$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json) Hash identifier: qapfw2WqaZNYQ0LX6lKbGSSxrUYu5WNxy3OtibX3UzE= Subject key identifier: 51:DA:50:05:77:85:74:41:82:0A:C0:4C:A2:A8:B4:BF:D3:44:51:D1 Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Certificate serial: 5FE6CCECA6832C95D0775C983DDBA2C0ACC70905 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft Manifest number: 03D2 Signing time: Sun 05 May 2024 04:30:45 +0000 Manifest this update: Sun 05 May 2024 04:25:45 +0000 Manifest next update: Wed 08 May 2024 13:45:45 +0000 Files and hashes: 1: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: j1wqCRKmqLcPoUtWaMe6Pv1ryPRiqTW0gNUooaakkh8=) 2: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: qVeO/7TJ+Y+ud7zn1kuKoZa1Sx4YGQQf7J3tzr6P6nI=) 3: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: zY+TrKHD4jTP8Sq9ggS9iKECtyilKJ9r46K9+jrayV8=) 4: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: RFKIDrfqbUw0fDbqzxbLyzwqGZ4ITteoJKP95pUTKbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 10:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e6:cc:ec:a6:83:2c:95:d0:77:5c:98:3d:db:a2:c0:ac:c7:09:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Validity Not Before: May 5 04:25:45 2024 GMT Not After : May 8 13:45:45 2024 GMT Subject: CN=51DA500577857441820AC04CA2A8B4BFD34451D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a0:f0:ad:27:84:5a:f3:6b:6d:b8:5c:97:f6: 79:a3:28:1c:60:99:57:31:f7:a9:30:9d:b9:c0:68: 50:44:53:e5:12:74:81:aa:76:52:5b:ba:d7:4c:0f: 28:a6:cc:36:db:b7:cd:e1:b0:ec:e9:01:a1:f1:47: a9:ae:b1:53:bc:a0:31:ae:59:8a:6e:85:03:f2:83: 0f:e0:6b:74:e1:3e:13:f4:34:3d:99:16:f3:e9:94: 26:ac:aa:61:2c:7c:84:15:ce:70:b3:c0:da:8d:a0: 41:f2:1d:86:83:80:a8:8d:c0:8d:da:0b:ce:0b:a8: f8:bd:b1:00:f5:95:f7:06:24:e5:ac:0e:a8:b5:a8: 2e:d1:0e:b7:ca:d4:65:64:5a:f2:49:c1:a1:ee:cf: 34:af:5c:81:51:61:b9:24:d3:e0:07:0a:13:25:15: 46:7b:b0:fd:6f:04:cc:9e:5f:f1:9b:ce:08:41:a7: 74:7c:96:df:2c:e4:e0:0d:29:2d:48:5b:a7:cb:1e: 80:d6:a7:fa:87:77:14:96:8c:7b:7f:64:f0:cf:a4: 1e:81:1c:33:70:41:10:ec:ae:82:71:73:ea:b1:f0: b5:a2:2c:67:c3:11:eb:3b:18:e7:61:7a:b1:2d:59: 53:63:ee:bd:51:d5:ba:4a:67:73:0b:3c:39:6b:22: 72:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DA:50:05:77:85:74:41:82:0A:C0:4C:A2:A8:B4:BF:D3:44:51:D1 X509v3 Authority Key Identifier: keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:19:8f:3d:80:45:3e:be:6a:29:b9:98:27:f0:eb:7f:d8:b8: 36:eb:0a:c0:65:61:8a:46:ab:99:88:b9:d2:de:95:69:63:c7: 91:f8:50:48:07:9d:0b:f6:93:57:b3:5b:4a:26:c6:9d:37:16: b7:66:c2:22:99:b2:b0:62:de:8c:e0:ce:18:9a:70:3f:f6:65: ae:9e:03:87:8b:15:c1:36:20:9b:3e:7d:45:8a:42:5e:87:8a: 24:a1:32:60:8c:8c:b5:aa:da:8e:51:c3:c9:54:55:35:75:c6: ce:d0:2d:cb:f1:3c:bc:47:64:ab:75:89:63:0b:ad:ea:b2:af: e9:05:cf:b9:43:4e:cd:a6:e9:24:a9:06:2a:1d:7a:9e:bf:ae: e5:31:3d:d6:2a:8d:0f:a9:2c:92:c4:7b:6f:f6:b7:c1:90:4c: a1:fa:53:48:79:ea:27:8f:fc:1d:c3:53:9e:01:5c:25:0d:b8: 74:e8:58:2d:f1:a3:ae:46:b1:08:66:72:07:53:e8:ed:57:dd: fe:42:84:21:92:a2:8c:b2:fc:61:c7:f8:c7:3f:4d:16:9e:7d: 32:e8:40:d7:03:6d:c9:55:34:18:5a:9e:5e:df:38:8a:22:08: 50:c5:d5:93:84:0a:36:16:ab:f4:db:26:dd:f8:a5:94:7b:56: 96:a5:da:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+bM7KaDLJXQd1yYPduiwKzHCQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw N0U4MkQ1OTAeFw0yNDA1MDUwNDI1NDVaFw0yNDA1MDgxMzQ1NDVaMDMxMTAvBgNV BAMTKDUxREE1MDA1Nzc4NTc0NDE4MjBBQzA0Q0EyQThCNEJGRDM0NDUxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzoPCtJ4Ra82ttuFyX9nmjKBxg mVcx96kwnbnAaFBEU+USdIGqdlJbutdMDyimzDbbt83hsOzpAaHxR6musVO8oDGu WYpuhQPygw/ga3ThPhP0ND2ZFvPplCasqmEsfIQVznCzwNqNoEHyHYaDgKiNwI3a C84LqPi9sQD1lfcGJOWsDqi1qC7RDrfK1GVkWvJJwaHuzzSvXIFRYbkk0+AHChMl FUZ7sP1vBMyeX/GbzghBp3R8lt8s5OANKS1IW6fLHoDWp/qHdxSWjHt/ZPDPpB6B HDNwQRDsroJxc+qx8LWiLGfDEes7GOdherEtWVNj7r1R1bpKZ3MLPDlrInLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUdpQBXeFdEGCCsBMoqi0v9NEUdEwHwYDVR0j BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0 RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4 MkQ1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIz ODQwN0U4MkQ1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIZjz2ART6+aim5mCfw63/YuDbrCsBlYYpG q5mIudLelWljx5H4UEgHnQv2k1ezW0omxp03FrdmwiKZsrBi3ozgzhiacD/2Za6e A4eLFcE2IJs+fUWKQl6HiiShMmCMjLWq2o5Rw8lUVTV1xs7QLcvxPLxHZKt1iWML reqyr+kFz7lDTs2m6SSpBiodep6/ruUxPdYqjQ+pLJLEe2/2t8GQTKH6U0h56ieP /B3DU54BXCUNuHToWC3xo65GsQhmcgdT6O1X3f5ChCGSooyy/GHH+Mc/TRaefTLo QNcDbclVNBhanl7fOIoiCFDF1ZOECjYWq/TbJt34pZR7Vpal2tI= -----END CERTIFICATE-----Generated at Sun May 5 05:20:43 2024 by rpki-client on console-fra.rpki-client.org