$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: KWUugCbkkNIBsz/15VVmKuqfS1lDvR5mfJ1cWWfmfzY= Subject key identifier: AD:E6:C9:55:B9:CE:0A:3C:2A:D9:6C:66:AE:B2:85:08:CA:4B:81:ED Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 15A798927888D36187936CBE6593F3EA5FB6E4E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: 3B Signing time: Sat 23 Nov 2024 21:42:12 +0000 Manifest this update: Sat 23 Nov 2024 21:37:12 +0000 Manifest next update: Wed 27 Nov 2024 09:26:12 +0000 Files and hashes: 1: 3136302e32352e3137342e302f32332d3233203d3e20313533303733.roa (hash: cFwSaadqVEmvV99RTCy+V4lO3VUqzOknd+W4cZk592U=) 2: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: mxe6CWaEoBVN61ibbVGfJzA3YFisKkeL1/2r04fSGdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a7:98:92:78:88:d3:61:87:93:6c:be:65:93:f3:ea:5f:b6:e4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Nov 23 21:37:12 2024 GMT Not After : Nov 27 09:26:12 2024 GMT Subject: CN=ADE6C955B9CE0A3C2AD96C66AEB28508CA4B81ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:b5:13:0d:25:ee:e5:50:7a:17:2a:84:f0: ad:17:93:9e:0d:0d:e1:ce:b6:e0:38:72:b4:a4:68: 76:c8:e3:e2:6a:fb:72:34:cd:6b:90:44:af:18:f9: 60:a2:58:65:c2:c7:8f:90:85:49:3f:77:72:f2:a6: 8c:8c:04:2e:d6:13:ef:bc:66:65:31:46:d2:78:ca: bf:a0:06:3f:9b:87:ac:f5:4f:74:bd:39:95:ef:e5: 1d:41:85:22:11:19:c6:55:ef:ba:2a:33:8f:f9:c3: 49:32:c9:73:57:f4:44:13:5e:87:ff:40:1e:8d:db: 5b:4c:b4:65:90:49:a5:d3:b2:d7:de:89:23:5c:ac: b5:39:9f:13:8b:a4:db:cd:c4:69:1e:9f:18:39:26: d8:b2:02:ba:c0:22:bb:9f:38:83:12:aa:ca:4b:98: d8:f9:13:d6:61:8d:af:91:24:e5:8a:01:a9:be:09: 0b:e2:85:db:4a:9d:87:07:17:5c:7a:a3:e5:f4:10: 68:81:60:b5:ae:2c:f6:92:12:ac:9d:61:07:05:b5: f8:96:a5:5b:1e:79:0f:be:e5:10:83:ce:39:aa:3d: a7:da:1e:97:e5:60:05:a5:a6:e6:b9:09:fa:cc:2f: e0:b6:63:9d:42:f2:20:df:78:84:12:33:c2:5d:f5: 44:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E6:C9:55:B9:CE:0A:3C:2A:D9:6C:66:AE:B2:85:08:CA:4B:81:ED X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:80:d2:0d:11:e1:4f:c3:b4:a9:cc:33:5c:d9:06:41:ae:d1: 74:0b:98:4d:35:73:0e:5d:bf:95:56:ed:41:b2:fd:4b:c0:56: e7:f9:d4:a3:c8:ab:f1:db:f1:94:05:9c:59:95:99:c3:96:ce: 84:23:24:f4:0b:70:1f:96:bf:dd:0e:d6:21:89:cc:72:c4:78: 2b:13:d6:f1:c3:1c:1c:d9:13:d5:a0:74:03:3b:bd:30:44:a3: f0:89:0d:41:4e:ae:39:f5:13:0f:ea:ed:14:79:ec:88:d2:58: 16:10:44:62:82:4b:0e:b4:f3:26:fd:28:b6:c9:3b:d9:88:0a: 71:53:30:7a:40:e5:f1:f0:8e:aa:c6:25:71:c9:b2:a4:70:a6: a8:0b:7c:05:21:e8:2f:72:b4:ea:2c:09:32:13:bc:cf:6f:34: 75:29:47:5d:0e:8f:25:8a:87:4f:4c:65:9f:de:d8:be:30:7f: a4:a4:8d:af:47:a0:53:5c:7e:9e:29:6f:c5:84:16:8f:f5:de: 41:4e:6e:f2:ce:ab:7d:5e:7b:1f:02:65:03:f9:dc:86:90:f9: 94:cb:d2:05:82:42:44:f9:92:79:c9:66:5e:24:e6:5a:6a:75: b3:60:83:78:08:90:8b:bf:21:da:e3:e8:d4:20:d4:7c:d9:9b: 43:ac:c8:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFaeYkniI02GHk2y+ZZPz6l+25OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNDExMjMyMTM3MTJaFw0yNDExMjcwOTI2MTJaMDMxMTAvBgNV BAMTKEFERTZDOTU1QjlDRTBBM0MyQUQ5NkM2NkFFQjI4NTA4Q0E0QjgxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/bUTDSXu5VB6FyqE8K0Xk54N DeHOtuA4crSkaHbI4+Jq+3I0zWuQRK8Y+WCiWGXCx4+QhUk/d3LypoyMBC7WE++8 ZmUxRtJ4yr+gBj+bh6z1T3S9OZXv5R1BhSIRGcZV77oqM4/5w0kyyXNX9EQTXof/ QB6N21tMtGWQSaXTstfeiSNcrLU5nxOLpNvNxGkenxg5JtiyArrAIrufOIMSqspL mNj5E9Zhja+RJOWKAam+CQvihdtKnYcHF1x6o+X0EGiBYLWuLPaSEqydYQcFtfiW pVseeQ++5RCDzjmqPafaHpflYAWlpua5CfrML+C2Y51C8iDfeIQSM8Jd9UTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrebJVbnOCjwq2WxmrrKFCMpLge0wHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuA0g0R4U/DtKnMM1zZBkGu0XQLmE01cw5d v5VW7UGy/UvAVuf51KPIq/Hb8ZQFnFmVmcOWzoQjJPQLcB+Wv90O1iGJzHLEeCsT 1vHDHBzZE9WgdAM7vTBEo/CJDUFOrjn1Ew/q7RR57IjSWBYQRGKCSw608yb9KLbJ O9mICnFTMHpA5fHwjqrGJXHJsqRwpqgLfAUh6C9ytOosCTITvM9vNHUpR10OjyWK h09MZZ/e2L4wf6Skja9HoFNcfp4pb8WEFo/13kFObvLOq31eex8CZQP53IaQ+ZTL 0gWCQkT5knnJZl4k5lpqdbNgg3gIkIu/Idrj6NQg1HzZm0OsyAY= -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org