$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: /DTjE/rHgMN1qpDLhIIDVrY7TIofZKiPLYc5uT+H4c4= Subject key identifier: 71:5A:12:C1:E2:33:C4:EA:FF:3A:FB:BB:28:C5:0A:8F:76:B9:A0:7F Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 324770402F02E4E9C5A4977E9F6917A91A064A9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 018C Signing time: Wed 20 Nov 2024 10:21:49 +0000 Manifest this update: Wed 20 Nov 2024 10:16:49 +0000 Manifest next update: Sat 23 Nov 2024 20:01:49 +0000 Files and hashes: 1: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: t5DejjB0RIUWbv5rBvHI2IZcGXatMqyeVcj20ftLyZs=) 2: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: lniGk8MOfG6syikvVLv62ikau+htNtztgjd3Fiq1XaQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:47:70:40:2f:02:e4:e9:c5:a4:97:7e:9f:69:17:a9:1a:06:4a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Nov 20 10:16:49 2024 GMT Not After : Nov 23 20:01:49 2024 GMT Subject: CN=715A12C1E233C4EAFF3AFBBB28C50A8F76B9A07F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b8:46:cc:b1:31:5f:16:0c:ba:0d:c3:b6:f7: da:b7:2c:64:29:74:3a:87:35:cb:02:47:a5:3f:5a: b8:cb:ca:a8:62:09:39:3f:ca:fc:4a:36:d1:43:ee: 6c:73:8a:38:d4:6a:bb:b6:81:2f:47:f2:4d:dd:3a: 36:fa:a5:a8:99:00:01:1a:0b:0d:eb:00:59:0b:ab: 7e:a9:6e:48:b7:18:58:66:e1:1d:6b:c1:d0:d3:f3: 3a:e7:b1:cc:28:a6:b1:1e:c5:85:e0:3c:69:dc:89: dd:03:78:01:64:28:40:da:05:e9:9e:f0:d9:e0:28: 4e:5c:a0:d7:36:1c:c1:b5:c1:52:86:a4:17:41:21: ec:f1:34:2f:ec:3c:5f:27:29:47:ca:35:1d:f9:1b: 90:cf:47:4c:25:a0:bd:05:1b:10:4f:7b:4c:0b:be: 99:11:e5:23:2e:fa:9e:47:71:86:36:e5:eb:b9:2a: 1b:15:55:58:18:9a:be:7c:91:61:13:30:44:c1:83: 76:e5:a2:30:48:98:1e:06:ec:81:d2:4e:ef:5d:dc: ac:a2:c4:88:53:18:92:a2:3a:06:c4:d1:0b:69:01: 83:60:c5:d8:86:d0:5b:dc:15:e0:e0:f7:b6:41:a7: 7b:22:ff:f0:e3:2c:fe:1e:bc:2b:3b:24:fd:30:9f: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5A:12:C1:E2:33:C4:EA:FF:3A:FB:BB:28:C5:0A:8F:76:B9:A0:7F X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:54:c5:6e:3d:5f:6b:0d:9b:76:36:23:42:45:19:61:bd:44: d5:02:0e:51:a2:d3:37:a4:77:21:68:b9:52:1b:27:97:62:0b: 5d:fa:ca:ae:76:89:a2:cd:58:a3:54:27:54:8e:91:9c:fc:09: 96:7e:66:fe:51:23:53:d0:65:79:bc:d2:d5:38:ed:2e:03:80: 40:61:c9:41:da:e4:ab:b3:0e:78:96:5b:b0:09:c8:2f:29:e7: ac:70:76:fb:90:a0:54:33:a0:9a:04:e3:33:84:c6:3b:28:cf: bc:4d:6d:ea:cb:96:dd:93:0b:f4:d3:b3:05:11:a1:a0:af:0d: 76:76:04:4b:f8:1c:6b:ec:fb:c1:fd:c6:b4:48:7f:09:97:f0: 29:a3:b1:c0:69:d9:62:df:74:c8:68:6f:13:c0:90:a6:70:c9: 20:b9:57:7f:4d:73:39:9a:d0:ab:c9:f4:bb:86:74:59:87:b5: 8e:f3:aa:04:f0:7e:f1:58:77:13:21:d9:44:05:c2:e2:73:c3: a2:e0:7c:e8:4c:4e:b8:6d:49:4c:cc:c6:42:21:d3:71:b9:13: 92:70:2a:11:ab:6f:c8:76:f0:49:8b:3d:86:e3:2e:ba:c1:a4: 67:a8:06:97:07:3e:dc:f6:db:7a:e4:0b:13:a2:48:2b:74:00: af:7e:b2:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkdwQC8C5OnFpJd+n2kXqRoGSp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNDExMjAxMDE2NDlaFw0yNDExMjMyMDAxNDlaMDMxMTAvBgNV BAMTKDcxNUExMkMxRTIzM0M0RUFGRjNBRkJCQjI4QzUwQThGNzZCOUEwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhuEbMsTFfFgy6DcO299q3LGQp dDqHNcsCR6U/WrjLyqhiCTk/yvxKNtFD7mxzijjUaru2gS9H8k3dOjb6paiZAAEa Cw3rAFkLq36pbki3GFhm4R1rwdDT8zrnscwoprEexYXgPGncid0DeAFkKEDaBeme 8NngKE5coNc2HMG1wVKGpBdBIezxNC/sPF8nKUfKNR35G5DPR0wloL0FGxBPe0wL vpkR5SMu+p5HcYY25eu5KhsVVVgYmr58kWETMETBg3blojBImB4G7IHSTu9d3Kyi xIhTGJKiOgbE0QtpAYNgxdiG0FvcFeDg97ZBp3si//DjLP4evCs7JP0wn+TFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcVoSweIzxOr/Ovu7KMUKj3a5oH8wHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdUxW49X2sNm3Y2I0JFGWG9RNUCDlGi0zek dyFouVIbJ5diC136yq52iaLNWKNUJ1SOkZz8CZZ+Zv5RI1PQZXm80tU47S4DgEBh yUHa5KuzDniWW7AJyC8p56xwdvuQoFQzoJoE4zOExjsoz7xNberLlt2TC/TTswUR oaCvDXZ2BEv4HGvs+8H9xrRIfwmX8CmjscBp2WLfdMhobxPAkKZwySC5V39Nczma 0KvJ9LuGdFmHtY7zqgTwfvFYdxMh2UQFwuJzw6LgfOhMTrhtSUzMxkIh03G5E5Jw KhGrb8h28EmLPYbjLrrBpGeoBpcHPtz223rkCxOiSCt0AK9+sjs= -----END CERTIFICATE-----Generated at Wed Nov 20 11:08:34 2024 by rpki-client on console-ams.rpki-client.org