$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: FWpvfCNDkWVdgs5OGoD342KExUDj2P+cArrq6Wy43qY= Subject key identifier: CD:B4:68:50:8B:37:32:72:3A:77:54:9D:54:CE:E2:24:DA:83:5B:42 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 1DCCAB1DA61068EEB1EA09C1AEC0D1F05099AB79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 043D Signing time: Thu 18 Apr 2024 06:21:33 +0000 Manifest this update: Thu 18 Apr 2024 06:16:33 +0000 Manifest next update: Sun 21 Apr 2024 13:40:33 +0000 Files and hashes: 1: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: gP9Akjfo0yDe7IfAFtDZzvmYZbWXQjASsfmxaoRywN0=) 2: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: PscOtVdCmaww65Qub5K0rF5+kkwda1/c9t+n7Uf0G1A=) 3: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: FIHStW2k4g+tFxtYz3/ZIzbpyI2+5vWe/AH25VVCFNc=) 4: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: wde7f7Hu8gNaRF4GFackdHkkhdHU31fySFvhbpCrz+A=) 5: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: hsNebQmdM49PMa1mUO+Ph+JIjiwcm21b1LGq2Faa7yI=) 6: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: Rq8T+hzuBbJcG2GlKLqx1dGnXNaaFHPd/EBIdtQ2Vro=) 7: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: pigvLBwiiRO5/x//l1pbv7xNeTh4Vycmu1O/ZRIDAzE=) 8: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: H3m9v7BAC97rTwaaXvYHyPQUYi/jAH3XI/fU1Q89Hlk=) 9: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: 9LzyZ8iJiQE4NchZNgE1E8+f0tjC71AuP+f1kwO078o=) 10: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: AAXhmGOe39ZBEy6ZeICRKMynFKDZ4Ph7kGjDL4B2VLE=) 11: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: 3+Nxi5s0AIN7q4U2N08UW5NXB2+VUMPSbERQn0l7Law=) 12: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: MG0h0Vj5XfmpXqS+1elA1P15MQkwmR0e/DCqYF35PbE=) 13: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: +owMFEhwu1/NJjim/1jaJSzW4mxuQ4sO6lczJgu02PQ=) 14: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: h4SwZFwOLp+5xxwPetdIHUPq+vo930uZejiBuGBVM3c=) 15: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: T1XIrxDEY7Zgi8QHKL/x4wM/doK9H4DhhBmg0wrSJhA=) 16: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: aRSF0Be5Pt35jq4vkc4jZXFAwvw6Yb7CyyJgF5FQL04=) 17: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: m/oJEfNkfNGSILBO/+ozqzbRYh00nCPjjOr5cvxE73Q=) 18: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: lo/i7vyt7Ke16RV2OKhfPw2A5+h2klCaI0P+nEUufcU=) 19: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: K1LMlsswFBkQZ9fbXrIdHEYAv224GZhoo5/C50dcs/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 13:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cc:ab:1d:a6:10:68:ee:b1:ea:09:c1:ae:c0:d1:f0:50:99:ab:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Apr 18 06:16:33 2024 GMT Not After : Apr 21 13:40:33 2024 GMT Subject: CN=CDB468508B3732723A77549D54CEE224DA835B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:c1:4a:02:76:16:de:20:4b:e4:06:7c:16: 04:7f:4a:19:fc:fe:8b:6d:b8:56:ae:0f:a8:00:29: 7c:13:c9:d8:40:ba:1f:f7:5a:2a:fd:00:bc:37:6b: 5b:cb:54:a7:fc:19:21:70:0c:83:7d:0c:5f:ed:7f: eb:b7:60:69:91:9a:25:01:b8:76:72:5d:bf:de:a3: af:b7:a8:7b:28:04:df:87:d4:ca:10:c1:ad:77:39: f3:e3:5e:09:70:1e:ad:6f:68:3f:4a:02:7e:0a:71: f4:9c:01:98:6b:a5:c8:f2:6a:da:a3:c2:97:10:a7: 77:28:4c:b0:54:b8:1f:5c:e4:99:4a:6a:96:bf:23: 0d:b2:96:48:cc:60:e3:f5:f6:1c:ff:42:97:79:20: b3:03:6b:61:db:c3:34:52:52:d4:8a:d9:0f:e1:0d: 47:3f:5a:3f:ab:1a:ea:9f:8b:a0:f3:3c:c3:ce:9f: 04:e0:31:25:2f:7e:af:4d:46:cf:31:d6:27:a8:82: 6f:d9:d1:db:86:85:18:28:60:54:16:00:3c:b9:dc: ff:02:6d:b8:e6:65:77:fc:75:57:a4:dc:e5:df:c0: e0:df:ac:b6:28:7a:6b:b6:37:b6:92:de:85:ce:c3: 2c:f5:9f:9f:6f:94:59:41:1b:3d:9a:a5:a3:da:a2: 87:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:68:50:8B:37:32:72:3A:77:54:9D:54:CE:E2:24:DA:83:5B:42 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:eb:7e:ab:4e:75:d1:09:1f:9f:c0:7e:6f:9c:26:8e:f2:4e: 58:cf:88:f1:5e:83:90:33:d9:90:25:1e:e8:92:2f:6a:12:c5: 73:c2:e5:f7:37:c1:26:99:40:d2:89:4d:05:0a:62:f7:82:38: 76:78:52:23:ea:4d:9f:32:89:d0:f5:f7:68:d0:2d:38:61:a9: ca:39:ed:bd:66:fe:95:0e:2c:e5:47:7b:bf:be:cc:fc:83:25: 9e:d9:42:fe:d3:3b:b6:82:8f:86:02:62:b7:a3:5e:3b:00:0f: b8:d1:6f:b6:bf:26:8f:98:3e:f5:dd:82:4d:92:00:8c:75:c4: 9f:15:03:da:3e:d5:73:6f:bd:fc:1d:7a:e8:27:88:15:20:2c: 88:74:73:5a:e6:69:65:53:cf:c6:4e:1d:f9:7c:53:f0:2a:da: 74:b4:59:42:9c:b9:be:48:8f:c3:de:7f:26:7b:b4:fb:26:6a: 86:82:14:36:06:a1:8c:72:4f:fd:71:fc:2b:fe:a2:89:3f:2f: e3:02:47:14:71:86:b5:0c:74:d8:4a:79:f8:b6:51:00:ae:af: a0:88:93:df:4d:25:8c:3b:a5:9a:8f:45:7e:f2:f7:6c:df:89: b1:b0:7c:4d:42:31:ba:68:86:2d:80:63:7a:62:78:9d:37:67: f6:d5:aa:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHcyrHaYQaO6x6gnBrsDR8FCZq3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNDA0MTgwNjE2MzNaFw0yNDA0MjExMzQwMzNaMDMxMTAvBgNV BAMTKENEQjQ2ODUwOEIzNzMyNzIzQTc3NTQ5RDU0Q0VFMjI0REE4MzVCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxr8FKAnYW3iBL5AZ8FgR/Shn8 /ottuFauD6gAKXwTydhAuh/3Wir9ALw3a1vLVKf8GSFwDIN9DF/tf+u3YGmRmiUB uHZyXb/eo6+3qHsoBN+H1MoQwa13OfPjXglwHq1vaD9KAn4KcfScAZhrpcjyatqj wpcQp3coTLBUuB9c5JlKapa/Iw2ylkjMYOP19hz/Qpd5ILMDa2HbwzRSUtSK2Q/h DUc/Wj+rGuqfi6DzPMPOnwTgMSUvfq9NRs8x1ieogm/Z0duGhRgoYFQWADy53P8C bbjmZXf8dVek3OXfwODfrLYoemu2N7aS3oXOwyz1n59vlFlBGz2apaPaoofhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzbRoUIs3MnI6d1SdVM7iJNqDW0IwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXrfqtOddEJH5/Afm+cJo7yTljPiPFeg5Az 2ZAlHuiSL2oSxXPC5fc3wSaZQNKJTQUKYveCOHZ4UiPqTZ8yidD192jQLThhqco5 7b1m/pUOLOVHe7++zPyDJZ7ZQv7TO7aCj4YCYrejXjsAD7jRb7a/Jo+YPvXdgk2S AIx1xJ8VA9o+1XNvvfwdeugniBUgLIh0c1rmaWVTz8ZOHfl8U/Aq2nS0WUKcub5I j8PefyZ7tPsmaoaCFDYGoYxyT/1x/Cv+ook/L+MCRxRxhrUMdNhKefi2UQCur6CI k99NJYw7pZqPRX7y92zfibGwfE1CMbpohi2AY3pieJ03Z/bVqvk= -----END CERTIFICATE-----Generated at Thu Apr 18 07:20:11 2024 by rpki-client on console-ams.rpki-client.org