$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: LBH83/+XiY4Bby46/LI7JI4ZgjBO5a3Rtg9wTyS5hVQ= Subject key identifier: 21:33:08:8A:40:05:7F:04:F2:6E:6F:D8:A2:36:FB:63:87:B2:DE:DD Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 7E6A7452FAB9F81C1F4D4AB7438B57DB5AACBBF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 01FC Signing time: Thu 21 Nov 2024 02:21:14 +0000 Manifest this update: Thu 21 Nov 2024 02:16:14 +0000 Manifest next update: Sun 24 Nov 2024 11:47:14 +0000 Files and hashes: 1: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: 3ZhhFEYzvWHiep8+JD4JePwR5V8TR7XvQlm7EV2fWnc=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: WzQyswXSwMjXUbCDUIIF0PkevxcLaE+CYPcmOj6X+is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6a:74:52:fa:b9:f8:1c:1f:4d:4a:b7:43:8b:57:db:5a:ac:bb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Nov 21 02:16:14 2024 GMT Not After : Nov 24 11:47:14 2024 GMT Subject: CN=2133088A40057F04F26E6FD8A236FB6387B2DEDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f0:00:36:8d:f6:f6:37:05:ce:29:28:22:c0: a4:d1:7f:4f:3c:a9:f4:84:02:2e:73:c8:9b:ca:30: f9:44:33:ec:2b:83:e4:e7:a1:f6:57:cd:6a:3a:fd: 38:f8:ec:33:80:ba:91:90:7c:0f:37:79:c4:db:31: f8:00:ef:b7:5b:da:b5:c6:3b:ac:d8:50:b8:94:1d: 5a:d8:11:fc:22:62:d6:a5:94:5e:de:d3:dc:a9:5d: 5b:10:b8:56:d3:24:e0:8b:6c:79:72:25:f1:5d:85: 55:79:29:a0:a9:a7:50:a5:f4:10:ae:2d:81:48:1d: 2e:c2:11:46:7b:f9:70:85:da:14:3d:43:32:e5:2d: cb:97:f4:08:18:07:83:e1:a6:35:07:41:e2:b5:b0: 65:7c:b7:5f:9a:e5:bb:24:8a:63:30:c2:7d:1b:f0: b0:18:7d:ad:f1:76:b0:95:f7:41:bd:df:e5:4a:de: 35:ee:23:4a:96:43:96:4f:57:53:26:95:7a:09:72: 42:e4:92:1e:fe:c0:90:0f:f6:4d:8d:13:12:3f:02: 2e:0f:34:e8:71:c7:a6:17:ce:0d:0a:e2:17:a7:15: 95:d9:07:5c:75:13:83:19:7f:1f:c1:5f:ce:4f:e6: 4b:f1:16:2c:66:04:75:8c:8b:41:df:c0:72:10:86: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:33:08:8A:40:05:7F:04:F2:6E:6F:D8:A2:36:FB:63:87:B2:DE:DD X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:56:58:1c:b6:ee:3b:63:58:23:d3:bd:04:8f:32:65:db:1a: 0c:cf:04:c0:0c:44:e1:74:11:f2:9a:7e:ff:88:77:9f:6f:44: 08:bb:0e:ba:30:73:78:02:fc:d9:ea:6f:ef:f0:82:af:53:01: 0e:ac:31:84:11:d5:68:a2:f0:12:be:68:a8:e9:c1:42:f4:f5: 38:73:ce:e7:5e:f6:41:21:9f:61:f5:66:b7:57:73:0c:da:b1: 8c:3e:94:20:88:af:03:6c:23:36:63:36:c3:9b:e3:81:7c:e3: b4:10:85:46:1b:73:5f:a7:d6:5c:77:36:1c:fd:6b:87:8e:6e: bd:73:ad:d9:94:41:9a:c9:22:b5:19:30:a6:81:e4:bd:bb:e0: 1b:ad:f3:d3:89:15:08:0b:e8:21:9f:e5:fc:90:b1:25:3f:d3: 36:cf:35:f8:71:29:d9:75:08:ee:64:86:5d:bc:b4:fe:50:bb: 34:d2:c5:0c:80:d2:cb:eb:4e:10:1a:f6:8f:62:66:fc:71:cf: 71:75:50:be:e8:c1:ca:fd:fd:2e:82:13:ba:40:28:09:1c:b6: 76:d7:87:de:36:61:6f:7f:f3:52:d5:7d:e9:b6:c5:20:dc:8e: 0c:bf:61:59:8d:83:4f:eb:09:94:74:30:12:c9:79:b8:69:f5: fd:7a:62:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmp0Uvq5+BwfTUq3Q4tX21qsu/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNDExMjEwMjE2MTRaFw0yNDExMjQxMTQ3MTRaMDMxMTAvBgNV BAMTKDIxMzMwODhBNDAwNTdGMDRGMjZFNkZEOEEyMzZGQjYzODdCMkRFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd8AA2jfb2NwXOKSgiwKTRf088 qfSEAi5zyJvKMPlEM+wrg+TnofZXzWo6/Tj47DOAupGQfA83ecTbMfgA77db2rXG O6zYULiUHVrYEfwiYtallF7e09ypXVsQuFbTJOCLbHlyJfFdhVV5KaCpp1Cl9BCu LYFIHS7CEUZ7+XCF2hQ9QzLlLcuX9AgYB4PhpjUHQeK1sGV8t1+a5bskimMwwn0b 8LAYfa3xdrCV90G93+VK3jXuI0qWQ5ZPV1MmlXoJckLkkh7+wJAP9k2NExI/Ai4P NOhxx6YXzg0K4henFZXZB1x1E4MZfx/BX85P5kvxFixmBHWMi0HfwHIQhulBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUITMIikAFfwTybm/Yojb7Y4ey3t0wHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdWWBy27jtjWCPTvQSPMmXbGgzPBMAMROF0 EfKafv+Id59vRAi7Drowc3gC/Nnqb+/wgq9TAQ6sMYQR1Wii8BK+aKjpwUL09Thz zude9kEhn2H1ZrdXcwzasYw+lCCIrwNsIzZjNsOb44F847QQhUYbc1+n1lx3Nhz9 a4eObr1zrdmUQZrJIrUZMKaB5L274But89OJFQgL6CGf5fyQsSU/0zbPNfhxKdl1 CO5khl28tP5QuzTSxQyA0svrThAa9o9iZvxxz3F1UL7owcr9/S6CE7pAKAkctnbX h942YW9/81LVfem2xSDcjgy/YVmNg0/rCZR0MBLJebhp9f16YsU= -----END CERTIFICATE-----Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org