$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: vPltuXvuBnlypHLt+xiMo8/NSww/hLC0vRyQBOJiaqg= Subject key identifier: 24:73:D7:33:1A:16:77:1A:F6:D5:AE:91:F4:E3:B7:EC:15:31:C4:04 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 11B5A5FBD2E6508FFE49FCD27A743CF3114539C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: 99 Signing time: Thu 21 Nov 2024 23:21:03 +0000 Manifest this update: Thu 21 Nov 2024 23:16:03 +0000 Manifest next update: Mon 25 Nov 2024 00:48:03 +0000 Files and hashes: 1: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: FvIgOVpZSJrWrFuZ5rZUOnZ+w8qNmO67alX6PKPGCFU=) 2: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: gWM6h3Zw+eAI8/YUUkZfqFp/YK5dsScDglOqVqlHk5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 00:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b5:a5:fb:d2:e6:50:8f:fe:49:fc:d2:7a:74:3c:f3:11:45:39:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Nov 21 23:16:03 2024 GMT Not After : Nov 25 00:48:03 2024 GMT Subject: CN=2473D7331A16771AF6D5AE91F4E3B7EC1531C404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:71:e5:e5:ba:0a:c0:41:02:1e:25:13:08: 9b:9e:6e:cc:59:90:78:28:25:0f:53:59:a9:89:20: b8:e9:90:42:6a:bb:ab:9b:38:a0:fa:e2:b8:af:8a: b9:e2:60:f6:41:7f:06:53:aa:0f:92:70:1d:24:d1: f2:3d:d1:b1:b2:bf:f3:cd:7e:a8:41:e0:a6:0d:b5: 71:56:a0:d2:e1:3a:f3:55:26:da:1a:63:d5:b4:d0: 22:3e:83:b3:ef:c4:ae:66:d8:37:58:da:31:7c:bc: b3:5f:b8:5b:23:ff:7e:2a:6a:41:ea:0a:10:33:cb: 1c:9b:c8:ca:47:f8:f8:28:2d:be:60:c9:40:99:d1: d8:db:b7:47:4d:8e:1d:b7:d2:bb:2f:b6:7e:ed:6a: 47:fd:63:8c:75:e9:25:c0:81:64:68:72:ea:f8:ed: 77:b8:1d:7f:b5:1a:86:81:39:72:8e:12:cc:01:ac: 09:05:bd:ae:33:7c:a6:59:9e:4c:bf:3d:27:8b:e5: 4e:e2:ed:3d:8c:97:53:b9:bf:c9:ab:9d:95:44:27: 38:cf:fc:d5:b7:e7:bc:1f:12:b3:62:5f:d7:69:bb: 56:d7:03:1e:c1:68:67:d1:91:ce:ae:0c:3c:ac:89: 46:9f:e2:97:59:f2:b0:52:a9:85:cf:e8:db:97:42: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:D7:33:1A:16:77:1A:F6:D5:AE:91:F4:E3:B7:EC:15:31:C4:04 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:93:1e:94:1e:a3:2c:fe:a9:f2:51:6c:c9:ba:e1:90:37:90: d2:bd:dd:f1:60:ed:fb:11:34:7a:38:f8:4b:fe:59:4a:e8:39: c3:96:19:c3:a1:4c:29:ff:1d:92:92:e3:a9:c8:3d:56:44:24: 35:5a:9b:9a:82:fd:ed:2e:b1:79:40:11:50:50:2d:90:7a:b4: 95:4c:ca:cd:c6:c6:93:49:48:07:78:4c:36:b5:74:82:1b:3d: 4a:93:10:e8:ac:15:42:2a:23:4b:7d:8b:c4:97:5a:02:7b:04: 94:c1:8f:53:69:d3:ea:8b:5d:56:3b:1b:d5:7d:eb:3a:49:17: 05:3c:e8:fe:fb:48:9c:84:f3:db:10:61:8f:58:73:2a:b9:de: bf:14:20:99:df:17:b0:4d:e0:a3:15:4b:4a:a5:52:d7:43:ef: 13:b1:7f:7f:d0:9c:3c:91:b5:1a:64:e9:8c:c7:42:e3:fc:5f: e4:d7:90:34:25:d7:11:df:ee:22:37:d4:74:40:c0:9d:1e:0b: 79:09:0d:b2:d2:bb:01:b8:61:b5:64:36:b0:19:db:a2:ae:3b: dc:7f:9c:6b:de:1c:9e:7c:0a:9e:23:df:8d:eb:15:e3:ac:b1: da:69:07:e3:cc:25:5f:96:0f:7d:23:4a:b0:82:6c:b3:fa:71: fa:23:57:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbWl+9LmUI/+SfzSenQ88xFFOccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNDExMjEyMzE2MDNaFw0yNDExMjUwMDQ4MDNaMDMxMTAvBgNV BAMTKDI0NzNENzMzMUExNjc3MUFGNkQ1QUU5MUY0RTNCN0VDMTUzMUM0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4XHl5boKwEECHiUTCJuebsxZ kHgoJQ9TWamJILjpkEJqu6ubOKD64rivirniYPZBfwZTqg+ScB0k0fI90bGyv/PN fqhB4KYNtXFWoNLhOvNVJtoaY9W00CI+g7PvxK5m2DdY2jF8vLNfuFsj/34qakHq ChAzyxybyMpH+PgoLb5gyUCZ0djbt0dNjh230rsvtn7takf9Y4x16SXAgWRocur4 7Xe4HX+1GoaBOXKOEswBrAkFva4zfKZZnky/PSeL5U7i7T2Ml1O5v8mrnZVEJzjP /NW357wfErNiX9dpu1bXAx7BaGfRkc6uDDysiUaf4pdZ8rBSqYXP6NuXQgpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJHPXMxoWdxr21a6R9OO37BUxxAQwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6THpQeoyz+qfJRbMm64ZA3kNK93fFg7fsR NHo4+Ev+WUroOcOWGcOhTCn/HZKS46nIPVZEJDVam5qC/e0usXlAEVBQLZB6tJVM ys3GxpNJSAd4TDa1dIIbPUqTEOisFUIqI0t9i8SXWgJ7BJTBj1Np0+qLXVY7G9V9 6zpJFwU86P77SJyE89sQYY9Ycyq53r8UIJnfF7BN4KMVS0qlUtdD7xOxf3/QnDyR tRpk6YzHQuP8X+TXkDQl1xHf7iI31HRAwJ0eC3kJDbLSuwG4YbVkNrAZ26KuO9x/ nGveHJ58Cp4j343rFeOssdppB+PMJV+WD30jSrCCbLP6cfojV9Y= -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org