$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft File: 348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json) Hash identifier: 0u3YEyDxRspayPo5U8rmNhLGPu9N9yD5ZQkjSheQ/no= Subject key identifier: FB:63:83:4B:2D:B5:FD:A9:4D:E3:7E:74:E8:F6:CC:C3:03:B2:CA:78 Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Certificate serial: 0C5C3DB107A16E554480643BF831E51026391285 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft Manifest number: 0428 Signing time: Tue 30 Apr 2024 11:01:50 +0000 Manifest this update: Tue 30 Apr 2024 10:56:50 +0000 Manifest next update: Fri 03 May 2024 14:50:50 +0000 Files and hashes: 1: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: 5ijEltWWS/uDKdiYTO2+ErXx1iVlEqRsckknO8VOFZM=) 2: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: 0rrD9rsrPw1to0KVnMm/oOy3FAO13tEMUxBSZzNqA1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5c:3d:b1:07:a1:6e:55:44:80:64:3b:f8:31:e5:10:26:39:12:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308 Validity Not Before: Apr 30 10:56:50 2024 GMT Not After : May 3 14:50:50 2024 GMT Subject: CN=FB63834B2DB5FDA94DE37E74E8F6CCC303B2CA78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:4f:b1:e9:0d:ba:4d:c1:0f:e4:54:e9:2a: f9:84:af:ec:71:df:94:33:2d:77:35:2d:b7:7d:90: f5:fd:b0:7c:4d:3f:7c:1d:bf:4f:12:e4:ed:18:ee: 57:1a:c6:6e:62:12:4b:b6:a8:d8:4a:2f:35:60:91: d8:6e:77:93:34:bc:3b:fd:14:a8:b5:d6:44:fc:b2: 69:fa:01:b9:28:34:8b:ae:68:9d:02:5d:0d:b9:48: df:74:9c:32:13:6f:2f:9d:33:42:65:4b:80:b6:da: 4f:d8:15:3c:20:ce:a6:40:97:fc:d9:03:8b:05:5b: 26:b8:1e:6d:16:ba:a4:8c:d0:72:78:a3:d3:1d:c9: 6e:c3:3e:9d:0a:9c:4f:d8:eb:30:68:61:69:4e:85: dd:1a:3d:02:00:0d:c3:4e:6b:68:3d:e7:46:b8:86: b6:88:b6:ae:30:f0:79:ec:0f:e9:e2:4e:0f:ca:3e: df:b1:9a:fe:4a:27:37:57:dc:20:a4:35:4f:ea:35: 56:73:62:c3:de:57:cd:74:fa:68:d5:93:6c:da:85: 4c:be:77:69:be:38:4f:ff:26:32:ab:48:26:16:ec: e9:d9:d5:79:62:6c:4e:cf:66:62:57:5b:43:bf:7b: e2:a8:71:69:8a:a5:51:a5:0a:36:8a:f6:57:35:97: 09:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:63:83:4B:2D:B5:FD:A9:4D:E3:7E:74:E8:F6:CC:C3:03:B2:CA:78 X509v3 Authority Key Identifier: keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:55:a5:01:ef:41:fb:e0:bc:bb:56:20:f7:3c:a4:63:8d:e1: fa:9f:a8:a8:12:b1:2c:f4:7d:a2:61:86:ce:7d:59:51:7e:6c: ec:ca:2d:c9:5d:4c:7f:1f:7a:a1:ed:9d:6c:22:9a:42:91:50: 95:c3:87:94:19:9b:c0:9f:9f:c0:83:1d:9a:2b:7b:d9:08:e9: 96:ff:13:91:3d:f8:e1:b9:9c:da:07:67:63:cf:2e:37:62:53: 1c:c8:13:24:49:fc:8c:1f:59:8f:26:47:bb:71:bd:fd:3f:f0: 45:84:a5:95:1a:8a:f4:12:22:b1:04:53:cd:87:07:41:90:64: 26:8a:e7:e2:ce:30:c3:3c:e2:0d:23:01:f4:bd:dc:45:47:d0: 55:e6:2d:31:5d:a2:03:f9:4a:b9:de:04:3a:f3:8f:05:71:04: 01:25:2e:17:76:70:a5:17:9f:f9:ee:27:ae:37:74:86:eb:6d: f3:a7:77:1e:09:97:e3:33:16:17:b8:bf:7a:cc:71:2b:01:26: 27:c8:30:0b:10:45:2e:53:67:61:6e:ac:82:c9:ba:18:09:84: 2e:86:98:f3:76:68:30:5a:dc:b3:07:50:0d:a9:96:89:5b:7d: 17:0c:9c:85:16:79:7f:2c:33:83:06:9a:40:01:8a:82:e8:f4: e6:14:f0:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDFw9sQehblVEgGQ7+DHlECY5EoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RG NEI3NTMwODAeFw0yNDA0MzAxMDU2NTBaFw0yNDA1MDMxNDUwNTBaMDMxMTAvBgNV BAMTKEZCNjM4MzRCMkRCNUZEQTk0REUzN0U3NEU4RjZDQ0MzMDNCMkNBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gk+x6Q26TcEP5FTpKvmEr+xx 35QzLXc1Lbd9kPX9sHxNP3wdv08S5O0Y7lcaxm5iEku2qNhKLzVgkdhud5M0vDv9 FKi11kT8smn6AbkoNIuuaJ0CXQ25SN90nDITby+dM0JlS4C22k/YFTwgzqZAl/zZ A4sFWya4Hm0WuqSM0HJ4o9MdyW7DPp0KnE/Y6zBoYWlOhd0aPQIADcNOa2g950a4 hraItq4w8HnsD+niTg/KPt+xmv5KJzdX3CCkNU/qNVZzYsPeV810+mjVk2zahUy+ d2m+OE//JjKrSCYW7OnZ1XlibE7PZmJXW0O/e+KocWmKpVGlCjaK9lc1lwkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+2ODSy21/alN43506PbMwwOyyngwHwYDVR0j BBgwFoAUNI1T1SCBq3XCG+KSwqUHffS3UwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mzc1MDZjNS01ZWYxLTQyOTQtODkwMi1hNDExNGZkZjNiMDAvMC8zNDhENTNENTIw ODFBQjc1QzIxQkUyOTJDMkE1MDc3REY0Qjc1MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3N0RGNEI3 NTMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3NTA2YzUtNWVmMS00Mjk0LTg5 MDItYTQxMTRmZGYzYjAwLzAvMzQ4RDUzRDUyMDgxQUI3NUMyMUJFMjkyQzJBNTA3 N0RGNEI3NTMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdVpQHvQfvgvLtWIPc8pGON4fqfqKgSsSz0 faJhhs59WVF+bOzKLcldTH8feqHtnWwimkKRUJXDh5QZm8Cfn8CDHZore9kI6Zb/ E5E9+OG5nNoHZ2PPLjdiUxzIEyRJ/IwfWY8mR7txvf0/8EWEpZUaivQSIrEEU82H B0GQZCaK5+LOMMM84g0jAfS93EVH0FXmLTFdogP5SrneBDrzjwVxBAElLhd2cKUX n/nuJ643dIbrbfOndx4Jl+MzFhe4v3rMcSsBJifIMAsQRS5TZ2FurILJuhgJhC6G mPN2aDBa3LMHUA2plolbfRcMnIUWeX8sM4MGmkABioLo9OYU8IY= -----END CERTIFICATE-----Generated at Tue Apr 30 12:55:38 2024 by rpki-client on console-fra.rpki-client.org