$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: YPLUuD0AAvpZItQUVh0oy5CBcGrDX/X0iU8nE4ToL0s= Subject key identifier: 97:F5:B2:77:FE:C4:AC:BC:8A:48:7F:6E:C1:64:75:F8:EA:0D:B6:71 Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 298040D68A693C87419266CFFA1B3D620F2F750A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 0425 Signing time: Sat 27 Apr 2024 12:41:29 +0000 Manifest this update: Sat 27 Apr 2024 12:36:29 +0000 Manifest next update: Tue 30 Apr 2024 17:20:29 +0000 Files and hashes: 1: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: 3KwPZXV5ZGwA8NpIeaUHAFELMZPZbPJ5BZjq+sQjtXU=) 2: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: Y7qLGN8NdN96p0CtoZiefQeqrymzGbwh7oo6+lO3sfY=) 3: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: +nqofuvEbBfsZqlztZgscbdrDBEKeChRARKHZSmH79g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 17:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:80:40:d6:8a:69:3c:87:41:92:66:cf:fa:1b:3d:62:0f:2f:75:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Apr 27 12:36:29 2024 GMT Not After : Apr 30 17:20:29 2024 GMT Subject: CN=97F5B277FEC4ACBC8A487F6EC16475F8EA0DB671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:b7:29:40:35:cb:cb:23:a2:42:9c:d3:63: ad:23:e7:b8:e1:14:27:b9:12:bf:0a:5e:bf:0d:af: d8:aa:4a:8b:a2:42:d5:5f:f8:d9:4b:2a:dc:db:1c: 57:5f:39:69:c6:76:19:0e:1b:28:b0:bb:a5:55:1d: af:23:98:97:4c:c1:ce:18:d0:86:34:05:13:27:da: 73:cf:fc:ae:35:43:0e:97:f6:e0:24:d9:b7:8a:62: 40:0b:34:31:a1:1a:1d:a5:c2:76:e2:69:b0:75:cc: ae:52:08:9f:57:05:2d:a6:b1:8f:e4:99:d4:ef:e4: 90:e5:34:3a:70:af:e4:4f:bf:bf:a1:49:4c:c2:4f: 2b:97:56:8f:39:92:05:8a:bc:c2:ed:eb:6b:2d:80: 46:4e:9a:86:9e:0d:19:8e:3f:01:dd:8a:d9:c6:12: 22:25:52:72:26:ad:b3:4f:b7:43:ad:f8:d6:05:a6: 26:ac:97:23:82:eb:c3:32:d3:4c:7b:5c:8a:c8:e6: e5:95:52:01:5c:f1:6b:1f:c2:72:e7:e9:0e:22:e0: c2:b8:78:02:74:85:46:bb:a2:c0:d7:a4:9d:71:22: 4c:e9:a3:24:8c:d6:01:be:22:97:17:67:93:99:77: ac:cf:1f:07:11:1e:b5:74:18:10:89:c2:10:29:d3: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F5:B2:77:FE:C4:AC:BC:8A:48:7F:6E:C1:64:75:F8:EA:0D:B6:71 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fb:a0:5e:1d:b3:b3:fb:3a:9c:8b:9a:94:f7:6c:97:23:aa: d9:83:c2:32:fe:79:89:8f:3f:aa:86:7e:38:2d:84:16:98:1a: 7d:bb:7e:19:b9:86:02:10:cc:2a:27:78:bb:0a:60:6a:8a:bf: 20:12:3c:36:db:04:7d:24:f8:75:39:d1:19:08:88:65:72:9f: 91:fb:21:a4:30:00:4a:fa:49:55:78:7d:2a:5c:64:9b:84:a5: 86:51:6d:da:f0:6a:6f:58:67:6f:e3:8c:fb:7f:78:68:ee:a7: 64:63:09:9d:23:cb:41:2f:f0:33:31:69:16:ec:ec:41:76:49: 16:9a:d4:f0:ef:f0:3e:91:5c:e0:e6:9f:12:13:ce:22:ae:e1: d9:99:03:58:eb:1d:7e:2e:20:3a:e9:e4:dc:92:7f:87:3f:59: 1c:34:44:88:23:00:62:0a:06:f6:87:27:10:fa:fb:85:96:13: 69:94:91:0d:23:1b:54:29:52:78:68:54:35:d5:b1:30:64:67: c3:d1:36:74:eb:99:fd:01:53:b0:6b:e5:68:9e:3f:73:f0:22: 9b:55:3c:a6:31:22:66:02:53:78:fa:17:92:9b:76:c0:13:3b: 1f:57:42:94:44:4e:61:51:46:7b:dc:7b:03:b3:3d:9e:0c:6d: 5e:e5:64:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKYBA1oppPIdBkmbP+hs9Yg8vdQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNDA0MjcxMjM2MjlaFw0yNDA0MzAxNzIwMjlaMDMxMTAvBgNV BAMTKDk3RjVCMjc3RkVDNEFDQkM4QTQ4N0Y2RUMxNjQ3NUY4RUEwREI2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBL7cpQDXLyyOiQpzTY60j57jh FCe5Er8KXr8Nr9iqSouiQtVf+NlLKtzbHFdfOWnGdhkOGyiwu6VVHa8jmJdMwc4Y 0IY0BRMn2nPP/K41Qw6X9uAk2beKYkALNDGhGh2lwnbiabB1zK5SCJ9XBS2msY/k mdTv5JDlNDpwr+RPv7+hSUzCTyuXVo85kgWKvMLt62stgEZOmoaeDRmOPwHditnG EiIlUnImrbNPt0Ot+NYFpiaslyOC68My00x7XIrI5uWVUgFc8WsfwnLn6Q4i4MK4 eAJ0hUa7osDXpJ1xIkzpoySM1gG+IpcXZ5OZd6zPHwcRHrV0GBCJwhAp04kxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl/Wyd/7ErLyKSH9uwWR1+OoNtnEwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH7oF4ds7P7OpyLmpT3bJcjqtmDwjL+eYmP P6qGfjgthBaYGn27fhm5hgIQzConeLsKYGqKvyASPDbbBH0k+HU50RkIiGVyn5H7 IaQwAEr6SVV4fSpcZJuEpYZRbdrwam9YZ2/jjPt/eGjup2RjCZ0jy0Ev8DMxaRbs 7EF2SRaa1PDv8D6RXODmnxITziKu4dmZA1jrHX4uIDrp5NySf4c/WRw0RIgjAGIK BvaHJxD6+4WWE2mUkQ0jG1QpUnhoVDXVsTBkZ8PRNnTrmf0BU7Br5WieP3PwIptV PKYxImYCU3j6F5KbdsATOx9XQpRETmFRRnvcewOzPZ4MbV7lZEw= -----END CERTIFICATE-----Generated at Sun Apr 28 15:43:40 2024 by rpki-client on console-fra.rpki-client.org