$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: A2vxGKZaGGZxnxP9OLySIqS3aRW4egfsCamuMc4NrhE= Subject key identifier: 34:93:7A:FE:3C:87:50:28:41:79:06:9D:EC:E1:0C:F3:24:13:C4:F4 Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 0DFFFCAB85EA06CCEED4D57385A49D3475637C97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 0239 Signing time: Thu 21 Nov 2024 11:01:33 +0000 Manifest this update: Thu 21 Nov 2024 10:56:33 +0000 Manifest next update: Sun 24 Nov 2024 11:19:33 +0000 Files and hashes: 1: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: GAwtToex2w5c1oE5kK2HhFt5YAgQTNZTOaMFuiSdHW0=) 2: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: JCWx/FGhw1FHND9MT5ONshCRIWMb7aAcCDFuR4JlLdA=) 3: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: WhcI/rPTYxL6IUCY8wiBGmvUbl7gccw0l7rmDchqDAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ff:fc:ab:85:ea:06:cc:ee:d4:d5:73:85:a4:9d:34:75:63:7c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: Nov 21 10:56:33 2024 GMT Not After : Nov 24 11:19:33 2024 GMT Subject: CN=34937AFE3C8750284179069DECE10CF32413C4F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:4b:d9:65:36:aa:28:d0:83:54:11:4e:05: 25:d5:96:ba:c9:8a:5e:ad:4d:44:49:a1:6e:f5:e4: 8f:cb:dc:a0:f6:61:74:53:9b:ab:d8:23:f5:c5:ad: 90:db:03:00:20:e1:88:6b:fd:bc:56:7a:bb:1f:4b: 51:4c:f4:68:6a:8a:df:19:aa:68:cc:fc:bb:75:80: 3d:cb:8e:63:06:14:c9:12:77:20:1f:3a:8d:55:ad: 1c:1a:04:4f:76:4b:df:ac:98:52:af:e5:32:8e:01: 83:2a:1b:4c:e6:2c:66:d8:ee:f4:0c:6f:71:d6:1f: 68:08:1b:c7:a0:91:58:80:30:d4:74:29:7c:80:aa: 12:11:a7:34:0a:f1:11:c5:52:b3:13:70:24:b7:40: 20:43:b8:b8:5a:0c:e4:09:3c:62:2a:92:45:9c:ae: 27:ce:8b:5e:f7:1b:85:5f:6e:ad:ad:04:0a:f0:59: f6:3e:f8:fc:bb:d2:d4:22:93:c1:bf:13:6a:a3:40: e2:19:c9:3a:5e:1d:f2:16:04:90:04:e9:b7:e3:7d: 6d:11:57:4a:69:a6:d2:38:62:df:35:9f:74:50:ae: a9:e5:ca:49:25:9e:48:97:a7:7a:9f:a8:34:e9:f6: 7c:db:b6:96:a1:ec:cd:5b:85:45:d7:5e:bb:30:28: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:93:7A:FE:3C:87:50:28:41:79:06:9D:EC:E1:0C:F3:24:13:C4:F4 X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e5:bb:1b:57:3b:96:7e:c2:df:dc:f9:b6:92:af:8f:b1:f6: d9:8e:dc:4a:e8:b8:bf:ed:2f:55:18:78:c3:92:ae:e0:58:86: 21:24:6c:2b:fc:19:1f:f6:0f:07:f7:d6:f3:68:96:1b:02:95: 43:12:cf:83:a6:7f:7b:32:05:b9:31:27:25:38:b3:33:ad:3c: 06:e9:6c:da:ce:3c:1b:d7:b7:5d:d2:29:0b:29:b2:37:54:a3: b2:0b:33:57:1f:aa:0d:51:b7:13:a6:a4:32:ac:9d:44:6d:56: 3a:87:b4:09:4e:5d:37:ca:6b:46:28:19:d0:27:da:13:6f:72: 9a:14:e4:d3:f7:9f:0f:33:2e:0e:53:a0:45:d5:1c:b7:3e:32: a4:68:4b:d4:95:21:dd:52:98:9d:1b:d8:03:a8:04:b9:81:e3: 21:be:39:42:eb:0a:f1:59:dd:00:d7:c5:de:b3:49:9a:32:0e: eb:6d:77:93:6d:5b:5b:81:5e:44:bc:4b:1a:0c:88:a3:42:b6: 48:9e:57:fa:03:e3:a5:04:10:5b:36:6a:80:98:02:da:2a:83: 8b:b8:f1:cc:fa:da:d9:7a:95:93:38:f2:86:e7:b8:29:6b:16: 23:e3:dc:fd:8f:49:cd:30:b3:73:fc:e7:05:dc:4a:9d:7f:32: 20:79:72:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDf/8q4XqBszu1NVzhaSdNHVjfJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNDExMjExMDU2MzNaFw0yNDExMjQxMTE5MzNaMDMxMTAvBgNV BAMTKDM0OTM3QUZFM0M4NzUwMjg0MTc5MDY5REVDRTEwQ0YzMjQxM0M0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrUvZZTaqKNCDVBFOBSXVlrrJ il6tTURJoW715I/L3KD2YXRTm6vYI/XFrZDbAwAg4Yhr/bxWersfS1FM9Ghqit8Z qmjM/Lt1gD3LjmMGFMkSdyAfOo1VrRwaBE92S9+smFKv5TKOAYMqG0zmLGbY7vQM b3HWH2gIG8egkViAMNR0KXyAqhIRpzQK8RHFUrMTcCS3QCBDuLhaDOQJPGIqkkWc rifOi173G4Vfbq2tBArwWfY++Py70tQik8G/E2qjQOIZyTpeHfIWBJAE6bfjfW0R V0ppptI4Yt81n3RQrqnlykklnkiXp3qfqDTp9nzbtpah7M1bhUXXXrswKDLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNJN6/jyHUChBeQad7OEM8yQTxPQwHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrluxtXO5Z+wt/c+baSr4+x9tmO3ErouL/t L1UYeMOSruBYhiEkbCv8GR/2Dwf31vNolhsClUMSz4Omf3syBbkxJyU4szOtPAbp bNrOPBvXt13SKQspsjdUo7ILM1cfqg1RtxOmpDKsnURtVjqHtAlOXTfKa0YoGdAn 2hNvcpoU5NP3nw8zLg5ToEXVHLc+MqRoS9SVId1SmJ0b2AOoBLmB4yG+OULrCvFZ 3QDXxd6zSZoyDuttd5NtW1uBXkS8SxoMiKNCtkieV/oD46UEEFs2aoCYAtoqg4u4 8cz62tl6lZM48obnuClrFiPj3P2PSc0ws3P85wXcSp1/MiB5cjA= -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org