$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft File: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft (raw, json) Hash identifier: 7+F+R1fq+NdigWFWa61HCb0zronsbeFewxrPQLjX+rE= Subject key identifier: BE:99:2D:46:5E:D9:DE:1C:95:37:4A:90:57:1E:14:9A:D8:71:8C:14 Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE Certificate issuer: /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Certificate serial: 2A5A6284EA507058BBCB77B8DD8D4CB856BF3C97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft Manifest number: 03B2 Signing time: Sat 18 May 2024 22:20:47 +0000 Manifest this update: Sat 18 May 2024 22:15:47 +0000 Manifest next update: Wed 22 May 2024 07:52:47 +0000 Files and hashes: 1: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: OdP2TfiqUWApHaObqMMUNNENRPSoZ9LwV4JxCC3bJBQ=) 2: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: Fu7JeXFfb5tc228JSNsnXAafjLzpKihNy+NDrv6gpEA=) 3: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl (hash: 1uvSzQ/IvmuZ/WR8iwmacrK8fWqlQp4qwJxhuUfFFJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5a:62:84:ea:50:70:58:bb:cb:77:b8:dd:8d:4c:b8:56:bf:3c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Validity Not Before: May 18 22:15:47 2024 GMT Not After : May 22 07:52:47 2024 GMT Subject: CN=BE992D465ED9DE1C95374A90571E149AD8718C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2e:56:2a:1a:ec:47:aa:be:4f:95:2e:29:2a: 54:5a:ad:13:2a:81:57:43:b3:15:07:ff:a7:7e:ed: e7:98:07:41:4e:ba:2e:b0:62:6f:99:2f:2d:20:69: 53:e1:43:ed:d6:53:96:bd:3c:6f:9f:0c:90:57:c8: 81:5b:39:75:96:37:cc:9f:dd:f8:1d:61:40:62:90: e1:86:11:7a:7e:53:89:90:70:57:a9:22:b9:b0:af: 17:cf:d5:7d:ab:aa:b3:c2:40:ec:0b:f4:4c:19:85: 86:bf:d3:69:a1:16:e7:91:cc:39:22:7f:36:c3:6e: 75:2c:8b:2e:ff:79:3d:01:9e:ca:db:8d:92:01:fc: 5f:31:97:89:8e:0d:2c:fb:78:8e:45:b3:fb:cd:c4: 16:99:0b:60:7d:30:d4:2c:fa:fa:14:81:ee:4c:d0: 15:46:d8:1f:96:66:dd:5e:50:da:99:9e:fa:0d:ba: a0:d2:1d:ba:f5:29:49:05:e3:d9:a0:99:cb:96:b6: 67:c7:35:bd:b8:2f:16:dd:6b:16:0d:85:f8:10:ca: 4a:3e:58:ce:d1:97:de:be:9b:b8:34:e6:b1:71:92: 18:66:c7:4a:58:a5:f0:0c:46:de:7d:55:3f:f5:d4: 57:74:3e:03:4e:4c:52:34:c9:f9:b1:2b:bd:20:7c: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:99:2D:46:5E:D9:DE:1C:95:37:4A:90:57:1E:14:9A:D8:71:8C:14 X509v3 Authority Key Identifier: keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f0:85:c4:19:59:ae:e3:98:b6:28:3a:76:b1:04:78:1a:bd: 37:ba:9a:01:c5:2f:f6:88:38:31:c3:81:67:32:9a:a0:4e:09: e1:e1:5d:28:24:2d:45:c7:c1:61:15:10:39:8b:77:66:87:3a: db:d9:2a:5e:07:62:d7:79:a2:03:b5:10:b9:a6:88:81:0e:2f: f9:73:f8:d7:7a:23:58:83:59:b2:30:d0:1a:af:58:12:a7:d5: 75:ed:eb:d7:a8:68:52:31:2b:87:ff:49:1c:fd:fe:f2:9d:ee: 4c:64:a1:76:4d:81:a8:2c:79:ed:e4:cf:d5:4b:c6:88:e9:10: a3:a5:7b:fb:47:68:a4:67:34:db:c8:d4:22:52:d7:f0:cd:27: 82:78:e3:eb:96:7f:d6:c5:dd:e7:84:7a:50:d3:aa:fa:1a:66: ee:f2:f8:9b:51:a8:4e:86:50:50:c2:4a:ab:48:62:46:4e:c7: e9:56:1d:be:2b:06:f3:be:e2:29:54:a9:be:af:4a:03:5b:7f: 52:f2:ce:b6:e7:99:b9:44:d7:4f:d6:0c:26:63:03:78:1b:0c: 39:68:4b:61:ae:bd:b7:f2:0b:13:cb:e8:c2:aa:0e:34:19:05: 81:e0:a1:7d:52:5b:8b:0c:46:3a:20:f4:b9:36:53:f6:b9:95: ac:fa:e4:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlpihOpQcFi7y3e43Y1MuFa/PJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNB MDk2QjJGRTAeFw0yNDA1MTgyMjE1NDdaFw0yNDA1MjIwNzUyNDdaMDMxMTAvBgNV BAMTKEJFOTkyRDQ2NUVEOURFMUM5NTM3NEE5MDU3MUUxNDlBRDg3MThDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuLlYqGuxHqr5PlS4pKlRarRMq gVdDsxUH/6d+7eeYB0FOui6wYm+ZLy0gaVPhQ+3WU5a9PG+fDJBXyIFbOXWWN8yf 3fgdYUBikOGGEXp+U4mQcFepIrmwrxfP1X2rqrPCQOwL9EwZhYa/02mhFueRzDki fzbDbnUsiy7/eT0BnsrbjZIB/F8xl4mODSz7eI5Fs/vNxBaZC2B9MNQs+voUge5M 0BVG2B+WZt1eUNqZnvoNuqDSHbr1KUkF49mgmcuWtmfHNb24LxbdaxYNhfgQyko+ WM7Rl96+m7g05rFxkhhmx0pYpfAMRt59VT/11Fd0PgNOTFI0yfmxK70gfJTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvpktRl7Z3hyVN0qQVx4UmthxjBQwHwYDVR0j BBgwFoAUIV/H5eIrjEaRDU18ohTJI6CWsv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2VhYzljMC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC8yMTVGQzdFNUUy MkI4QzQ2OTEwRDREN0NBMjE0QzkyM0EwOTZCMkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNBMDk2 QjJGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5 MjNBMDk2QjJGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/whcQZWa7jmLYoOnaxBHgavTe6mgHFL/aI ODHDgWcymqBOCeHhXSgkLUXHwWEVEDmLd2aHOtvZKl4HYtd5ogO1ELmmiIEOL/lz +Nd6I1iDWbIw0BqvWBKn1XXt69eoaFIxK4f/SRz9/vKd7kxkoXZNgagsee3kz9VL xojpEKOle/tHaKRnNNvI1CJS1/DNJ4J44+uWf9bF3eeEelDTqvoaZu7y+JtRqE6G UFDCSqtIYkZOx+lWHb4rBvO+4ilUqb6vSgNbf1LyzrbnmblE10/WDCZjA3gbDDlo S2GuvbfyCxPL6MKqDjQZBYHgoX1SW4sMRjog9Lk2U/a5laz65Pc= -----END CERTIFICATE-----Generated at Sun May 19 00:15:31 2024 by rpki-client on console-fra.rpki-client.org