$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: 4weA62YsXgINLBRZBbki2h3bCC0Hmr31qiUxlWezoQw= Subject key identifier: 3B:4D:68:09:47:B0:16:B2:62:5B:BE:59:25:AE:6B:02:CB:E0:DF:C7 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 6DFE557DF428217FF308C677E03487C42A5EA79A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: 12 Signing time: Fri 22 Nov 2024 13:32:27 +0000 Manifest this update: Fri 22 Nov 2024 13:27:27 +0000 Manifest next update: Mon 25 Nov 2024 23:02:27 +0000 Files and hashes: 1: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: rxSutx4fzxBlsfkqiXc+/CKlNgBvagjnqmhbj757UV4=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: C/eQpXS1FL2/uRM5yW4FJhP7RGRcdJRCrZp3lfFC1uQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fe:55:7d:f4:28:21:7f:f3:08:c6:77:e0:34:87:c4:2a:5e:a7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Nov 22 13:27:27 2024 GMT Not After : Nov 25 23:02:27 2024 GMT Subject: CN=3B4D680947B016B2625BBE5925AE6B02CBE0DFC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:be:83:eb:0b:9c:fa:6a:be:83:95:b5:88: d9:f6:5e:b5:f9:86:7e:28:c6:24:fa:34:00:85:4d: ff:1b:89:bb:cd:ab:75:db:35:1a:97:c7:07:fa:79: 42:ee:d9:03:1b:56:c8:db:3a:d5:8b:a0:d4:b1:4b: d4:1a:c9:4c:de:1e:05:13:c5:94:6a:a4:d0:3b:8f: 99:2e:3d:e8:3e:c1:ef:46:31:13:75:cf:37:5a:60: e1:b5:a5:dc:13:ea:a5:61:81:83:cf:f1:5b:6c:6b: 32:bc:9c:94:b6:23:c7:34:de:6f:fa:8f:77:5e:d5: b7:d6:66:b6:44:ca:ce:cd:51:cd:c3:f8:66:bd:6a: ae:f3:96:b0:d2:10:4f:d9:20:e6:bb:f0:d4:59:f8: b9:f2:91:e2:20:5b:d7:f6:6f:57:61:b3:15:ee:86: 17:4b:4e:8e:90:05:8f:e0:09:cd:a2:a6:e0:1a:a5: df:36:4c:31:10:83:33:c4:c7:ce:b9:57:8e:f3:7a: 12:4c:3f:6d:18:87:6f:ce:78:fa:c0:f3:71:3d:17: cf:64:bd:16:e1:7b:f2:aa:de:10:4c:f2:e9:22:4d: 53:97:e8:d7:34:03:78:20:c2:cc:7d:ab:c7:d4:86: e8:00:cb:0c:b7:dc:29:d0:ce:4e:7e:0f:d2:30:a9: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4D:68:09:47:B0:16:B2:62:5B:BE:59:25:AE:6B:02:CB:E0:DF:C7 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:16:d0:16:9b:79:65:e0:96:53:03:46:d0:6c:06:1b:fc:39: dc:63:f9:54:33:a8:e6:a1:d1:cc:f3:c9:cb:5e:6a:b4:40:64: a9:0e:02:bc:81:dd:e3:6f:4a:f7:a6:2d:85:05:4f:00:c8:44: d7:25:71:78:cc:02:a4:b5:96:32:71:14:af:6f:54:63:8b:e2: 05:30:a4:f8:11:30:b7:02:e7:43:9c:c7:3a:60:da:83:2c:5d: c8:bb:cf:79:19:ec:ec:3b:27:88:ba:9d:60:31:1a:c1:12:95: bb:b1:9f:e5:a3:c2:e2:a6:6f:06:61:68:04:8f:b4:9c:40:b9: 55:34:6b:e3:ed:d8:48:f4:b9:51:c3:db:4d:63:bd:ea:d0:60: be:1d:8b:cb:9d:70:b0:81:03:d5:72:6e:32:47:75:2d:8d:9f: 49:d6:04:65:0d:7e:ec:cf:54:97:f5:96:a5:88:a7:d4:56:f2: 84:49:85:01:d7:ad:f5:e7:d1:fb:0c:7e:82:d6:87:06:3a:6f: 9d:d4:b4:61:ef:e0:34:f3:9e:39:9d:6c:63:f9:95:a7:0f:c0: 43:a1:34:be:21:50:07:2a:50:62:01:fc:04:b4:75:fe:ac:30: 9a:f6:fe:13:c5:57:c8:c1:ca:4f:de:5a:23:7e:7e:ef:1d:27: 7a:92:fd:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbf5VffQoIX/zCMZ34DSHxCpep5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNDExMjIxMzI3MjdaFw0yNDExMjUyMzAyMjdaMDMxMTAvBgNV BAMTKDNCNEQ2ODA5NDdCMDE2QjI2MjVCQkU1OTI1QUU2QjAyQ0JFMERGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBI76D6wuc+mq+g5W1iNn2XrX5 hn4oxiT6NACFTf8bibvNq3XbNRqXxwf6eULu2QMbVsjbOtWLoNSxS9QayUzeHgUT xZRqpNA7j5kuPeg+we9GMRN1zzdaYOG1pdwT6qVhgYPP8VtsazK8nJS2I8c03m/6 j3de1bfWZrZEys7NUc3D+Ga9aq7zlrDSEE/ZIOa78NRZ+LnykeIgW9f2b1dhsxXu hhdLTo6QBY/gCc2ipuAapd82TDEQgzPEx865V47zehJMP20Yh2/OePrA83E9F89k vRbhe/Kq3hBM8ukiTVOX6Nc0A3ggwsx9q8fUhugAywy33CnQzk5+D9IwqUgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO01oCUewFrJiW75ZJa5rAsvg38cwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYW0BabeWXgllMDRtBsBhv8Odxj+VQzqOah 0czzyctearRAZKkOAryB3eNvSvemLYUFTwDIRNclcXjMAqS1ljJxFK9vVGOL4gUw pPgRMLcC50Ocxzpg2oMsXci7z3kZ7Ow7J4i6nWAxGsESlbuxn+WjwuKmbwZhaASP tJxAuVU0a+Pt2Ej0uVHD201jverQYL4di8udcLCBA9VybjJHdS2Nn0nWBGUNfuzP VJf1lqWIp9RW8oRJhQHXrfXn0fsMfoLWhwY6b53UtGHv4DTznjmdbGP5lacPwEOh NL4hUAcqUGIB/AS0df6sMJr2/hPFV8jByk/eWiN+fu8dJ3qS/Q4= -----END CERTIFICATE-----Generated at Fri Nov 22 15:22:18 2024 by rpki-client on console-fra.rpki-client.org