$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: ntuT7WLh3CGkx3fno/wJnZ4iNYDB07+3sawDu5vNo5s= Subject key identifier: 3D:10:C8:0E:05:E4:7B:77:29:13:25:3F:8B:AB:D9:AE:CA:00:C7:30 Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 2DCFF629A03AB97E7E02A377B641E549D1E01B38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 0142 Signing time: Thu 21 Nov 2024 16:41:12 +0000 Manifest this update: Thu 21 Nov 2024 16:36:12 +0000 Manifest next update: Sun 24 Nov 2024 22:14:12 +0000 Files and hashes: 1: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: J8hK76n9jAxJfoZwmgnUWZPJmdbHYnBHcHNL1o/2t5w=) 2: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: j5FzMwDu/YbnYPAXRKSxOYwQmDAwIWTX5papXTTc748=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:cf:f6:29:a0:3a:b9:7e:7e:02:a3:77:b6:41:e5:49:d1:e0:1b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Nov 21 16:36:12 2024 GMT Not After : Nov 24 22:14:12 2024 GMT Subject: CN=3D10C80E05E47B772913253F8BABD9AECA00C730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:42:54:8e:1a:b3:c0:17:d1:f9:8b:d0:d2: 7f:8a:a9:fc:24:dd:49:58:16:5c:45:83:97:d7:30: 99:90:47:07:85:78:0d:b4:9c:2a:2e:74:ce:81:26: 29:8f:4a:7e:5d:88:fe:a0:57:43:0d:69:57:bd:ab: 4d:36:1f:0a:58:0b:31:ed:c1:6b:14:03:b6:01:e3: 36:dc:62:6d:17:a3:f8:15:e9:3c:4a:2f:b9:0a:1c: fe:ed:fb:11:c1:da:2e:1a:5a:5a:15:71:3f:e8:37: 88:28:0b:fc:f0:05:41:96:4b:3c:f6:06:45:d2:72: 62:a0:a4:6d:c6:28:00:33:e8:66:b7:98:00:9d:82: 4b:d7:92:97:5a:26:c7:c9:98:45:06:3c:0b:05:50: d9:dd:dc:a2:c9:6b:ce:5a:72:6e:2d:75:1a:f4:9e: f2:2a:50:27:6a:92:85:4b:0e:5d:ec:43:ed:15:46: 30:2c:d4:84:2b:6f:65:54:52:1f:74:9c:37:47:27: f7:3d:20:de:f0:74:72:06:c2:b4:b7:50:b8:a1:21: 20:53:24:70:dd:9a:45:1e:b7:96:d0:ce:29:da:59: d9:00:64:bc:e5:da:a5:83:49:c7:41:99:b6:5a:63: 88:cb:31:21:72:94:6b:24:aa:25:99:b3:f2:ac:e6: 3f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:10:C8:0E:05:E4:7B:77:29:13:25:3F:8B:AB:D9:AE:CA:00:C7:30 X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9a:ae:8c:d4:0c:af:7b:b5:fc:52:ee:cc:88:88:bd:c9:46: 1f:5d:1c:83:b8:db:10:25:fb:b5:4e:a5:d4:67:08:4c:98:d4: 1c:95:89:61:18:74:20:2b:ec:4d:df:b1:02:26:38:8b:8e:a4: 76:11:8b:f6:d0:8a:35:a7:8e:f9:9b:4d:50:ec:65:7e:3e:9b: ac:5d:cd:f4:86:14:c7:fb:33:84:88:41:f2:fd:92:81:69:36: b3:35:83:6d:02:d0:fc:61:f7:c7:11:cf:0c:84:08:ba:97:43: d2:10:cc:7f:39:55:40:da:f7:1a:90:a9:9d:17:fe:f5:1d:32: d3:f6:37:8c:e7:bb:9f:57:e7:ee:6a:75:7e:c6:1e:60:fe:f3: b1:b4:d0:98:73:44:90:7d:bd:91:17:40:eb:be:a2:b8:cf:de: 4a:cb:bc:2a:99:aa:26:f2:43:bb:ec:b3:ad:5f:b2:27:5e:55: 5d:32:a6:87:d7:5b:68:18:1a:ff:10:ea:69:41:78:dd:ec:37: 82:80:89:a8:1f:a2:3c:da:22:c0:9a:cf:31:df:83:b0:23:7c: b9:87:a8:9b:09:7d:c6:70:38:78:9f:d3:23:67:fc:7b:47:f2: b5:a7:c1:1c:24:77:7b:77:e7:70:fe:57:db:81:c4:af:32:5b: 67:ff:c5:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULc/2KaA6uX5+AqN3tkHlSdHgGzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNDExMjExNjM2MTJaFw0yNDExMjQyMjE0MTJaMDMxMTAvBgNV BAMTKDNEMTBDODBFMDVFNDdCNzcyOTEzMjUzRjhCQUJEOUFFQ0EwMEM3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkEUJUjhqzwBfR+YvQ0n+Kqfwk 3UlYFlxFg5fXMJmQRweFeA20nCoudM6BJimPSn5diP6gV0MNaVe9q002HwpYCzHt wWsUA7YB4zbcYm0Xo/gV6TxKL7kKHP7t+xHB2i4aWloVcT/oN4goC/zwBUGWSzz2 BkXScmKgpG3GKAAz6Ga3mACdgkvXkpdaJsfJmEUGPAsFUNnd3KLJa85acm4tdRr0 nvIqUCdqkoVLDl3sQ+0VRjAs1IQrb2VUUh90nDdHJ/c9IN7wdHIGwrS3ULihISBT JHDdmkUet5bQzinaWdkAZLzl2qWDScdBmbZaY4jLMSFylGskqiWZs/Ks5j8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPRDIDgXke3cpEyU/i6vZrsoAxzAwHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2arozUDK97tfxS7syIiL3JRh9dHIO42xAl +7VOpdRnCEyY1ByViWEYdCAr7E3fsQImOIuOpHYRi/bQijWnjvmbTVDsZX4+m6xd zfSGFMf7M4SIQfL9koFpNrM1g20C0Pxh98cRzwyECLqXQ9IQzH85VUDa9xqQqZ0X /vUdMtP2N4znu59X5+5qdX7GHmD+87G00JhzRJB9vZEXQOu+orjP3krLvCqZqiby Q7vss61fsideVV0ypofXW2gYGv8Q6mlBeN3sN4KAiagfojzaIsCazzHfg7AjfLmH qJsJfcZwOHif0yNn/HtH8rWnwRwkd3t353D+V9uBxK8yW2f/xT4= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org