$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: lSoTR3ccKcGZGizKjsJ2VEZumzHbrMMsO8rC7+pVlfo= Subject key identifier: 9C:B4:87:D7:A6:9E:AF:10:09:7C:FE:A2:8A:3F:DC:9A:45:88:34:7F Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 6286A2C0AC84FC2D44E1C0E86E61AAC4D75092AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 5B Signing time: Fri 22 Nov 2024 12:32:30 +0000 Manifest this update: Fri 22 Nov 2024 12:27:30 +0000 Manifest next update: Mon 25 Nov 2024 18:02:30 +0000 Files and hashes: 1: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: 3jA9f0ppafr8vZBbgunoMJIT5jw/2ee+NqURzJmhs3E=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: g6SAQJJHWXzFVQgYOk15xgdtJmREERi+slGLqoyw75U=) 3: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: 8cqJcptisB+e39sXAqEF19XH8xCbSGSxYZg52Gjq6y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:86:a2:c0:ac:84:fc:2d:44:e1:c0:e8:6e:61:aa:c4:d7:50:92:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Nov 22 12:27:30 2024 GMT Not After : Nov 25 18:02:30 2024 GMT Subject: CN=9CB487D7A69EAF10097CFEA28A3FDC9A4588347F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:40:ba:a8:61:3f:64:69:4a:ca:86:9f:f6: 3f:38:6b:0b:05:42:16:bd:cd:1f:22:1c:79:11:98: b7:ff:d5:90:b4:3b:b1:02:10:01:58:71:66:48:cd: 83:9e:67:eb:97:3c:a8:20:27:98:84:f5:66:75:bd: e2:38:c6:25:35:d8:67:cf:7a:ee:06:f7:15:66:ca: b9:90:b1:41:71:88:3b:89:b1:b7:d2:e8:b6:e1:0a: 05:b3:36:60:1c:f6:d7:46:c8:5b:8d:5e:5d:d2:1c: fd:6e:e4:7d:18:22:57:f2:95:47:51:86:8e:56:f0: 06:86:74:21:f3:26:ac:c3:a4:3f:f2:7b:7d:6f:de: 74:5b:1b:cb:a2:e5:d1:7e:56:2d:60:c6:e3:23:30: 35:c5:7b:21:1a:64:6c:a7:8b:8d:c7:c3:b6:84:4d: da:8a:5d:9d:9a:97:5a:42:88:5b:f1:f3:e0:7b:61: 32:f0:89:78:9d:07:19:d2:1c:3c:d9:ee:7f:09:17: 94:5a:b6:35:c5:bf:13:38:96:e6:4f:4f:27:5e:4b: f2:13:e4:f0:a4:52:f2:ed:83:78:4f:a7:64:a6:5a: f6:db:4b:ce:13:23:e9:ef:1e:f9:af:30:17:05:6d: d3:88:db:a0:2f:b5:74:6a:65:a2:73:00:c4:37:c1: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B4:87:D7:A6:9E:AF:10:09:7C:FE:A2:8A:3F:DC:9A:45:88:34:7F X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b4:8d:28:7b:9b:6c:7a:c9:19:c5:ec:37:38:94:a3:09:4e: 29:45:ca:3d:4c:fa:9c:f2:cf:fc:da:ed:ea:3e:a7:e8:b7:cb: a3:58:de:56:60:bb:1d:da:2b:64:c9:ed:38:19:54:18:2d:3c: 36:f6:6b:07:31:4f:83:ce:d9:50:f2:26:62:84:1f:1d:70:f3: 36:83:c7:7f:bd:4f:39:3b:ba:a9:c2:5a:8a:54:41:e7:c0:f4: 0d:26:9d:cd:23:a7:a9:91:98:55:70:2e:ac:d6:29:22:e9:9b: 7f:a9:d7:84:c6:62:e9:70:41:86:b3:42:c1:cb:8b:ac:f4:c6: 7f:2b:22:42:fa:c1:3e:6b:19:68:8f:3f:ab:84:e9:ee:76:46: 48:0c:90:4e:08:2b:3e:9d:15:36:a1:f6:11:e7:3a:f6:5d:14: 1c:f2:33:28:c8:e0:43:f0:23:f7:af:c2:d3:30:94:6f:95:4b: 17:14:22:cc:d1:e3:b9:41:79:a1:6b:6a:04:c1:61:97:e2:6c: 02:83:6f:4e:d7:09:f0:99:59:16:7b:bc:c6:a3:b3:fa:cb:ee: be:e3:6e:df:de:5f:98:bf:30:1a:5d:be:f1:b4:ad:57:55:24: a2:08:7c:e0:4a:bd:53:18:6f:59:b6:3c:23:90:93:ff:72:ee: 88:73:9d:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYoaiwKyE/C1E4cDobmGqxNdQkqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNDExMjIxMjI3MzBaFw0yNDExMjUxODAyMzBaMDMxMTAvBgNV BAMTKDlDQjQ4N0Q3QTY5RUFGMTAwOTdDRkVBMjhBM0ZEQzlBNDU4ODM0N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAUC6qGE/ZGlKyoaf9j84awsF Qha9zR8iHHkRmLf/1ZC0O7ECEAFYcWZIzYOeZ+uXPKggJ5iE9WZ1veI4xiU12GfP eu4G9xVmyrmQsUFxiDuJsbfS6LbhCgWzNmAc9tdGyFuNXl3SHP1u5H0YIlfylUdR ho5W8AaGdCHzJqzDpD/ye31v3nRbG8ui5dF+Vi1gxuMjMDXFeyEaZGyni43Hw7aE TdqKXZ2al1pCiFvx8+B7YTLwiXidBxnSHDzZ7n8JF5RatjXFvxM4luZPTydeS/IT 5PCkUvLtg3hPp2SmWvbbS84TI+nvHvmvMBcFbdOI26AvtXRqZaJzAMQ3wZLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnLSH16aerxAJfP6iij/cmkWINH8wHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJi0jSh7m2x6yRnF7Dc4lKMJTilFyj1M+pzy z/za7eo+p+i3y6NY3lZgux3aK2TJ7TgZVBgtPDb2awcxT4PO2VDyJmKEHx1w8zaD x3+9Tzk7uqnCWopUQefA9A0mnc0jp6mRmFVwLqzWKSLpm3+p14TGYulwQYazQsHL i6z0xn8rIkL6wT5rGWiPP6uE6e52RkgMkE4IKz6dFTah9hHnOvZdFBzyMyjI4EPw I/evwtMwlG+VSxcUIszR47lBeaFragTBYZfibAKDb07XCfCZWRZ7vMajs/rL7r7j bt/eX5i/MBpdvvG0rVdVJKIIfOBKvVMYb1m2PCOQk/9y7ohznVY= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org