$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft (raw, json) Hash identifier: dXeru4Jot9ede5LhuazxHAkFf21F5UdrDVKxzpPfh0Q= Subject key identifier: DF:40:1D:0A:74:CA:25:A1:90:EF:1B:29:EA:A9:36:E4:A3:4C:A1:0C Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Certificate serial: 4001A9554ADAB2E53F4D59C3F4F387460C2176E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft Manifest number: 0140 Signing time: Thu 21 Nov 2024 19:51:48 +0000 Manifest this update: Thu 21 Nov 2024 19:46:48 +0000 Manifest next update: Mon 25 Nov 2024 01:25:48 +0000 Files and hashes: 1: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl (hash: 06VWN4sO/GCxW8x75oWwjySKcnFUXP6MgvzDTu1xQWs=) 2: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: pu6/UsxjccuW1i483s8+VcEVhXPDGUX2MOdonN1OKvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:01:a9:55:4a:da:b2:e5:3f:4d:59:c3:f4:f3:87:46:0c:21:76:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Validity Not Before: Nov 21 19:46:48 2024 GMT Not After : Nov 25 01:25:48 2024 GMT Subject: CN=DF401D0A74CA25A190EF1B29EAA936E4A34CA10C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:32:8f:e1:d2:5d:e2:60:40:8a:8a:4e:8b: bd:b7:f7:f0:3b:13:71:1f:6c:d7:91:b6:9a:42:84: e7:c9:87:28:8a:34:ad:b3:e4:63:2c:48:be:ad:4f: 9d:73:ce:d5:4b:a6:12:a1:07:99:92:96:b5:32:db: ce:2c:57:f9:ee:58:bd:6a:b5:3c:7a:22:80:60:20: 4f:da:0d:c5:ab:9c:4f:ff:3c:1c:f6:7c:69:12:47: a7:06:fe:20:3d:25:df:3b:a2:bf:b0:c2:17:c3:a7: db:93:0b:90:0f:2c:ff:e3:ba:60:75:9d:3f:17:2e: 1d:23:ec:3e:65:bf:36:43:f3:bd:3d:ef:e4:0b:88: 98:1b:9d:58:4b:c8:1c:54:07:b1:fd:55:f9:5e:8f: 97:86:4b:ad:67:e7:7a:42:cb:ef:79:71:42:54:12: d3:b2:35:0f:38:9b:6c:a6:51:b0:0e:cf:82:70:9d: ee:53:30:e3:9c:d0:f1:21:27:15:28:5a:5a:bb:39: a9:7b:e9:c7:43:28:54:d6:2d:b2:60:00:15:2a:2c: 8d:6d:41:ee:c9:9b:d4:b3:24:f9:7b:cf:8f:79:8e: 02:e1:f0:a2:50:89:0e:d5:72:b6:e4:dd:35:1e:26: 5f:25:50:93:f9:2b:41:8c:a7:b8:5f:c4:6d:56:06: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:40:1D:0A:74:CA:25:A1:90:EF:1B:29:EA:A9:36:E4:A3:4C:A1:0C X509v3 Authority Key Identifier: keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:36:bd:bb:73:cd:52:b9:7a:f4:f0:75:7f:62:0f:fe:3b:c2: 73:b0:ac:85:fd:c6:02:25:3b:8f:79:65:1b:e8:4d:aa:f0:f9: 36:7e:3b:02:13:7a:db:09:44:ac:d8:05:39:e5:b6:fe:fa:a8: e3:4e:b6:33:26:a5:80:7d:d6:8e:61:08:c5:0a:5a:a9:f5:d7: 33:e1:99:86:bb:d4:de:a9:f6:21:df:31:60:94:15:d8:76:29: 25:19:e5:42:b5:e4:5f:4a:5b:59:1c:ed:73:2c:c9:01:b9:0c: fd:76:ab:00:4a:37:d2:bd:80:74:28:35:30:35:38:45:32:2b: 0f:f1:7c:f3:be:5e:ef:67:28:86:86:b6:ce:cf:82:ee:ac:44: 5f:32:36:23:3a:aa:3c:ca:c9:78:08:6e:63:61:7c:72:1a:dd: 51:1e:2a:59:30:dc:b5:fa:08:5c:7c:04:84:af:4b:8d:cb:89: 44:0d:ea:0f:b2:08:31:d4:c3:4e:a5:f6:11:f9:24:fb:58:5d: 41:b2:9c:76:de:af:de:7a:ca:92:30:59:eb:e5:19:6d:ce:77: 10:f5:ec:5a:6b:96:32:58:db:ab:ae:34:ae:97:05:66:3d:ba: 4e:98:a5:67:94:c5:8f:aa:99:0e:9c:8d:2b:86:62:85:a7:40: e9:cf:dd:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAGpVUrasuU/TVnD9POHRgwhdugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQz Qzc5MERDODAeFw0yNDExMjExOTQ2NDhaFw0yNDExMjUwMTI1NDhaMDMxMTAvBgNV BAMTKERGNDAxRDBBNzRDQTI1QTE5MEVGMUIyOUVBQTkzNkU0QTM0Q0ExMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8TKP4dJd4mBAiopOi7239/A7 E3EfbNeRtppChOfJhyiKNK2z5GMsSL6tT51zztVLphKhB5mSlrUy284sV/nuWL1q tTx6IoBgIE/aDcWrnE//PBz2fGkSR6cG/iA9Jd87or+wwhfDp9uTC5APLP/jumB1 nT8XLh0j7D5lvzZD87097+QLiJgbnVhLyBxUB7H9Vflej5eGS61n53pCy+95cUJU EtOyNQ84m2ymUbAOz4Jwne5TMOOc0PEhJxUoWlq7Oal76cdDKFTWLbJgABUqLI1t Qe7Jm9SzJPl7z495jgLh8KJQiQ7Vcrbk3TUeJl8lUJP5K0GMp7hfxG1WBguVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU30AdCnTKJaGQ7xsp6qk25KNMoQwwHwYDVR0j BBgwFoAUvmnp4pnOLf8XbH76sUVELTx5DcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMC9CRTY5RTlFMjk5 Q0UyREZGMTc2QzdFRkFCMTQ1NDQyRDNDNzkwREM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQzQzc5 MERDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0 MkQzQzc5MERDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAs2vbtzzVK5evTwdX9iD/47wnOwrIX9xgIl O495ZRvoTarw+TZ+OwITetsJRKzYBTnltv76qONOtjMmpYB91o5hCMUKWqn11zPh mYa71N6p9iHfMWCUFdh2KSUZ5UK15F9KW1kc7XMsyQG5DP12qwBKN9K9gHQoNTA1 OEUyKw/xfPO+Xu9nKIaGts7Pgu6sRF8yNiM6qjzKyXgIbmNhfHIa3VEeKlkw3LX6 CFx8BISvS43LiUQN6g+yCDHUw06l9hH5JPtYXUGynHber956ypIwWevlGW3OdxD1 7FprljJY26uuNK6XBWY9uk6YpWeUxY+qmQ6cjSuGYoWnQOnP3dc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org