$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: q2QTgqG8gsDOICr9ncG8wEy4HkjV12rM3hksrgOExYc= Subject key identifier: 97:FC:33:C7:0C:5F:71:B9:EF:7C:32:A7:CA:A7:11:73:3C:F0:B9:44 Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 6FB24D27E58F94BF89E7523E2C1B850E21604081 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 03E0 Signing time: Sun 24 Nov 2024 22:20:00 +0000 Manifest this update: Sun 24 Nov 2024 22:15:00 +0000 Manifest next update: Thu 28 Nov 2024 03:42:00 +0000 Files and hashes: 1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: qIkZtUPswOLSzAKIW4faoAC7V/pmv5To5cLrgWfUSjA=) 2: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: BtBJKec0pZ4Wxma1gU0MWa6lAIX68sj3AgZU6YUhD6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b2:4d:27:e5:8f:94:bf:89:e7:52:3e:2c:1b:85:0e:21:60:40:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Nov 24 22:15:00 2024 GMT Not After : Nov 28 03:42:00 2024 GMT Subject: CN=97FC33C70C5F71B9EF7C32A7CAA711733CF0B944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:c6:75:32:91:0b:ed:5a:f2:34:05:a1:66: 8c:7c:21:ac:88:bb:b1:ad:a7:16:58:78:27:c9:90: 0b:84:3f:e1:81:61:5c:9a:20:1c:33:d4:52:43:07: 15:a3:5b:7b:0d:ad:a9:fb:74:18:92:0f:71:3c:8c: 6c:8a:3c:24:7d:cf:0b:7e:2a:14:4c:19:7b:73:c0: 9b:6e:3d:12:19:fe:00:61:34:b0:6d:8a:96:bc:25: 8e:7e:46:31:ca:93:95:04:be:43:fa:a2:39:d0:4d: fd:ae:df:a9:ee:7d:b5:8d:dc:e9:0d:1f:bb:83:b3: 16:0d:c2:c9:6a:02:55:17:e3:2f:80:23:d7:0f:40: ce:6d:09:3a:90:cd:26:cb:6e:6d:3f:90:7c:51:ca: e7:ed:57:fe:02:8b:52:d6:fe:85:c5:c7:61:8e:ff: 56:64:72:ce:25:e0:1b:75:2d:73:83:96:35:af:e6: cc:e5:da:bd:04:fb:ac:83:2e:f4:06:e3:36:b4:3a: 05:04:aa:cb:37:e7:74:49:a4:98:ee:04:a8:ce:57: 1a:05:26:57:58:90:23:af:4e:f7:0e:19:74:54:d7: 77:5b:ce:2b:f2:28:24:f5:8e:09:89:8f:08:fb:01: ab:32:9c:16:63:33:5a:0d:df:b5:e7:4e:f1:f8:91: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FC:33:C7:0C:5F:71:B9:EF:7C:32:A7:CA:A7:11:73:3C:F0:B9:44 X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:93:be:a3:86:74:fc:37:12:21:b5:d8:10:86:ef:fb:bc:ae: 98:86:44:48:05:71:78:6a:8e:4e:fb:71:b7:6a:98:d9:71:57: 95:d9:da:9b:95:f1:e1:8c:99:4f:af:a4:24:89:71:03:c5:de: d9:e0:6a:f0:7b:4e:94:f1:50:c4:d3:5f:fb:5b:77:b9:b8:b3: 90:3d:3f:92:a5:ba:aa:4f:08:ce:a5:4e:5c:53:2d:8f:2b:5d: 73:65:fc:0e:b2:cb:4c:80:53:d4:59:06:22:6a:eb:f9:51:0d: b3:66:30:c9:61:87:cc:32:ef:f7:35:c1:ac:14:e5:62:c0:bf: 24:20:be:c7:75:a3:d3:46:37:9c:15:aa:60:b3:4e:00:5f:f1: ee:3c:58:12:2f:b3:ff:ac:bc:a2:44:69:84:2f:01:49:9d:88: 1d:20:5c:8a:d2:42:38:16:89:c8:19:ee:4e:c4:32:dc:e1:c3: a8:43:29:3a:6f:ca:94:32:26:1a:45:58:55:9f:77:39:ba:d3: 3f:83:8d:31:b5:76:34:c1:88:35:94:44:33:40:15:18:84:9b: e5:9c:e3:01:d5:59:f0:39:60:0c:61:46:a2:c5:bb:03:7a:a6: fc:70:6e:d7:7d:a9:50:a0:9c:3a:47:4e:47:32:fe:79:d7:ee: d3:2e:a4:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb7JNJ+WPlL+J51I+LBuFDiFgQIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNDExMjQyMjE1MDBaFw0yNDExMjgwMzQyMDBaMDMxMTAvBgNV BAMTKDk3RkMzM0M3MEM1RjcxQjlFRjdDMzJBN0NBQTcxMTczM0NGMEI5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAcZ1MpEL7VryNAWhZox8IayI u7GtpxZYeCfJkAuEP+GBYVyaIBwz1FJDBxWjW3sNran7dBiSD3E8jGyKPCR9zwt+ KhRMGXtzwJtuPRIZ/gBhNLBtipa8JY5+RjHKk5UEvkP6ojnQTf2u36nufbWN3OkN H7uDsxYNwslqAlUX4y+AI9cPQM5tCTqQzSbLbm0/kHxRyuftV/4Ci1LW/oXFx2GO /1Zkcs4l4Bt1LXODljWv5szl2r0E+6yDLvQG4za0OgUEqss353RJpJjuBKjOVxoF JldYkCOvTvcOGXRU13dbzivyKCT1jgmJjwj7AasynBZjM1oN37XnTvH4kcPlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl/wzxwxfcbnvfDKnyqcRczzwuUQwHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2TvqOGdPw3EiG12BCG7/u8rpiGREgFcXhq jk77cbdqmNlxV5XZ2puV8eGMmU+vpCSJcQPF3tngavB7TpTxUMTTX/tbd7m4s5A9 P5KluqpPCM6lTlxTLY8rXXNl/A6yy0yAU9RZBiJq6/lRDbNmMMlhh8wy7/c1wawU 5WLAvyQgvsd1o9NGN5wVqmCzTgBf8e48WBIvs/+svKJEaYQvAUmdiB0gXIrSQjgW icgZ7k7EMtzhw6hDKTpvypQyJhpFWFWfdzm60z+DjTG1djTBiDWURDNAFRiEm+Wc 4wHVWfA5YAxhRqLFuwN6pvxwbtd9qVCgnDpHTkcy/nnX7tMupFY= -----END CERTIFICATE-----Generated at Sun Nov 24 23:06:09 2024 by rpki-client on console-ams.rpki-client.org