$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft File: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft (raw, json) Hash identifier: LR39bb5Pa32Foxn/MJPNdufj//XL+NcQ4HLBBOMIOBA= Subject key identifier: 93:BA:C8:51:7C:4A:E8:B6:98:E1:F2:F4:93:A2:BE:07:1B:55:48:86 Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 1E28410E34BC999D05FEDFFADB499F6E43DF5D2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft Manifest number: CB Signing time: Tue 28 May 2024 04:11:18 +0000 Manifest this update: Tue 28 May 2024 04:06:18 +0000 Manifest next update: Fri 31 May 2024 08:12:18 +0000 Files and hashes: 1: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl (hash: j3pDcSss/jQ3frBrbyRA+h7fVuT+mQ7r6jOqYw3w5Lw=) 2: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: IDTCNq6vuVqVUdsfrRZBCVj8Qp6bY7fMQVsybLAWItk=) 3: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: WXmwYCCBz9U30QvkJ3mnriaDuxTdO4B9LPThVSuXfS0=) 4: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: ZJZJCd03bG8tskGWzVhwquwwe0VlutofkPzv8QbyrsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 08:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:28:41:0e:34:bc:99:9d:05:fe:df:fa:db:49:9f:6e:43:df:5d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: May 28 04:06:18 2024 GMT Not After : May 31 08:12:18 2024 GMT Subject: CN=93BAC8517C4AE8B698E1F2F493A2BE071B554886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:01:e4:d9:ca:e8:16:52:5c:f6:55:91:8d: 6a:08:cc:f5:24:b1:b6:50:2e:0c:36:f1:3d:c9:56: f9:14:b7:82:93:67:92:26:03:01:85:51:fe:fe:cf: b1:61:86:fb:c6:9a:35:fa:bf:93:72:12:e0:27:db: 4e:bd:0e:9c:0c:b0:35:54:92:1c:90:ea:d7:7d:87: 4a:78:59:17:1a:86:47:fc:c8:16:54:c5:a6:27:67: d8:2f:93:3f:c2:59:96:f3:12:a0:e6:de:fd:f7:76: 9a:f3:64:09:f1:bc:0b:47:99:6f:92:5c:9a:aa:bc: 4a:82:ca:f2:b5:b5:27:db:3f:e6:e1:5e:56:62:6e: aa:da:4d:10:c7:ad:91:87:aa:34:86:a2:5d:e1:70: 2d:7e:a5:8e:68:2c:d2:fa:cb:82:f8:e8:71:87:06: 6e:2d:fe:61:c0:da:ca:74:e6:52:62:e9:5e:d3:f1: 85:81:71:18:22:84:f9:92:80:48:d6:01:3f:f1:13: b6:bc:8f:8b:e8:19:b9:92:01:32:c8:de:21:69:09: 69:f1:50:9b:bf:53:a8:b9:d1:48:1d:c6:f9:51:74: 96:8b:f8:46:73:e8:88:e6:af:3b:75:d4:5c:0a:96: f2:cf:c6:bb:ce:cf:50:45:34:a1:5d:ac:99:85:c5: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BA:C8:51:7C:4A:E8:B6:98:E1:F2:F4:93:A2:BE:07:1B:55:48:86 X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5d:10:a1:46:8b:e1:53:a7:fe:16:51:e7:fb:1c:4f:08:e2: d5:6a:0e:33:dc:2d:35:b1:94:18:ec:2b:ef:3c:6b:77:f3:46: 2c:d1:e3:01:72:46:41:f8:fa:8b:8a:1c:51:db:c9:cf:a0:ae: 80:ac:e9:1c:c1:a1:2e:d9:b8:21:dc:e7:bf:3d:25:a8:8a:b8: fb:2b:65:9b:00:e8:60:24:66:19:8f:3f:c8:94:74:9b:72:18: ff:32:72:7c:45:86:e7:ec:77:14:63:a9:a6:e5:8c:e8:74:a1: ca:a6:4a:a7:7f:89:d3:3d:b8:89:7c:31:ee:be:1b:43:bd:09: 75:77:51:cc:92:78:8f:c1:9f:78:d3:18:4f:6a:90:75:87:41: 63:fb:c1:57:09:93:55:6d:2e:71:ec:25:70:3f:ce:53:4b:fd: 16:4f:4a:1b:c3:89:9e:c8:b6:b6:56:fd:e5:bb:c7:60:ab:92: d6:5a:26:43:2d:c0:f3:36:1f:18:09:58:b8:7e:96:69:c4:2d: 02:30:fd:c2:11:1a:cd:b1:0e:48:e7:bc:55:e9:9b:ae:4e:60: 14:16:67:0f:ea:4c:a3:e1:1b:e8:bc:71:8f:c9:50:79:f9:26: f8:4b:d0:d3:6e:fd:78:c2:20:3c:6d:d3:bc:d6:62:74:1b:7d: 8d:d4:3d:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHihBDjS8mZ0F/t/620mfbkPfXSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNDA1MjgwNDA2MThaFw0yNDA1MzEwODEyMThaMDMxMTAvBgNV BAMTKDkzQkFDODUxN0M0QUU4QjY5OEUxRjJGNDkzQTJCRTA3MUI1NTQ4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0MgHk2croFlJc9lWRjWoIzPUk sbZQLgw28T3JVvkUt4KTZ5ImAwGFUf7+z7FhhvvGmjX6v5NyEuAn2069DpwMsDVU khyQ6td9h0p4WRcahkf8yBZUxaYnZ9gvkz/CWZbzEqDm3v33dprzZAnxvAtHmW+S XJqqvEqCyvK1tSfbP+bhXlZibqraTRDHrZGHqjSGol3hcC1+pY5oLNL6y4L46HGH Bm4t/mHA2sp05lJi6V7T8YWBcRgihPmSgEjWAT/xE7a8j4voGbmSATLI3iFpCWnx UJu/U6i50UgdxvlRdJaL+EZz6Ijmrzt11FwKlvLPxrvOz1BFNKFdrJmFxT4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk7rIUXxK6LaY4fL0k6K+BxtVSIYwHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2 QkM2ODY3QkY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1dEKFGi+FTp/4WUef7HE8I4tVqDjPcLTWx lBjsK+88a3fzRizR4wFyRkH4+ouKHFHbyc+groCs6RzBoS7ZuCHc5789JaiKuPsr ZZsA6GAkZhmPP8iUdJtyGP8ycnxFhufsdxRjqabljOh0ocqmSqd/idM9uIl8Me6+ G0O9CXV3UcySeI/Bn3jTGE9qkHWHQWP7wVcJk1VtLnHsJXA/zlNL/RZPShvDiZ7I trZW/eW7x2CrktZaJkMtwPM2HxgJWLh+lmnELQIw/cIRGs2xDkjnvFXpm65OYBQW Zw/qTKPhG+i8cY/JUHn5JvhL0NNu/XjCIDxt07zWYnQbfY3UPck= -----END CERTIFICATE-----Generated at Tue May 28 05:06:10 2024 by rpki-client on console-fra.rpki-client.org