$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: QmCAR+jpqqfF0dINtteGKL7zp2FSuYm+/R1fm06Rj0c= Subject key identifier: 30:6F:2B:11:1B:66:44:49:F0:F8:44:D8:AC:AA:EB:F1:00:15:58:B6 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 49108B8A059832814DB5FB4EDC27078FAF8C734A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 014E Signing time: Mon 25 Nov 2024 03:10:55 +0000 Manifest this update: Mon 25 Nov 2024 03:05:55 +0000 Manifest next update: Thu 28 Nov 2024 14:08:55 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: /8DCqhIF/niiwSUBcSBKa7OHyNdy4y/RV89L1qBbdNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:10:8b:8a:05:98:32:81:4d:b5:fb:4e:dc:27:07:8f:af:8c:73:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Nov 25 03:05:55 2024 GMT Not After : Nov 28 14:08:55 2024 GMT Subject: CN=306F2B111B664449F0F844D8ACAAEBF1001558B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:08:55:dd:c5:59:7f:69:68:eb:6f:8b:44: 5f:38:c1:89:86:c8:fa:9c:8f:16:c5:bd:e3:d5:4b: a5:a4:b3:78:ce:59:33:bb:c9:f0:13:32:10:2c:ac: 1d:38:ff:dd:54:3b:4f:80:63:7e:b5:6c:dc:2d:71: cb:20:18:0c:2b:92:b1:f6:ce:f9:7c:02:42:37:9a: 3a:d2:94:3f:c7:a4:d5:23:4d:bb:c8:a3:3f:b1:66: 4b:d2:eb:f2:e2:08:29:d2:1e:89:82:2b:f7:c1:16: 4d:65:9d:f4:fd:26:82:23:81:80:b5:58:2e:99:49: c1:45:0b:26:66:eb:e3:3b:18:1e:08:13:a6:a6:60: 81:a0:52:30:33:46:0b:80:66:87:b1:fd:bb:f3:50: 91:ef:6e:16:75:5b:10:aa:f2:70:9c:5c:12:0b:bd: 98:8c:69:23:2c:dd:07:12:40:e6:1f:80:d0:e0:e5: 25:56:ad:31:d4:5e:04:19:92:21:d6:75:a7:dd:5b: b1:43:1b:b8:ef:73:71:34:21:77:ba:a9:47:a1:c1: 98:78:84:e3:a4:6c:28:8b:1a:5a:5e:68:1d:d0:2f: 2a:10:b2:98:29:cd:6c:c9:58:e1:0c:e6:8f:78:5d: 92:1e:e9:45:0a:56:d7:fc:a2:9b:9a:b2:f5:ae:b2: 68:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6F:2B:11:1B:66:44:49:F0:F8:44:D8:AC:AA:EB:F1:00:15:58:B6 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cc:ee:fe:64:13:fd:53:d4:a3:80:5d:03:d4:9d:96:9a:5f: 71:2a:47:78:24:ad:e9:a1:b4:19:1c:59:40:20:51:ea:0c:33: 55:ca:31:a1:18:aa:da:fb:fa:bd:cd:3f:4c:89:9d:4e:45:ed: 72:89:10:bd:b5:fe:22:56:3e:cb:5e:ce:24:91:4a:75:ff:e4: 97:a7:7a:6f:39:04:40:40:26:34:ad:9e:e5:e4:c2:3b:d6:27: 05:5c:80:d7:d9:fd:ff:7d:62:f7:60:b4:51:b1:75:24:f0:4d: 47:76:77:b4:e6:b1:7d:16:3f:fd:ec:67:45:c3:65:16:77:56: 11:27:74:72:f9:16:bf:7e:c6:1b:d8:49:5e:aa:cc:85:42:1a: 6c:1a:be:b8:68:9f:75:05:16:a4:52:51:2d:3e:3b:48:2d:84: a0:20:b1:8e:b8:12:64:e8:b4:8e:6c:41:69:d5:48:a3:99:02: 63:27:a3:1c:39:1d:37:b9:3f:8a:3b:d2:3f:25:3d:11:cc:d8: 38:47:0f:dc:f6:20:1b:1b:30:c1:ad:93:c6:42:6e:13:e7:a9: 84:2b:93:03:cc:17:2b:b6:ea:cc:87:b1:ea:d9:fc:1a:fc:55: 99:66:70:ac:41:cf:70:2c:5b:e0:63:f9:16:70:e1:97:16:db: b1:72:a5:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSRCLigWYMoFNtftO3CcHj6+Mc0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNDExMjUwMzA1NTVaFw0yNDExMjgxNDA4NTVaMDMxMTAvBgNV BAMTKDMwNkYyQjExMUI2NjQ0NDlGMEY4NDREOEFDQUFFQkYxMDAxNTU4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudghV3cVZf2lo62+LRF84wYmG yPqcjxbFvePVS6Wks3jOWTO7yfATMhAsrB04/91UO0+AY361bNwtccsgGAwrkrH2 zvl8AkI3mjrSlD/HpNUjTbvIoz+xZkvS6/LiCCnSHomCK/fBFk1lnfT9JoIjgYC1 WC6ZScFFCyZm6+M7GB4IE6amYIGgUjAzRguAZoex/bvzUJHvbhZ1WxCq8nCcXBIL vZiMaSMs3QcSQOYfgNDg5SVWrTHUXgQZkiHWdafdW7FDG7jvc3E0IXe6qUehwZh4 hOOkbCiLGlpeaB3QLyoQspgpzWzJWOEM5o94XZIe6UUKVtf8opuasvWusmiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMG8rERtmREnw+ETYrKrr8QAVWLYwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/M7v5kE/1T1KOAXQPUnZaaX3EqR3gkremh tBkcWUAgUeoMM1XKMaEYqtr7+r3NP0yJnU5F7XKJEL21/iJWPsteziSRSnX/5Jen em85BEBAJjStnuXkwjvWJwVcgNfZ/f99YvdgtFGxdSTwTUd2d7TmsX0WP/3sZ0XD ZRZ3VhEndHL5Fr9+xhvYSV6qzIVCGmwavrhon3UFFqRSUS0+O0gthKAgsY64EmTo tI5sQWnVSKOZAmMnoxw5HTe5P4o70j8lPRHM2DhHD9z2IBsbMMGtk8ZCbhPnqYQr kwPMFyu26syHserZ/Br8VZlmcKxBz3AsW+Bj+RZw4ZcW27FypQ4= -----END CERTIFICATE-----Generated at Mon Nov 25 04:52:36 2024 by rpki-client on console-fra.rpki-client.org