$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: C7phlqrd2lJeA8nAHPWqazppOkkqNif+Os4OkdJoE0Q= Subject key identifier: B7:D0:7A:6A:3C:64:82:09:58:2F:15:6D:B1:46:F5:9D:FA:58:2E:68 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 58E14AA914C4C4F1FE24555CB0781F5E871E6624 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 27 Signing time: Thu 23 May 2024 12:41:46 +0000 Manifest this update: Thu 23 May 2024 12:36:46 +0000 Manifest next update: Sun 26 May 2024 17:02:46 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: EuWDRw74O+k8JEJvK09P76kFiPDImOnN/O3rdBgN6mY=) 2: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: pMG+ZAw0cWb9oW6JXLAMB44cr+AtbRvCQ3Z+y/D0PjQ=) 3: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: Eqgp77kKprJrmfyCfCAIINeCTJkcGPbJGW+Qvu2qyMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 12:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e1:4a:a9:14:c4:c4:f1:fe:24:55:5c:b0:78:1f:5e:87:1e:66:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: May 23 12:36:46 2024 GMT Not After : May 26 17:02:46 2024 GMT Subject: CN=B7D07A6A3C648209582F156DB146F59DFA582E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:fc:6f:aa:3b:e6:e6:f6:28:0d:aa:a8:55: 13:32:4e:b5:23:da:93:1a:56:f3:d5:7d:f2:90:3c: 46:c3:a2:92:d2:2c:84:9f:f5:46:53:1c:dc:ce:20: 39:65:9f:f6:7c:d7:a2:21:4a:81:b8:f0:99:7d:49: e5:03:ff:45:d6:c5:30:ce:7e:42:dd:f2:32:80:1f: 63:91:30:8d:6a:c9:73:68:2d:74:7e:4b:93:be:0c: 45:2a:b5:b2:a9:52:e7:8e:ba:4f:bc:a7:15:33:c9: 6d:c8:0a:49:e5:98:c0:c5:f7:c1:df:8d:c1:c3:df: e2:d8:21:ca:13:d1:be:c2:20:34:ce:d5:6a:ea:01: 50:d2:ce:75:3e:74:82:76:13:29:35:89:ba:3e:cc: 07:bf:ac:00:7c:9c:0d:c5:44:55:af:5f:ab:a8:36: 6b:50:e1:d2:61:6a:df:07:4e:11:d0:67:d9:98:6c: 24:96:52:a4:e0:08:02:f8:3f:68:7f:68:cb:4d:d3: c6:ca:eb:39:c0:fc:ba:cd:f5:af:5b:b0:52:6f:24: 99:72:c0:76:26:f7:59:a3:8c:2e:93:67:16:64:cb: bd:27:7e:0f:9d:81:34:6a:de:90:8c:e2:f3:b6:11: 56:80:8c:46:8d:af:11:1b:be:94:cc:af:cf:7a:6e: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D0:7A:6A:3C:64:82:09:58:2F:15:6D:B1:46:F5:9D:FA:58:2E:68 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2c:6e:af:85:73:91:51:3c:96:d2:23:12:ff:12:73:8e:2a: 92:d9:fd:bb:3f:19:6c:17:0e:ef:f1:7c:41:5c:33:97:2c:84: cb:b5:57:a2:93:d8:f9:55:22:7e:77:9e:1a:ab:f5:87:76:e7: 5b:24:1e:94:9f:36:0d:14:8d:fe:e5:b4:ba:d6:90:64:47:23: 0e:a9:51:15:84:96:e2:5b:1b:89:ea:ec:1a:17:23:84:f0:f2: e5:34:5a:f3:0d:e0:61:30:9b:3c:13:55:47:9a:5a:a7:e0:c5: 41:ce:aa:80:5b:7e:7d:80:10:83:50:40:1b:51:ab:3e:ef:aa: 36:32:71:b9:86:ba:d0:1d:27:52:10:c2:ce:f0:87:47:3e:48: f5:21:8d:3c:8f:c2:38:8d:ce:03:30:df:bc:e5:6e:02:04:4d: ee:1d:0b:8c:91:84:5e:97:e3:59:18:b7:39:14:31:b9:22:ca: 1c:74:5f:b8:e8:4d:ed:f6:87:c3:d1:d8:ff:0e:a7:a0:9b:55: b6:6f:2c:10:21:97:96:81:8c:66:11:1b:81:28:c1:5c:fa:d4: 63:fd:ba:4b:49:7a:54:81:a1:f5:d1:29:19:00:f0:65:3a:41: eb:9e:38:0a:2d:df:95:40:61:32:71:27:0e:1f:db:2b:a4:55: ff:c5:8c:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWOFKqRTExPH+JFVcsHgfXoceZiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNDA1MjMxMjM2NDZaFw0yNDA1MjYxNzAyNDZaMDMxMTAvBgNV BAMTKEI3RDA3QTZBM0M2NDgyMDk1ODJGMTU2REIxNDZGNTlERkE1ODJFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjxvxvqjvm5vYoDaqoVRMyTrUj 2pMaVvPVffKQPEbDopLSLISf9UZTHNzOIDlln/Z816IhSoG48Jl9SeUD/0XWxTDO fkLd8jKAH2ORMI1qyXNoLXR+S5O+DEUqtbKpUueOuk+8pxUzyW3ICknlmMDF98Hf jcHD3+LYIcoT0b7CIDTO1WrqAVDSznU+dIJ2Eyk1ibo+zAe/rAB8nA3FRFWvX6uo NmtQ4dJhat8HThHQZ9mYbCSWUqTgCAL4P2h/aMtN08bK6znA/LrN9a9bsFJvJJly wHYm91mjjC6TZxZky70nfg+dgTRq3pCM4vO2EVaAjEaNrxEbvpTMr896bjfRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt9B6ajxkgglYLxVtsUb1nfpYLmgwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACssbq+Fc5FRPJbSIxL/EnOOKpLZ/bs/GWwX Du/xfEFcM5cshMu1V6KT2PlVIn53nhqr9Yd251skHpSfNg0Ujf7ltLrWkGRHIw6p URWEluJbG4nq7BoXI4Tw8uU0WvMN4GEwmzwTVUeaWqfgxUHOqoBbfn2AEINQQBtR qz7vqjYycbmGutAdJ1IQws7wh0c+SPUhjTyPwjiNzgMw37zlbgIETe4dC4yRhF6X 41kYtzkUMbkiyhx0X7joTe32h8PR2P8Op6CbVbZvLBAhl5aBjGYRG4EowVz61GP9 uktJelSBofXRKRkA8GU6QeueOAot35VAYTJxJw4f2yukVf/FjEM= -----END CERTIFICATE-----Generated at Thu May 23 13:36:55 2024 by rpki-client on console-fra.rpki-client.org