$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: eqli/LTvYlO/159+IuSp0frSwoQoFkhKjzEvoXiGasE= Subject key identifier: 4C:21:7E:8E:4C:A4:93:BB:B8:6D:CE:FB:E0:01:1A:93:00:62:37:0E Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 02E20D0156C97723338F96CC96E58F3DCF079354 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 0121 Signing time: Thu 21 Nov 2024 08:41:20 +0000 Manifest this update: Thu 21 Nov 2024 08:36:20 +0000 Manifest next update: Sun 24 Nov 2024 20:11:20 +0000 Files and hashes: 1: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: XHvHCVPkF6KEtLJNLhyjaXBdJcApCMdZQdCQRBXao6Y=) 2: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: 4UtOikiEbw7MTyF2qB18hMHkq0zS5v90+Zpu/WwZgRA=) 3: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: pbtnRnaTH+DVJ0tZdjXb84dD832WiM9IiHWW1QnzvZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e2:0d:01:56:c9:77:23:33:8f:96:cc:96:e5:8f:3d:cf:07:93:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Nov 21 08:36:20 2024 GMT Not After : Nov 24 20:11:20 2024 GMT Subject: CN=4C217E8E4CA493BBB86DCEFBE0011A930062370E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:e5:60:eb:25:7f:0f:e3:3d:df:3d:98:15: a0:42:e8:48:ba:b1:02:04:9e:0d:8f:3f:5b:bd:74: 65:f8:2b:d0:fa:9e:fc:a8:14:04:5a:a0:21:cd:fd: 50:5b:10:e0:25:60:86:fc:57:d6:5f:17:18:a7:a2: 41:bf:06:33:f8:31:12:f2:12:65:43:17:ce:42:0f: 51:2a:2c:a7:3d:e6:38:70:57:ac:31:2c:f3:8a:2f: 5b:04:66:54:14:d0:b6:d2:a7:6e:1d:ee:ab:ad:49: 88:4c:ec:ae:64:6e:7e:b9:04:40:00:b5:61:26:13: 44:68:41:1e:0e:b5:b6:ab:40:ae:52:5a:ff:20:74: 77:43:e8:2e:84:7b:c8:51:3c:35:2d:0f:e9:3f:82: 66:e1:b4:5d:16:8d:3c:ae:c3:dd:aa:5c:fd:fa:24: 43:fe:ab:b2:eb:06:32:18:1a:ac:a1:5d:01:a7:80: c2:44:80:92:48:1a:b5:fd:d8:81:58:7f:06:c0:c6: c4:e1:1c:a5:8c:bb:4c:4a:24:44:e2:b3:67:32:85: 59:24:4b:ec:37:12:c0:88:f2:b8:05:1f:73:a9:5e: a4:3a:91:bb:22:d6:fe:bf:4e:e8:c4:41:12:ae:c7: ec:63:da:02:b9:6b:b9:c5:40:46:22:c9:bd:ff:78: 83:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:21:7E:8E:4C:A4:93:BB:B8:6D:CE:FB:E0:01:1A:93:00:62:37:0E X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cc:d8:35:e1:34:8f:3e:9b:d5:b5:32:0f:6c:7b:12:a4:9a: 41:55:42:69:00:c6:df:f5:a8:25:8c:56:a7:54:fd:1a:11:0e: c3:bd:ce:4a:b6:be:e9:a7:3c:27:73:b9:68:92:cf:c9:a7:ad: 49:e6:2f:de:72:97:3d:b2:d4:45:9e:54:72:1a:78:9f:b2:f6: 93:5e:0a:54:53:77:5e:19:47:da:90:3a:23:23:4d:d0:53:dc: bf:32:97:a4:b9:ac:d8:bf:a6:c4:ae:50:a8:0f:f9:a8:c6:dc: 8e:4c:66:27:4e:79:2d:b8:1e:95:87:a6:d4:66:05:48:ca:af: 9e:79:17:36:c7:4a:2b:31:7c:55:6a:c5:b7:82:19:38:01:87: 4d:e3:06:28:76:c9:8d:dd:7b:57:94:e3:7f:0e:8b:8d:15:80: 69:78:7d:31:71:75:4d:09:75:4b:c9:44:38:9b:e7:c8:d9:b7: d0:ee:2b:53:28:8d:f6:52:bc:69:e1:39:57:63:c9:b2:92:a4: bb:f1:cc:dc:c1:4f:a9:ca:90:74:93:f7:6d:e7:1a:1b:8e:24: 07:1f:a0:f8:af:e0:f0:5e:f7:97:64:89:58:77:76:cc:9f:1e: 00:d6:dd:18:d0:27:ab:ca:ca:31:3c:88:48:21:2c:0c:96:c5: 76:64:6a:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuINAVbJdyMzj5bMluWPPc8Hk1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNDExMjEwODM2MjBaFw0yNDExMjQyMDExMjBaMDMxMTAvBgNV BAMTKDRDMjE3RThFNENBNDkzQkJCODZEQ0VGQkUwMDExQTkzMDA2MjM3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVguVg6yV/D+M93z2YFaBC6Ei6 sQIEng2PP1u9dGX4K9D6nvyoFARaoCHN/VBbEOAlYIb8V9ZfFxinokG/BjP4MRLy EmVDF85CD1EqLKc95jhwV6wxLPOKL1sEZlQU0LbSp24d7qutSYhM7K5kbn65BEAA tWEmE0RoQR4OtbarQK5SWv8gdHdD6C6Ee8hRPDUtD+k/gmbhtF0WjTyuw92qXP36 JEP+q7LrBjIYGqyhXQGngMJEgJJIGrX92IFYfwbAxsThHKWMu0xKJETis2cyhVkk S+w3EsCI8rgFH3OpXqQ6kbsi1v6/TujEQRKux+xj2gK5a7nFQEYiyb3/eIPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTCF+jkykk7u4bc774AEakwBiNw4wHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvM2DXhNI8+m9W1Mg9sexKkmkFVQmkAxt/1 qCWMVqdU/RoRDsO9zkq2vumnPCdzuWiSz8mnrUnmL95ylz2y1EWeVHIaeJ+y9pNe ClRTd14ZR9qQOiMjTdBT3L8yl6S5rNi/psSuUKgP+ajG3I5MZidOeS24HpWHptRm BUjKr555FzbHSisxfFVqxbeCGTgBh03jBih2yY3de1eU438Oi40VgGl4fTFxdU0J dUvJRDib58jZt9DuK1MojfZSvGnhOVdjybKSpLvxzNzBT6nKkHST923nGhuOJAcf oPiv4PBe95dkiVh3dsyfHgDW3RjQJ6vKyjE8iEghLAyWxXZkatQ= -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:39 2024 by rpki-client on console-fra.rpki-client.org