$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json) Hash identifier: P3xw1CUxfutbNjlIMHocJmDLeRRtEFbOSvBVKUw/Svg= Subject key identifier: AC:67:F1:F5:19:8C:C5:5B:9D:4C:AE:8E:57:1C:A8:DD:D9:15:26:CD Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Certificate serial: 1FD1163D95DE8DCB53053A6C5ED095366E3FCEF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft Manifest number: 1F Signing time: Tue 07 May 2024 21:21:51 +0000 Manifest this update: Tue 07 May 2024 21:16:51 +0000 Manifest next update: Sat 11 May 2024 03:12:51 +0000 Files and hashes: 1: 3231302e37392e3134322e302f32332d3234203d3e20313431363037.roa (hash: iejxaYyFvMMKWvCTzKAcnIXg83Nbl1/MEoXIN4VzYRY=) 2: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: jakpRKVpHO3L7Xy9B2P63f+kwAYhSnvzGzLv2fVRWtk=) 3: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: iftSu6sjtbzug57pNbvyMk9TMV/wqmVLaLEktvfScgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d1:16:3d:95:de:8d:cb:53:05:3a:6c:5e:d0:95:36:6e:3f:ce:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313 Validity Not Before: May 7 21:16:51 2024 GMT Not After : May 11 03:12:51 2024 GMT Subject: CN=AC67F1F5198CC55B9D4CAE8E571CA8DDD91526CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:fd:65:bc:73:f4:2a:aa:3d:53:6f:45:ba: ba:42:11:f1:ce:70:ac:68:25:e6:04:79:62:21:a2: 5d:1c:6a:d0:35:68:8f:ca:14:c7:99:d6:74:ae:c6: fc:58:27:8b:37:f0:88:7a:25:0b:b0:07:f8:c8:49: 66:3c:40:15:ed:e5:52:7a:da:94:92:bc:02:3e:e9: ec:09:3f:d6:da:8b:50:e5:65:f8:20:83:2f:b7:fd: d8:f4:f9:3a:2d:56:1e:23:c6:ef:e3:e6:ca:92:38: 6e:9e:84:95:27:82:33:88:6e:2d:07:b9:3a:10:aa: f2:61:a1:a5:d3:53:72:21:19:1d:cf:15:53:f8:dd: 21:fd:96:39:33:7d:56:9b:29:cf:68:80:c2:25:5c: e1:02:23:c9:75:87:be:9c:af:18:9f:ec:b6:41:f6: 07:e7:4d:e7:59:88:f1:52:4c:71:88:f7:cb:29:ff: a2:df:28:a6:07:c3:47:a2:61:e2:cc:ef:16:37:59: ac:79:15:e1:e8:61:da:99:40:0e:dc:83:00:6c:48: 54:a6:11:99:d2:18:cb:05:dc:89:71:ff:af:ef:70: da:73:35:73:b2:96:a4:da:33:db:34:da:62:f8:f3: 18:cc:39:4a:3f:67:2e:ee:1d:82:1d:26:02:25:59: b8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:67:F1:F5:19:8C:C5:5B:9D:4C:AE:8E:57:1C:A8:DD:D9:15:26:CD X509v3 Authority Key Identifier: keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6c:17:c2:14:87:0b:52:ba:35:62:d3:48:95:4a:24:fb:f5: 7b:d6:ff:6a:59:69:8d:82:65:af:45:88:08:e1:7e:01:ab:9f: 43:50:8b:6e:82:03:69:97:5e:85:58:ce:60:f2:bb:bd:61:72: 70:ce:75:ea:eb:58:db:f0:2f:fb:fc:a2:26:1f:52:98:fa:13: 69:7c:e9:cb:40:5f:fb:ac:fd:b5:35:dd:8f:c9:e2:6b:a5:2e: 98:e9:78:b2:39:f7:8e:dd:55:96:4b:d0:78:10:21:bd:4d:63: 9d:48:54:32:c8:f3:62:04:aa:a7:b9:52:f8:6e:4f:2e:4e:cb: 62:f2:99:29:4e:87:ad:55:0c:d4:81:25:c2:d1:06:c9:8d:a5: 8c:f1:a0:ce:9e:c4:1b:68:3c:78:bd:cf:32:c8:ac:32:6d:02: 8d:32:5c:ab:da:c4:8d:d1:50:81:53:b2:e1:09:aa:c2:5c:fe: ff:75:11:05:d6:0e:fb:c3:c6:8a:8f:d1:f2:ee:64:da:d5:35: 41:a2:b9:25:bc:b7:4e:13:12:67:72:44:5f:c3:e7:da:aa:13: a7:08:9f:c3:d4:78:f8:e2:74:ac:60:28:95:4a:56:6b:cf:0f: 1c:d7:c5:2f:48:6b:3f:38:8d:b1:9c:18:4a:02:00:28:ce:f8: 60:69:fc:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9EWPZXejctTBTpsXtCVNm4/zvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx NUE5OTMxMzAeFw0yNDA1MDcyMTE2NTFaFw0yNDA1MTEwMzEyNTFaMDMxMTAvBgNV BAMTKEFDNjdGMUY1MTk4Q0M1NUI5RDRDQUU4RTU3MUNBOERERDkxNTI2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdav1lvHP0Kqo9U29FurpCEfHO cKxoJeYEeWIhol0catA1aI/KFMeZ1nSuxvxYJ4s38Ih6JQuwB/jISWY8QBXt5VJ6 2pSSvAI+6ewJP9bai1DlZfgggy+3/dj0+TotVh4jxu/j5sqSOG6ehJUngjOIbi0H uToQqvJhoaXTU3IhGR3PFVP43SH9ljkzfVabKc9ogMIlXOECI8l1h76crxif7LZB 9gfnTedZiPFSTHGI98sp/6LfKKYHw0eiYeLM7xY3Wax5FeHoYdqZQA7cgwBsSFSm EZnSGMsF3Ilx/6/vcNpzNXOylqTaM9s02mL48xjMOUo/Zy7uHYIdJgIlWbgzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrGfx9RmMxVudTK6OVxyo3dkVJs0wHwYDVR0j BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5 OTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzOGY2YWEtZjI3ZC00OTA2LTk1 MWUtZjAyZDg5MWJmMWVkLzAvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0 MkQxNUE5OTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5sF8IUhwtSujVi00iVSiT79XvW/2pZaY2C Za9FiAjhfgGrn0NQi26CA2mXXoVYzmDyu71hcnDOderrWNvwL/v8oiYfUpj6E2l8 6ctAX/us/bU13Y/J4mulLpjpeLI5947dVZZL0HgQIb1NY51IVDLI82IEqqe5Uvhu Ty5Oy2LymSlOh61VDNSBJcLRBsmNpYzxoM6exBtoPHi9zzLIrDJtAo0yXKvaxI3R UIFTsuEJqsJc/v91EQXWDvvDxoqP0fLuZNrVNUGiuSW8t04TEmdyRF/D59qqE6cI n8PUePjidKxgKJVKVmvPDxzXxS9Iaz84jbGcGEoCACjO+GBp/J4= -----END CERTIFICATE-----Generated at Tue May 7 21:41:02 2024 by rpki-client on console-fra.rpki-client.org