$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft File: 032056FFABA06741112BA404900B315C87E35361.mft (raw, json) Hash identifier: k0DTWdV3QOLaKAA+ihPJ8GxgtXv9smShObujBYnXwG0= Subject key identifier: 6E:6A:09:48:9C:A9:CF:D3:59:A6:85:30:65:A2:4B:F1:66:B2:60:30 Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 Certificate issuer: /CN=032056FFABA06741112BA404900B315C87E35361 Certificate serial: 6AAE14F45591C9A22428CF26B68D00C9F8D3F6B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft Manifest number: 03B5 Signing time: Sat 27 Apr 2024 04:41:27 +0000 Manifest this update: Sat 27 Apr 2024 04:36:27 +0000 Manifest next update: Tue 30 Apr 2024 09:04:27 +0000 Files and hashes: 1: 032056FFABA06741112BA404900B315C87E35361.crl (hash: XtDoug7laCtwlGzCNTb87whBQYww7aoCemtTUxGOOhQ=) 2: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: k4kGEWmJPdH11JPWKVnLRe8PScrv+1tjgbdhWefh5yE=) 3: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: pefL5zpagMnN6F91vtiUchYBoYrPSLuComWqXyqtyhM=) 4: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: WJzkF+M9+RSs1NESAmQDrBba/fGvI31v60AuNcwGbXA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 02:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ae:14:f4:55:91:c9:a2:24:28:cf:26:b6:8d:00:c9:f8:d3:f6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032056FFABA06741112BA404900B315C87E35361 Validity Not Before: Apr 27 04:36:27 2024 GMT Not After : Apr 30 09:04:27 2024 GMT Subject: CN=6E6A09489CA9CFD359A6853065A24BF166B26030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:66:58:2f:82:11:5e:84:ed:40:db:a9:dd: 1c:0f:6d:8a:80:4a:b4:c7:9b:5c:82:b2:ad:d8:87: 6c:79:5d:8e:55:db:26:af:0f:5b:2d:89:c3:f2:d3: 9f:52:71:70:a8:db:33:a3:37:92:fb:7e:17:2a:c5: fd:db:7a:8f:0d:9c:61:1f:02:92:7f:5b:90:ae:00: 0c:ad:34:03:32:76:db:dc:9d:26:80:4f:36:20:5f: 4f:bc:23:69:e3:6e:3f:dd:73:04:57:3f:b6:61:00: 71:22:33:e5:70:20:4b:f8:c9:e0:aa:e1:f4:1a:40: 17:1c:a2:be:b7:a3:ff:2d:88:55:9b:ff:ab:c0:53: 58:fd:c2:af:36:3b:de:09:c4:f9:39:d0:e7:a5:f5: 61:64:c4:aa:34:a8:4c:30:20:a8:15:57:e8:13:c6: 3b:be:e4:3d:99:1c:ed:6b:07:0c:78:5b:48:96:e5: 93:5a:9b:3c:28:5d:dd:73:03:b8:4e:24:fd:e6:57: 67:1f:32:14:b4:5d:c5:5f:0d:ba:bc:6e:b9:9b:d9: 42:60:f4:52:b2:3b:9d:b9:33:a9:ac:d7:09:46:d6: aa:15:e5:3c:27:56:79:38:8c:f8:5f:4c:a4:2b:c0: b8:5c:9a:b0:86:8d:55:1f:46:9b:85:79:d3:01:6d: 1a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6A:09:48:9C:A9:CF:D3:59:A6:85:30:65:A2:4B:F1:66:B2:60:30 X509v3 Authority Key Identifier: keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c7:03:1b:b4:9c:ab:02:76:20:e6:23:73:2d:44:4b:64:a3: 31:6f:af:e5:91:4a:8b:75:b7:2d:7a:a6:00:7f:92:3d:e8:ce: 04:4f:f0:a4:6e:2b:1f:94:4e:20:dd:18:6f:64:19:90:bf:7a: a2:d5:b7:f2:a5:e3:66:53:78:93:eb:d0:98:d2:07:ff:0a:07: 72:1e:28:43:5e:d8:9c:ff:08:85:e3:7a:ea:33:ac:dd:56:d9: d3:31:80:36:62:df:34:33:7a:34:f0:56:04:e1:71:d0:a4:46: 95:f9:f3:fe:30:30:2c:cf:fe:43:38:ab:84:39:92:3b:3b:8f: 77:f2:8a:42:8c:47:aa:d5:f2:3b:4c:68:b8:e1:10:7f:26:3b: a3:ad:1a:4d:16:1f:55:fd:62:39:e0:9a:df:f6:48:9c:b3:55: dd:e9:69:0e:aa:df:5a:93:96:fa:19:4b:db:d7:0d:15:ad:ba: 37:a2:a2:28:d3:42:07:a7:0e:c7:52:22:8e:37:a4:54:73:d3: 2d:6f:9f:f4:65:49:f7:2d:5a:47:9b:03:55:26:6f:08:57:bb: 79:20:5b:cb:45:49:29:f7:43:28:b6:ce:41:b6:42:23:df:67: 1f:4f:14:de:ff:90:f0:68:67:b3:42:3f:39:cb:f6:46:41:c1: a6:07:0d:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaq4U9FWRyaIkKM8mto0AyfjT9rMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4 N0UzNTM2MTAeFw0yNDA0MjcwNDM2MjdaFw0yNDA0MzAwOTA0MjdaMDMxMTAvBgNV BAMTKDZFNkEwOTQ4OUNBOUNGRDM1OUE2ODUzMDY1QTI0QkYxNjZCMjYwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HmZYL4IRXoTtQNup3RwPbYqA SrTHm1yCsq3Yh2x5XY5V2yavD1sticPy059ScXCo2zOjN5L7fhcqxf3beo8NnGEf ApJ/W5CuAAytNAMydtvcnSaATzYgX0+8I2njbj/dcwRXP7ZhAHEiM+VwIEv4yeCq 4fQaQBccor63o/8tiFWb/6vAU1j9wq82O94JxPk50Oel9WFkxKo0qEwwIKgVV+gT xju+5D2ZHO1rBwx4W0iW5ZNamzwoXd1zA7hOJP3mV2cfMhS0XcVfDbq8brmb2UJg 9FKyO525M6ms1wlG1qoV5TwnVnk4jPhfTKQrwLhcmrCGjVUfRpuFedMBbRo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbmoJSJypz9NZpoUwZaJL8WayYDAwHwYDVR0j BBgwFoAUAyBW/6ugZ0ERK6QEkAsxXIfjU2EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE4MjBiNC04MmVmLTQ0MTItYmUyZS01ZDY5MTRiZDQ4NDQvMC8wMzIwNTZGRkFC QTA2NzQxMTEyQkE0MDQ5MDBCMzE1Qzg3RTM1MzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4N0Uz NTM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl MmUtNWQ2OTE0YmQ0ODQ0LzAvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMx NUM4N0UzNTM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLHAxu0nKsCdiDmI3MtREtkozFvr+WRSot1 ty16pgB/kj3ozgRP8KRuKx+UTiDdGG9kGZC/eqLVt/Kl42ZTeJPr0JjSB/8KB3Ie KENe2Jz/CIXjeuozrN1W2dMxgDZi3zQzejTwVgThcdCkRpX58/4wMCzP/kM4q4Q5 kjs7j3fyikKMR6rV8jtMaLjhEH8mO6OtGk0WH1X9Yjngmt/2SJyzVd3paQ6q31qT lvoZS9vXDRWtujeioijTQgenDsdSIo43pFRz0y1vn/RlSfctWkebA1UmbwhXu3kg W8tFSSn3Qyi2zkG2QiPfZx9PFN7/kPBoZ7NCPznL9kZBwaYHDUM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:41 2024 by rpki-client on console-ams.rpki-client.org