$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: nqeOUvMtCE/J447LHkpIGC491/noqPn2ifJTPgvjUp8= Subject key identifier: 1D:96:EF:B7:3C:47:3D:62:B4:18:69:E8:D3:E9:6F:A7:A1:FD:24:A3 Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 7B0721C4DF14D7A37AC8CFF6A385C4EF18A6EA63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 02C5 Signing time: Sat 23 Nov 2024 15:31:00 +0000 Manifest this update: Sat 23 Nov 2024 15:26:00 +0000 Manifest next update: Wed 27 Nov 2024 00:53:00 +0000 Files and hashes: 1: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: XW48ld4PLEVZF/n5xQQKh4lnda/V5NxwteSGEFQE2uA=) 2: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: 4TIBj276GKoXxc/RsrrQB8JUydd2yR1mY38DPZ52f4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:07:21:c4:df:14:d7:a3:7a:c8:cf:f6:a3:85:c4:ef:18:a6:ea:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Nov 23 15:26:00 2024 GMT Not After : Nov 27 00:53:00 2024 GMT Subject: CN=1D96EFB73C473D62B41869E8D3E96FA7A1FD24A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:aa:73:c9:e0:1d:8e:28:46:ac:b6:88:c9:b3: d3:c3:af:72:92:05:61:53:9c:ef:6a:5c:c8:51:73: 15:d8:8b:be:9d:37:ca:df:a5:71:75:e3:1f:31:63: bc:73:02:10:67:d6:54:ee:51:a4:16:75:72:7e:11: fb:8c:e4:31:ef:f2:17:8c:56:e3:c5:4c:0a:85:32: 07:ad:79:e3:11:42:22:0c:40:06:dc:b8:cd:95:36: d2:72:78:e1:67:20:33:0d:62:95:1a:19:5b:27:67: 47:8e:da:06:fb:32:57:a4:c3:29:90:73:41:25:50: d6:b6:0c:61:95:13:18:80:2d:e3:b8:92:6b:a2:e8: 48:a1:9f:45:72:0d:98:fd:32:fe:8a:d3:8d:b5:0c: db:f3:7f:eb:8d:3d:4e:7e:fb:09:9c:7f:84:23:c0: 8c:9a:5a:b9:35:6b:2f:c6:f2:dc:8c:94:16:1d:66: cb:7f:cb:f1:86:b3:13:aa:e3:c4:40:83:18:ce:85: 71:02:03:af:ac:4f:f1:a8:6c:dd:53:fd:af:ad:bc: 40:f2:5c:47:9e:1d:24:0c:0a:3d:49:72:5b:64:de: 51:3f:1a:e4:32:2b:97:1d:11:8c:31:76:79:53:60: 46:b3:f9:55:15:72:bd:1e:1a:01:25:b9:2a:20:ca: b5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:96:EF:B7:3C:47:3D:62:B4:18:69:E8:D3:E9:6F:A7:A1:FD:24:A3 X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:08:bf:de:23:6e:6c:7c:15:41:78:a6:4b:75:e8:31:1a:9d: af:4f:e8:62:cd:96:51:a5:f1:e6:a2:c9:6d:67:ad:ef:71:05: ce:10:36:7a:60:bf:74:0d:18:ec:f7:6e:ce:82:51:91:31:fb: 63:6f:e4:c1:53:7b:58:5d:ee:f0:3e:99:07:33:0e:03:5c:bd: f8:f5:a1:5f:a6:bb:0e:15:e5:c6:ff:55:69:78:a0:73:8c:45: 10:d4:b1:8f:b3:77:68:1c:57:07:4b:ba:e4:5f:ee:54:17:15: 8d:c8:c3:34:02:cc:50:92:c9:a3:57:6a:30:0a:15:f8:6a:5d: 95:3c:0a:8e:d6:b8:08:c7:97:fe:d2:4e:b5:b2:82:19:3e:9b: 26:11:75:8d:03:29:a3:74:a7:fb:cf:8d:37:a1:11:38:d6:7a: e6:8f:fc:be:61:3e:b5:fa:23:22:4f:5b:4f:3b:52:00:c7:57: 58:07:95:d6:60:f6:6d:c1:a7:ed:28:15:09:78:30:23:0f:b0: 94:c7:aa:b1:85:9f:d2:41:ea:ff:0d:69:d6:a6:c2:6c:a1:7e: ef:54:0d:0f:56:57:0f:10:cc:86:09:5a:08:da:b5:ea:39:18: 00:fd:46:e3:3d:62:53:d4:7b:6d:b0:02:45:e3:de:32:2c:7a: 78:06:23:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewchxN8U16N6yM/2o4XE7xim6mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNDExMjMxNTI2MDBaFw0yNDExMjcwMDUzMDBaMDMxMTAvBgNV BAMTKDFEOTZFRkI3M0M0NzNENjJCNDE4NjlFOEQzRTk2RkE3QTFGRDI0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaqnPJ4B2OKEastojJs9PDr3KS BWFTnO9qXMhRcxXYi76dN8rfpXF14x8xY7xzAhBn1lTuUaQWdXJ+EfuM5DHv8heM VuPFTAqFMgeteeMRQiIMQAbcuM2VNtJyeOFnIDMNYpUaGVsnZ0eO2gb7MlekwymQ c0ElUNa2DGGVExiALeO4kmui6Eihn0VyDZj9Mv6K0421DNvzf+uNPU5++wmcf4Qj wIyaWrk1ay/G8tyMlBYdZst/y/GGsxOq48RAgxjOhXECA6+sT/GobN1T/a+tvEDy XEeeHSQMCj1Jcltk3lE/GuQyK5cdEYwxdnlTYEaz+VUVcr0eGgEluSogyrXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHZbvtzxHPWK0GGno0+lvp6H9JKMwHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUIv94jbmx8FUF4pkt16DEana9P6GLNllGl 8eaiyW1nre9xBc4QNnpgv3QNGOz3bs6CUZEx+2Nv5MFTe1hd7vA+mQczDgNcvfj1 oV+muw4V5cb/VWl4oHOMRRDUsY+zd2gcVwdLuuRf7lQXFY3IwzQCzFCSyaNXajAK FfhqXZU8Co7WuAjHl/7STrWyghk+myYRdY0DKaN0p/vPjTehETjWeuaP/L5hPrX6 IyJPW087UgDHV1gHldZg9m3Bp+0oFQl4MCMPsJTHqrGFn9JB6v8Nadamwmyhfu9U DQ9WVw8QzIYJWgjateo5GAD9RuM9YlPUe22wAkXj3jIsengGI54= -----END CERTIFICATE-----Generated at Sat Nov 23 17:31:42 2024 by rpki-client on console-fra.rpki-client.org