$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: m6lP3gJnRqVFdPM25kFi0Icfs/1g77AoPAqjXWjNws0= Subject key identifier: 8F:DC:93:BC:DE:9F:96:93:EE:CA:49:4E:63:8E:EE:1B:A1:D4:ED:CB Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 7D1BCB2323309DE5512756E28288CCDF9BC213D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 04A0 Signing time: Thu 30 Jan 2025 14:02:08 +0000 Manifest this update: Thu 30 Jan 2025 13:57:08 +0000 Manifest next update: Sun 02 Feb 2025 18:44:08 +0000 Files and hashes: 1: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: u1lfWy0MDbubQseV6f0yVaeg4S5wTkc4cbrHCMmY4Yw=) 2: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: CpzM+132Mdd3sT2ikka6T6ZIOzo9cPs9M0vsLY9AeJk=) 3: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: p2LmSRom1+ALbzIyY6UMyaBCsRycEfpY+T5lbdUMTIY=) 4: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: QxyQgV8yqz3LxaWii/QxxyGdg0KqjSEAWOUCITDyK+M=) 5: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: BP0AeJlnMA+XRGEXxT99QFoW9Wzi6NF/eulYtYsPBdM=) 6: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: RJTWv9SLXQPTYC3rzNVUwhTDGWcwVd5YntQvTlNXrzU=) 7: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: Hs35c6RHToYi6qvTeTc31yFLqwStwmhd6QBjMnOffHI=) 8: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: g5FKXh+RNZYScR1iwqZYdSxRJgAVq9w8f1edizZYibI=) 9: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: 61cygP0rj8IkPbdSH8JyllzFRqUqP5ARgAki2TQCxmc=) 10: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: eXs+87LW5capRr4Eu/VfiLH0QanrLfFdJwQsIClY1h8=) 11: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: 4wQzrm+i1v5qUyVKJjkO7HH+MEjS5+U+8152BYfrVKI=) 12: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: BVHhLw4FPK1vqQDyfVN+1KiFI7Lyj5alPUEWE2nPcvk=) 13: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: fZNdjy6FWwzUM+HjWW74emrC0elfOnysiClW8aiKmPg=) 14: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: e/yjVod/7lR4uj/RENV7JfH5TX+LSB9hPgqV7eSiKp4=) 15: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: F4/KJVXNTNm34izb7glpnGYFHc3KADsusKQ08aViHLM=) 16: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: n4/mD+LWp/R6YRXcqrg7JkDRjfGUVfKc3IbAGoqD0ik=) 17: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: 7d6L1YnpzkSH3cjd/bratlHXMkaO39mRUgOEKpnPFL4=) 18: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: IeWFMtaqBJBeKUmZ02yFo5+6S+FKc1ivLw4CgOr9f/Y=) 19: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: fZbow80lbl1tUzdeRLpipyro+0U3YnVmm12lQWkFbpg=) 20: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: bi9uA3JKqeELOUi1PoLxXB/NKB06leF/UebSioChmVE=) 21: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: UxQCsgWlY3QpFq1pdcLc7mTlzysN0vxqNs3EwVx5g7Q=) 22: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: xLMKjHBRk6BkLsdroRvRrF4SQf/pwmdQtpivbdSWUHA=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1b:cb:23:23:30:9d:e5:51:27:56:e2:82:88:cc:df:9b:c2:13:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Jan 30 13:57:08 2025 GMT Not After : Feb 2 18:44:08 2025 GMT Subject: CN=8FDC93BCDE9F9693EECA494E638EEE1BA1D4EDCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:3d:bd:84:3c:6a:91:fe:b1:4a:a9:07:2f: 38:8f:07:37:4e:13:4f:e6:71:9e:f1:f9:42:b7:81: 7d:96:6c:d9:ee:9e:2d:f0:29:90:f5:94:41:42:17: 3e:bc:81:3a:f9:e4:c7:a8:64:22:b8:64:6d:df:af: 28:07:04:66:59:8b:0c:10:6f:71:6f:5b:2f:92:f7: 91:32:66:50:89:b8:9f:b1:fa:72:bb:7c:ae:c2:31: b6:0b:ec:63:fc:6d:eb:b7:17:0b:af:2e:f7:b9:f4: e6:21:ad:12:8a:f4:f0:dd:f3:fb:c7:f9:94:b6:f5: df:05:da:fd:19:54:a3:cd:25:f9:45:d5:5d:9f:20: 2b:d4:c6:6b:ac:10:7a:e6:20:56:0c:2a:51:d6:ee: 4a:18:38:12:fc:03:86:cc:e2:5a:6d:f3:62:20:99: 06:97:42:e0:1a:08:79:dc:0e:99:12:13:3f:16:68: 95:29:ff:c7:97:21:6c:c2:a0:ba:ce:8a:cc:a2:8c: f4:2d:c2:c4:49:fd:38:60:78:f5:45:13:29:b5:ad: 12:04:be:9c:75:62:8a:a2:9a:d5:65:2a:15:e2:dd: 9a:b0:c6:98:cd:07:f4:d8:e7:f7:3c:7a:7e:f4:42: 61:c9:a1:e6:a3:0b:48:22:c7:73:e8:de:c5:15:b4: dc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DC:93:BC:DE:9F:96:93:EE:CA:49:4E:63:8E:EE:1B:A1:D4:ED:CB X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:46:4a:39:2e:ba:91:ce:75:c9:aa:49:b1:3d:9c:5a:8c:86: 73:fe:78:0c:92:c2:51:fb:0b:2e:e4:89:93:7e:c7:eb:ca:e2: 2e:17:30:06:da:7e:12:3e:13:5e:2a:c7:ed:e1:cd:7b:ec:27: 14:cc:9a:b6:26:36:11:20:9d:ab:40:71:ad:21:40:66:e5:73: db:5e:5a:8d:8b:07:43:c2:08:84:e2:b8:e9:11:28:dd:4a:39: 39:d1:ea:c7:e2:25:7d:71:ab:61:7d:e9:75:55:3f:94:73:47: dc:f6:b9:62:87:39:bd:cd:7f:02:7f:d6:d1:f3:a9:52:76:68: 9f:03:92:44:54:42:e8:44:24:99:40:e5:1d:6c:2b:f1:f5:f8: 2a:4d:e0:7f:27:f8:a7:f1:a8:06:0a:60:dd:74:97:4e:7c:53: f0:f0:7d:06:3b:52:57:8d:27:3c:45:3e:eb:15:83:da:d6:12: a3:11:ce:09:1d:3d:8c:a8:7f:73:31:d7:79:99:16:cc:5f:9c: c3:62:08:b5:c6:e7:57:6d:5e:e6:99:d9:25:c2:5f:08:9a:36: 95:a5:86:eb:0a:f7:4c:f6:08:a0:33:15:0f:f1:83:d6:29:f0: cf:03:92:11:be:e6:37:fb:4c:6c:e1:36:44:96:bc:5a:89:a1: 89:f6:b9:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRvLIyMwneVRJ1bigojM35vCE9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTAxMzAxMzU3MDhaFw0yNTAyMDIxODQ0MDhaMDMxMTAvBgNV BAMTKDhGREM5M0JDREU5Rjk2OTNFRUNBNDk0RTYzOEVFRTFCQTFENEVEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvT29hDxqkf6xSqkHLziPBzdO E0/mcZ7x+UK3gX2WbNnuni3wKZD1lEFCFz68gTr55MeoZCK4ZG3frygHBGZZiwwQ b3FvWy+S95EyZlCJuJ+x+nK7fK7CMbYL7GP8beu3FwuvLve59OYhrRKK9PDd8/vH +ZS29d8F2v0ZVKPNJflF1V2fICvUxmusEHrmIFYMKlHW7koYOBL8A4bM4lpt82Ig mQaXQuAaCHncDpkSEz8WaJUp/8eXIWzCoLrOisyijPQtwsRJ/ThgePVFEym1rRIE vpx1YoqimtVlKhXi3ZqwxpjNB/TY5/c8en70QmHJoeajC0gix3Po3sUVtNwpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj9yTvN6flpPuyklOY47uG6HU7cswHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJGSjkuupHOdcmqSbE9nFqMhnP+eAySwlH7 Cy7kiZN+x+vK4i4XMAbafhI+E14qx+3hzXvsJxTMmrYmNhEgnatAca0hQGblc9te Wo2LB0PCCITiuOkRKN1KOTnR6sfiJX1xq2F96XVVP5RzR9z2uWKHOb3NfwJ/1tHz qVJ2aJ8DkkRUQuhEJJlA5R1sK/H1+CpN4H8n+KfxqAYKYN10l058U/DwfQY7UleN JzxFPusVg9rWEqMRzgkdPYyof3Mx13mZFsxfnMNiCLXG51dtXuaZ2SXCXwiaNpWl husK90z2CKAzFQ/xg9Yp8M8DkhG+5jf7TGzhNkSWvFqJoYn2uR8= -----END CERTIFICATE-----Generated at Thu Apr 24 17:07:50 2025 by rpki-client