$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json) Hash identifier: vS4Hvnv8OmbZjIFCE4M5kxHrcQYyUqIofPmmbMxUlkU= Subject key identifier: B4:F9:34:E1:17:1F:82:41:4F:B8:32:E5:B9:28:F9:94:D1:92:4E:1A Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Certificate serial: 4113523D44F788F311C8384A91310658C44BDCCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft Manifest number: 0420 Signing time: Mon 15 Apr 2024 21:11:06 +0000 Manifest this update: Mon 15 Apr 2024 21:06:06 +0000 Manifest next update: Fri 19 Apr 2024 02:06:06 +0000 Files and hashes: 1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: uGNGX0gb9G6yd2U9880VciLDr8fQaRNDLzrDEY5gb6Q=) 2: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: d51uo7AIPcMMDlvCsR14/uXrQF9jTeaBL6DNvQa/0L0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Apr 2024 02:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:13:52:3d:44:f7:88:f3:11:c8:38:4a:91:31:06:58:c4:4b:dc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0 Validity Not Before: Apr 15 21:06:06 2024 GMT Not After : Apr 19 02:06:06 2024 GMT Subject: CN=B4F934E1171F82414FB832E5B928F994D1924E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:de:29:d0:52:0b:8b:ca:3a:aa:3a:c7:e6: dc:c2:81:57:6d:03:d4:72:e2:c4:e4:e3:2e:55:75: e6:25:e4:df:34:4b:a0:26:0a:7f:86:af:06:10:97: 99:9a:8c:8a:47:84:fb:38:0c:1d:6c:24:38:66:f1: 4c:ce:4f:94:70:56:ba:51:45:ce:7d:58:53:3b:e0: 1a:c6:20:69:04:0c:e7:74:e8:5b:4b:9b:42:86:97: a2:a4:27:5a:d3:7f:2e:b5:e0:cd:e5:e6:cc:d5:92: 93:44:f3:75:37:98:c3:bc:89:6e:ee:22:5b:db:e3: e7:42:8f:83:56:4d:c6:6c:9f:2b:88:ea:26:0d:fc: 28:be:b0:b9:44:06:1d:1e:87:81:6b:cd:cb:20:c1: d4:fa:a2:4a:da:ce:e7:f9:d9:18:3d:13:ca:ad:a5: ec:e0:fa:4b:7b:2b:56:14:f9:24:f8:62:fe:1a:70: 42:2f:cd:c0:c9:4d:f9:4d:38:07:c1:71:ee:c0:e4: d1:ba:d6:89:77:aa:65:96:75:4f:db:1c:08:1d:9a: 55:77:af:96:ca:ee:95:d7:ee:b7:ff:c5:c3:51:f7: 10:5d:d3:a9:63:12:18:83:ec:14:65:36:f0:85:c2: ee:f8:aa:a0:5c:ba:7e:05:54:e8:83:1a:e8:e8:28: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F9:34:E1:17:1F:82:41:4F:B8:32:E5:B9:28:F9:94:D1:92:4E:1A X509v3 Authority Key Identifier: keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:4b:88:8e:49:5b:4e:2f:9b:58:9e:f6:50:18:11:25:5a:da: b7:88:6d:fc:ee:cd:64:21:3a:55:3e:37:9e:5f:da:2f:55:0a: 32:b3:60:9f:dd:9a:e5:71:1a:9e:f8:bf:34:37:d1:c5:7d:58: 17:2c:32:03:e4:5a:99:ed:b1:98:87:41:40:25:96:02:4f:4f: 4f:29:f5:d2:1b:71:b3:7f:ea:a0:8f:bd:6d:27:58:e2:72:2b: 3f:48:8e:ce:a6:0c:4a:8c:36:a1:74:fc:71:89:84:cc:7c:1d: 62:b2:e6:f2:61:fc:7c:a8:14:d5:0a:24:eb:fe:35:ef:4f:67: fa:66:09:c8:d7:39:e0:ef:7e:1d:28:36:89:e0:a9:cb:11:24: f1:dc:e9:1b:c2:fb:bb:70:80:66:00:13:5a:8a:c3:9b:f3:12: 35:d3:8f:8e:5b:a8:1d:a8:27:68:d7:6a:b6:3a:83:98:79:41: 39:0e:b0:32:b4:e4:f0:fa:1c:c2:6f:1f:5b:8e:17:85:fe:13: f2:3f:f2:3f:b6:6e:a5:05:ef:9e:24:7a:f3:f1:80:cd:ec:e4: 90:9d:9e:42:b5:4e:39:3b:db:b3:bc:a4:63:6d:6b:2b:82:69: 26:c9:5e:48:e9:ce:11:f0:02:a1:3a:d9:34:51:bc:37:8e:7d: 29:57:e6:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRNSPUT3iPMRyDhKkTEGWMRL3MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhF RkNFMENBMDAeFw0yNDA0MTUyMTA2MDZaFw0yNDA0MTkwMjA2MDZaMDMxMTAvBgNV BAMTKEI0RjkzNEUxMTcxRjgyNDE0RkI4MzJFNUI5MjhGOTk0RDE5MjRFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zt4p0FILi8o6qjrH5tzCgVdt A9Ry4sTk4y5VdeYl5N80S6AmCn+GrwYQl5majIpHhPs4DB1sJDhm8UzOT5RwVrpR Rc59WFM74BrGIGkEDOd06FtLm0KGl6KkJ1rTfy614M3l5szVkpNE83U3mMO8iW7u Ilvb4+dCj4NWTcZsnyuI6iYN/Ci+sLlEBh0eh4FrzcsgwdT6okrazuf52Rg9E8qt pezg+kt7K1YU+ST4Yv4acEIvzcDJTflNOAfBce7A5NG61ol3qmWWdU/bHAgdmlV3 r5bK7pXX7rf/xcNR9xBd06ljEhiD7BRlNvCFwu74qqBcun4FVOiDGujoKPEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtPk04RcfgkFPuDLluSj5lNGSThowHwYDVR0j BBgwFoAUPR1ElzFVb44UUd5luy4PiO/ODKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM3Mzk2Yy00YmJlLTRjNmUtOGY1MC00NDJjMjA1ZTA3MGMvMC8zRDFENDQ5NzMx NTU2RjhFMTQ1MURFNjVCQjJFMEY4OEVGQ0UwQ0EwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBGODhFRkNF MENBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvM0QxRDQ0OTczMTU1NkY4RTE0NTFERTY1QkIyRTBG ODhFRkNFMENBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVLiI5JW04vm1ie9lAYESVa2reIbfzuzWQh OlU+N55f2i9VCjKzYJ/dmuVxGp74vzQ30cV9WBcsMgPkWpntsZiHQUAllgJPT08p 9dIbcbN/6qCPvW0nWOJyKz9Ijs6mDEqMNqF0/HGJhMx8HWKy5vJh/HyoFNUKJOv+ Ne9PZ/pmCcjXOeDvfh0oNongqcsRJPHc6RvC+7twgGYAE1qKw5vzEjXTj45bqB2o J2jXarY6g5h5QTkOsDK05PD6HMJvH1uOF4X+E/I/8j+2bqUF754kevPxgM3s5JCd nkK1Tjk727O8pGNtayuCaSbJXkjpzhHwAqE62TRRvDeOfSlX5ow= -----END CERTIFICATE-----Generated at Mon Apr 15 21:50:44 2024 by rpki-client on console-fra.rpki-client.org