$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: 76WANYxhIpTgZ6xudkiL3AI5zcVD4NZM0OQP6sti9hM= Subject key identifier: 6C:FD:41:AA:50:E5:E6:A6:DF:9B:93:DA:B7:BA:74:C5:B2:B5:F4:A9 Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 76549F6F7602390756B26C79A27A3CB1CA9CC490 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: E8 Signing time: Fri 22 Nov 2024 14:51:52 +0000 Manifest this update: Fri 22 Nov 2024 14:46:52 +0000 Manifest next update: Mon 25 Nov 2024 18:05:52 +0000 Files and hashes: 1: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gIAcydxXI/E/yyUjgeTfPGg4hYVM3/dB/YJGVfE92TU=) 2: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: eI8dCQp89JpyDVvAhhRf+09pPWkET3pxzzKB7GVamlE=) 3: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: zJMjQgCAVVEhWbHDYWr4aBX1FLfZop5uQOWXT64rrOQ=) 4: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: OL+ahup/5oGr661HhrtjGsABTBMVYhjEWX5tG/Iojbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:54:9f:6f:76:02:39:07:56:b2:6c:79:a2:7a:3c:b1:ca:9c:c4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Nov 22 14:46:52 2024 GMT Not After : Nov 25 18:05:52 2024 GMT Subject: CN=6CFD41AA50E5E6A6DF9B93DAB7BA74C5B2B5F4A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:ba:a7:fb:5c:54:74:30:b6:a8:6e:24:89: 36:99:58:64:c6:46:b9:88:bb:a6:4b:23:09:8f:d0: ab:d6:e6:85:a1:cc:9c:e6:3d:d0:73:26:9f:ce:12: a5:d9:64:1c:48:95:0b:d3:19:56:04:ea:d1:7c:b1: 62:7a:6d:e0:75:be:6c:28:06:f1:60:b8:24:f5:59: 50:4a:a0:d0:84:31:61:be:6c:9e:81:c6:34:cf:a5: e3:40:85:77:28:9b:4b:3a:49:91:71:fd:bf:05:28: 33:93:ea:cd:e9:bb:d2:23:63:31:3f:e3:b4:bc:e9: 89:35:6b:fc:93:4d:c4:13:ea:6f:43:9b:e9:e6:a8: 6f:9e:7b:85:72:0d:49:54:e4:5e:0e:8a:28:a0:f3: 49:fa:ea:97:9e:85:8f:49:ef:f5:62:91:65:6a:3d: 94:c3:65:80:33:59:7c:af:89:43:11:61:ad:07:13: 66:40:ca:75:53:07:65:58:5d:43:07:ec:31:77:7b: 45:cc:0d:ce:9b:3f:d6:38:01:11:79:ad:29:e1:d8: 1a:03:7b:5b:d0:28:4c:7a:77:d5:87:8d:00:9a:55: 63:2b:c9:f4:05:1d:de:2e:5a:3d:5e:4e:5d:7b:34: 9e:a4:d1:05:96:b1:7e:33:3a:76:5d:82:4d:8b:1c: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FD:41:AA:50:E5:E6:A6:DF:9B:93:DA:B7:BA:74:C5:B2:B5:F4:A9 X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a0:b3:52:64:6a:0e:f4:df:b2:8b:f1:19:0e:3e:9f:e5:f0: 3f:15:38:43:5e:43:e3:f4:59:8b:e7:1f:7f:22:ea:07:ee:45: 61:51:36:0e:20:ef:74:9f:09:bc:43:5d:51:bc:ca:1f:cd:30: 0f:43:22:ab:de:c1:a5:9d:7f:cc:54:10:57:9d:53:7e:42:4e: 29:f6:19:ac:9f:95:41:8d:4f:08:7b:0a:3a:a2:75:d7:12:c0: b3:21:d6:cd:7d:c4:59:72:1a:fa:09:e2:0a:f5:b3:f7:02:f8: 60:ae:c3:a8:8e:96:5d:1b:0b:46:ad:c0:20:4c:1a:3e:e6:5e: e0:a2:ce:1d:79:54:9a:bf:59:1d:cb:5e:ac:ae:b0:3c:e6:00: 3f:e8:2c:36:ac:a2:43:b9:dd:d0:f9:da:b5:fe:86:54:7e:5e: 29:09:e4:93:a2:f0:9c:fd:50:80:62:b2:71:c3:6f:83:f4:cc: c0:8f:d0:fe:dc:48:8a:2b:69:b7:28:71:0f:78:6e:ba:18:6d: 16:c5:d4:8d:69:a0:c4:0b:81:d1:e7:c3:b6:97:c2:2d:38:e3: f4:62:6c:c1:9c:81:ec:85:8b:1a:71:29:ee:04:79:ed:bc:8e: 04:f9:07:81:89:b3:6f:85:f9:7c:ad:67:3b:b5:4f:5a:40:aa: d9:9c:ca:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlSfb3YCOQdWsmx5ono8scqcxJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNDExMjIxNDQ2NTJaFw0yNDExMjUxODA1NTJaMDMxMTAvBgNV BAMTKDZDRkQ0MUFBNTBFNUU2QTZERjlCOTNEQUI3QkE3NEM1QjJCNUY0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/bqn+1xUdDC2qG4kiTaZWGTG RrmIu6ZLIwmP0KvW5oWhzJzmPdBzJp/OEqXZZBxIlQvTGVYE6tF8sWJ6beB1vmwo BvFguCT1WVBKoNCEMWG+bJ6BxjTPpeNAhXcom0s6SZFx/b8FKDOT6s3pu9IjYzE/ 47S86Yk1a/yTTcQT6m9Dm+nmqG+ee4VyDUlU5F4Oiiig80n66peehY9J7/VikWVq PZTDZYAzWXyviUMRYa0HE2ZAynVTB2VYXUMH7DF3e0XMDc6bP9Y4ARF5rSnh2BoD e1vQKEx6d9WHjQCaVWMryfQFHd4uWj1eTl17NJ6k0QWWsX4zOnZdgk2LHNMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbP1BqlDl5qbfm5Pat7p0xbK19KkwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHugs1Jkag7037KL8RkOPp/l8D8VOENeQ+P0 WYvnH38i6gfuRWFRNg4g73SfCbxDXVG8yh/NMA9DIqvewaWdf8xUEFedU35CTin2 GayflUGNTwh7CjqiddcSwLMh1s19xFlyGvoJ4gr1s/cC+GCuw6iOll0bC0atwCBM Gj7mXuCizh15VJq/WR3LXqyusDzmAD/oLDasokO53dD52rX+hlR+XikJ5JOi8Jz9 UIBisnHDb4P0zMCP0P7cSIorabcocQ94broYbRbF1I1poMQLgdHnw7aXwi044/Ri bMGcgeyFixpxKe4Eee28jgT5B4GJs2+F+XytZzu1T1pAqtmcyh4= -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org