$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft File: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft (raw, json) Hash identifier: I6AAstLD1oRJaIryWe1ohNUMG+c8BlcI7HgOw7+pabE= Subject key identifier: D4:F6:F0:A3:9E:0F:1E:C5:BD:DC:34:8A:67:BB:3C:6A:5C:06:42:F3 Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Certificate serial: 7EAAD406EBA56264124BAC7B56268A98D3110877 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft Manifest number: 0487 Signing time: Mon 25 Nov 2024 23:41:19 +0000 Manifest this update: Mon 25 Nov 2024 23:36:19 +0000 Manifest next update: Fri 29 Nov 2024 06:42:19 +0000 Files and hashes: 1: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl (hash: p0mNDzvK6v6nTtnlqNiLw6F6eSGpZltcZJ7jSn19L+A=) 2: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: TFhZKwNR/B40CI6MIhTrGqXdafQxmGh3I/WIFrNxEC0=) 3: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: yblUfrf5SIh1ilGvgnHlCA4piWC1NnXyvHb/63k5VZg=) 4: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: 75pOH7venM4sq9vCSKgnYFwi83LOYXcOR39NcWsYv6s=) 5: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: 7Y6qCTa63vPiuGKVBW20e/ioBfU8xWNmqBl6jRZtq+c=) 6: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: ZWhy/wolBT2qTHnDdCH6juzwqEsIwsR+xgtIVGxTfs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:aa:d4:06:eb:a5:62:64:12:4b:ac:7b:56:26:8a:98:d3:11:08:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Validity Not Before: Nov 25 23:36:19 2024 GMT Not After : Nov 29 06:42:19 2024 GMT Subject: CN=D4F6F0A39E0F1EC5BDDC348A67BB3C6A5C0642F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:bb:50:bc:71:82:32:e8:bb:f7:76:92:47: ee:6e:76:b3:d0:5e:b5:64:06:f8:8f:ac:c5:d0:ca: 8e:43:db:20:ff:1b:3d:8c:1a:00:3e:5b:13:d0:b3: b4:88:0f:68:95:92:68:1c:a7:e0:b7:9b:67:03:de: 91:25:85:ee:d1:c4:1c:fe:7f:ba:82:c0:27:6a:15: c3:65:0d:6b:e4:7e:99:db:a3:96:bb:06:45:1f:5c: c9:63:ae:4e:7f:d2:62:e9:2e:39:d0:f9:1b:53:67: c6:ca:95:06:ba:f2:d2:2f:94:dc:49:c2:de:59:36: 66:35:24:8e:eb:7b:b0:5d:bc:5c:30:72:aa:78:5d: c0:02:b9:d8:af:13:e3:fa:8d:41:7c:28:a6:74:75: 23:94:a0:c8:49:ba:16:cb:e8:9e:b6:8e:83:8c:cb: 6e:ac:71:70:d1:0c:d2:ec:68:6e:69:2d:f2:5d:61: 2f:7c:3e:1f:db:5d:fc:4f:b3:f4:be:75:78:d9:fd: 21:c7:c4:b5:0d:df:d7:d3:8f:68:ce:40:9f:7c:17: 07:cc:6e:2c:9c:a5:11:dc:d6:27:1a:71:16:c8:55: 11:71:c4:c6:04:47:00:6f:1d:95:2b:76:19:cc:74: 52:60:3c:91:4d:e6:c3:7d:cc:04:e6:e5:b8:69:24: 81:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F6:F0:A3:9E:0F:1E:C5:BD:DC:34:8A:67:BB:3C:6A:5C:06:42:F3 X509v3 Authority Key Identifier: keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3c:18:96:b1:cf:6e:f0:a6:c6:6b:62:4c:ad:17:e6:53:6c: b2:d1:1d:17:a3:66:48:4f:dc:88:ec:4e:bc:b4:29:b8:32:2d: 4a:f9:ac:d6:29:fc:6f:6c:35:93:00:6d:12:63:c6:7e:66:a1: f7:24:60:52:e7:94:74:6d:e6:a5:39:0c:ba:67:62:c4:9a:84: 30:87:bc:8a:3d:4e:15:14:0e:80:ff:f3:6f:f5:ec:e9:d7:af: a1:a1:9c:49:b2:86:8c:26:13:bd:fc:86:f5:f5:6c:90:e9:38: cd:0a:ba:22:66:18:93:f8:27:5c:ea:2b:30:2c:8c:9d:8c:81: 77:4f:ad:24:49:a7:ab:40:60:7f:b5:88:85:34:02:16:8f:f6: 8b:9e:01:c0:bd:6d:a1:76:82:b7:d8:d8:11:61:7e:4d:31:4c: 8d:d5:69:8a:de:64:d2:74:15:ed:a3:62:98:bd:ce:b5:b1:dc: 25:2d:bb:52:1c:d7:a0:8f:2b:07:20:23:93:9d:24:eb:59:bc: a0:ec:af:d8:12:a7:16:b2:53:e8:36:11:19:9c:86:38:57:53: 2d:c9:aa:94:9c:2e:e8:5d:06:b6:20:5a:0d:85:5a:1c:85:21: bb:07:00:e5:e7:a8:09:43:1a:61:3a:3c:17:a3:39:be:ba:b7: d8:77:87:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqrUBuulYmQSS6x7ViaKmNMRCHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB OUMwQjZBMDAeFw0yNDExMjUyMzM2MTlaFw0yNDExMjkwNjQyMTlaMDMxMTAvBgNV BAMTKEQ0RjZGMEEzOUUwRjFFQzVCRERDMzQ4QTY3QkIzQzZBNUMwNjQyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5z7tQvHGCMui793aSR+5udrPQ XrVkBviPrMXQyo5D2yD/Gz2MGgA+WxPQs7SID2iVkmgcp+C3m2cD3pElhe7RxBz+ f7qCwCdqFcNlDWvkfpnbo5a7BkUfXMljrk5/0mLpLjnQ+RtTZ8bKlQa68tIvlNxJ wt5ZNmY1JI7re7BdvFwwcqp4XcACudivE+P6jUF8KKZ0dSOUoMhJuhbL6J62joOM y26scXDRDNLsaG5pLfJdYS98Ph/bXfxPs/S+dXjZ/SHHxLUN39fTj2jOQJ98FwfM biycpRHc1icacRbIVRFxxMYERwBvHZUrdhnMdFJgPJFN5sN9zATm5bhpJIFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Pbwo54PHsW93DSKZ7s8alwGQvMwHwYDVR0j BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw QjZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIw NTNBOUMwQjZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH48GJaxz27wpsZrYkytF+ZTbLLRHRejZkhP 3IjsTry0KbgyLUr5rNYp/G9sNZMAbRJjxn5mofckYFLnlHRt5qU5DLpnYsSahDCH vIo9ThUUDoD/82/17OnXr6GhnEmyhowmE738hvX1bJDpOM0KuiJmGJP4J1zqKzAs jJ2MgXdPrSRJp6tAYH+1iIU0AhaP9oueAcC9baF2grfY2BFhfk0xTI3VaYreZNJ0 Fe2jYpi9zrWx3CUtu1Ic16CPKwcgI5OdJOtZvKDsr9gSpxayU+g2ERmchjhXUy3J qpScLuhdBrYgWg2FWhyFIbsHAOXnqAlDGmE6PBejOb66t9h3hzE= -----END CERTIFICATE-----Generated at Tue Nov 26 02:15:30 2024 by rpki-client on console-fra.rpki-client.org