$ rpki-client -vvf repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft File: DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft (raw, json) Hash identifier: k1M2q/TE+gRbgWnrxzn/JGOF3Lt0J6bv4K769of1P5w= Subject key identifier: A2:28:F6:7E:EC:8B:05:81:9F:EF:D0:B3:E2:AF:61:E8:C4:AF:FE:39 Authority key identifier: DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 Certificate issuer: /CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Certificate serial: 654C092C64B9307D63969B0D2908F1681459026A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft Manifest number: 3C Signing time: Fri 22 Nov 2024 07:51:54 +0000 Manifest this update: Fri 22 Nov 2024 07:46:54 +0000 Manifest next update: Mon 25 Nov 2024 11:11:54 +0000 Files and hashes: 1: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: pkgFynGQ9jkHeIrXOyJUjg6uu6vSpzsXT9qLBW8x194=) 2: DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl (hash: bkzoHIuk3yb6Sgfpd021NnpfX5gumJizgMlv/Us/Q9c=) 3: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: 2/cotGNcJ8/pTH7ezN1hAoiTKcYjyf0D6A4DNtUiVcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4c:09:2c:64:b9:30:7d:63:96:9b:0d:29:08:f1:68:14:59:02:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Validity Not Before: Nov 22 07:46:54 2024 GMT Not After : Nov 25 11:11:54 2024 GMT Subject: CN=A228F67EEC8B05819FEFD0B3E2AF61E8C4AFFE39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:74:79:08:b8:48:39:7f:ba:fd:3b:e1:58: 75:80:04:a2:aa:1e:37:4b:a7:ee:10:e3:83:22:eb: a7:8e:81:0b:eb:49:7a:a4:3b:63:f4:67:49:76:6a: 73:36:f9:08:8d:bc:58:f4:ed:e9:e2:41:10:f5:1f: f0:05:73:83:93:10:de:d6:74:f0:5c:40:b5:db:49: 4c:75:43:7a:fc:8b:82:8d:6a:7e:e8:ba:92:bc:d1: f2:a7:28:dd:43:17:ab:2f:a7:37:8b:28:8f:47:fb: 0b:b2:0b:7f:63:50:fb:5d:59:64:2e:7f:00:27:26: 12:bb:b5:34:0b:4b:97:9e:af:c3:32:5d:41:7e:1c: 07:c2:98:f8:60:4d:0b:13:b5:4b:87:5b:5e:aa:76: 73:2e:e4:cb:5d:f9:7b:de:25:95:a3:49:a4:74:4e: a3:36:78:97:c7:5c:96:b2:e7:95:12:48:56:1a:24: be:5f:a2:75:98:02:4a:94:17:8c:1a:bd:5f:01:c7: ad:d3:91:34:91:fc:79:79:d7:99:79:d2:14:c7:f8: 51:e1:33:ed:82:6b:ec:cd:3f:04:e9:b3:5d:8f:d7: f0:8d:8d:c9:55:ca:cc:f6:02:20:5e:cf:2f:eb:e9: 07:bb:56:c2:55:8a:c6:52:22:9a:fe:cc:4e:1d:5c: 68:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:28:F6:7E:EC:8B:05:81:9F:EF:D0:B3:E2:AF:61:E8:C4:AF:FE:39 X509v3 Authority Key Identifier: keyid:DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e2:b3:19:68:6c:53:3d:54:ef:06:58:20:c1:83:50:ef:22: 6b:c5:38:39:e4:3a:51:c7:79:0e:b5:94:3b:14:c3:bd:33:df: c0:1b:2e:ce:e4:16:01:47:b4:fb:04:ee:c5:81:ee:34:8b:90: 3c:91:e3:31:5d:40:b8:f5:75:1f:1a:a4:95:e3:7e:4e:d3:08: 23:f5:91:ff:7e:3b:85:34:7b:a5:fc:da:e2:48:dc:43:c6:bb: 65:ce:a1:c5:b9:cb:73:02:f6:c1:dc:e2:3a:07:cb:c5:ee:7f: 6e:10:b3:e5:23:e2:1f:bb:86:a0:a9:8b:e9:e2:7b:b3:90:dc: 49:ca:85:1e:de:19:57:fa:30:92:45:eb:89:85:5e:41:58:00: 62:9a:14:a4:7c:4c:3c:eb:a5:f2:a7:43:37:49:3b:da:c1:c3: d2:d5:5b:cf:eb:c8:5e:fb:27:e4:10:90:72:45:44:2b:db:70: 63:87:22:db:f6:f0:8c:9d:d0:d9:61:c1:a4:c8:03:9b:2d:7f: df:3b:97:10:a1:04:2a:a2:00:15:23:06:47:c9:49:8e:27:04: 5b:ac:de:61:00:02:d6:44:ee:04:c9:d4:06:4e:a4:45:8c:2e: cd:0c:19:38:66:19:e4:82:0a:fa:e6:55:f0:84:7e:3d:16:e6: f0:b4:38:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUwJLGS5MH1jlpsNKQjxaBRZAmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYw RDJDNDYyMzAeFw0yNDExMjIwNzQ2NTRaFw0yNDExMjUxMTExNTRaMDMxMTAvBgNV BAMTKEEyMjhGNjdFRUM4QjA1ODE5RkVGRDBCM0UyQUY2MUU4QzRBRkZFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZHR5CLhIOX+6/TvhWHWABKKq HjdLp+4Q44Mi66eOgQvrSXqkO2P0Z0l2anM2+QiNvFj07eniQRD1H/AFc4OTEN7W dPBcQLXbSUx1Q3r8i4KNan7oupK80fKnKN1DF6svpzeLKI9H+wuyC39jUPtdWWQu fwAnJhK7tTQLS5eer8MyXUF+HAfCmPhgTQsTtUuHW16qdnMu5Mtd+XveJZWjSaR0 TqM2eJfHXJay55USSFYaJL5fonWYAkqUF4wavV8Bx63TkTSR/Hl515l50hTH+FHh M+2Ca+zNPwTps12P1/CNjclVysz2AiBezy/r6Qe7VsJVisZSIpr+zE4dXGg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoij2fuyLBYGf79Cz4q9h6MSv/jkwHwYDVR0j BBgwFoAU2nN+i7njUZ8Z5gjcPoOfNg0sRiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjBiY2RjMy0wZmVhLTQ3NDctOTkwNy02NTY0ODZiYWU4ZGEvMC9EQTczN0U4QkI5 RTM1MTlGMTlFNjA4REMzRTgzOUYzNjBEMkM0NjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYwRDJD NDYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlG MzYwRDJDNDYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrisxlobFM9VO8GWCDBg1DvImvFODnkOlHH eQ61lDsUw70z38AbLs7kFgFHtPsE7sWB7jSLkDyR4zFdQLj1dR8apJXjfk7TCCP1 kf9+O4U0e6X82uJI3EPGu2XOocW5y3MC9sHc4joHy8Xuf24Qs+Uj4h+7hqCpi+ni e7OQ3EnKhR7eGVf6MJJF64mFXkFYAGKaFKR8TDzrpfKnQzdJO9rBw9LVW8/ryF77 J+QQkHJFRCvbcGOHItv28Iyd0NlhwaTIA5stf987lxChBCqiABUjBkfJSY4nBFus 3mEAAtZE7gTJ1AZOpEWMLs0MGThmGeSCCvrmVfCEfj0W5vC0OK4= -----END CERTIFICATE-----Generated at Fri Nov 22 09:38:55 2024 by rpki-client on console-ams.rpki-client.org