$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft File: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft (raw, json) Hash identifier: xdtnk9WrF5LBj5WTQl7yZ2J3dARQclWcZYNShlotC6g= Subject key identifier: 85:22:DC:24:08:76:E4:3B:AF:3F:E4:48:49:64:3A:FF:B1:DA:E2:2F Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Certificate serial: 3A6798A0F597219182E897C1E8405E970646EFBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft Manifest number: 01C3 Signing time: Sun 19 May 2024 16:51:38 +0000 Manifest this update: Sun 19 May 2024 16:46:38 +0000 Manifest next update: Wed 22 May 2024 20:30:38 +0000 Files and hashes: 1: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: E22HwcAyMwAutzY4TikhOftDNUxrzN6w1//uJ546IgA=) 2: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: 1ZgEMOxQvl7p8O8MFnYSQLi8jEzL+swadMCzIs94xG8=) 3: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: d91u20ZmJE/NxG6z1uamRSyS69UrU1ItkASVtLOSGBg=) 4: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: wYenGo/940nUWvRVhMT3/f3zId6aeDoFWaHRBWYw8xQ=) 5: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: dCsWlWFADMNDlXW9tS2wfX1LAxAj+4f6oZqN/3YQaOg=) 6: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl (hash: XJSaTiZTQbquGaCGMfq6BTri9sDlM2Xtwymf6MpLodE=) 7: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: lJ3J5YWe/gJACHZbb5gCqo5EHFwcLe7dO1OOUB1/tSQ=) 8: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: KzaLYGcQw0IKrlkuhA+8QUyGim/0oWX2HyogztoiVhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:67:98:a0:f5:97:21:91:82:e8:97:c1:e8:40:5e:97:06:46:ef:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Validity Not Before: May 19 16:46:38 2024 GMT Not After : May 22 20:30:38 2024 GMT Subject: CN=8522DC240876E43BAF3FE44849643AFFB1DAE22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:f2:f1:b4:54:54:13:76:e6:54:b9:6a:81: 9f:d8:a3:07:c3:43:5e:4c:4f:7d:83:54:05:a6:87: a3:d9:0a:ed:54:99:ab:63:2c:e5:9a:69:58:8d:37: ed:36:71:f9:c8:f3:39:53:ce:ab:ae:37:1c:77:a1: b0:df:6a:8e:cb:bd:f6:2c:cd:a0:51:ab:5b:e0:05: db:a7:b6:18:df:d0:4c:5e:50:75:4e:7a:0d:c9:b0: 50:8f:41:42:94:d9:b2:31:f0:46:2f:0f:d7:f1:41: b5:24:a1:d0:45:a9:85:6c:8f:5e:af:d6:64:ec:d4: eb:aa:d4:45:c9:af:60:3f:46:1b:25:1a:0d:52:44: ba:3c:b7:9a:b5:17:10:70:7a:1e:c7:e3:80:2e:07: cd:4f:d1:0b:91:8b:e7:c2:7b:3a:de:c2:ee:37:88: 39:9a:d8:ab:f0:b7:a6:4d:33:4d:67:2e:88:4c:88: 08:3e:7a:bb:c3:7a:ae:4b:de:8b:1b:d7:64:63:29: e6:cd:cf:30:4a:06:64:26:4e:d5:fc:9b:41:d0:63: d7:c4:56:a2:40:2c:64:b4:75:a5:2a:c0:8e:8d:61: 36:99:5d:3a:7b:0b:8e:a7:8c:04:c3:14:c6:ea:05: 00:16:a7:59:e6:56:35:c6:d5:86:89:c9:3f:ed:72: 85:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:22:DC:24:08:76:E4:3B:AF:3F:E4:48:49:64:3A:FF:B1:DA:E2:2F X509v3 Authority Key Identifier: keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:63:a3:b8:4f:93:88:35:d8:89:be:7f:06:43:3f:da:d2:1d: e7:49:e3:2e:82:ec:36:92:64:8b:16:47:c8:39:11:0d:ef:62: 9d:87:c7:10:f2:a2:f6:5b:f0:9b:07:1c:79:04:76:0d:55:1c: a7:55:84:96:da:5f:31:f2:6e:06:1d:33:dd:fb:bd:d2:5b:4a: 1e:0a:31:9b:7e:67:1c:c5:78:4d:b0:b9:4e:9e:f1:b1:90:e2: 97:7e:6a:4f:22:16:c0:ef:52:85:25:25:42:22:bc:b5:26:6f: fd:c3:54:0a:15:24:3b:0c:4d:f6:f2:70:45:35:6f:04:7e:e8: 4e:07:17:14:a6:c8:1c:36:e0:e4:ca:7f:b2:7c:b9:c9:30:3e: 8f:ca:ad:9e:4a:3d:71:2e:f3:34:fe:64:c2:15:ba:cf:8d:88: 44:19:c2:99:57:17:1e:27:48:ce:72:1a:01:ed:d3:20:d5:42: a1:7f:6d:e6:38:44:0b:40:a0:89:2c:d6:dd:24:64:67:48:ee: 5d:07:9b:fb:48:b3:a3:f1:7c:38:c8:05:85:60:99:cb:05:77: 03:2f:fe:b6:e1:e7:84:78:42:19:47:7e:47:03:fd:ec:b8:ed: fd:9f:04:61:eb:d7:87:89:ae:5f:e5:94:75:e2:52:4c:30:e4: 12:70:7c:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmeYoPWXIZGC6JfB6EBelwZG770wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw RUIzODRFMTAeFw0yNDA1MTkxNjQ2MzhaFw0yNDA1MjIyMDMwMzhaMDMxMTAvBgNV BAMTKDg1MjJEQzI0MDg3NkU0M0JBRjNGRTQ0ODQ5NjQzQUZGQjFEQUUyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjPLxtFRUE3bmVLlqgZ/YowfD Q15MT32DVAWmh6PZCu1UmatjLOWaaViNN+02cfnI8zlTzquuNxx3obDfao7LvfYs zaBRq1vgBdunthjf0ExeUHVOeg3JsFCPQUKU2bIx8EYvD9fxQbUkodBFqYVsj16v 1mTs1Ouq1EXJr2A/RhslGg1SRLo8t5q1FxBweh7H44AuB81P0QuRi+fCezrewu43 iDma2Kvwt6ZNM01nLohMiAg+ervDeq5L3osb12RjKebNzzBKBmQmTtX8m0HQY9fE VqJALGS0daUqwI6NYTaZXTp7C46njATDFMbqBQAWp1nmVjXG1YaJyT/tcoXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhSLcJAh25DuvP+RISWQ6/7Ha4i8wHwYDVR0j BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4 NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz ODRFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkz RkEwRUIzODRFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9jo7hPk4g12Im+fwZDP9rSHedJ4y6C7DaS ZIsWR8g5EQ3vYp2HxxDyovZb8JsHHHkEdg1VHKdVhJbaXzHybgYdM937vdJbSh4K MZt+ZxzFeE2wuU6e8bGQ4pd+ak8iFsDvUoUlJUIivLUmb/3DVAoVJDsMTfbycEU1 bwR+6E4HFxSmyBw24OTKf7J8uckwPo/KrZ5KPXEu8zT+ZMIVus+NiEQZwplXFx4n SM5yGgHt0yDVQqF/beY4RAtAoIks1t0kZGdI7l0Hm/tIs6PxfDjIBYVgmcsFdwMv /rbh54R4QhlHfkcD/ey47f2fBGHr14eJrl/llHXiUkww5BJwfIM= -----END CERTIFICATE-----Generated at Sun May 19 17:20:42 2024 by rpki-client on console-fra.rpki-client.org