$ rpki-client -vvf repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft File: 21AC220B77A77D0516BC73B4C29C8363DD00911B.mft (raw, json) Hash identifier: wdI1ZohEwD6X2Mheyf6IH5l5ytdTpnV5BRYWqj5MTx4= Subject key identifier: CE:A6:5A:55:F4:C7:7B:82:EF:4B:C8:E9:56:83:23:2F:21:CC:6E:64 Authority key identifier: 21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B Certificate issuer: /CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Certificate serial: 011332F68D34C7176A87181EC843C0C64584D712 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft Manifest number: 0441 Signing time: Wed 20 Nov 2024 21:51:04 +0000 Manifest this update: Wed 20 Nov 2024 21:46:04 +0000 Manifest next update: Sat 23 Nov 2024 22:39:04 +0000 Files and hashes: 1: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: OnBB+AVgOO2yluvkbnT8cnywdpmmnyLp0O1UDMPsJsk=) 2: 21AC220B77A77D0516BC73B4C29C8363DD00911B.crl (hash: WOkzBTY6TLmFb+iFV+20yuuygD/aM6aX2t+mkCVO/1g=) 3: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: Smb7HmzUf0UyLsjEJtoRvm3jALFW5SuffGaYfUAtD2s=) 4: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: RhfOeKNZ4j1KvALyW4SxaRw/kBv+Dgu0smuwmiknx1Y=) 5: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: 7blkTXyq3RKCIws921Czw5yMKl/tVjEFOw3lq63q9I8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 22:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:13:32:f6:8d:34:c7:17:6a:87:18:1e:c8:43:c0:c6:45:84:d7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Validity Not Before: Nov 20 21:46:04 2024 GMT Not After : Nov 23 22:39:04 2024 GMT Subject: CN=CEA65A55F4C77B82EF4BC8E95683232F21CC6E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:5b:98:9d:01:9e:5a:38:50:27:8a:c0:76: c8:b9:42:e2:6b:c1:2e:1a:07:10:e7:1c:24:43:68: 65:03:27:02:a5:77:7e:7e:a2:3e:0c:f0:76:39:79: 73:af:df:a0:76:3e:58:78:49:9f:b2:0c:19:76:1a: 18:cd:f4:ac:68:51:a5:69:3c:11:a9:6e:57:da:b0: 79:f8:97:2f:27:60:64:f6:34:d3:0d:10:0a:6e:b5: d2:f9:d5:7d:1d:cd:f6:2d:6b:cc:06:57:a5:f5:b8: a7:db:ef:f9:e9:4d:b1:67:98:e6:0e:21:df:99:01: 9f:f7:e1:99:4b:23:87:db:33:3e:d6:f1:c3:ef:a0: 56:70:80:94:a1:66:e8:67:d9:46:64:12:26:ae:d1: e5:22:5c:fd:4b:83:92:e1:c1:d5:23:c7:07:a8:02: 30:33:03:4e:07:a9:40:57:54:19:b1:25:23:74:37: 3a:f2:f3:1c:2d:ae:b0:bb:f2:94:bf:02:8b:de:45: b8:58:66:38:17:5f:3d:a0:3a:ad:9a:d0:19:43:66: 18:61:94:3e:9d:e0:89:83:13:51:55:67:e4:94:da: 10:47:e2:75:fb:69:16:fa:ce:75:bc:7f:bd:ca:e2: 0e:e9:45:c4:ee:af:92:e8:b7:7d:e0:e4:19:66:d4: b2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A6:5A:55:F4:C7:7B:82:EF:4B:C8:E9:56:83:23:2F:21:CC:6E:64 X509v3 Authority Key Identifier: keyid:21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bf:fd:9c:ee:a7:1c:0a:b1:c7:2d:a6:1d:7f:62:a7:99:21: d3:c1:9d:60:23:6b:15:65:4a:dd:19:65:96:15:6b:82:80:11: 94:f7:1c:bf:ea:9f:77:25:d1:d9:6f:12:d5:08:ad:63:ba:c3: de:c7:25:c8:ed:ee:6c:ee:0f:00:7f:04:14:b4:29:f2:d5:62: 1a:ff:cf:c0:73:03:2a:86:82:58:4b:3e:a5:33:8e:27:22:6c: 9d:08:fb:1c:eb:98:23:2c:a1:fc:e3:26:59:4f:b1:3a:e4:ab: a4:fe:70:b9:bd:68:a9:e8:11:03:46:74:c2:10:16:6c:a6:8b: a8:53:ca:26:41:27:d4:32:2e:c3:ac:4e:c1:b2:01:4c:06:26: c2:30:eb:04:11:85:ad:1a:9a:8e:cd:c6:7e:7a:fd:74:ad:75: 74:ce:b2:f0:18:7c:9e:63:02:e5:0d:60:8e:9e:e2:9c:c1:72: be:f3:5e:f8:4c:72:ac:23:8b:5a:af:7a:72:dd:04:21:a4:cc: 57:0c:f5:02:ca:cc:6a:84:65:c5:3e:3c:f3:f8:b1:fe:97:fa: a2:fb:fa:ba:14:2f:80:fa:a9:be:f9:70:f9:f4:c4:46:51:38: 43:4f:a1:9c:0d:6b:1c:25:41:9c:60:ff:b7:67:d9:e8:b7:22: 9b:42:d3:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARMy9o00xxdqhxgeyEPAxkWE1xIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNE RDAwOTExQjAeFw0yNDExMjAyMTQ2MDRaFw0yNDExMjMyMjM5MDRaMDMxMTAvBgNV BAMTKENFQTY1QTU1RjRDNzdCODJFRjRCQzhFOTU2ODMyMzJGMjFDQzZFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fVuYnQGeWjhQJ4rAdsi5QuJr wS4aBxDnHCRDaGUDJwKld35+oj4M8HY5eXOv36B2Plh4SZ+yDBl2GhjN9KxoUaVp PBGpblfasHn4ly8nYGT2NNMNEAputdL51X0dzfYta8wGV6X1uKfb7/npTbFnmOYO Id+ZAZ/34ZlLI4fbMz7W8cPvoFZwgJShZuhn2UZkEiau0eUiXP1Lg5LhwdUjxweo AjAzA04HqUBXVBmxJSN0Nzry8xwtrrC78pS/AoveRbhYZjgXXz2gOq2a0BlDZhhh lD6d4ImDE1FVZ+SU2hBH4nX7aRb6znW8f73K4g7pRcTur5Lot33g5Blm1LJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzqZaVfTHe4LvS8jpVoMjLyHMbmQwHwYDVR0j BBgwFoAUIawiC3enfQUWvHO0wpyDY90AkRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGFiYzBiYS05MjIyLTRjNDUtODM0Mi1lYjg2NDNjNDk2N2QvMC8yMUFDMjIwQjc3 QTc3RDA1MTZCQzczQjRDMjlDODM2M0REMDA5MTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNERDAw OTExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5Qzgz NjNERDAwOTExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC//ZzupxwKscctph1/YqeZIdPBnWAjaxVl St0ZZZYVa4KAEZT3HL/qn3cl0dlvEtUIrWO6w97HJcjt7mzuDwB/BBS0KfLVYhr/ z8BzAyqGglhLPqUzjicibJ0I+xzrmCMsofzjJllPsTrkq6T+cLm9aKnoEQNGdMIQ Fmymi6hTyiZBJ9QyLsOsTsGyAUwGJsIw6wQRha0amo7Nxn56/XStdXTOsvAYfJ5j AuUNYI6e4pzBcr7zXvhMcqwji1qvenLdBCGkzFcM9QLKzGqEZcU+PPP4sf6X+qL7 +roUL4D6qb75cPn0xEZROENPoZwNaxwlQZxg/7dn2ei3IptC08s= -----END CERTIFICATE-----Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org