ca:9f:c0:5e:8b:1b:c6:4f:b3:fb: 03:af:8c:6a:c6:4c:8e:3d:91:f7:45:df:3a:d6:26:42:86:2d: ec:d3:42:3c:64:92:e1:d1:1f:dd:cb:bb:f7:b9:0b:7f:ad:60: 4f:f5:a4:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUEIGQOZUrOi5MyjMWfaJuF6t1SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURENzU3 RTc4ODBCMDAeFw0yNDExMjAxNzE2MjVaFw0yNDExMjQwMjU2MjVaMDMxMTAvBgNV BAMTKEY5RDg2M0M5RkM0MjE5QUQ3QjkxQ0JFOEMyQ0REMUNBNjMxN0ZENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxCIDVuQxoaA+s1u0w2Xqr7ugp p7vY3WpWgDxuxWJXDhieqP78msYoa4ldCdO7T8Gy926UV2S0PeC5OeTmGqdJIwCV eN/z32vAKyy7ylf9p2j+6B22uS+CNGrs4jb6NLgaMsXssf7Oq1yxUUZkudGFlCdM LprspegLLRv2LZdmI6qkvqkYgnAUtdanEjnLlk4MyUr/jl4OkK1sXfejg6hhBnWr tf7vhH6l0dzar46mJ9tabgDpT9ayh9sDM43XDwJB+jv9eVHCCcSScbNXHi08jBON nlxTJpOd3yOS5OGRnGVFZxN78AJnfdrxABb+grPl+1XN8uEb8Nn+WKDeV47rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+dhjyfxCGa17kcvows3RymMX/VkwHwYDVR0j BBgwFoAUB61YCrXNdrlIVvmsdC7ddX54gLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMC8wN0FENTgwQUI1 Q0Q3NkI5NDg1NkY5QUM3NDJFREQ3NTdFNzg4MEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURENzU3RTc4 ODBCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI1NmJiYmEtMTgyNi00ZDg2LWI4 NzMtMmY2ZGQ2MzI1NzcxLzAvMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURE NzU3RTc4ODBCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIo+X5BH1VNonXVwjsNERgcObqNVqePN8Y6m 9iCzqVc3pDGAg/0z8LMc2WdJKClGTfZUoieU/ewJ9b9Lp5bmFGmPQ9K5To92SFMN kgP4pWOC5X1AeKmf32kgqK78xMiPymlpCI2ZJVwqzgHpaAwIoE6FWiF2msNgMleS hQ8ek+40NiKBV867ZBSHoT4nJK+Ue+pHkLFOd46e7iiD8NWDxiAb7Iiyu/Gy4iY9 lOtDBSStGXfZJYbSkZh57fXCI/d0+vjErvYrDV3xlOI6OcRhyp/AXosbxk+z+wOv jGrGTI49kfdF3zrWJkKGLezTQjxkkuHRH93Lu/e5C3+tYE/1pO0= -----END CERTIFICATE-----Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org