$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: FD5gKVqmRHVFs3CiTFPkcnerUsqV5nnOVX+vZM42Dyg= Subject key identifier: 32:31:86:55:69:B6:ED:06:41:19:1F:CE:6A:86:AD:ED:EF:1F:3B:C5 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 0C7A6F85AC1BDBC934503BD0CBA458C139516237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0289 Signing time: Thu 16 May 2024 16:11:10 +0000 Manifest this update: Thu 16 May 2024 16:06:10 +0000 Manifest next update: Mon 20 May 2024 01:19:10 +0000 Files and hashes: 1: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: vncd8kGmq8GX0ztE+KWHCFeoCee1arvniQNSZkp7N1g=) 2: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: 95dIsHfBAd4ni7Xj9frlcKjJEmgA0Y7hVgud6u8Un0w=) 3: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: NVkN9NfAlxpOYQ4u1tet9f4qF8D3XiRGGiEyLDi82bM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7a:6f:85:ac:1b:db:c9:34:50:3b:d0:cb:a4:58:c1:39:51:62:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: May 16 16:06:10 2024 GMT Not After : May 20 01:19:10 2024 GMT Subject: CN=3231865569B6ED0641191FCE6A86ADEDEF1F3BC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:69:1f:cc:2c:ef:cb:ad:a9:29:2c:ea:3e: 67:98:62:95:52:95:6d:3c:bf:57:e0:86:a3:e4:45: a9:ab:c3:c9:3e:44:d2:cf:c1:ef:08:2c:9e:4c:c0: 40:88:e4:be:5f:3b:ff:20:4d:b1:6f:53:c1:c2:4a: e3:96:d2:d8:a3:67:f7:77:fb:4e:0e:7c:87:24:b7: 53:5a:f8:ab:3f:39:64:95:af:ef:24:69:37:8c:a4: 7c:8f:9e:da:06:79:0f:fd:57:a4:fc:eb:87:32:bb: 7d:51:58:78:29:0e:1b:c6:31:af:2f:00:9e:c7:1e: 7a:2b:44:0c:5b:f1:3e:a6:d5:84:dc:6b:ed:2b:00: f6:d3:0c:a4:44:ab:c3:fc:00:06:9b:61:21:ae:e4: eb:e7:c9:66:74:82:82:0c:c5:07:e0:a4:0a:56:05: c6:29:83:5f:49:17:25:65:0e:de:43:2c:d6:59:1f: 91:ff:2b:ee:02:33:56:af:4d:8b:69:41:97:3a:f0: 34:55:2f:c4:36:b6:75:6d:bf:c6:14:00:7c:b9:34: 93:e0:9b:76:16:15:13:25:d4:4d:b8:9c:fa:33:3e: 80:22:15:a0:54:a7:f2:39:e3:f9:17:06:ac:4f:a1: 5e:ad:f0:17:79:70:22:38:cf:10:35:09:6e:29:d6: a6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:31:86:55:69:B6:ED:06:41:19:1F:CE:6A:86:AD:ED:EF:1F:3B:C5 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7c:3f:b9:bd:27:87:94:57:fd:12:43:63:1d:35:2d:76:49: 92:8a:f3:c9:84:25:61:95:06:57:b3:4a:31:16:c2:d1:b6:12: a2:42:52:8e:96:25:eb:92:ec:6f:eb:c9:05:6d:22:3f:c3:5b: 6c:ce:aa:54:63:22:ad:4c:9a:0d:ea:a8:3e:fe:aa:27:9d:5e: 8a:41:3c:ce:fd:9c:99:a6:82:28:87:b5:9b:2f:04:c8:9e:be: 57:c1:1b:32:8d:54:93:e6:83:84:a5:33:6f:da:28:02:4e:ac: 8a:27:96:e4:81:6b:76:80:99:b7:92:67:74:6e:c5:cf:5a:00: 1e:52:9d:7f:e4:33:bd:67:b4:d0:f4:5b:d4:42:e4:9b:2c:f9: 59:ce:f0:be:6b:ab:43:f0:b8:f7:8e:41:67:44:b9:45:5f:06: 96:b9:d8:c5:35:d2:e7:ff:82:55:e0:b9:9b:1e:ae:e0:bc:e9: 03:6d:f7:d5:b7:9d:8c:35:90:0d:c3:3e:9e:66:30:63:9c:5d: f1:42:ae:b7:6e:9a:cd:09:47:bd:ea:a1:d1:b7:01:3d:8b:57: 04:7d:77:60:39:b4:ee:0d:0e:65:6a:64:31:fb:e6:8e:42:91: 71:79:cb:ac:97:25:09:6c:a0:5c:2d:45:e4:1e:79:5b:38:44: 99:4a:2a:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDHpvhawb28k0UDvQy6RYwTlRYjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNDA1MTYxNjA2MTBaFw0yNDA1MjAwMTE5MTBaMDMxMTAvBgNV BAMTKDMyMzE4NjU1NjlCNkVEMDY0MTE5MUZDRTZBODZBREVERUYxRjNCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjxGkfzCzvy62pKSzqPmeYYpVS lW08v1fghqPkRamrw8k+RNLPwe8ILJ5MwECI5L5fO/8gTbFvU8HCSuOW0tijZ/d3 +04OfIckt1Na+Ks/OWSVr+8kaTeMpHyPntoGeQ/9V6T864cyu31RWHgpDhvGMa8v AJ7HHnorRAxb8T6m1YTca+0rAPbTDKREq8P8AAabYSGu5OvnyWZ0goIMxQfgpApW BcYpg19JFyVlDt5DLNZZH5H/K+4CM1avTYtpQZc68DRVL8Q2tnVtv8YUAHy5NJPg m3YWFRMl1E24nPozPoAiFaBUp/I54/kXBqxPoV6t8Bd5cCI4zxA1CW4p1qYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMjGGVWm27QZBGR/Oaoat7e8fO8UwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJx8P7m9J4eUV/0SQ2MdNS12SZKK88mEJWGV BlezSjEWwtG2EqJCUo6WJeuS7G/ryQVtIj/DW2zOqlRjIq1Mmg3qqD7+qiedXopB PM79nJmmgiiHtZsvBMievlfBGzKNVJPmg4SlM2/aKAJOrIonluSBa3aAmbeSZ3Ru xc9aAB5SnX/kM71ntND0W9RC5Jss+VnO8L5rq0PwuPeOQWdEuUVfBpa52MU10uf/ glXguZseruC86QNt99W3nYw1kA3DPp5mMGOcXfFCrrdums0JR73qodG3AT2LVwR9 d2A5tO4NDmVqZDH75o5CkXF5y6yXJQlsoFwtReQeeVs4RJlKKoY= -----END CERTIFICATE-----Generated at Thu May 16 18:25:18 2024 by rpki-client on console-fra.rpki-client.org