$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: ie8hPFP0ddxjd6f8m3tPYuwYRqjlSQuFs1QFciaCQBc= Subject key identifier: 09:0B:7E:58:BF:51:4D:B8:60:61:97:20:7E:70:20:04:41:A3:69:F2 Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 0BE504519857D8CED3BD5B352D17CCF558162502 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 0431 Signing time: Tue 30 Apr 2024 17:31:56 +0000 Manifest this update: Tue 30 Apr 2024 17:26:56 +0000 Manifest next update: Fri 03 May 2024 19:13:56 +0000 Files and hashes: 1: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: zPWQTSnp8f/0kMDC3XL+3BNuen9SSN7n2MclvrGO0PI=) 2: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: ZUhCrr2FZ+Unjsy8cblbHmWrpcbFuFhQZmEyvex2Uzo=) 3: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: Zb5MzFp7+Nny7jviVJCbZOvrIotwM5mlvuVCEf4IpwE=) 4: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: Meg/Qp3deYAK5S6MhaSDRqgp8dmkER447J/zFok35lI=) 5: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: LZ1vdWz3/boVsbp321bRWV1XOQWdeFXuFo8nSi0dxK4=) 6: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: 9Pc0YDLggJwWJaYXQ3OoFN7it2eCxjtznO0GzK8pdWQ=) 7: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: zRZSw9cO7N/meNvjy881qzb2zf+rB0v3i4mzbBV+noo=) 8: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: TY/f9sU+q5Yd5pS7++vY6X7t1zvDTQ+dGJE+buUf9v8=) 9: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: YI5DvNRQf8JSW6se99E1GrLPWecZZgVWCVaatT5ap+w=) 10: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: 1aa3LFRMZig1ObmRqoMxeqtdpL9wtQYieZy5hhi4vPU=) 11: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: xJ85m8iBbSTYvL2T1rRSh9bnVhzPLk6uBxTnm+QfIMg=) 12: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: R/C9PeIkqh907LKWqETxc7+iRmlLnSFqpVC9LKh0Ew8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e5:04:51:98:57:d8:ce:d3:bd:5b:35:2d:17:cc:f5:58:16:25:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Apr 30 17:26:56 2024 GMT Not After : May 3 19:13:56 2024 GMT Subject: CN=090B7E58BF514DB8606197207E70200441A369F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:52:cc:ee:0b:7e:4f:30:2b:96:33:74:30:38: c3:bb:ec:6d:0a:19:23:32:40:f3:dd:6d:eb:e5:4e: 71:25:30:66:eb:6b:d9:ec:62:3e:35:aa:62:a7:7b: ed:d3:41:b0:6b:1c:d0:5b:5f:13:16:50:ff:05:4d: 44:2f:f7:62:fd:13:7a:13:fd:63:fb:1f:34:df:eb: 74:ac:c9:d7:65:a4:f7:c2:1f:a8:b5:51:7e:18:70: a6:40:b1:12:c9:0f:b0:91:6d:cb:36:7f:77:00:f4: 77:70:de:1a:7a:2c:af:ea:de:f6:37:a7:45:d2:c7: 90:09:4e:0d:b6:7e:fc:09:e2:0e:87:4e:be:e9:6f: 7c:1a:c7:9b:d0:f2:b8:53:3f:b7:51:da:3a:e0:d2: ac:61:7f:36:4d:46:b7:6d:ca:ba:9b:ce:89:de:53: 04:14:44:2d:0c:6d:96:b3:9b:47:53:50:a5:d9:69: da:17:7e:95:a9:95:8e:88:9c:c5:a7:08:3d:c3:4e: 96:e5:5f:5c:06:27:8a:00:92:b5:1f:42:2b:a9:c7: 16:03:83:89:32:30:bb:45:f4:8c:25:0a:64:83:67: ab:b3:9e:36:b6:c5:26:b7:41:ba:3b:e4:be:3e:c1: 8a:a4:b0:d7:3f:3a:25:cc:0e:0c:77:74:9a:4f:eb: 64:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0B:7E:58:BF:51:4D:B8:60:61:97:20:7E:70:20:04:41:A3:69:F2 X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ee:23:08:38:30:48:45:06:2b:ee:6f:f7:62:40:61:05:de: aa:56:b6:87:fe:46:5d:2e:35:da:cf:4f:b1:25:c3:1a:87:2a: 40:57:d4:41:f8:44:f0:14:2a:c5:03:cb:4a:f9:21:d1:5d:a7: 64:4c:82:a4:1a:dd:85:e4:d5:75:c0:13:6b:c9:6d:bc:9d:fc: 43:96:d7:d3:0e:ae:3f:cb:f9:f4:6f:cb:6e:98:c6:43:b9:58: 52:60:fd:53:b2:20:25:5f:cd:b2:e4:85:66:af:4f:9d:02:fe: cf:92:31:79:b8:3e:c8:ce:c4:3b:13:f0:e1:ca:b7:60:9f:2b: 3f:a4:c7:f2:da:1d:41:d0:bf:46:f9:dd:ef:12:57:d3:8d:57: 93:1a:55:d9:9e:c5:d8:b4:2a:ed:14:a6:a7:3e:f0:bf:c4:a5: 04:5a:e3:b3:0c:5c:71:ee:eb:93:b6:4b:84:86:92:44:e7:29: a1:0f:98:b1:1b:39:b8:63:d6:6c:13:74:1a:50:38:49:82:47: 9d:d5:4c:e6:db:b0:7c:64:89:5d:21:b9:2e:bb:b9:9d:1e:84: fe:42:d1:74:d6:8d:26:60:f4:4e:f5:44:88:7d:00:38:2b:d0: 89:42:8e:b7:8b:eb:bc:95:16:25:78:a3:c8:e4:01:0d:ec:68: 7f:e0:d8:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+UEUZhX2M7TvVs1LRfM9VgWJQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNDA0MzAxNzI2NTZaFw0yNDA1MDMxOTEzNTZaMDMxMTAvBgNV BAMTKDA5MEI3RTU4QkY1MTREQjg2MDYxOTcyMDdFNzAyMDA0NDFBMzY5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqUszuC35PMCuWM3QwOMO77G0K GSMyQPPdbevlTnElMGbra9nsYj41qmKne+3TQbBrHNBbXxMWUP8FTUQv92L9E3oT /WP7HzTf63SsyddlpPfCH6i1UX4YcKZAsRLJD7CRbcs2f3cA9Hdw3hp6LK/q3vY3 p0XSx5AJTg22fvwJ4g6HTr7pb3wax5vQ8rhTP7dR2jrg0qxhfzZNRrdtyrqbzone UwQURC0MbZazm0dTUKXZadoXfpWplY6InMWnCD3DTpblX1wGJ4oAkrUfQiupxxYD g4kyMLtF9IwlCmSDZ6uznja2xSa3Qbo75L4+wYqksNc/OiXMDgx3dJpP62QjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCQt+WL9RTbhgYZcgfnAgBEGjafIwHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3uIwg4MEhFBivub/diQGEF3qpWtof+Rl0u NdrPT7ElwxqHKkBX1EH4RPAUKsUDy0r5IdFdp2RMgqQa3YXk1XXAE2vJbbyd/EOW 19MOrj/L+fRvy26YxkO5WFJg/VOyICVfzbLkhWavT50C/s+SMXm4PsjOxDsT8OHK t2CfKz+kx/LaHUHQv0b53e8SV9ONV5MaVdmexdi0Ku0Upqc+8L/EpQRa47MMXHHu 65O2S4SGkkTnKaEPmLEbObhj1mwTdBpQOEmCR53VTObbsHxkiV0huS67uZ0ehP5C 0XTWjSZg9E71RIh9ADgr0IlCjreL67yVFiV4o8jkAQ3saH/g2LI= -----END CERTIFICATE-----Generated at Tue Apr 30 18:54:26 2024 by rpki-client on console-fra.rpki-client.org