$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft File: 821049BBD22C335A50850F16AB159C0C6BCC28E5.mft (raw, json) Hash identifier: yeDq3MDNZOWEJy5I94VPlkWcdWGHs065m7i+UuZEsic= Subject key identifier: 3F:39:48:9C:B3:AA:B5:05:B9:0B:27:75:AB:E9:A1:22:EE:6C:CE:D4 Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Certificate serial: 47FF57D76CFA9CFBEECB94DB52C1C68A76A9CEA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft Manifest number: 01B9 Signing time: Fri 22 Nov 2024 06:31:45 +0000 Manifest this update: Fri 22 Nov 2024 06:26:45 +0000 Manifest next update: Mon 25 Nov 2024 10:30:45 +0000 Files and hashes: 1: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: gJZ1sW5BxaKi4OlH0Ko1+AD9dXMVkojyx6OKsnKZ2JU=) 2: 821049BBD22C335A50850F16AB159C0C6BCC28E5.crl (hash: RtNOZOAp+V+ZxBgH5KbleXsUGLSWChavzQZUfRxXWQ4=) 3: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: ncuNmuDMRCz7XEGjG+8p/qjKUpvp2YtlNc4JXvP3iGg=) 4: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: O6mcNqFGUKoXPAXAaTNGJf2XpVfyBv0t3Gtn3V+6lKE=) 5: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: YF6vJXMVtUVK6CmNTZeLfmthP1D0nB1ofgHbuXDKxvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ff:57:d7:6c:fa:9c:fb:ee:cb:94:db:52:c1:c6:8a:76:a9:ce:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Validity Not Before: Nov 22 06:26:45 2024 GMT Not After : Nov 25 10:30:45 2024 GMT Subject: CN=3F39489CB3AAB505B90B2775ABE9A122EE6CCED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c7:0a:0b:84:e6:09:ee:57:c9:c1:ec:a9:55: 86:7d:43:94:c9:f8:f5:30:8c:72:84:be:97:70:49: 24:8a:4f:a1:f8:f8:e9:98:3b:b2:69:2f:a3:dd:83: d4:fe:1d:e4:d4:9f:f3:b4:61:b2:32:29:06:58:7a: 4a:9a:8e:36:1e:b0:c6:50:53:67:ae:46:da:78:10: 12:8c:cd:6c:06:b2:09:a8:ce:3c:87:93:a5:2e:27: 8a:35:d9:cb:f6:0c:45:a1:a0:9e:eb:b7:75:c0:99: 59:cb:0e:13:07:e0:fb:dd:88:30:b1:6b:90:c9:ea: eb:77:fe:31:a1:50:3d:be:06:ea:0b:80:8c:57:f7: f9:ae:f7:b2:fb:ca:30:7f:83:79:88:1b:0a:a2:ee: ba:44:bc:53:cd:c1:0c:e4:05:a0:e4:f6:0f:a3:35: 9c:3c:78:22:78:32:ef:6f:a3:25:ee:10:05:8d:e0: 51:24:1a:98:da:c0:e4:a4:d0:cb:d7:0f:e4:d7:94: 21:a8:eb:27:82:30:05:c7:31:c9:63:8d:b2:b0:b7: c7:00:b4:63:ff:a8:cb:ec:e5:ba:55:4c:86:4b:a3: 28:0d:b0:a5:35:36:22:c1:61:50:f1:1f:9c:9f:42: d9:fe:f1:ef:96:d0:4b:7f:ef:44:12:2e:30:0c:8d: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:39:48:9C:B3:AA:B5:05:B9:0B:27:75:AB:E9:A1:22:EE:6C:CE:D4 X509v3 Authority Key Identifier: keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3e:4f:bb:ed:44:42:8f:3f:b4:69:cb:12:84:3c:d1:f2:b6: 9c:a4:59:d7:c2:43:0d:8d:08:54:de:75:c9:84:a8:5e:14:a1: 95:30:db:9a:6b:49:30:72:d0:f9:33:99:23:41:af:24:c1:6a: e6:8e:98:cd:1d:5c:c0:4d:c4:d1:31:64:29:7f:c8:62:cb:6c: fc:4f:27:5b:bd:8e:9c:63:3a:3b:29:fd:3d:ec:f5:7f:2f:82: 1e:b8:1a:b3:b7:8e:16:11:3a:ab:6f:e3:c9:2a:fb:cb:f1:2f: 7a:63:19:4f:92:25:6b:0b:88:66:78:93:17:f7:dd:ac:2f:26: 8f:a1:6f:0a:97:8a:12:b9:8c:84:eb:aa:b6:67:d4:8b:69:79: ed:d7:c6:2d:40:dd:53:1e:b2:fb:62:8f:25:21:65:34:97:e2: 21:bd:21:3b:5b:94:a9:35:18:fd:22:83:4f:be:ed:76:67:60: 21:84:22:b6:e9:be:eb:28:21:c3:80:67:33:97:bc:df:50:e2: 40:07:5f:eb:58:34:7a:2f:97:9f:ec:aa:3f:ab:db:88:d5:77: 89:83:47:b2:b0:4c:b5:cd:5e:91:7e:48:d1:4a:1e:86:fe:46: 9d:c3:20:48:96:31:a5:cb:f7:13:33:d1:9a:60:5c:c6:db:d3: 5f:fc:b9:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/9X12z6nPvuy5TbUsHGinapzqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2 QkNDMjhFNTAeFw0yNDExMjIwNjI2NDVaFw0yNDExMjUxMDMwNDVaMDMxMTAvBgNV BAMTKDNGMzk0ODlDQjNBQUI1MDVCOTBCMjc3NUFCRTlBMTIyRUU2Q0NFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0xwoLhOYJ7lfJweypVYZ9Q5TJ +PUwjHKEvpdwSSSKT6H4+OmYO7JpL6Pdg9T+HeTUn/O0YbIyKQZYekqajjYesMZQ U2euRtp4EBKMzWwGsgmozjyHk6UuJ4o12cv2DEWhoJ7rt3XAmVnLDhMH4PvdiDCx a5DJ6ut3/jGhUD2+BuoLgIxX9/mu97L7yjB/g3mIGwqi7rpEvFPNwQzkBaDk9g+j NZw8eCJ4Mu9voyXuEAWN4FEkGpjawOSk0MvXD+TXlCGo6yeCMAXHMcljjbKwt8cA tGP/qMvs5bpVTIZLoygNsKU1NiLBYVDxH5yfQtn+8e+W0Et/70QSLjAMjcU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPzlInLOqtQW5Cyd1q+mhIu5sztQwHwYDVR0j BBgwFoAUghBJu9IsM1pQhQ8WqxWcDGvMKOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4ZTE4ZC1hMDQ3LTQ1OTAtOWU1Ni00NjRhNzNlMjNjNmMvMC84MjEwNDlCQkQy MkMzMzVBNTA4NTBGMTZBQjE1OUMwQzZCQ0MyOEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2QkND MjhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlD MEM2QkNDMjhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKw+T7vtREKPP7RpyxKEPNHytpykWdfCQw2N CFTedcmEqF4UoZUw25prSTBy0PkzmSNBryTBauaOmM0dXMBNxNExZCl/yGLLbPxP J1u9jpxjOjsp/T3s9X8vgh64GrO3jhYROqtv48kq+8vxL3pjGU+SJWsLiGZ4kxf3 3awvJo+hbwqXihK5jITrqrZn1Itpee3Xxi1A3VMesvtijyUhZTSX4iG9ITtblKk1 GP0ig0++7XZnYCGEIrbpvusoIcOAZzOXvN9Q4kAHX+tYNHovl5/sqj+r24jVd4mD R7KwTLXNXpF+SNFKHob+Rp3DIEiWMaXL9xMz0ZpgXMbb01/8uVc= -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:04 2024 by rpki-client on console-fra.rpki-client.org