$ rpki-client -vvf repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft File: 21AC220B77A77D0516BC73B4C29C8363DD00911B.mft (raw, json) Hash identifier: 6vQW1hr055ibsZRvKxy5NkxHUoddziDx0SMnhBGlnwY= Subject key identifier: C0:2C:77:C7:75:7A:A3:F7:62:BA:45:12:EB:EF:50:31:C6:7B:94:E8 Authority key identifier: 21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B Certificate issuer: /CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Certificate serial: 08452BD01DCACEDA2AAC4F348A85B9366BDBA2A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft Manifest number: 03ED Signing time: Sat 18 May 2024 11:50:52 +0000 Manifest this update: Sat 18 May 2024 11:45:52 +0000 Manifest next update: Tue 21 May 2024 13:17:52 +0000 Files and hashes: 1: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: jAz39SdWZW3PqGl85Mh4bH/ieeJ4OrIo0vM5oR1ubg8=) 2: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: U0r5M5QKpIV07hyrK8XcZx+RiwaaVYR70kI5FooPpDM=) 3: 21AC220B77A77D0516BC73B4C29C8363DD00911B.crl (hash: 7F5iQNE9/Kl9yKovyh6AsVyfVUzY+ON4FpyII605XMA=) 4: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: Uzl5R9EnEpmpOLqHiqB8DlSZrBRFKmVZJFsQBp0f1Qw=) 5: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: o3WMZYz6/RfKhb+hH+uQ23zvT085Bt8bn8P2vXJFSpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 13:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:45:2b:d0:1d:ca:ce:da:2a:ac:4f:34:8a:85:b9:36:6b:db:a2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Validity Not Before: May 18 11:45:52 2024 GMT Not After : May 21 13:17:52 2024 GMT Subject: CN=C02C77C7757AA3F762BA4512EBEF5031C67B94E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:57:83:80:be:9d:4c:17:37:02:7d:e7:d4:51: a4:6b:65:3b:98:c2:09:69:de:56:0e:70:ce:7c:93: 2c:1f:44:f1:fd:f4:aa:65:25:d1:cf:1d:95:36:9b: 1c:af:31:e6:27:4d:fb:29:9c:1c:99:49:dc:10:a8: cc:1b:86:8b:07:a7:e3:27:6c:d6:90:96:36:42:04: d2:cc:4c:45:b0:76:51:65:33:6c:87:2d:ed:6a:72: 0c:07:72:ef:86:21:f6:72:ed:47:53:fd:8e:3f:c9: 8b:34:99:8f:a9:85:72:98:53:c6:4b:d7:7a:dd:29: df:9b:08:16:6a:b4:f0:fe:8b:99:af:59:48:c7:b0: ce:42:a7:f0:1a:5a:d1:52:b4:0c:e4:2a:4d:99:74: 88:85:15:61:f2:19:6e:8b:0b:47:ae:6e:f1:01:fa: 82:25:aa:e1:e4:de:db:24:70:1c:2d:21:a5:7b:85: a0:5d:5b:8f:fa:86:96:89:3f:98:31:b4:5c:d7:59: 13:90:15:fc:eb:7b:e3:14:a0:e9:2e:a5:09:c9:64: 5e:46:94:c7:d5:4c:c4:33:f0:e3:b8:92:8b:1f:0a: 68:44:28:1b:6e:a0:4b:e0:5b:22:97:32:97:ce:64: 8f:34:26:90:f6:c9:df:18:3e:b4:fc:f2:87:83:8c: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2C:77:C7:75:7A:A3:F7:62:BA:45:12:EB:EF:50:31:C6:7B:94:E8 X509v3 Authority Key Identifier: keyid:21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:77:87:9e:6a:49:18:36:67:ef:21:d8:41:38:4c:ff:c0:49: a9:17:6c:b9:a7:f0:36:12:07:5b:af:04:5a:01:32:40:e2:30: f5:03:3f:2b:14:aa:2d:21:dd:81:ab:f3:d7:b0:c6:53:b6:b1: 2e:2c:d8:fe:89:68:2a:7e:1d:af:95:4d:e4:f8:6c:1a:a9:95: cd:27:0f:61:37:d0:cb:38:ea:d2:0f:c1:fb:f9:32:4d:57:34: 13:66:1c:cf:4b:b6:f1:61:2b:c0:65:a9:6e:cc:25:2d:82:39: 8f:d2:df:d6:f4:f5:ee:9f:75:cc:4e:21:64:9a:9f:fe:c5:c1: f7:44:24:3b:d4:4f:3f:0c:e7:df:1d:40:e6:a0:c1:6c:09:2f: 75:c6:93:53:46:bf:20:4c:fe:a6:5c:8e:e9:76:97:28:41:11: cc:c8:66:e4:56:2c:c1:29:80:4d:fb:f5:61:90:e0:07:02:54: 15:93:90:0b:b1:5c:de:4e:88:a6:95:37:10:63:4c:6d:4f:a5: 8b:ea:73:7e:0c:fa:f4:10:a7:07:87:5e:c3:23:b8:9f:eb:8e: 4f:68:14:d9:6c:8a:26:c6:d6:06:dd:6d:d8:05:4a:0f:94:e3: c3:48:56:b2:b7:8d:01:19:b2:5d:34:b7:34:f0:ee:47:c9:00: 7d:1e:2a:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEUr0B3KztoqrE80ioW5NmvboqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNE RDAwOTExQjAeFw0yNDA1MTgxMTQ1NTJaFw0yNDA1MjExMzE3NTJaMDMxMTAvBgNV BAMTKEMwMkM3N0M3NzU3QUEzRjc2MkJBNDUxMkVCRUY1MDMxQzY3Qjk0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSV4OAvp1MFzcCfefUUaRrZTuY wglp3lYOcM58kywfRPH99KplJdHPHZU2mxyvMeYnTfspnByZSdwQqMwbhosHp+Mn bNaQljZCBNLMTEWwdlFlM2yHLe1qcgwHcu+GIfZy7UdT/Y4/yYs0mY+phXKYU8ZL 13rdKd+bCBZqtPD+i5mvWUjHsM5Cp/AaWtFStAzkKk2ZdIiFFWHyGW6LC0eubvEB +oIlquHk3tskcBwtIaV7haBdW4/6hpaJP5gxtFzXWROQFfzre+MUoOkupQnJZF5G lMfVTMQz8OO4kosfCmhEKBtuoEvgWyKXMpfOZI80JpD2yd8YPrT88oeDjPVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwCx3x3V6o/diukUS6+9QMcZ7lOgwHwYDVR0j BBgwFoAUIawiC3enfQUWvHO0wpyDY90AkRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGFiYzBiYS05MjIyLTRjNDUtODM0Mi1lYjg2NDNjNDk2N2QvMC8yMUFDMjIwQjc3 QTc3RDA1MTZCQzczQjRDMjlDODM2M0REMDA5MTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNERDAw OTExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5Qzgz NjNERDAwOTExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJx3h55qSRg2Z+8h2EE4TP/ASakXbLmn8DYS B1uvBFoBMkDiMPUDPysUqi0h3YGr89ewxlO2sS4s2P6JaCp+Ha+VTeT4bBqplc0n D2E30Ms46tIPwfv5Mk1XNBNmHM9LtvFhK8BlqW7MJS2COY/S39b09e6fdcxOIWSa n/7FwfdEJDvUTz8M598dQOagwWwJL3XGk1NGvyBM/qZcjul2lyhBEczIZuRWLMEp gE379WGQ4AcCVBWTkAuxXN5OiKaVNxBjTG1PpYvqc34M+vQQpweHXsMjuJ/rjk9o FNlsiibG1gbdbdgFSg+U48NIVrK3jQEZsl00tzTw7kfJAH0eKvU= -----END CERTIFICATE-----Generated at Sat May 18 12:14:47 2024 by rpki-client on console-fra.rpki-client.org