$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft File: 821049BBD22C335A50850F16AB159C0C6BCC28E5.mft (raw, json) Hash identifier: k0WTYZpWzHClSCXLoIpkhrCIxHJ3W0dM8HJXqKpzwyA= Subject key identifier: 28:4A:FE:C3:CE:4F:63:88:12:E3:FB:75:E3:FD:1D:8A:25:0F:DB:91 Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Certificate serial: 6158C43D217AEA2816ACA659D22230B3421E301E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft Manifest number: 0165 Signing time: Fri 17 May 2024 21:41:30 +0000 Manifest this update: Fri 17 May 2024 21:36:30 +0000 Manifest next update: Mon 20 May 2024 23:28:30 +0000 Files and hashes: 1: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: P4fOxAaBiqRVqsyCSG9bfPq1AxhAaBD2IZedcLAnokw=) 2: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: EFzZbk+GGYSU1CohgSsTKWhxsXW8yBwuTSpgVVmb0Ac=) 3: 821049BBD22C335A50850F16AB159C0C6BCC28E5.crl (hash: VZqFRv6lCd853RbNUaYiL3CPiNFWXHAdMdA4sjkajaU=) 4: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: fYHr6LXwT8RzfH92YtnZ7pmwmP1IGR6uXMiD7Fttxyo=) 5: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: hECg6Ig5KKKzqRQzwWC/Uc7L0Wq7Wa5h8IaEUoBuJNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:58:c4:3d:21:7a:ea:28:16:ac:a6:59:d2:22:30:b3:42:1e:30:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Validity Not Before: May 17 21:36:30 2024 GMT Not After : May 20 23:28:30 2024 GMT Subject: CN=284AFEC3CE4F638812E3FB75E3FD1D8A250FDB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:23:b4:d6:95:34:71:71:a3:ba:97:9f:c1: 23:73:a1:60:a3:f5:a9:95:d1:06:8c:d8:2e:fb:95: 75:b4:29:73:fe:c7:81:9f:bf:c9:fc:c8:30:f5:d4: c7:5a:62:2c:25:89:2d:67:87:0a:22:e6:15:bf:af: 01:c9:55:42:79:d7:dc:2d:4d:b3:63:04:23:2f:e3: 3d:c7:c4:73:7f:57:64:5c:b6:95:3a:d4:0b:37:bc: 26:ba:5f:55:82:d2:5d:1c:d1:9e:8d:f3:e3:70:44: 10:36:cb:54:1a:48:04:32:9b:9e:a1:be:99:42:78: cc:de:71:7c:75:d1:f3:37:a4:91:2f:cf:7b:ea:77: 78:d9:88:be:f5:36:d9:06:09:f9:2c:ed:0a:13:52: 6c:f5:fb:da:35:63:c4:e3:99:3a:2a:69:39:9e:9f: e9:fd:01:d5:85:16:0f:41:d2:1c:77:43:27:bb:c5: e0:af:07:54:bf:28:a3:c6:6a:db:a8:e8:09:83:df: 43:32:7c:51:77:4c:3d:d5:e9:e6:4c:59:89:71:61: 2e:e0:61:a4:f2:5e:76:d8:36:d5:cb:62:0a:5e:83: 41:8f:82:97:3c:4b:94:55:8a:7f:1d:06:ab:75:67: b9:f6:01:b6:e9:fc:cf:a2:41:fc:56:53:11:2e:c7: a4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4A:FE:C3:CE:4F:63:88:12:E3:FB:75:E3:FD:1D:8A:25:0F:DB:91 X509v3 Authority Key Identifier: keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8b:4f:8f:8f:3e:a6:4b:ff:06:0e:77:d6:3e:70:01:71:d7: 0c:d2:df:b7:28:98:9b:ec:98:b8:09:b0:86:56:62:e6:ea:35: 98:40:37:cb:f2:dd:b3:90:7a:2f:38:e3:5a:59:ee:0d:36:0c: 5a:2d:68:4d:27:58:8b:ac:d2:37:73:a2:50:c8:ee:d5:5f:7c: af:ba:f7:da:18:ad:1b:f5:05:9e:f3:56:07:a8:1c:4f:19:93: d4:0b:5a:4c:e4:3e:51:68:37:b9:14:e1:ed:ec:d4:bc:4c:1a: 3b:c6:d2:61:47:8f:8d:22:5e:3c:86:ce:79:57:76:69:2c:95: f9:2c:8e:05:a5:80:be:35:29:0d:a9:9d:dc:8b:b3:0d:8a:8e: f7:7c:c4:d6:2e:9b:f0:a5:7d:0f:d5:5a:fe:24:8d:75:12:b7: da:f1:97:e9:d6:f2:df:2a:8c:8a:af:85:06:56:24:2d:1e:4c: 9c:de:5a:2e:0a:6b:f9:2a:1e:84:21:f9:76:df:94:d6:42:33: fa:ed:0e:ae:bb:69:72:57:1b:6e:12:8c:cc:fa:70:e5:4c:60: 7a:60:bc:a3:88:1a:1e:38:8e:a4:77:67:97:a6:6f:73:20:ad: ff:3d:f4:ae:a9:cb:d0:88:93:39:86:1c:72:15:dc:8b:7c:7a: 73:78:ef:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVjEPSF66igWrKZZ0iIws0IeMB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2 QkNDMjhFNTAeFw0yNDA1MTcyMTM2MzBaFw0yNDA1MjAyMzI4MzBaMDMxMTAvBgNV BAMTKDI4NEFGRUMzQ0U0RjYzODgxMkUzRkI3NUUzRkQxRDhBMjUwRkRCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80iO01pU0cXGjupefwSNzoWCj 9amV0QaM2C77lXW0KXP+x4Gfv8n8yDD11MdaYiwliS1nhwoi5hW/rwHJVUJ519wt TbNjBCMv4z3HxHN/V2RctpU61As3vCa6X1WC0l0c0Z6N8+NwRBA2y1QaSAQym56h vplCeMzecXx10fM3pJEvz3vqd3jZiL71NtkGCfks7QoTUmz1+9o1Y8TjmToqaTme n+n9AdWFFg9B0hx3Qye7xeCvB1S/KKPGatuo6AmD30MyfFF3TD3V6eZMWYlxYS7g YaTyXnbYNtXLYgpeg0GPgpc8S5RVin8dBqt1Z7n2Abbp/M+iQfxWUxEux6RFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKEr+w85PY4gS4/t14/0diiUP25EwHwYDVR0j BBgwFoAUghBJu9IsM1pQhQ8WqxWcDGvMKOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4ZTE4ZC1hMDQ3LTQ1OTAtOWU1Ni00NjRhNzNlMjNjNmMvMC84MjEwNDlCQkQy MkMzMzVBNTA4NTBGMTZBQjE1OUMwQzZCQ0MyOEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2QkND MjhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlD MEM2QkNDMjhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaLT4+PPqZL/wYOd9Y+cAFx1wzS37comJvs mLgJsIZWYubqNZhAN8vy3bOQei8441pZ7g02DFotaE0nWIus0jdzolDI7tVffK+6 99oYrRv1BZ7zVgeoHE8Zk9QLWkzkPlFoN7kU4e3s1LxMGjvG0mFHj40iXjyGznlX dmkslfksjgWlgL41KQ2pndyLsw2Kjvd8xNYum/ClfQ/VWv4kjXUSt9rxl+nW8t8q jIqvhQZWJC0eTJzeWi4Ka/kqHoQh+XbflNZCM/rtDq67aXJXG24SjMz6cOVMYHpg vKOIGh44jqR3Z5emb3Mgrf899K6py9CIkzmGHHIV3It8enN47zQ= -----END CERTIFICATE-----Generated at Fri May 17 22:51:20 2024 by rpki-client on console-ams.rpki-client.org