$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: xlOns6aIMRyQnUbEJ2FjbkWi8waSBk02AJ27GviVoLg= Subject key identifier: 4A:D2:1D:23:91:73:56:26:DF:ED:98:10:76:39:59:2F:16:D7:02:29 Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 4C552BD7E742D4A6541786C0A0A17DC071F43B8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 0109 Signing time: Sun 19 May 2024 19:11:39 +0000 Manifest this update: Sun 19 May 2024 19:06:39 +0000 Manifest next update: Thu 23 May 2024 00:25:39 +0000 Files and hashes: 1: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: cMUc/IIijHHxWHsJqbqBIw8qvqYKrysS2DaQAa8qD5I=) 2: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: fsJLcx5ZpvG21oIrgSU5ByrDEGhxStsfeJyMY06qFnU=) 3: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: 0pc1fTpRImE7yqNVZeRVGCYaE0EHPJrTIVo0+jBS1ME=) 4: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: gRrvckKoRIK71YPBKSuy+R3dZyTr3P6/uunuKLtD2DY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:55:2b:d7:e7:42:d4:a6:54:17:86:c0:a0:a1:7d:c0:71:f4:3b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: May 19 19:06:39 2024 GMT Not After : May 23 00:25:39 2024 GMT Subject: CN=4AD21D2391735626DFED98107639592F16D70229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:4a:dc:a8:55:f4:30:6d:72:21:0f:b6:86: c5:6a:c8:84:84:42:87:a8:78:ec:85:b8:99:50:7f: 30:03:37:72:56:73:2c:33:e5:dd:fe:d1:4f:d0:ad: 56:54:c1:3d:8a:50:d7:c3:e6:ec:68:d6:06:00:ee: 76:15:38:a8:fe:cc:d0:e3:7a:fc:85:a2:9a:98:c7: 93:50:7b:ef:28:49:ab:7e:7c:51:53:1d:65:13:99: 49:1e:e2:8a:03:a3:70:b3:8c:8d:b2:31:23:e5:49: 1f:05:e1:6e:1c:0e:49:55:fe:f2:ad:ac:17:e1:81: d7:9e:b7:02:76:0e:73:fa:b1:ba:34:8d:d9:94:6f: 00:c8:b2:42:04:17:cc:05:ac:e1:31:37:07:b7:73: 5d:c6:c4:82:73:f7:a8:ad:65:65:6c:e9:46:f7:e6: 81:7c:e9:a6:27:3f:64:18:92:53:80:70:66:38:a9: 5a:f6:c2:d0:ee:38:0f:41:28:de:9e:5a:a1:28:55: 8e:10:1d:4b:1f:e8:06:66:83:fe:84:50:e9:3a:cb: 67:19:c6:e9:b6:74:a4:0b:3c:6f:cf:a0:0c:34:c7: 96:c3:ab:92:21:5b:f5:dc:d7:fa:21:ee:12:90:b9: ba:4b:cb:b5:24:0c:60:57:bc:4f:6c:17:3a:da:ab: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D2:1D:23:91:73:56:26:DF:ED:98:10:76:39:59:2F:16:D7:02:29 X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:45:a7:c7:2a:2a:c1:23:ad:cf:7f:65:c4:82:e7:c0:5e:2a: e8:2b:48:17:09:cb:4a:ca:e4:17:9e:ab:97:e9:e5:f0:f5:a4: 9f:dd:de:a4:4c:91:f5:c3:4b:64:e0:90:f2:3b:1e:e9:54:ef: a2:e2:9f:60:95:20:37:82:c2:bd:c3:b6:7e:81:2b:4e:15:8f: db:20:4f:f9:09:b0:29:1a:c9:77:10:5a:08:da:09:62:46:dc: 3f:a7:22:88:95:91:0f:61:b7:20:ac:8b:3b:a5:ab:09:cd:1a: 1b:82:cf:78:a6:2f:15:4c:a5:e6:52:02:ef:64:a3:96:98:2a: 60:19:0e:a8:34:37:d1:c2:30:bb:d8:f6:87:bc:17:97:2d:17: d4:e8:a9:a1:86:8d:0a:80:0d:f3:0a:93:7e:82:e7:da:cb:6a: 57:da:c2:ce:3f:92:37:b0:22:b3:6c:fb:9e:23:36:3d:d8:73: 2a:80:11:c5:b4:57:8f:f6:c1:45:ce:80:0b:25:c8:5d:30:cb: 1b:9a:c2:d3:9e:42:05:e9:5f:4b:72:a2:e5:3d:2d:a9:69:5e: 36:d5:a4:4f:35:bf:b3:d2:c6:a2:dc:94:0a:01:29:aa:14:3e: b1:60:d7:57:c6:b8:68:c3:78:4d:4f:e7:b2:e0:7d:31:cc:55: 8f:8f:79:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFUr1+dC1KZUF4bAoKF9wHH0O4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNDA1MTkxOTA2MzlaFw0yNDA1MjMwMDI1MzlaMDMxMTAvBgNV BAMTKDRBRDIxRDIzOTE3MzU2MjZERkVEOTgxMDc2Mzk1OTJGMTZENzAyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oErcqFX0MG1yIQ+2hsVqyISE QoeoeOyFuJlQfzADN3JWcywz5d3+0U/QrVZUwT2KUNfD5uxo1gYA7nYVOKj+zNDj evyFopqYx5NQe+8oSat+fFFTHWUTmUke4ooDo3CzjI2yMSPlSR8F4W4cDklV/vKt rBfhgdeetwJ2DnP6sbo0jdmUbwDIskIEF8wFrOExNwe3c13GxIJz96itZWVs6Ub3 5oF86aYnP2QYklOAcGY4qVr2wtDuOA9BKN6eWqEoVY4QHUsf6AZmg/6EUOk6y2cZ xum2dKQLPG/PoAw0x5bDq5IhW/Xc1/oh7hKQubpLy7UkDGBXvE9sFzraqybrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUStIdI5FzVibf7ZgQdjlZLxbXAikwHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFFp8cqKsEjrc9/ZcSC58BeKugrSBcJy0rK 5Beeq5fp5fD1pJ/d3qRMkfXDS2TgkPI7HulU76Lin2CVIDeCwr3Dtn6BK04Vj9sg T/kJsCkayXcQWgjaCWJG3D+nIoiVkQ9htyCsizulqwnNGhuCz3imLxVMpeZSAu9k o5aYKmAZDqg0N9HCMLvY9oe8F5ctF9ToqaGGjQqADfMKk36C59rLalfaws4/kjew IrNs+54jNj3YcyqAEcW0V4/2wUXOgAslyF0wyxuawtOeQgXpX0tyouU9LalpXjbV pE81v7PSxqLclAoBKaoUPrFg11fGuGjDeE1P57LgfTHMVY+Peck= -----END CERTIFICATE-----Generated at Sun May 19 19:40:54 2024 by rpki-client on console-fra.rpki-client.org