$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: WqjdP17eOJVkIzC7jiCSiUCThqJEMEE5oc0lvUlrxzo= Subject key identifier: 16:64:95:8F:F1:94:85:70:42:3D:D8:1E:C3:66:10:5F:5B:5F:6D:D7 Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 1A06598F735ADA8B0C9166D0359E2506B418B2C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 015C Signing time: Thu 21 Nov 2024 12:31:58 +0000 Manifest this update: Thu 21 Nov 2024 12:26:58 +0000 Manifest next update: Sun 24 Nov 2024 16:43:58 +0000 Files and hashes: 1: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: zlcqvXi587wSr/o8I+yN+EXScv0fIyPxOx7WTfCRPMY=) 2: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: qsjTN7eau3L3JVANZx90TykdOPS/GxnBvoB900Yo7PA=) 3: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: BVmIMDJVUtj9I7W/AuR4BzIyxzfVxkHrxZNfZSGN+Zs=) 4: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: NBBnufRmfAThhqRXGPzYNoxmY2YbRxjo1w9qKSYkkeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:06:59:8f:73:5a:da:8b:0c:91:66:d0:35:9e:25:06:b4:18:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: Nov 21 12:26:58 2024 GMT Not After : Nov 24 16:43:58 2024 GMT Subject: CN=1664958FF1948570423DD81EC366105F5B5F6DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:08:29:d3:1e:66:ba:52:ca:9b:61:0a:9c: 9a:5a:be:bb:26:83:63:82:a4:19:fd:cd:d3:47:c3: fc:31:c9:0a:cb:18:4a:e7:e6:6d:69:e4:16:28:0e: 60:e1:0f:12:dc:35:bd:64:fe:9c:eb:c1:9c:86:c1: 0f:5a:7c:03:f2:c4:c5:80:a7:8a:6e:ca:c7:ae:10: b2:d1:49:d1:5b:11:0e:49:f1:0f:6f:44:52:35:be: 44:c4:f1:a2:f3:d3:d6:a3:4c:a4:51:77:57:ca:ae: 4e:d4:34:69:6e:3a:bc:e7:f0:1b:aa:9b:21:08:3b: 7a:6c:33:3d:ff:47:0a:86:9e:39:0f:73:9f:7f:44: bc:c3:5d:f4:21:ae:b7:82:ee:e1:c7:19:6f:f1:54: 37:20:fc:46:8e:17:79:35:81:95:70:55:77:1e:56: 77:4a:d5:2a:5e:24:92:eb:91:aa:20:38:7b:87:07: c6:42:ca:13:e9:6e:06:df:0c:66:f3:0d:00:dc:9d: b1:46:6b:2b:b3:09:6c:1d:d8:42:10:3d:8c:74:c0: 78:66:de:3f:d0:82:bb:7c:73:c4:a4:11:db:41:2b: 95:ab:8f:ec:ec:79:a4:b4:25:7a:55:ee:38:ff:65: a0:24:03:af:a2:c4:61:bd:af:d9:b2:cf:27:9d:21: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:64:95:8F:F1:94:85:70:42:3D:D8:1E:C3:66:10:5F:5B:5F:6D:D7 X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a7:11:54:dd:a3:24:cf:f4:d9:c2:67:3d:ef:15:b7:20:35: c1:c0:5d:9a:66:3d:4c:9e:44:ae:e5:e7:a1:86:15:b3:fe:2f: 24:38:d0:0f:89:1d:03:64:b0:c0:9c:40:66:f6:5b:cc:db:46: ef:b4:06:77:1d:be:e8:74:6c:1d:3e:e7:ac:b0:dc:1c:9a:f2: 21:e9:ab:f5:ce:96:f0:83:11:ed:65:40:d7:7a:24:a0:2a:86: 87:b1:8e:a1:94:42:62:f3:39:cb:29:aa:72:2e:ee:4a:dc:d1: cd:33:c1:14:b4:77:89:6b:5c:d7:35:23:b9:9c:d5:2f:5c:b9: f6:6a:2a:3c:48:a5:83:3a:c5:f2:7b:73:f7:43:cd:79:48:d1: f2:68:04:7c:73:0b:d7:72:28:7b:bb:bd:46:14:bd:cb:31:28: 7f:ff:92:af:58:5d:44:27:77:c7:e3:6a:bb:22:84:75:58:ab: 85:d8:10:36:b0:17:35:05:99:0e:a1:95:a0:04:97:6f:f6:84: e6:f2:86:78:05:00:4b:c1:fe:ca:34:80:92:d6:30:5d:b7:e3: 08:0e:d0:85:7a:d5:43:cd:e4:b1:bc:a8:c2:54:d7:93:4d:69: e2:98:1f:89:0e:1c:39:19:92:a6:d4:3e:69:31:12:00:09:68: d2:4c:69:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgZZj3Na2osMkWbQNZ4lBrQYssAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNDExMjExMjI2NThaFw0yNDExMjQxNjQzNThaMDMxMTAvBgNV BAMTKDE2NjQ5NThGRjE5NDg1NzA0MjNERDgxRUMzNjYxMDVGNUI1RjZERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqAgp0x5mulLKm2EKnJpavrsm g2OCpBn9zdNHw/wxyQrLGErn5m1p5BYoDmDhDxLcNb1k/pzrwZyGwQ9afAPyxMWA p4puyseuELLRSdFbEQ5J8Q9vRFI1vkTE8aLz09ajTKRRd1fKrk7UNGluOrzn8Buq myEIO3psMz3/RwqGnjkPc59/RLzDXfQhrreC7uHHGW/xVDcg/EaOF3k1gZVwVXce VndK1SpeJJLrkaogOHuHB8ZCyhPpbgbfDGbzDQDcnbFGayuzCWwd2EIQPYx0wHhm 3j/Qgrt8c8SkEdtBK5Wrj+zseaS0JXpV7jj/ZaAkA6+ixGG9r9myzyedIRM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFmSVj/GUhXBCPdgew2YQX1tfbdcwHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGynEVTdoyTP9NnCZz3vFbcgNcHAXZpmPUye RK7l56GGFbP+LyQ40A+JHQNksMCcQGb2W8zbRu+0Bncdvuh0bB0+56yw3Bya8iHp q/XOlvCDEe1lQNd6JKAqhoexjqGUQmLzOcspqnIu7krc0c0zwRS0d4lrXNc1I7mc 1S9cufZqKjxIpYM6xfJ7c/dDzXlI0fJoBHxzC9dyKHu7vUYUvcsxKH//kq9YXUQn d8fjarsihHVYq4XYEDawFzUFmQ6hlaAEl2/2hObyhngFAEvB/so0gJLWMF234wgO 0IV61UPN5LG8qMJU15NNaeKYH4kOHDkZkqbUPmkxEgAJaNJMaUA= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org