$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: lHhrIumrXNeqfjVBm6zDhdWZLU4v+0HrOpR7+bpPie0= Subject key identifier: 86:D3:8B:19:79:0C:AD:C9:9A:F5:C7:73:C1:8E:2F:13:39:2B:A3:A4 Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 2FBF6DA0D1A2F726E3690FCE69E53AC497D63A1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: 49 Signing time: Fri 22 Nov 2024 11:00:42 +0000 Manifest this update: Fri 22 Nov 2024 10:55:42 +0000 Manifest next update: Mon 25 Nov 2024 16:38:42 +0000 Files and hashes: 1: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: PVzIS0ESkEZ67q03gwRLnYkqKCd0joMIjci7Y3exMbQ=) 2: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: 3pgT3MDOhR2NLTVIE2fjgAwUvrCIEhLwEPMndCT3ofw=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: pjc/YrdKV/TdiFaIjRayQO8Sqerd8j/hCT2Hki4kTnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bf:6d:a0:d1:a2:f7:26:e3:69:0f:ce:69:e5:3a:c4:97:d6:3a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Nov 22 10:55:42 2024 GMT Not After : Nov 25 16:38:42 2024 GMT Subject: CN=86D38B19790CADC99AF5C773C18E2F13392BA3A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f0:08:0f:1c:e6:b6:2c:25:ac:cd:1c:2b:7b: 38:ae:88:02:95:04:a7:75:00:75:11:95:ff:ea:b7: b1:35:fd:08:95:d7:92:08:f1:07:3b:62:b0:40:35: 55:0b:47:dd:20:f1:ce:30:72:6f:44:e8:97:cb:9c: 50:1a:e2:20:27:a3:60:b4:b9:4e:74:2d:7d:fc:39: 6b:fc:21:4c:ca:d7:79:c6:74:e5:9a:c9:c5:7a:8f: 8b:7f:0a:bc:61:94:1c:57:f2:35:ee:eb:62:1b:a0: c6:e0:b8:aa:12:ce:04:3c:7c:10:c8:c1:ff:68:5e: d0:77:6f:5f:ee:ee:af:4f:a7:d7:16:d1:35:85:00: c5:89:49:fe:fb:05:7e:07:d3:e5:42:62:4a:ba:86: dd:88:5a:69:40:46:27:02:c3:9f:42:7b:3a:7e:5d: 4a:98:b0:56:07:4d:89:6b:3f:05:34:52:ab:53:6b: a5:b5:cd:23:b3:1c:a7:47:07:ad:55:6c:05:86:1b: 71:ba:68:bd:1e:13:30:ad:ea:d4:08:8f:ae:ab:47: db:d8:85:f9:c0:4b:a8:28:d6:e3:8b:d2:88:62:07: 88:58:9f:9e:d0:2b:1e:70:aa:9f:4a:c2:7b:01:dd: 1b:43:3f:e0:ac:db:20:36:ab:2a:fd:a8:01:13:9f: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D3:8B:19:79:0C:AD:C9:9A:F5:C7:73:C1:8E:2F:13:39:2B:A3:A4 X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:53:a6:85:9e:c0:70:cc:7d:ad:f0:df:d8:4d:40:e5:06:f5: 88:7d:8b:03:15:c1:78:93:74:47:83:c8:52:d6:eb:0d:3e:84: 03:91:f6:4c:4a:d5:f8:ed:27:93:d9:cc:b6:26:92:93:ce:fa: 4b:9d:85:f2:03:9d:d8:25:19:40:ce:42:c4:c7:99:ad:a6:9e: 10:26:20:37:72:38:bb:c9:fe:42:cf:94:b4:57:57:49:d6:f9: 19:65:17:24:e8:0c:72:db:a6:54:51:d3:36:a4:f4:59:7d:94: 0b:36:a8:1e:ad:30:aa:18:c2:1f:ee:28:b6:52:58:bf:fe:e9: 8e:c3:eb:77:d6:85:69:60:a3:ea:7d:35:dc:17:ab:c8:67:e3: a6:6e:41:06:45:fb:5d:e6:31:f3:89:39:53:37:fd:6a:0d:36: 70:1a:88:a9:91:e3:03:ac:fb:da:fc:08:b1:9b:23:c8:d5:8d: af:fd:ae:a1:b2:0e:ad:45:ce:c5:46:c6:80:b8:1f:b1:4d:74: 59:60:40:8f:94:dc:b4:66:c6:40:2a:08:76:f7:5a:94:6d:18: 2a:d4:78:f7:f4:57:46:37:a8:60:32:c3:95:7a:3f:16:b2:29: 1a:19:8d:5f:a6:53:f2:ad:18:e0:b1:a7:00:01:c1:38:2f:f5: 04:3f:1e:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL79toNGi9ybjaQ/OaeU6xJfWOhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNDExMjIxMDU1NDJaFw0yNDExMjUxNjM4NDJaMDMxMTAvBgNV BAMTKDg2RDM4QjE5NzkwQ0FEQzk5QUY1Qzc3M0MxOEUyRjEzMzkyQkEzQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw8AgPHOa2LCWszRwreziuiAKV BKd1AHURlf/qt7E1/QiV15II8Qc7YrBANVULR90g8c4wcm9E6JfLnFAa4iAno2C0 uU50LX38OWv8IUzK13nGdOWaycV6j4t/CrxhlBxX8jXu62IboMbguKoSzgQ8fBDI wf9oXtB3b1/u7q9Pp9cW0TWFAMWJSf77BX4H0+VCYkq6ht2IWmlARicCw59Cezp+ XUqYsFYHTYlrPwU0UqtTa6W1zSOzHKdHB61VbAWGG3G6aL0eEzCt6tQIj66rR9vY hfnAS6go1uOL0ohiB4hYn57QKx5wqp9KwnsB3RtDP+Cs2yA2qyr9qAETnz53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhtOLGXkMrcma9cdzwY4vEzkro6QwHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApTpoWewHDMfa3w39hNQOUG9Yh9iwMVwXiT dEeDyFLW6w0+hAOR9kxK1fjtJ5PZzLYmkpPO+kudhfIDndglGUDOQsTHma2mnhAm IDdyOLvJ/kLPlLRXV0nW+RllFyToDHLbplRR0zak9Fl9lAs2qB6tMKoYwh/uKLZS WL/+6Y7D63fWhWlgo+p9NdwXq8hn46ZuQQZF+13mMfOJOVM3/WoNNnAaiKmR4wOs +9r8CLGbI8jVja/9rqGyDq1FzsVGxoC4H7FNdFlgQI+U3LRmxkAqCHb3WpRtGCrU ePf0V0Y3qGAyw5V6PxayKRoZjV+mU/KtGOCxpwABwTgv9QQ/Hg4= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org