$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: r8yzi1j87WOgG5uZ74fYxdRaSMHv3bmTiHaMr6BSGME= Subject key identifier: 21:AD:2F:28:B2:8E:60:64:14:97:F8:8D:69:E3:64:B8:20:33:47:A4 Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 385BD3454E4910D4396F6D29142B3DA0571E440C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: A6 Signing time: Sat 23 Nov 2024 18:11:08 +0000 Manifest this update: Sat 23 Nov 2024 18:06:08 +0000 Manifest next update: Wed 27 Nov 2024 06:06:08 +0000 Files and hashes: 1: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: h/e2uWa55+f9DUn2iH5xODkFoavqYlJ2ye8q/08/yZo=) 2: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: BgUfjlBOik3lVreb6x1VhcmAzB8os2FuzbKBtvTz7gM=) 3: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: yu8z55+Tr/+kJKakk3Vmp/sSKFGPsRRjeFUSIw8Az4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5b:d3:45:4e:49:10:d4:39:6f:6d:29:14:2b:3d:a0:57:1e:44:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: Nov 23 18:06:08 2024 GMT Not After : Nov 27 06:06:08 2024 GMT Subject: CN=21AD2F28B28E60641497F88D69E364B8203347A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:90:17:80:cb:17:82:17:b9:35:30:f8:24: 9f:e0:53:83:16:52:f0:c6:f4:20:0b:65:52:ba:f7: 0a:6d:d5:1e:27:31:aa:09:24:7f:04:41:d6:80:40: 9d:7b:1f:42:d5:ce:8e:e2:5e:2a:8b:26:db:07:c7: 65:55:c4:68:94:82:f7:3c:18:c6:e3:8a:1a:33:74: 4f:61:a2:1a:c3:55:b7:78:b3:1f:e8:38:33:85:02: 7d:af:d2:c9:94:be:dc:d3:0d:06:cf:56:eb:56:a0: a0:cb:da:f9:e7:86:0e:b1:7b:28:b3:5f:9e:db:ab: 48:0a:c7:a9:6f:a1:bc:06:31:6e:26:eb:47:0c:a5: ed:0d:d4:fc:98:bc:35:fa:0d:f1:63:41:de:a0:a1: 15:2f:9b:19:28:ad:46:1b:2f:e5:e3:bc:f3:b9:d5: 1b:04:fb:59:47:28:ab:34:4e:ce:aa:2e:c1:8f:f9: b2:ba:e4:0e:a7:10:e3:52:7b:cd:fb:8f:8c:6f:08: 42:f9:68:7c:5b:ba:22:37:62:c3:44:2d:a3:4d:70: dc:7d:70:dd:d0:d7:ba:2f:1f:bd:03:92:e1:d3:36: 73:7a:a7:f8:3a:48:46:0a:18:4e:4b:d0:a4:ae:f7: 04:c5:1d:d0:ca:6d:0b:ed:97:d0:b5:9b:93:18:9d: 0f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AD:2F:28:B2:8E:60:64:14:97:F8:8D:69:E3:64:B8:20:33:47:A4 X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:83:4f:9d:fb:a0:74:1f:22:85:38:df:31:ad:ea:1b:ce:98: f5:f7:1a:04:32:79:76:c2:e7:60:18:6e:b2:92:c4:5d:6e:57: a2:32:8a:cb:21:d6:21:cc:ff:ea:b5:db:a6:6a:c6:54:e0:e6: 02:33:3d:2a:a2:b2:d5:6f:20:cf:19:ff:f3:c7:4e:9f:95:40: ca:ac:94:40:33:71:a1:20:3b:ba:b6:32:03:fe:8c:7d:12:74: ab:32:c5:e7:ab:5f:c9:ce:71:d9:29:a5:b2:73:d5:e1:48:5a: f5:57:d4:f9:f7:e8:a4:4f:7e:b9:ea:c3:03:50:bf:22:4f:9e: b3:43:5f:ed:1a:ec:d4:18:40:7c:3e:75:e9:90:e1:66:f5:33: a4:98:32:58:93:af:ee:74:d7:ee:72:3b:34:2c:1b:5a:7d:68: 5d:fc:32:0b:f6:6c:be:f0:6c:3e:40:6b:16:d0:0c:de:98:7f: ed:18:69:c2:4b:d1:66:5a:51:de:e1:c4:0a:32:6e:68:bf:a1: 31:61:c0:10:9c:08:4d:da:bc:88:f6:88:39:a3:10:8c:7a:ee: 8c:de:37:89:9a:c2:11:4e:b8:4b:e6:24:d4:0d:78:6f:f5:5e: 95:ff:eb:29:52:c1:05:a1:e8:07:fe:26:b8:3c:c2:d4:17:db: f9:db:03:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFvTRU5JENQ5b20pFCs9oFceRAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNDExMjMxODA2MDhaFw0yNDExMjcwNjA2MDhaMDMxMTAvBgNV BAMTKDIxQUQyRjI4QjI4RTYwNjQxNDk3Rjg4RDY5RTM2NEI4MjAzMzQ3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7upAXgMsXghe5NTD4JJ/gU4MW UvDG9CALZVK69wpt1R4nMaoJJH8EQdaAQJ17H0LVzo7iXiqLJtsHx2VVxGiUgvc8 GMbjihozdE9hohrDVbd4sx/oODOFAn2v0smUvtzTDQbPVutWoKDL2vnnhg6xeyiz X57bq0gKx6lvobwGMW4m60cMpe0N1PyYvDX6DfFjQd6goRUvmxkorUYbL+XjvPO5 1RsE+1lHKKs0Ts6qLsGP+bK65A6nEONSe837j4xvCEL5aHxbuiI3YsNELaNNcNx9 cN3Q17ovH70DkuHTNnN6p/g6SEYKGE5L0KSu9wTFHdDKbQvtl9C1m5MYnQ9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIa0vKLKOYGQUl/iNaeNkuCAzR6QwHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGDT537oHQfIoU43zGt6hvOmPX3GgQyeXbC 52AYbrKSxF1uV6Iyissh1iHM/+q126ZqxlTg5gIzPSqistVvIM8Z//PHTp+VQMqs lEAzcaEgO7q2MgP+jH0SdKsyxeerX8nOcdkppbJz1eFIWvVX1Pn36KRPfrnqwwNQ vyJPnrNDX+0a7NQYQHw+demQ4Wb1M6SYMliTr+501+5yOzQsG1p9aF38Mgv2bL7w bD5AaxbQDN6Yf+0YacJL0WZaUd7hxAoybmi/oTFhwBCcCE3avIj2iDmjEIx67oze N4mawhFOuEvmJNQNeG/1XpX/6ylSwQWh6Af+Jrg8wtQX2/nbAzA= -----END CERTIFICATE-----Generated at Sat Nov 23 18:47:52 2024 by rpki-client on console-fra.rpki-client.org