$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft File: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft (raw, json) Hash identifier: wy+NJD79pJHShxj2Kelz1T/NknboDU59VDwbUW6wpRw= Subject key identifier: 35:31:4D:9E:10:88:A9:93:F7:B8:11:AC:0A:5C:92:2A:02:43:55:E1 Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Certificate serial: 6246C6982E63F854C1CF6AB8318FCDD41526FFD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft Manifest number: 0431 Signing time: Sun 19 May 2024 07:11:08 +0000 Manifest this update: Sun 19 May 2024 07:06:08 +0000 Manifest next update: Wed 22 May 2024 07:36:08 +0000 Files and hashes: 1: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: f3X6H7ZhtSVNeOPbHep0Q0vvi8oN0A/OoneNhHKwcx8=) 2: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: tfcjz81XEh/XIqkAJanW5aQ1R0jSMcwvf4FBPIv5K3g=) 3: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: 75pOH7venM4sq9vCSKgnYFwi83LOYXcOR39NcWsYv6s=) 4: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: A988pdJTc0xy001eLcUEfZgCQy4/feH+8xHrvxaAa7w=) 5: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl (hash: T0VyvcPxSIhfGbg894fOa74WtlTHLI5hZiQ3iY7zfDY=) 6: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: RKcUNpab4bfxk9EEDFshd9ImMg7akpinO+JFrQoi3DY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:46:c6:98:2e:63:f8:54:c1:cf:6a:b8:31:8f:cd:d4:15:26:ff:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Validity Not Before: May 19 07:06:08 2024 GMT Not After : May 22 07:36:08 2024 GMT Subject: CN=35314D9E1088A993F7B811AC0A5C922A024355E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:82:9b:be:f5:f3:a2:c4:e5:b2:07:60:b6:fb: 0e:f4:44:81:18:1c:b7:14:08:52:88:81:32:e7:e9: d8:a6:9a:b7:0f:82:16:cd:d7:8c:bf:73:db:e5:79: 33:b9:0c:c6:5e:6e:21:cc:f8:77:57:05:7b:55:a7: 10:d2:02:40:90:57:66:ea:54:f1:e6:d0:f5:05:40: b3:13:a6:5b:90:d9:4e:3c:db:63:09:70:d3:6c:38: 16:13:ea:e0:bd:d3:0e:db:88:bd:e3:28:41:23:ad: 3f:9c:b6:6e:09:13:eb:76:93:1e:2e:41:cb:7f:2d: b7:48:4f:6b:7e:17:4e:a3:7e:18:7e:47:8f:c6:93: ce:02:0c:37:ee:27:b9:fe:3d:06:29:31:89:40:e2: fe:e3:94:43:54:c8:27:77:06:13:2b:99:57:84:ea: 6b:66:4c:2e:e5:70:5d:fb:89:0c:a7:48:b9:97:f4: a9:d5:75:9c:08:5e:2b:8d:9d:0f:91:ed:e1:19:c0: c3:04:c7:68:94:5c:e2:d9:f5:a8:00:f4:de:6c:73: 77:7f:43:0d:2f:c9:ea:61:04:48:2b:72:a9:70:64: 8d:67:fd:67:93:73:5a:69:d5:fa:92:00:cd:8c:bd: 85:99:c7:22:12:4d:ae:86:d2:40:20:48:8f:78:c0: b9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:31:4D:9E:10:88:A9:93:F7:B8:11:AC:0A:5C:92:2A:02:43:55:E1 X509v3 Authority Key Identifier: keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ec:b2:c9:47:15:1f:b8:81:10:ea:ae:f1:e1:c2:ef:9e:f0: 64:64:91:19:3c:68:db:7c:4f:ff:19:87:33:85:27:0f:92:e3: 02:2c:15:da:04:e2:a0:08:1d:fd:42:0d:5c:7b:de:79:bc:1b: 12:22:db:fc:65:1b:fc:cf:60:f2:d9:92:56:04:5f:9f:16:65: 13:cb:c2:32:20:59:fe:ff:74:1f:e7:90:16:16:5d:97:08:ef: 7d:e2:b8:79:70:19:1c:97:65:53:90:86:35:54:16:78:5a:b6: ff:22:3b:ef:f3:e3:10:b0:c7:11:7d:77:f5:24:7b:c1:b1:1d: 05:57:69:44:6c:3c:45:82:e4:a7:c5:d5:54:5f:8b:64:e8:b9: 1a:dd:e0:11:16:d7:5f:b0:f8:50:df:6a:08:cb:7a:a9:98:2d: 5e:9b:a0:24:04:9a:88:a5:2a:3e:6d:04:f1:f1:29:e2:5d:d4: ed:46:9e:fd:bb:dc:20:31:77:cd:92:1c:18:82:48:61:34:19: 92:38:fc:31:ea:02:82:2d:cd:01:a2:8d:3e:9a:16:9c:2f:55: 36:2a:f8:23:ee:fe:2d:4b:87:ba:da:56:4b:fd:ee:cc:9d:4c: e5:32:45:2b:67:15:2d:bf:39:b5:03:dd:97:ed:2f:b5:e4:11: 8c:79:02:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkbGmC5j+FTBz2q4MY/N1BUm/9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB OUMwQjZBMDAeFw0yNDA1MTkwNzA2MDhaFw0yNDA1MjIwNzM2MDhaMDMxMTAvBgNV BAMTKDM1MzE0RDlFMTA4OEE5OTNGN0I4MTFBQzBBNUM5MjJBMDI0MzU1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWgpu+9fOixOWyB2C2+w70RIEY HLcUCFKIgTLn6dimmrcPghbN14y/c9vleTO5DMZebiHM+HdXBXtVpxDSAkCQV2bq VPHm0PUFQLMTpluQ2U4822MJcNNsOBYT6uC90w7biL3jKEEjrT+ctm4JE+t2kx4u Qct/LbdIT2t+F06jfhh+R4/Gk84CDDfuJ7n+PQYpMYlA4v7jlENUyCd3BhMrmVeE 6mtmTC7lcF37iQynSLmX9KnVdZwIXiuNnQ+R7eEZwMMEx2iUXOLZ9agA9N5sc3d/ Qw0vyephBEgrcqlwZI1n/WeTc1pp1fqSAM2MvYWZxyISTa6G0kAgSI94wLmjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNTFNnhCIqZP3uBGsClySKgJDVeEwHwYDVR0j BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw QjZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIw NTNBOUMwQjZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7ssslHFR+4gRDqrvHhwu+e8GRkkRk8aNt8 T/8ZhzOFJw+S4wIsFdoE4qAIHf1CDVx73nm8GxIi2/xlG/zPYPLZklYEX58WZRPL wjIgWf7/dB/nkBYWXZcI733iuHlwGRyXZVOQhjVUFnhatv8iO+/z4xCwxxF9d/Uk e8GxHQVXaURsPEWC5KfF1VRfi2TouRrd4BEW11+w+FDfagjLeqmYLV6boCQEmoil Kj5tBPHxKeJd1O1Gnv273CAxd82SHBiCSGE0GZI4/DHqAoItzQGijT6aFpwvVTYq +CPu/i1Lh7raVkv97sydTOUyRStnFS2/ObUD3ZftL7XkEYx5AqU= -----END CERTIFICATE-----Generated at Sun May 19 07:40:10 2024 by rpki-client on console-fra.rpki-client.org