$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: yyRFZFPNCeVypNKg++CPn/XKQvL7RojbiAUWVdTGFjM= Subject key identifier: A0:D5:74:96:E4:ED:6F:B6:0E:BE:F2:BF:22:99:A4:AF:F4:CB:06:71 Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 3DB1E494B8503E46B6FAC3FB0D893C69F30E36F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: 3D Signing time: Sun 24 Nov 2024 05:51:21 +0000 Manifest this update: Sun 24 Nov 2024 05:46:21 +0000 Manifest next update: Wed 27 Nov 2024 16:48:21 +0000 Files and hashes: 1: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: 4avm3eGfo7pdZ4wCw97CSHHOC8jKriOntJd1LBlXxkc=) 2: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: hq3R1HOZbvpzX61BwkQ2JB9n3R+dDdAs494qH92cpTI=) 3: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: kkfWGgBDhBj9LbPcLWN3LfoUckDAFJQR8XFtjGluTfk=) 4: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: bnwTIDb5ulP9mx4IlwWYhcs4SgvOXuZpl9iKcnLVmwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b1:e4:94:b8:50:3e:46:b6:fa:c3:fb:0d:89:3c:69:f3:0e:36:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Nov 24 05:46:21 2024 GMT Not After : Nov 27 16:48:21 2024 GMT Subject: CN=A0D57496E4ED6FB60EBEF2BF2299A4AFF4CB0671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:f8:65:d7:1a:de:7a:86:47:ec:1e:5b:58: 2a:16:aa:cc:49:18:5d:f4:68:53:65:c1:17:5f:59: 4c:bf:2e:b3:52:2c:fa:9d:5f:94:8a:2c:a5:12:ac: 80:af:87:06:6f:9c:e3:33:86:2d:fd:db:04:4b:6e: 8f:f9:c3:09:83:91:c3:fb:99:73:36:22:8e:be:5e: 4b:ea:d0:e9:6b:d0:6b:e9:01:97:e8:91:e2:dc:22: df:a0:72:4b:d3:06:32:57:76:9a:ba:27:18:c7:b6: bb:9b:6a:60:ab:16:31:4a:91:4c:9c:f2:7b:f1:fe: fb:2a:f8:09:a9:98:4e:10:d3:74:8d:12:c7:c4:02: e6:44:4b:73:5d:0f:d7:f0:90:97:86:ae:d6:e6:4e: 5f:2b:a9:43:6c:8c:cb:32:6a:84:0f:10:58:62:81: ca:ff:d0:df:ac:98:11:75:26:2f:19:4d:fd:73:37: 1e:ed:ef:eb:40:05:3e:6d:7e:96:6d:4e:5c:ee:4d: 50:fa:da:e0:df:78:dc:e9:74:48:12:e4:0a:5e:fc: ab:6e:15:71:d0:8f:ff:51:59:09:b9:a2:e4:e9:4a: a6:7a:82:91:79:a6:6e:4e:a4:ac:f8:a0:3e:a2:04: 33:8c:73:9c:87:d7:17:99:38:f9:09:26:e6:e7:f9: 22:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D5:74:96:E4:ED:6F:B6:0E:BE:F2:BF:22:99:A4:AF:F4:CB:06:71 X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a7:f4:b7:ec:a1:ad:f5:8d:1c:e0:0b:a9:6a:f6:e3:ab:a9: a2:8e:53:5c:0d:67:bb:27:b2:40:2b:f7:5f:ba:36:68:e2:f7: 8d:94:68:3e:84:dd:0c:21:2f:ae:70:9b:ff:8b:d0:31:67:9e: b4:38:e3:d0:f2:45:e0:04:24:bc:be:ff:fd:b6:57:e8:69:55: 0e:e0:6f:05:3b:99:a7:f1:0e:8a:7f:18:47:d5:88:0b:2e:8e: 91:d8:2c:dc:1a:4b:d1:77:09:90:10:3b:4e:58:96:18:3b:a8: e4:1e:ac:6f:61:9c:2b:db:a4:cb:76:2f:b2:69:94:8c:71:4c: fc:ba:a7:50:2d:bb:d3:89:e7:a0:38:a2:5d:df:f5:3f:1c:47: 2c:e0:ca:a5:af:fd:95:06:0b:62:b0:22:16:27:c5:a3:05:16: 5a:18:3a:ff:a5:81:d6:7a:14:16:58:be:41:0e:30:7c:96:91: bd:47:10:ca:37:f7:f1:ff:42:6e:3e:94:38:88:b4:20:9d:77: ed:cd:0a:0b:54:22:31:be:20:3c:d5:e8:3c:82:8a:e2:bf:db: f0:fe:a1:f3:5d:fa:86:ad:4f:67:40:ac:7b:4c:97:57:c8:3f: 4b:4d:55:6f:99:82:de:0e:8d:0d:f4:22:cc:83:13:c6:e0:20: f5:77:d3:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbHklLhQPka2+sP7DYk8afMONvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNDExMjQwNTQ2MjFaFw0yNDExMjcxNjQ4MjFaMDMxMTAvBgNV BAMTKEEwRDU3NDk2RTRFRDZGQjYwRUJFRjJCRjIyOTlBNEFGRjRDQjA2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxfhl1xreeoZH7B5bWCoWqsxJ GF30aFNlwRdfWUy/LrNSLPqdX5SKLKUSrICvhwZvnOMzhi392wRLbo/5wwmDkcP7 mXM2Io6+Xkvq0Olr0GvpAZfokeLcIt+gckvTBjJXdpq6JxjHtrubamCrFjFKkUyc 8nvx/vsq+AmpmE4Q03SNEsfEAuZES3NdD9fwkJeGrtbmTl8rqUNsjMsyaoQPEFhi gcr/0N+smBF1Ji8ZTf1zNx7t7+tABT5tfpZtTlzuTVD62uDfeNzpdEgS5Ape/Ktu FXHQj/9RWQm5ouTpSqZ6gpF5pm5OpKz4oD6iBDOMc5yH1xeZOPkJJubn+SKZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoNV0luTtb7YOvvK/Ipmkr/TLBnEwHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCn9Lfsoa31jRzgC6lq9uOrqaKOU1wNZ7sn skAr91+6Nmji942UaD6E3QwhL65wm/+L0DFnnrQ449DyReAEJLy+//22V+hpVQ7g bwU7mafxDop/GEfViAsujpHYLNwaS9F3CZAQO05Ylhg7qOQerG9hnCvbpMt2L7Jp lIxxTPy6p1Atu9OJ56A4ol3f9T8cRyzgyqWv/ZUGC2KwIhYnxaMFFloYOv+lgdZ6 FBZYvkEOMHyWkb1HEMo39/H/Qm4+lDiItCCdd+3NCgtUIjG+IDzV6DyCiuK/2/D+ ofNd+oatT2dArHtMl1fIP0tNVW+Zgt4OjQ30IsyDE8bgIPV301g= -----END CERTIFICATE-----Generated at Sun Nov 24 07:10:01 2024 by rpki-client on console-ams.rpki-client.org