$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: u1KcgLFUM1rcHklhkYgeeyAlG1fZGWTQlOqgWCFxC6M= Subject key identifier: 1E:A3:52:1A:C3:D2:8B:BE:D1:FC:E1:47:D8:12:CC:85:46:3B:24:F0 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 79EB7478BF2241BF944C084125F6ED3B98269574 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: 73 Signing time: Mon 25 Nov 2024 07:30:55 +0000 Manifest this update: Mon 25 Nov 2024 07:25:55 +0000 Manifest next update: Thu 28 Nov 2024 10:14:55 +0000 Files and hashes: 1: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: TySgbUOn7VerVsGnkxx/aT/se0hqeZxGV35fA9Hro4w=) 2: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: FdkJ+fWGP5HvGl21FYj0D/VpK3x5vDFR6Q2sKenYSNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 10:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:eb:74:78:bf:22:41:bf:94:4c:08:41:25:f6:ed:3b:98:26:95:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Nov 25 07:25:55 2024 GMT Not After : Nov 28 10:14:55 2024 GMT Subject: CN=1EA3521AC3D28BBED1FCE147D812CC85463B24F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:85:38:2d:17:33:c1:26:b7:be:97:b6:e2: 12:13:ec:ec:59:0f:25:a2:7d:93:af:e4:34:f3:d4: 5a:a4:c0:f8:d5:24:04:3b:2e:27:f6:62:ca:45:ff: 85:e0:7e:32:5e:99:af:22:ea:dd:e6:39:5a:0c:9c: aa:e3:9a:9c:d8:10:d9:03:28:ff:71:75:cf:67:91: 4c:16:33:5b:68:0d:21:82:77:79:e1:e1:b8:9d:ef: d6:85:fd:f5:5d:45:01:d1:f3:6b:b5:3d:93:7c:96: 43:0c:3b:19:29:d4:e0:ba:1f:c7:b2:7d:05:8e:24: c0:a9:cd:69:53:fb:4f:58:53:b3:0e:67:5e:ad:18: 89:08:60:0d:5c:44:fb:df:87:bf:1d:d8:15:ae:49: 1e:16:10:94:a8:83:40:41:3d:18:e2:04:22:2f:8a: 2c:fb:da:73:b4:a0:2b:00:2c:2a:18:19:94:35:f0: b6:72:5a:06:a9:07:9c:dd:e0:bc:11:da:f4:a1:d2: 86:ad:86:12:1c:0a:87:20:9e:3b:a5:ec:16:ca:c1: 82:3e:8f:33:dc:90:61:8c:b2:e7:f6:2c:a2:35:9f: a4:b0:d7:dd:20:36:b1:49:60:fb:6e:36:e5:32:8d: 33:84:20:01:1f:90:57:97:04:59:8c:d0:89:d5:08: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A3:52:1A:C3:D2:8B:BE:D1:FC:E1:47:D8:12:CC:85:46:3B:24:F0 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:01:f3:30:a5:75:36:38:cc:37:82:97:7e:65:34:75:47:7d: 84:c1:17:42:e3:0f:a6:f5:4a:c7:4d:bf:04:e2:7d:de:f2:70: b1:7a:09:1e:13:26:62:3f:d4:28:a2:6c:f2:72:65:8c:72:45: bf:52:de:ce:23:b7:8b:30:34:e7:16:ef:65:81:ea:3f:7f:9c: 0b:4c:6c:0c:ef:50:4f:e7:eb:75:d1:76:6f:cf:f7:de:48:fa: 2a:2d:dc:a5:bd:0b:91:ec:ba:f5:98:b4:e3:36:87:da:6d:7e: 3b:88:23:f2:52:30:1b:22:6a:1d:c1:93:f4:0a:5c:4b:6f:1a: 64:d4:d7:f6:f9:f1:3a:6e:21:af:08:dd:35:90:e1:8d:2f:39: 5b:11:23:73:c1:05:10:28:a2:c2:e5:fb:d6:bb:e7:f8:fc:f1: 90:b1:3e:5c:b1:f3:3c:11:cd:1e:2e:97:0b:5e:03:62:b2:0a: 40:ac:59:1b:4e:6d:5b:13:02:1d:3b:39:ac:d3:68:f4:5c:b3: 48:bd:51:d0:03:75:37:0c:c1:02:37:09:f9:e6:dc:81:e3:f2: ac:04:c7:10:12:17:5d:0d:82:e5:66:4b:a8:74:16:e3:8f:8d: 7d:06:1e:36:5d:7f:b0:62:f6:2e:2e:b1:f1:91:a1:c2:54:5b: 53:35:f3:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeet0eL8iQb+UTAhBJfbtO5gmlXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNDExMjUwNzI1NTVaFw0yNDExMjgxMDE0NTVaMDMxMTAvBgNV BAMTKDFFQTM1MjFBQzNEMjhCQkVEMUZDRTE0N0Q4MTJDQzg1NDYzQjI0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyf4U4LRczwSa3vpe24hIT7OxZ DyWifZOv5DTz1FqkwPjVJAQ7Lif2YspF/4XgfjJema8i6t3mOVoMnKrjmpzYENkD KP9xdc9nkUwWM1toDSGCd3nh4bid79aF/fVdRQHR82u1PZN8lkMMOxkp1OC6H8ey fQWOJMCpzWlT+09YU7MOZ16tGIkIYA1cRPvfh78d2BWuSR4WEJSog0BBPRjiBCIv iiz72nO0oCsALCoYGZQ18LZyWgapB5zd4LwR2vSh0oathhIcCocgnjul7BbKwYI+ jzPckGGMsuf2LKI1n6Sw190gNrFJYPtuNuUyjTOEIAEfkFeXBFmM0InVCCczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHqNSGsPSi77R/OFH2BLMhUY7JPAwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMB8zCldTY4zDeCl35lNHVHfYTBF0LjD6b1 SsdNvwTifd7ycLF6CR4TJmI/1CiibPJyZYxyRb9S3s4jt4swNOcW72WB6j9/nAtM bAzvUE/n63XRdm/P995I+iot3KW9C5HsuvWYtOM2h9ptfjuII/JSMBsiah3Bk/QK XEtvGmTU1/b58TpuIa8I3TWQ4Y0vOVsRI3PBBRAoosLl+9a75/j88ZCxPlyx8zwR zR4ulwteA2KyCkCsWRtObVsTAh07OazTaPRcs0i9UdADdTcMwQI3Cfnm3IHj8qwE xxASF10NguVmS6h0FuOPjX0GHjZdf7Bi9i4usfGRocJUW1M187I= -----END CERTIFICATE-----Generated at Mon Nov 25 09:01:49 2024 by rpki-client on console-ams.rpki-client.org