$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json) Hash identifier: AofCdKQ/UIyTyMpJdEPBiVuzWKLcBOK0LdzRekqwioU= Subject key identifier: D5:8C:B1:A8:4B:6C:52:35:86:C5:B7:9D:9E:3B:7E:2C:D1:E4:19:58 Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 352C09BFDAD013C94310CE5E79F143CA61325094 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft Manifest number: B0 Signing time: Thu 21 Nov 2024 13:31:24 +0000 Manifest this update: Thu 21 Nov 2024 13:26:24 +0000 Manifest next update: Sun 24 Nov 2024 18:59:24 +0000 Files and hashes: 1: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: g4rcVf7ze2gY12Fw+h+9x7JFApYwzpJ9iR8UsvjWBL0=) 2: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: F/NgMFh4vRvcOL6JEYyxxZwZ0bZvOeO0NLTIlz/aLXA=) 3: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: I90vNVHR98Ns9EbFWsBOyXpypkK4ezCBsQ4Nw555WdU=) 4: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: lCXTJ163mYE14JSOHwn/GLmazHYII7eBmEeCYKd7cs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2c:09:bf:da:d0:13:c9:43:10:ce:5e:79:f1:43:ca:61:32:50:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: Nov 21 13:26:24 2024 GMT Not After : Nov 24 18:59:24 2024 GMT Subject: CN=D58CB1A84B6C523586C5B79D9E3B7E2CD1E41958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:3b:8f:1e:55:a1:14:5f:64:d3:36:2c:94: 08:98:80:e0:b7:fb:f7:3c:35:74:ee:da:87:42:39: d6:09:d8:3a:8c:46:58:c6:30:de:c3:6b:e3:a3:b3: 73:34:4e:d8:5f:91:33:bb:b9:e7:4c:df:70:70:9d: c5:7b:d7:bc:20:89:f2:f6:32:f6:bc:d5:8d:57:0c: 60:3c:22:39:14:06:8e:9a:d2:51:b8:56:46:64:b9: 5f:61:14:72:e5:f1:b6:c9:8f:29:ca:21:9f:82:23: 49:32:d1:bf:c2:43:5d:6f:39:5c:a1:6e:f3:e7:1e: 68:41:55:4b:6d:38:c6:ab:e0:e3:47:84:65:8a:bd: 5f:4c:46:c2:43:3a:6d:2a:1b:04:02:0d:0b:ca:5b: 0f:76:73:03:48:ba:ad:d8:25:a1:76:d1:95:a3:f0: 04:98:e1:e2:5d:0c:26:d5:38:41:fd:7a:d9:c9:e7: 56:41:4d:48:36:9d:da:bc:36:98:ff:53:c1:90:50: aa:41:80:4f:84:00:c2:b0:66:01:ec:71:59:54:26: a8:e9:99:79:4d:6e:5e:30:64:7a:7d:2e:e1:0c:63: 99:cf:66:15:ed:3f:ef:9d:fb:10:26:a9:7f:27:0b: 60:dc:31:f2:ea:b3:33:6a:8c:8e:89:ef:e4:64:d9: 5b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8C:B1:A8:4B:6C:52:35:86:C5:B7:9D:9E:3B:7E:2C:D1:E4:19:58 X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:81:be:48:78:bf:5d:91:77:b3:37:f6:12:19:54:32:f7:af: 2b:61:f0:1d:48:5b:39:84:05:1c:78:a3:5e:bf:c4:d7:10:f1: a9:8f:8d:29:aa:0d:0f:a6:17:77:7f:45:c8:a6:44:64:9e:20: 41:06:51:2d:9d:55:1b:89:13:72:de:9f:8f:e3:3e:52:e9:9f: 86:d5:9f:91:3e:df:a3:de:e3:9d:aa:fd:74:46:96:46:6f:b0: df:31:34:de:79:3e:9a:37:b9:b1:e2:47:7b:a3:1a:58:7a:b3: 3b:53:82:0e:d5:e9:a7:55:c8:75:9e:e7:0d:dd:59:7e:77:1e: 79:c9:35:bf:87:b5:31:7d:ec:a0:51:7d:ca:37:78:53:13:eb: 00:f3:8b:86:1d:4d:50:40:78:f0:ab:ef:35:ee:2b:80:8a:1b: db:9b:4e:6c:e6:a7:3d:31:c5:fe:33:0b:da:23:d0:57:35:f2: a3:29:f7:81:d6:6b:62:88:e0:cf:88:f2:21:69:6f:34:0d:ce: ca:fc:02:4c:7e:51:a7:73:35:26:0c:34:7a:19:37:11:22:4c: 85:cc:e3:4b:eb:94:dc:87:40:c0:fe:fb:b6:16:f3:39:a7:01: 38:fc:f4:7d:8d:c0:0e:de:a1:fa:44:12:72:fe:8f:e8:f0:71: 50:d9:fd:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNSwJv9rQE8lDEM5eefFDymEyUJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNDExMjExMzI2MjRaFw0yNDExMjQxODU5MjRaMDMxMTAvBgNV BAMTKEQ1OENCMUE4NEI2QzUyMzU4NkM1Qjc5RDlFM0I3RTJDRDFFNDE5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87DuPHlWhFF9k0zYslAiYgOC3 +/c8NXTu2odCOdYJ2DqMRljGMN7Da+Ojs3M0TthfkTO7uedM33BwncV717wgifL2 Mva81Y1XDGA8IjkUBo6a0lG4VkZkuV9hFHLl8bbJjynKIZ+CI0ky0b/CQ11vOVyh bvPnHmhBVUttOMar4ONHhGWKvV9MRsJDOm0qGwQCDQvKWw92cwNIuq3YJaF20ZWj 8ASY4eJdDCbVOEH9etnJ51ZBTUg2ndq8Npj/U8GQUKpBgE+EAMKwZgHscVlUJqjp mXlNbl4wZHp9LuEMY5nPZhXtP++d+xAmqX8nC2DcMfLqszNqjI6J7+Rk2VsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1YyxqEtsUjWGxbednjt+LNHkGVgwHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0 QzZGQTJEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaBvkh4v12Rd7M39hIZVDL3ryth8B1IWzmE BRx4o16/xNcQ8amPjSmqDQ+mF3d/RcimRGSeIEEGUS2dVRuJE3Len4/jPlLpn4bV n5E+36Pe452q/XRGlkZvsN8xNN55Ppo3ubHiR3ujGlh6sztTgg7V6adVyHWe5w3d WX53HnnJNb+HtTF97KBRfco3eFMT6wDzi4YdTVBAePCr7zXuK4CKG9ubTmzmpz0x xf4zC9oj0Fc18qMp94HWa2KI4M+I8iFpbzQNzsr8Akx+UadzNSYMNHoZNxEiTIXM 40vrlNyHQMD++7YW8zmnATj89H2NwA7eofpEEnL+j+jwcVDZ/Zs= -----END CERTIFICATE-----Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org