$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft File: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft (raw, json) Hash identifier: 4+dFBQoKzGlGePB04wrg7oDy1AA9WSJ2Uv9J9b8Tmfk= Subject key identifier: 3B:37:D3:ED:D9:C5:C2:3D:AA:52:ED:10:10:10:DC:60:F6:59:3F:82 Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 486743CA70787BCB187963F4385FDF84A27C415E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft Manifest number: 0173 Signing time: Sun 24 Nov 2024 01:31:27 +0000 Manifest this update: Sun 24 Nov 2024 01:26:27 +0000 Manifest next update: Wed 27 Nov 2024 08:28:27 +0000 Files and hashes: 1: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl (hash: ljMbWGwNz+weWvQiBNDkiw4zjUk4aK+6olQMVHd96qI=) 2: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: rBY4+fK+ajR3XvBjuh3eh6UlJO/Rel/0Ehv9FHZ6POk=) 3: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: s2HfYY6y+CbJjfHBKwiQFPerdOSY88MtYjv649qibUg=) 4: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: ZqLjpvYYHU8paHTzEW1DrbyBCtB+akOeIFXjdtozOIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:67:43:ca:70:78:7b:cb:18:79:63:f4:38:5f:df:84:a2:7c:41:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Nov 24 01:26:27 2024 GMT Not After : Nov 27 08:28:27 2024 GMT Subject: CN=3B37D3EDD9C5C23DAA52ED101010DC60F6593F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:b3:5b:e6:b6:77:69:04:74:e0:b0:6f:2e: 57:12:9f:2f:24:c4:1f:12:27:40:d6:f3:0b:15:65: 71:8b:9d:54:83:6a:fe:d9:26:03:0d:b8:02:b5:60: c5:d9:8e:79:2f:44:dd:29:b9:0b:5a:f0:b7:66:59: c5:ad:c3:db:66:fe:5e:11:80:68:2d:f7:d3:fe:11: 55:9f:d5:26:62:37:98:c7:d3:0f:82:6e:60:cd:1d: cb:48:a0:59:e6:0e:33:a4:c8:b0:3f:f5:d3:c9:85: 03:d3:ad:98:f6:82:fc:64:24:9c:d3:66:0a:d8:cd: b6:27:19:85:da:78:66:0e:4b:b5:8e:6d:6b:52:91: 87:0d:01:a7:e8:58:01:38:6f:77:fe:de:d9:b2:f0: dd:03:c5:3c:d8:ad:da:f2:4a:2f:3b:3e:52:95:1c: 1a:ad:cc:99:e6:6f:6b:76:2f:9f:0b:49:59:04:07: 12:e1:5c:f7:8c:2e:46:c9:97:90:51:94:22:a8:d9: 11:c0:24:2c:86:e6:fa:48:d6:81:86:a2:de:ac:0a: 28:81:26:a2:f6:49:08:21:98:95:28:3d:ac:2a:2e: 07:64:de:b0:e6:4f:aa:34:e4:f5:94:84:ab:13:db: 09:10:2b:51:69:2f:44:45:f3:a2:e2:f4:46:6b:5d: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:37:D3:ED:D9:C5:C2:3D:AA:52:ED:10:10:10:DC:60:F6:59:3F:82 X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c2:41:43:80:94:7b:7c:da:98:bf:dc:1e:c2:6e:f1:d1:b6: 54:2b:a3:5b:83:7c:fc:eb:ae:74:8d:1f:f5:c5:28:56:41:24: eb:10:ad:53:b4:7f:20:c3:9d:a3:fd:82:ed:57:7a:72:4a:4f: fb:a5:3f:7b:d8:e5:8c:8e:0d:50:23:69:fc:41:82:20:a0:ee: 6c:55:36:05:f6:a1:de:9d:ba:e6:e8:f5:1d:e4:65:d8:08:8a: 84:0f:91:9f:27:98:f4:8c:f0:fb:11:c2:c0:cb:ed:32:f0:01: 9c:16:e5:71:00:1e:c9:71:60:bd:f6:56:f8:13:6d:27:e1:c3: cb:63:dc:4a:c9:41:5f:b1:95:b2:80:54:9f:98:2f:f5:4c:6c: 9f:c6:44:dd:44:a8:df:94:f5:3d:83:eb:1c:b6:fa:33:68:39: f0:17:c1:7a:d9:eb:15:27:ff:54:e9:2f:55:b5:22:b5:be:ce: 55:5e:df:63:87:32:aa:75:60:46:09:ea:71:52:fb:eb:0a:90: bc:53:61:b8:fc:bc:f3:0f:6f:a0:a7:b5:f7:5f:9c:bd:c1:27: 28:2c:ee:15:72:a1:a7:3e:b6:62:ca:49:84:de:30:2f:21:f7: 01:37:7d:f2:70:6e:e1:92:73:e1:61:c3:f3:9c:a7:8c:81:68: b8:5a:16:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSGdDynB4e8sYeWP0OF/fhKJ8QV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNDExMjQwMTI2MjdaFw0yNDExMjcwODI4MjdaMDMxMTAvBgNV BAMTKDNCMzdEM0VERDlDNUMyM0RBQTUyRUQxMDEwMTBEQzYwRjY1OTNGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvbNb5rZ3aQR04LBvLlcSny8k xB8SJ0DW8wsVZXGLnVSDav7ZJgMNuAK1YMXZjnkvRN0puQta8LdmWcWtw9tm/l4R gGgt99P+EVWf1SZiN5jH0w+CbmDNHctIoFnmDjOkyLA/9dPJhQPTrZj2gvxkJJzT ZgrYzbYnGYXaeGYOS7WObWtSkYcNAafoWAE4b3f+3tmy8N0DxTzYrdrySi87PlKV HBqtzJnmb2t2L58LSVkEBxLhXPeMLkbJl5BRlCKo2RHAJCyG5vpI1oGGot6sCiiB JqL2SQghmJUoPawqLgdk3rDmT6o05PWUhKsT2wkQK1FpL0RF86Li9EZrXUYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOzfT7dnFwj2qUu0QEBDcYPZZP4IwHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1 MjJEQzlCODFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTCQUOAlHt82pi/3B7CbvHRtlQro1uDfPzr rnSNH/XFKFZBJOsQrVO0fyDDnaP9gu1XenJKT/ulP3vY5YyODVAjafxBgiCg7mxV NgX2od6duubo9R3kZdgIioQPkZ8nmPSM8PsRwsDL7TLwAZwW5XEAHslxYL32VvgT bSfhw8tj3ErJQV+xlbKAVJ+YL/VMbJ/GRN1EqN+U9T2D6xy2+jNoOfAXwXrZ6xUn /1TpL1W1IrW+zlVe32OHMqp1YEYJ6nFS++sKkLxTYbj8vPMPb6CntfdfnL3BJygs 7hVyoac+tmLKSYTeMC8h9wE3ffJwbuGSc+Fhw/Ocp4yBaLhaFkU= -----END CERTIFICATE-----Generated at Sun Nov 24 03:16:16 2024 by rpki-client on console-ams.rpki-client.org