$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft File: A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json) Hash identifier: klYNNtBX9NpVrMXm3TqBKj1qgTJ+rDPcl1uRvzlL7to= Subject key identifier: E3:3E:27:B8:84:72:66:1D:CB:33:44:27:18:0E:54:F0:20:30:2D:F4 Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 Certificate issuer: /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Certificate serial: 28B88E875B8DFCFD3B9AD1A2AD6DDF2F9D184974 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft Manifest number: 0172 Signing time: Mon 25 Nov 2024 03:12:02 +0000 Manifest this update: Mon 25 Nov 2024 03:07:02 +0000 Manifest next update: Thu 28 Nov 2024 10:32:02 +0000 Files and hashes: 1: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: zLfKDuc3jNTwhPewKCkQdrraOM+o8tM8JoTok2PPCpE=) 2: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: k7X14J+QdS7MEz6uDJt6u3xkxSH91jVPDLJqXdryTNc=) 3: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: GPoM7t4Gtbl0z+NWKAWVhmGlY/581gNe0bXC/iWOeS4=) 4: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: /BAWrcQPac6z7r0Aw+CQfRooZAASQixIkDdl1c+PelY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b8:8e:87:5b:8d:fc:fd:3b:9a:d1:a2:ad:6d:df:2f:9d:18:49:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Validity Not Before: Nov 25 03:07:02 2024 GMT Not After : Nov 28 10:32:02 2024 GMT Subject: CN=E33E27B88472661DCB334427180E54F020302DF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:f9:5c:27:59:5a:73:ee:c8:a7:61:cb:59: 33:1f:91:3b:47:2a:eb:48:00:20:3c:ff:80:05:c8: ee:ca:35:20:f9:00:63:ad:92:ef:63:0e:a7:e6:00: 5c:5d:05:05:11:87:2e:51:46:af:ca:31:5c:7b:e1: 09:f6:67:6a:2f:c6:05:5a:8d:b0:95:11:9f:ac:a8: 7a:6a:7c:26:0f:bf:4a:ae:af:8c:74:ea:55:04:ca: 2e:64:69:2d:86:51:52:56:d0:32:65:88:87:0b:75: 80:9c:2c:58:91:79:04:31:d0:95:0f:c9:ed:8b:e0: 59:71:03:04:a0:8b:b7:34:de:05:83:1a:be:1b:e0: e8:ec:14:fe:80:5b:5d:bf:94:a7:29:d4:9e:fe:f0: 8a:55:f0:8f:47:7c:de:46:29:5e:31:f5:2b:70:33: af:26:b0:70:f9:df:75:69:0b:07:14:12:f2:bd:d6: 6e:60:01:84:55:86:33:c7:89:e1:b6:b0:2f:2d:f5: 27:78:fa:ba:d3:0d:2e:ea:19:a5:26:07:2b:50:49: 24:a8:18:ef:c6:b6:a9:81:ef:8b:bf:77:2b:54:30: 52:66:de:a7:27:52:a1:8d:64:c1:f2:11:db:1d:01: 76:21:66:28:9f:3b:91:08:c8:72:21:ac:1c:39:16: 20:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3E:27:B8:84:72:66:1D:CB:33:44:27:18:0E:54:F0:20:30:2D:F4 X509v3 Authority Key Identifier: keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:68:3b:aa:34:25:ac:ba:49:59:7a:c0:bf:0f:36:f5:42:8c: 08:86:1f:83:62:76:60:8c:ae:a6:f8:59:ff:8b:b0:2e:14:5f: c3:08:7c:97:70:31:cc:0f:ec:db:a1:6e:1a:4b:4e:c9:83:75: fa:28:a5:45:05:b1:3d:46:f5:e6:b0:85:72:af:19:71:15:9b: 26:66:7f:b1:1c:ee:51:7f:2a:5d:e4:e9:e4:0e:91:2a:eb:c9: dd:f7:fc:48:3a:6b:d0:77:23:f3:0d:22:3e:e9:2e:3e:6b:57: 57:32:40:b1:b9:87:da:48:49:c3:a7:0d:15:00:d8:46:5a:2b: dc:5e:f4:c9:e1:01:47:ac:1a:cb:fe:96:13:cc:47:53:fe:2d: 45:8c:16:3d:8f:cf:75:57:fd:8b:aa:00:52:0b:c9:06:c6:99: 7d:24:bc:90:73:8a:71:2f:0f:56:0f:44:d2:6c:3e:34:4b:e7: 9d:81:5c:95:91:94:26:1a:78:a5:bc:9d:bf:5c:44:64:10:63: 3f:08:d0:38:6c:4b:be:ad:b7:c9:1e:e1:0b:2f:e5:6e:c7:0b: a9:4c:64:7b:9b:a3:d0:50:e2:b2:4f:b5:b1:42:83:6d:07:8c: 13:e8:c2:36:23:74:d4:19:b9:72:69:8b:84:f0:c8:6c:e3:2c: 96:f0:db:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLiOh1uN/P07mtGirW3fL50YSXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5 NjU1NUYzODAeFw0yNDExMjUwMzA3MDJaFw0yNDExMjgxMDMyMDJaMDMxMTAvBgNV BAMTKEUzM0UyN0I4ODQ3MjY2MURDQjMzNDQyNzE4MEU1NEYwMjAzMDJERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHflcJ1lac+7Ip2HLWTMfkTtH KutIACA8/4AFyO7KNSD5AGOtku9jDqfmAFxdBQURhy5RRq/KMVx74Qn2Z2ovxgVa jbCVEZ+sqHpqfCYPv0qur4x06lUEyi5kaS2GUVJW0DJliIcLdYCcLFiReQQx0JUP ye2L4FlxAwSgi7c03gWDGr4b4OjsFP6AW12/lKcp1J7+8IpV8I9HfN5GKV4x9Stw M68msHD533VpCwcUEvK91m5gAYRVhjPHieG2sC8t9Sd4+rrTDS7qGaUmBytQSSSo GO/GtqmB74u/dytUMFJm3qcnUqGNZMHyEdsdAXYhZiifO5EIyHIhrBw5FiB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4z4nuIRyZh3LM0QnGA5U8CAwLfQwHwYDVR0j BBgwFoAUovEl4c25W6KvVjavKEo5lJZVXzgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzM3MGQyNC1hNjU2LTQzMzYtODQyYi05YmQ1ZGNhMmI0MGEvMC9BMkYxMjVFMUNE Qjk1QkEyQUY1NjM2QUYyODRBMzk5NDk2NTU1RjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5NjU1 NUYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5 OTQ5NjU1NUYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxoO6o0Jay6SVl6wL8PNvVCjAiGH4NidmCM rqb4Wf+LsC4UX8MIfJdwMcwP7NuhbhpLTsmDdfoopUUFsT1G9eawhXKvGXEVmyZm f7Ec7lF/Kl3k6eQOkSrryd33/Eg6a9B3I/MNIj7pLj5rV1cyQLG5h9pIScOnDRUA 2EZaK9xe9MnhAUesGsv+lhPMR1P+LUWMFj2Pz3VX/YuqAFILyQbGmX0kvJBzinEv D1YPRNJsPjRL552BXJWRlCYaeKW8nb9cRGQQYz8I0DhsS76tt8ke4Qsv5W7HC6lM ZHubo9BQ4rJPtbFCg20HjBPowjYjdNQZuXJpi4TwyGzjLJbw260= -----END CERTIFICATE-----Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org