$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: 5F5g8uajvnoFIVB2ucP9Zt73WUncP7aT+Fr3xNeifKU= Subject key identifier: 7B:1C:31:DC:7A:26:EC:4A:BE:FA:32:42:B6:B7:F9:9B:7E:1A:DC:9A Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 422491DB2FE103AC4A19358C89C0671449B07A63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 95 Signing time: Tue 21 May 2024 22:11:34 +0000 Manifest this update: Tue 21 May 2024 22:06:34 +0000 Manifest next update: Sat 25 May 2024 06:26:34 +0000 Files and hashes: 1: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: KEfBNLk3aE74+tx9yaCyxOumnxeo1gRbtc2BaRftsgI=) 2: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: JQxN98ReHJTb78UXJcMXrxRztm2NUVpcHlDYVI17Nng=) 3: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: ODX263cJNyc05cGTY65a903Emb2QFlQS3Nr/YGegOM8=) 4: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: hhGkdV1oNUVn4ZOhG59rIn3WfJKf0XaxA4fIPbGy/eU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 00:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:24:91:db:2f:e1:03:ac:4a:19:35:8c:89:c0:67:14:49:b0:7a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: May 21 22:06:34 2024 GMT Not After : May 25 06:26:34 2024 GMT Subject: CN=7B1C31DC7A26EC4ABEFA3242B6B7F99B7E1ADC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:d8:6a:a5:43:2d:c9:3c:c6:e8:40:5e:6e: 98:e6:14:20:da:95:4e:92:d0:b5:40:74:e1:c3:d0: c8:0a:8b:d5:39:da:3e:05:db:eb:3f:fc:bb:f9:49: 21:6d:f5:71:ed:98:b0:35:d9:c9:4c:72:f9:4e:cd: e5:14:22:a7:7b:41:6d:ef:03:5e:46:98:c6:af:dc: da:3e:47:8b:df:a8:c8:3c:65:5a:4c:d1:38:27:cf: d8:8f:51:17:6a:f0:77:08:f0:31:45:57:40:15:74: db:a8:6b:a4:65:e1:e5:d5:5b:bd:f3:24:51:63:c1: f8:65:d7:c9:dc:a7:5a:f6:29:6a:01:09:9b:2f:c0: 35:a5:40:ca:73:ad:1e:b1:10:df:69:e5:41:28:7f: 8f:80:3d:df:41:11:54:01:85:c6:07:51:3e:30:56: 2f:db:e1:11:8c:7e:aa:6a:b9:60:e8:e1:37:03:67: 4f:9f:96:2a:da:81:eb:19:b4:62:37:75:50:3e:85: 22:48:22:af:77:fd:8d:3a:15:ff:93:c8:c5:fa:87: 10:9b:d6:1c:ea:76:48:12:2b:a2:8c:15:99:c0:cf: 01:04:22:53:8b:6a:e5:b7:49:6d:25:17:50:8a:f5: 07:99:89:78:2d:d2:b1:35:8d:f9:2d:37:74:17:9d: 42:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1C:31:DC:7A:26:EC:4A:BE:FA:32:42:B6:B7:F9:9B:7E:1A:DC:9A X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ca:87:de:a0:80:dd:f2:6f:88:32:0e:b5:ea:dd:d0:bc:85: db:14:4a:bd:41:9d:7a:59:32:29:ba:9e:fe:a4:af:90:20:02: cb:68:4c:76:b6:1a:cc:50:d7:2a:d9:54:73:2b:c8:11:15:0a: db:8d:53:e3:6f:ce:d0:a1:3f:12:82:9f:2a:ee:78:fb:c4:f5: a7:5f:54:ca:cd:02:e5:f9:eb:c1:ee:c5:59:fc:05:cc:ee:bb: e0:a3:13:33:b7:1d:89:90:29:7a:30:41:9a:9c:15:dd:8a:69: 8b:b3:d6:bc:33:4b:64:60:cd:3f:41:83:2d:f9:18:d5:7d:65: b9:b4:75:a3:3e:ca:98:1e:1b:f0:ec:7d:c0:dd:46:e1:3c:5f: 8a:c3:9c:4c:1a:bd:84:c1:2f:2b:a0:a8:b9:e3:c1:77:cb:e8: 5b:e7:57:dc:fc:91:48:d9:2c:7f:46:25:be:91:1a:29:ca:a3: b7:23:20:a3:30:d5:1a:74:07:41:c8:6a:3e:48:b5:5c:0f:d6: c1:78:33:d0:21:bd:14:92:3b:61:c6:b4:02:17:c1:2d:0d:79: d7:8c:42:c3:aa:e0:b0:57:69:07:83:78:64:cc:78:04:3e:02: 09:17:18:5c:16:f7:c9:cd:8a:1d:01:c8:70:38:63:55:d9:8e: a7:b0:1b:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiSR2y/hA6xKGTWMicBnFEmwemMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNDA1MjEyMjA2MzRaFw0yNDA1MjUwNjI2MzRaMDMxMTAvBgNV BAMTKDdCMUMzMURDN0EyNkVDNEFCRUZBMzI0MkI2QjdGOTlCN0UxQURDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4NhqpUMtyTzG6EBebpjmFCDa lU6S0LVAdOHD0MgKi9U52j4F2+s//Lv5SSFt9XHtmLA12clMcvlOzeUUIqd7QW3v A15GmMav3No+R4vfqMg8ZVpM0Tgnz9iPURdq8HcI8DFFV0AVdNuoa6Rl4eXVW73z JFFjwfhl18ncp1r2KWoBCZsvwDWlQMpzrR6xEN9p5UEof4+APd9BEVQBhcYHUT4w Vi/b4RGMfqpquWDo4TcDZ0+fliragesZtGI3dVA+hSJIIq93/Y06Ff+TyMX6hxCb 1hzqdkgSK6KMFZnAzwEEIlOLauW3SW0lF1CK9QeZiXgt0rE1jfktN3QXnULVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUexwx3Hom7Eq++jJCtrf5m34a3JowHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXKh96ggN3yb4gyDrXq3dC8hdsUSr1BnXpZ Mim6nv6kr5AgAstoTHa2GsxQ1yrZVHMryBEVCtuNU+NvztChPxKCnyruePvE9adf VMrNAuX568HuxVn8Bczuu+CjEzO3HYmQKXowQZqcFd2KaYuz1rwzS2RgzT9Bgy35 GNV9Zbm0daM+ypgeG/DsfcDdRuE8X4rDnEwavYTBLyugqLnjwXfL6FvnV9z8kUjZ LH9GJb6RGinKo7cjIKMw1Rp0B0HIaj5ItVwP1sF4M9AhvRSSO2HGtAIXwS0NedeM QsOq4LBXaQeDeGTMeAQ+AgkXGFwW98nNih0ByHA4Y1XZjqewG/4= -----END CERTIFICATE-----Generated at Tue May 21 22:30:43 2024 by rpki-client on console-fra.rpki-client.org