$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: UiUWemeSxZlAMhqB2SP7wrQDUmrCEbGqswN2n97OySY= Subject key identifier: 9B:0C:69:93:93:01:70:8F:43:1B:A1:3F:91:11:94:78:C0:80:D1:50 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 5C18ECFD5932679D434839A4CA14B3FAC0A80EE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: B0 Signing time: Fri 22 Nov 2024 20:40:55 +0000 Manifest this update: Fri 22 Nov 2024 20:35:55 +0000 Manifest next update: Mon 25 Nov 2024 23:18:55 +0000 Files and hashes: 1: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: EalNqK7fN+uMVwzoEzqTg9FoUorTzcn6dWS2phuXyqc=) 2: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: HQmVbfWutZ2fC074/Ux0lY+ph7dZIfvBgd/1Hm1UpCI=) 3: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: UuQ93Y2stRDt9pY36xX8tdBd1Ppsa+mYAE6iLpbhUc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:18:ec:fd:59:32:67:9d:43:48:39:a4:ca:14:b3:fa:c0:a8:0e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Nov 22 20:35:55 2024 GMT Not After : Nov 25 23:18:55 2024 GMT Subject: CN=9B0C69939301708F431BA13F91119478C080D150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:48:70:10:3b:4b:28:82:a2:e4:97:f6:1f:23: 04:87:a9:e7:5d:e4:67:9b:72:b7:35:55:99:33:c1: bb:4c:5a:c8:de:11:e1:e7:2f:34:9c:c3:2c:81:96: d4:f9:55:14:dd:d4:df:66:72:26:39:43:e2:49:2f: d3:9d:5e:47:c1:9a:c6:5b:57:6a:5a:2a:0e:78:92: a2:c3:b8:92:fc:7f:cf:42:0f:34:67:9a:93:e6:57: 9d:a7:f0:c6:ee:f5:e4:dd:5a:75:fd:e5:4e:ff:0f: 3d:7e:d1:23:cf:56:1e:b9:6a:b3:f6:c2:ce:7a:a8: 3f:14:64:21:a2:89:36:bd:48:59:9b:23:42:2c:e8: b0:65:c8:1a:bf:01:b5:31:9d:0c:9d:cf:da:e0:45: a7:04:8f:47:6a:21:a6:c3:82:63:1d:ca:2c:1c:c5: ef:3d:e4:ec:bc:0a:b5:68:8c:d9:65:24:18:37:4d: 44:be:b8:63:b8:6b:f9:01:74:db:c6:15:70:c5:41: d6:4d:e7:f9:5a:71:33:f5:41:ab:38:15:90:23:c2: ef:91:8f:c5:4a:9e:59:3d:bb:72:2a:39:97:ca:bd: f8:48:77:c7:1b:5c:13:71:60:7e:d8:5e:a0:e1:9f: 67:30:e9:73:65:4f:4e:88:7b:87:78:47:7f:36:14: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0C:69:93:93:01:70:8F:43:1B:A1:3F:91:11:94:78:C0:80:D1:50 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:a8:35:9e:59:4c:08:23:3b:ab:af:cb:25:71:0d:e6:a8:a2: 9e:10:b3:98:bb:0a:41:85:8c:08:29:51:c7:8a:32:89:49:ac: 89:7a:bf:91:90:f4:78:6a:8a:54:45:07:8b:b5:71:4b:7d:0f: 60:20:be:b6:ef:29:93:9b:de:e7:10:35:d9:f8:8b:e3:d1:97: 82:16:48:c3:23:b9:38:e4:2b:b3:05:54:dc:54:21:52:4d:81: c5:dd:fc:40:6c:69:95:96:f8:ab:87:ca:3e:bf:6f:26:60:3f: 52:bd:c0:e4:a4:40:32:55:c2:26:48:0d:50:28:23:4c:31:79: b5:7a:28:39:28:a5:7a:e7:89:cc:55:a5:b2:99:09:76:68:f3: 71:b8:b1:51:e7:5e:df:69:3b:2b:a8:fa:50:af:9f:0e:c9:56: e9:3f:96:58:1b:93:29:30:03:c5:b6:51:a6:7d:fe:e2:e3:37: eb:3f:2f:61:99:b4:1d:e7:38:4a:02:47:1d:0c:a8:60:52:a1: 68:69:0c:4e:cf:c1:38:8e:ac:fd:36:1c:a5:e8:3b:c3:84:3d: 42:a7:c2:af:de:e7:8d:9c:aa:0b:12:43:3f:bd:79:37:d1:24: de:31:74:9a:d4:34:a1:e4:50:23:49:8d:3e:53:ac:be:bc:4d: 7e:c1:f9:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBjs/VkyZ51DSDmkyhSz+sCoDuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNDExMjIyMDM1NTVaFw0yNDExMjUyMzE4NTVaMDMxMTAvBgNV BAMTKDlCMEM2OTkzOTMwMTcwOEY0MzFCQTEzRjkxMTE5NDc4QzA4MEQxNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlSHAQO0sogqLkl/YfIwSHqedd 5Gebcrc1VZkzwbtMWsjeEeHnLzScwyyBltT5VRTd1N9mciY5Q+JJL9OdXkfBmsZb V2paKg54kqLDuJL8f89CDzRnmpPmV52n8Mbu9eTdWnX95U7/Dz1+0SPPVh65arP2 ws56qD8UZCGiiTa9SFmbI0Is6LBlyBq/AbUxnQydz9rgRacEj0dqIabDgmMdyiwc xe895Oy8CrVojNllJBg3TUS+uGO4a/kBdNvGFXDFQdZN5/lacTP1Qas4FZAjwu+R j8VKnlk9u3IqOZfKvfhId8cbXBNxYH7YXqDhn2cw6XNlT06Ie4d4R382FLuZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmwxpk5MBcI9DG6E/kRGUeMCA0VAwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSoNZ5ZTAgjO6uvyyVxDeaoop4Qs5i7CkGF jAgpUceKMolJrIl6v5GQ9HhqilRFB4u1cUt9D2AgvrbvKZOb3ucQNdn4i+PRl4IW SMMjuTjkK7MFVNxUIVJNgcXd/EBsaZWW+KuHyj6/byZgP1K9wOSkQDJVwiZIDVAo I0wxebV6KDkopXrnicxVpbKZCXZo83G4sVHnXt9pOyuo+lCvnw7JVuk/llgbkykw A8W2UaZ9/uLjN+s/L2GZtB3nOEoCRx0MqGBSoWhpDE7PwTiOrP02HKXoO8OEPUKn wq/e542cqgsSQz+9eTfRJN4xdJrUNKHkUCNJjT5TrL68TX7B+WI= -----END CERTIFICATE-----Generated at Fri Nov 22 22:21:00 2024 by rpki-client on console-fra.rpki-client.org