$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: n0BQoLk5eM5ibc5+MDQttaurSTejiHL36oQ8titmPD4= Subject key identifier: B2:A7:FA:55:78:77:89:98:C2:29:34:7B:1F:C2:6E:49:5A:14:FA:08 Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 2096CAB454A72335D22AFC2F18DA59DC793C4711 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 02D2 Signing time: Thu 21 Nov 2024 20:02:21 +0000 Manifest this update: Thu 21 Nov 2024 19:57:21 +0000 Manifest next update: Mon 25 Nov 2024 04:52:21 +0000 Files and hashes: 1: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: tUeL2L2NZGxhk7lppCZ0ZmMoSziMiBP1aFhhhYxJa6g=) 2: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: 719XnIaIfiaPXFOCcR+j4wQIYEqhUPgfEsCHrxOLZw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:96:ca:b4:54:a7:23:35:d2:2a:fc:2f:18:da:59:dc:79:3c:47:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Nov 21 19:57:21 2024 GMT Not After : Nov 25 04:52:21 2024 GMT Subject: CN=B2A7FA5578778998C229347B1FC26E495A14FA08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:11:a9:21:96:36:48:33:e2:7a:fd:cb:25: 6a:01:70:3b:ce:35:cf:41:7a:82:6b:a7:4e:a3:78: 28:04:63:70:e7:0c:18:eb:97:30:44:5f:87:7d:6b: ec:c4:4d:df:18:08:e0:44:88:2a:22:34:e7:53:4c: 3e:0e:eb:2c:ad:c8:0b:05:a9:44:cc:44:41:4f:3f: f2:96:06:de:0c:1e:14:4a:05:cc:29:bc:d8:50:37: 79:02:e9:1a:92:fe:1f:8e:28:79:3e:89:44:05:21: 6e:35:71:54:21:11:84:d6:14:2b:c1:85:04:22:fd: a1:c2:05:4b:c8:b2:58:e4:42:73:8b:4a:59:84:7e: a7:e7:b6:d9:82:90:9a:26:e7:58:52:92:0e:d8:cf: 37:3e:30:25:94:77:0e:bf:0b:e4:0c:a0:e7:19:5b: 81:d9:02:e7:7b:f9:47:eb:10:53:4f:8f:ae:6a:20: 9f:c4:d1:7b:25:1b:a2:b6:3a:9d:58:ec:2b:91:52: 21:61:25:8b:14:4b:1c:9b:21:69:3f:91:c8:4a:7a: 52:83:4a:6c:5d:3d:bb:e6:83:ae:52:ee:a2:f9:1d: 6f:a7:d7:e1:5a:6c:79:55:05:52:f0:3a:ec:ac:77: 7b:00:5d:e5:6c:50:15:8f:19:44:09:45:d3:a4:c2: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A7:FA:55:78:77:89:98:C2:29:34:7B:1F:C2:6E:49:5A:14:FA:08 X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d7:2a:1e:92:e2:10:24:83:80:d7:54:70:8b:20:b7:66:13: fb:ee:6a:36:61:88:95:05:43:7e:a6:5d:81:bc:4a:3c:3c:6b: cf:55:6f:95:5f:40:ac:e4:fb:ab:45:dc:ab:79:eb:c1:12:7e: 32:f4:c5:c1:f2:db:69:e4:00:2f:1b:d4:28:29:98:13:37:9e: 41:76:34:d9:94:93:2d:64:49:f5:9f:7e:0d:4c:69:31:95:67: e9:c3:fc:00:68:4b:97:72:a5:8c:79:98:86:df:e4:2b:0f:66: e1:e6:9d:13:28:ca:35:e8:d6:73:c2:6e:ac:fc:1f:9d:4c:51: 74:90:5c:b6:fb:ab:2a:48:ed:93:0b:62:47:43:3e:ea:47:33: 9f:03:db:0d:f8:6a:ef:7f:b2:40:3b:a2:12:9d:7c:ac:63:f3: 82:ce:08:f0:a2:12:4c:b8:90:56:87:88:bc:4b:ce:18:6f:bd: 74:a1:18:e5:1e:3c:48:2e:95:08:13:04:71:b2:34:90:c7:2e: ad:aa:d8:a8:2d:e9:50:6b:05:f0:30:46:e2:fd:39:c8:73:28: 02:e1:77:24:df:63:01:56:21:48:3e:eb:ac:92:3a:62:46:ad: 36:5b:a4:d2:17:0c:98:09:c7:c2:d6:c7:97:ed:b0:92:16:d5: cb:91:ff:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJbKtFSnIzXSKvwvGNpZ3Hk8RxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNDExMjExOTU3MjFaFw0yNDExMjUwNDUyMjFaMDMxMTAvBgNV BAMTKEIyQTdGQTU1Nzg3Nzg5OThDMjI5MzQ3QjFGQzI2RTQ5NUExNEZBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR0RGpIZY2SDPiev3LJWoBcDvO Nc9BeoJrp06jeCgEY3DnDBjrlzBEX4d9a+zETd8YCOBEiCoiNOdTTD4O6yytyAsF qUTMREFPP/KWBt4MHhRKBcwpvNhQN3kC6RqS/h+OKHk+iUQFIW41cVQhEYTWFCvB hQQi/aHCBUvIsljkQnOLSlmEfqfnttmCkJom51hSkg7Yzzc+MCWUdw6/C+QMoOcZ W4HZAud7+UfrEFNPj65qIJ/E0XslG6K2Op1Y7CuRUiFhJYsUSxybIWk/kchKelKD SmxdPbvmg65S7qL5HW+n1+FabHlVBVLwOuysd3sAXeVsUBWPGUQJRdOkwlBNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqf6VXh3iZjCKTR7H8JuSVoU+ggwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLXKh6S4hAkg4DXVHCLILdmE/vuajZhiJUF Q36mXYG8Sjw8a89Vb5VfQKzk+6tF3Kt568ESfjL0xcHy22nkAC8b1CgpmBM3nkF2 NNmUky1kSfWffg1MaTGVZ+nD/ABoS5dypYx5mIbf5CsPZuHmnRMoyjXo1nPCbqz8 H51MUXSQXLb7qypI7ZMLYkdDPupHM58D2w34au9/skA7ohKdfKxj84LOCPCiEky4 kFaHiLxLzhhvvXShGOUePEgulQgTBHGyNJDHLq2q2Kgt6VBrBfAwRuL9OchzKALh dyTfYwFWIUg+66ySOmJGrTZbpNIXDJgJx8LWx5ftsJIW1cuR/0U= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org