$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: /XYLEinNjXtuVg5wyNzvK0F5SDf47kG/RwhQKjE/X2U= Subject key identifier: 63:81:91:5C:7F:AD:94:DF:B9:07:3F:A8:DC:EB:A8:2C:0D:48:43:66 Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 52C1F52DF33D5C02508C6756C810EBADBD046E46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: 0D Signing time: Thu 21 Nov 2024 08:20:38 +0000 Manifest this update: Thu 21 Nov 2024 08:15:38 +0000 Manifest next update: Sun 24 Nov 2024 17:27:38 +0000 Files and hashes: 1: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: 2spkTLk1QehnJfrgQAN/MewO3zitQ+4eJXyRuXDEl/k=) 2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: Mh2qAtV9OXmT8dkxySa/tVQuTPHOj1MMmtUTif0IndI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c1:f5:2d:f3:3d:5c:02:50:8c:67:56:c8:10:eb:ad:bd:04:6e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Nov 21 08:15:38 2024 GMT Not After : Nov 24 17:27:38 2024 GMT Subject: CN=6381915C7FAD94DFB9073FA8DCEBA82C0D484366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:0b:df:a4:7f:9e:1a:61:25:2a:c8:55:7c: 0f:b6:98:6c:64:f9:d8:0e:94:21:3c:f9:58:78:74: ef:71:90:52:f3:76:93:99:27:42:35:88:b9:9a:d8: 13:a2:36:a4:0d:01:83:7b:c9:cc:23:04:50:79:6f: dd:f1:cf:32:7d:76:b7:74:67:06:f0:ea:f1:2d:07: 87:05:4a:68:07:46:05:e7:be:46:7b:6f:8d:a0:fb: 9a:57:b9:17:b2:33:c2:df:ca:80:e6:d8:2f:42:ea: 99:4a:6b:9e:9c:ed:28:ac:60:be:15:da:f8:34:ab: 6b:62:07:db:a6:7e:fd:f2:d7:1d:31:15:84:4a:74: fd:4c:47:c9:36:48:3e:cf:aa:8a:a6:d1:74:b1:ed: 9b:49:46:8e:52:26:b8:75:2f:5b:92:3f:30:ab:f2: 0f:7e:93:0c:19:06:8c:7f:09:8d:d1:d7:87:fe:63: bc:e8:d4:9f:5c:e4:fc:e7:ff:b0:fe:7f:33:4b:45: 52:be:95:e6:02:c4:02:bc:7a:30:7f:62:3f:11:42: 8d:8a:8d:80:ee:da:3f:4e:68:3d:50:a1:9b:b9:45: 2a:01:84:e9:36:e4:16:a0:18:de:04:a3:82:2a:9a: 3e:27:e1:e2:09:5e:8c:50:4f:2a:82:e9:f5:69:85: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:81:91:5C:7F:AD:94:DF:B9:07:3F:A8:DC:EB:A8:2C:0D:48:43:66 X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:94:e3:84:58:65:7c:d7:b3:45:79:66:5e:f7:5f:62:20:22: 27:07:1b:f8:c8:6d:dd:ff:4b:f0:46:43:68:f5:e2:d3:ca:14: a5:5f:a2:dc:d1:8a:13:ed:21:15:bd:47:40:19:c6:cf:27:4b: 5c:58:60:64:11:92:16:e6:53:4a:a6:4e:fc:f9:55:aa:be:ae: c0:db:2f:94:32:b1:40:6b:6f:7e:67:83:ff:2a:82:87:09:e4: 46:e0:c2:70:49:af:5f:96:ba:8f:98:13:cf:be:12:79:ec:df: dd:61:07:d3:cb:82:1b:8c:58:ec:81:3a:43:8c:8c:28:75:68: 83:44:62:cb:90:aa:50:3c:4e:1f:13:99:03:aa:45:6d:c5:72: 8a:b2:7a:ec:cb:b7:7e:c2:cd:e8:b3:2d:5b:67:a5:9a:c7:7e: db:1a:02:15:84:39:25:13:78:47:b3:e3:8e:f8:1a:ae:a2:59: 0c:f3:7c:ed:c9:de:b1:07:54:f2:91:5d:ef:02:bf:70:f1:6e: 4c:5e:ee:67:42:1f:91:9a:95:38:d5:4d:00:21:9e:61:f4:d0: 3d:65:a3:61:43:5e:7b:3c:7a:b4:6d:8e:69:58:09:52:62:1f: da:44:b4:73:64:c6:9f:b2:2b:1b:9f:37:0a:46:1d:25:2c:ec: 5b:c4:b0:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsH1LfM9XAJQjGdWyBDrrb0EbkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNDExMjEwODE1MzhaFw0yNDExMjQxNzI3MzhaMDMxMTAvBgNV BAMTKDYzODE5MTVDN0ZBRDk0REZCOTA3M0ZBOERDRUJBODJDMEQ0ODQzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWAvfpH+eGmElKshVfA+2mGxk +dgOlCE8+Vh4dO9xkFLzdpOZJ0I1iLma2BOiNqQNAYN7ycwjBFB5b93xzzJ9drd0 Zwbw6vEtB4cFSmgHRgXnvkZ7b42g+5pXuReyM8LfyoDm2C9C6plKa56c7SisYL4V 2vg0q2tiB9umfv3y1x0xFYRKdP1MR8k2SD7Pqoqm0XSx7ZtJRo5SJrh1L1uSPzCr 8g9+kwwZBox/CY3R14f+Y7zo1J9c5Pzn/7D+fzNLRVK+leYCxAK8ejB/Yj8RQo2K jYDu2j9OaD1QoZu5RSoBhOk25BagGN4Eo4Iqmj4n4eIJXoxQTyqC6fVphY5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4GRXH+tlN+5Bz+o3OuoLA1IQ2YwHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqU44RYZXzXs0V5Zl73X2IgIicHG/jIbd3/ S/BGQ2j14tPKFKVfotzRihPtIRW9R0AZxs8nS1xYYGQRkhbmU0qmTvz5Vaq+rsDb L5QysUBrb35ng/8qgocJ5EbgwnBJr1+Wuo+YE8++Enns391hB9PLghuMWOyBOkOM jCh1aINEYsuQqlA8Th8TmQOqRW3FcoqyeuzLt37CzeizLVtnpZrHftsaAhWEOSUT eEez4474Gq6iWQzzfO3J3rEHVPKRXe8Cv3Dxbkxe7mdCH5GalTjVTQAhnmH00D1l o2FDXns8erRtjmlYCVJiH9pEtHNkxp+yKxufNwpGHSUs7FvEsF8= -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org