$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft File: A62202F88CE61D6BD47195FB36103CDD061D7D27.mft (raw, json) Hash identifier: TXObm1qamS9yzaVpShTlF93QDJ8pE2zmK8exJVYjFPE= Subject key identifier: 95:1A:56:74:95:49:F0:50:CB:56:17:23:91:67:1B:C5:AF:0B:49:90 Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27 Certificate issuer: /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27 Certificate serial: 1DA0CC0746C2392F634E00B3824DF79FE7CEB776 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft Manifest number: 013C Signing time: Thu 21 Nov 2024 12:22:15 +0000 Manifest this update: Thu 21 Nov 2024 12:17:15 +0000 Manifest next update: Sun 24 Nov 2024 18:36:15 +0000 Files and hashes: 1: 3130332e3137382e38362e302f32342d3234203d3e203438343635.roa (hash: L0+ufR2O1ax5oE/AG50W3KROh6ggSv3rdUyms/8wcSk=) 2: A62202F88CE61D6BD47195FB36103CDD061D7D27.crl (hash: b1S6jIAwpMhocNQY5v5OmGkS7VvUOWycw4G30Cr4Unk=) 3: 3130332e3137382e38372e302f32342d3234203d3e203438343635.roa (hash: fg1UlstHmHz1xOYLaYmmXeygw0gDl5ivpbZmtY4gNrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a0:cc:07:46:c2:39:2f:63:4e:00:b3:82:4d:f7:9f:e7:ce:b7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27 Validity Not Before: Nov 21 12:17:15 2024 GMT Not After : Nov 24 18:36:15 2024 GMT Subject: CN=951A56749549F050CB56172391671BC5AF0B4990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:32:42:82:29:a8:6f:3c:2c:21:0b:7c:19: 12:13:54:ba:08:71:4d:7b:c8:d4:27:fd:a5:0b:93: 66:9b:36:2e:77:95:0b:7f:66:1f:cd:af:68:0b:0d: 29:e5:6f:20:e4:f5:46:70:70:58:51:76:be:37:ab: 1a:94:23:40:d7:9b:3c:35:a6:ec:af:42:3d:40:a7: 2b:58:18:f0:a3:7f:78:2b:d3:7c:34:57:0e:da:b8: ec:2b:04:9e:f1:5b:18:bb:81:23:54:b1:d4:ad:2c: 66:82:e4:51:42:d8:71:72:43:ed:6b:7e:8f:a6:68: df:c5:2e:eb:9c:c7:b5:c4:b6:69:17:ca:76:00:92: 7a:ac:dc:bb:a3:48:8e:49:13:59:ef:61:65:10:59: d1:9d:8a:b5:84:b1:a8:f2:e5:84:18:9a:d4:26:e6: e6:7c:89:1d:9d:ed:4d:fa:f8:93:41:87:b6:17:60: 9c:d0:19:e3:07:44:ac:ca:c7:e0:4a:1e:6d:8c:98: 81:0c:31:d6:24:28:9e:a5:02:69:7f:af:d6:85:10: 32:61:f7:1a:e0:b4:85:6d:22:3c:b7:9e:e8:5e:04: 4d:85:ad:7d:41:d6:f5:60:34:77:96:b3:9e:e3:de: 8b:9f:04:86:81:d4:a5:fd:b8:9d:6b:18:b8:59:92: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1A:56:74:95:49:F0:50:CB:56:17:23:91:67:1B:C5:AF:0B:49:90 X509v3 Authority Key Identifier: keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:63:6c:ea:32:a1:a9:77:2b:97:a5:6e:ba:5f:66:7e:d0:f1: b6:56:40:76:78:b1:42:d4:e9:17:2c:91:ca:0b:71:ac:3c:0c: 15:89:16:d8:5e:1e:99:b9:6c:3f:ca:40:40:1d:80:4a:18:eb: 4d:a4:7a:66:91:f6:ac:6e:c4:90:78:80:2a:2b:53:c9:6b:89: 78:28:48:bb:bf:7e:f4:28:30:3d:93:1b:3e:04:a9:be:52:17: ab:9d:7b:51:63:c1:cf:43:0c:fd:07:0b:ea:24:d1:47:c6:2b: 18:44:fb:dc:66:0d:6d:87:82:8e:df:3e:40:88:6d:4e:14:b9: d9:42:0c:8c:a5:24:9a:e0:2e:af:85:90:17:27:8d:df:c8:16: 88:43:42:83:b0:65:c3:d7:45:9a:43:71:fb:ea:83:91:51:ba: 1f:46:13:9e:7c:68:00:b2:98:d6:11:26:61:53:3b:fd:16:d1: 54:e7:96:26:b3:db:a5:b9:7d:f9:23:c1:f5:a1:ff:7d:ea:d9: ac:e7:bb:d4:8d:75:04:77:10:20:f3:8f:fc:00:16:b1:f6:b0: 35:a4:94:90:c7:0b:63:59:5d:26:16:ba:8e:f0:e3:e0:a2:be: 16:99:57:e5:2e:6a:57:11:28:26:91:3f:85:75:fd:7a:b2:4c: f6:e5:67:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaDMB0bCOS9jTgCzgk33n+fOt3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDNDREQw NjFEN0QyNzAeFw0yNDExMjExMjE3MTVaFw0yNDExMjQxODM2MTVaMDMxMTAvBgNV BAMTKDk1MUE1Njc0OTU0OUYwNTBDQjU2MTcyMzkxNjcxQkM1QUYwQjQ5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfzJCgimobzwsIQt8GRITVLoI cU17yNQn/aULk2abNi53lQt/Zh/Nr2gLDSnlbyDk9UZwcFhRdr43qxqUI0DXmzw1 puyvQj1ApytYGPCjf3gr03w0Vw7auOwrBJ7xWxi7gSNUsdStLGaC5FFC2HFyQ+1r fo+maN/FLuucx7XEtmkXynYAknqs3LujSI5JE1nvYWUQWdGdirWEsajy5YQYmtQm 5uZ8iR2d7U36+JNBh7YXYJzQGeMHRKzKx+BKHm2MmIEMMdYkKJ6lAml/r9aFEDJh 9xrgtIVtIjy3nuheBE2FrX1B1vVgNHeWs57j3oufBIaB1KX9uJ1rGLhZkkFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlRpWdJVJ8FDLVhcjkWcbxa8LSZAwHwYDVR0j BBgwFoAUpiIC+IzmHWvUcZX7NhA83QYdfScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDczODMxNC1hOTc1LTRmZDEtOWJjOS01MjEzOGY4M2I1NmUvMC9BNjIyMDJGODhD RTYxRDZCRDQ3MTk1RkIzNjEwM0NERDA2MUQ3RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDNDREQwNjFE N0QyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDND REQwNjFEN0QyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5jbOoyoal3K5elbrpfZn7Q8bZWQHZ4sULU 6RcskcoLcaw8DBWJFtheHpm5bD/KQEAdgEoY602kemaR9qxuxJB4gCorU8lriXgo SLu/fvQoMD2TGz4Eqb5SF6ude1Fjwc9DDP0HC+ok0UfGKxhE+9xmDW2Hgo7fPkCI bU4UudlCDIylJJrgLq+FkBcnjd/IFohDQoOwZcPXRZpDcfvqg5FRuh9GE558aACy mNYRJmFTO/0W0VTnliaz26W5ffkjwfWh/33q2aznu9SNdQR3ECDzj/wAFrH2sDWk lJDHC2NZXSYWuo7w4+CivhaZV+UualcRKCaRP4V1/XqyTPblZ5Y= -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org