$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: d92h2jjodoxswzd9H/R8caaVq0TRZ4JuHlJxc8qwLUY= Subject key identifier: 67:27:30:90:83:4E:65:8C:AD:EE:99:C4:9E:D1:7C:FA:36:00:F0:8A Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 7F025A55D5089BDA26E3AA97C3D8674597FF52C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 0117 Signing time: Fri 22 Nov 2024 08:31:51 +0000 Manifest this update: Fri 22 Nov 2024 08:26:51 +0000 Manifest next update: Mon 25 Nov 2024 11:57:51 +0000 Files and hashes: 1: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: rfy7CTyuYPoXZZiXeDRdKPJ5qMlBakwW+ls2/eHxotY=) 2: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: qNFGBIdi3lNB88CIUJDB9tXooFY458hRaINWvmteVv0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:02:5a:55:d5:08:9b:da:26:e3:aa:97:c3:d8:67:45:97:ff:52:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Nov 22 08:26:51 2024 GMT Not After : Nov 25 11:57:51 2024 GMT Subject: CN=67273090834E658CADEE99C49ED17CFA3600F08A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:04:df:1b:5b:ff:e1:5d:ea:f5:15:6f:41: 05:36:70:52:89:f9:d8:04:0b:c9:5c:68:da:8d:d1: 49:b7:b5:3d:87:94:85:9c:ae:e1:f1:1b:3f:e5:f0: 4b:e1:9e:b8:ab:98:5b:92:78:01:c0:92:39:b4:e5: eb:f0:bf:ef:5a:ec:82:68:42:55:13:0a:3b:b5:9c: 0a:61:a1:b0:cb:56:f0:a3:87:da:f1:9b:91:4c:05: d6:d3:12:d8:d3:63:bb:3b:33:0f:29:26:22:98:94: cb:36:66:02:a9:cf:a8:9a:0a:6f:c1:5b:0f:a6:40: 10:0c:19:34:f0:ca:db:6c:c7:94:11:5e:4f:91:95: 45:9f:9e:10:61:7a:68:d3:80:aa:bd:dd:50:e0:f1: 3a:09:ad:e6:e2:b9:05:cd:cb:4f:45:0b:a8:ea:88: 72:86:81:5b:b8:7b:41:37:47:83:0a:2e:d9:fe:81: fb:ea:95:12:29:d9:59:6f:ac:8a:93:6d:2b:88:b9: 3a:17:ff:5e:b4:86:b2:64:f9:b7:bf:d3:c1:80:33: 91:73:f1:c5:db:71:99:fd:cd:78:b0:b3:ab:c8:f9: b4:74:bc:4b:19:92:1b:5e:84:24:2b:b4:bf:46:9b: d7:44:08:af:43:ce:86:b5:17:5a:68:2b:c3:47:63: e8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:27:30:90:83:4E:65:8C:AD:EE:99:C4:9E:D1:7C:FA:36:00:F0:8A X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ac:2d:68:a6:00:96:74:36:94:5c:9a:d3:ce:73:c3:8b:64: 42:78:1c:05:88:12:a7:9e:2a:08:f1:e8:ec:e1:95:ac:ff:66: c3:41:62:5c:62:30:66:85:31:57:e9:4f:9c:0c:7c:38:89:d1: 09:38:06:bf:47:11:c7:81:cd:aa:0c:44:0e:d5:6e:7f:83:57: 4a:13:34:53:71:ae:de:03:f7:8f:c2:97:ab:3b:9f:5b:ee:c1: be:9d:66:35:ec:e3:de:6e:60:72:f9:a5:2f:74:c1:8d:26:71: 96:dc:8f:da:83:32:1d:b9:b8:9c:c6:b4:b4:c7:82:e3:b5:31: 70:4a:66:3a:11:50:06:ca:d6:1c:8c:a5:cd:ad:d9:4e:85:f3: 2a:43:1a:80:83:9a:f5:b2:4f:1e:34:3e:38:e2:b8:34:3d:50: f0:98:d1:d5:f3:1b:57:bd:10:7a:26:b1:f3:67:45:00:21:1c: 25:1e:d5:25:c6:b6:6f:b1:38:88:e1:1e:68:b8:32:0e:f3:34: 01:c4:b1:4d:d3:03:fd:d5:6f:d5:47:db:cf:69:70:64:53:6e: 72:6e:b6:a0:80:00:45:c7:bf:d9:eb:0b:21:e5:f3:bc:7a:72: 50:c3:af:96:5e:f5:71:4e:90:37:6b:5e:69:67:81:0c:e8:4e: b0:5a:6a:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwJaVdUIm9om46qXw9hnRZf/UscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNDExMjIwODI2NTFaFw0yNDExMjUxMTU3NTFaMDMxMTAvBgNV BAMTKDY3MjczMDkwODM0RTY1OENBREVFOTlDNDlFRDE3Q0ZBMzYwMEYwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa4wTfG1v/4V3q9RVvQQU2cFKJ +dgEC8lcaNqN0Um3tT2HlIWcruHxGz/l8EvhnrirmFuSeAHAkjm05evwv+9a7IJo QlUTCju1nAphobDLVvCjh9rxm5FMBdbTEtjTY7s7Mw8pJiKYlMs2ZgKpz6iaCm/B Ww+mQBAMGTTwyttsx5QRXk+RlUWfnhBhemjTgKq93VDg8ToJrebiuQXNy09FC6jq iHKGgVu4e0E3R4MKLtn+gfvqlRIp2VlvrIqTbSuIuToX/160hrJk+be/08GAM5Fz 8cXbcZn9zXiws6vI+bR0vEsZkhtehCQrtL9Gm9dECK9Dzoa1F1poK8NHY+gtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZycwkINOZYyt7pnEntF8+jYA8IowHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSsLWimAJZ0NpRcmtPOc8OLZEJ4HAWIEqee Kgjx6Ozhlaz/ZsNBYlxiMGaFMVfpT5wMfDiJ0Qk4Br9HEceBzaoMRA7Vbn+DV0oT NFNxrt4D94/Cl6s7n1vuwb6dZjXs495uYHL5pS90wY0mcZbcj9qDMh25uJzGtLTH guO1MXBKZjoRUAbK1hyMpc2t2U6F8ypDGoCDmvWyTx40PjjiuDQ9UPCY0dXzG1e9 EHomsfNnRQAhHCUe1SXGtm+xOIjhHmi4Mg7zNAHEsU3TA/3Vb9VH289pcGRTbnJu tqCAAEXHv9nrCyHl87x6clDDr5Ze9XFOkDdrXmlngQzoTrBaakk= -----END CERTIFICATE-----Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org