$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: oD+PD4v4AToihxYn83YA/nhXNAZECCDYQIf9jv41iHo= Subject key identifier: 49:D7:E2:AE:15:62:3E:56:07:4D:98:E4:62:4B:2A:01:C9:B8:69:F1 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 2C019A7F5D1EB9121968ECEDE7E9701EB730C48E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 042A Signing time: Sat 04 May 2024 13:10:31 +0000 Manifest this update: Sat 04 May 2024 13:05:31 +0000 Manifest next update: Tue 07 May 2024 15:36:31 +0000 Files and hashes: 1: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: oV1YRswK2q9DQBuL7TudxHNHhKSdHTtCvBOjdn+hUTQ=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: A6eU6UhtAph0cwKbE7Ie6aoZlkgO7AMqGFUvmMpHiLk=) 3: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: l65wnpjUDUg8vNogLG39ouVxDWf+HHKfKSHKqwGXJzY=) 4: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: t2alKiZjDA1+zxf82Y5vzG66s0Pr6yduYvkFApksISI=) 5: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: EYYTaQISL9ey9V84hwifPF9tgGzRVKdYP9+/C2UYU90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:01:9a:7f:5d:1e:b9:12:19:68:ec:ed:e7:e9:70:1e:b7:30:c4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: May 4 13:05:31 2024 GMT Not After : May 7 15:36:31 2024 GMT Subject: CN=49D7E2AE15623E56074D98E4624B2A01C9B869F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:56:3c:4d:de:2e:0a:85:11:42:00:e6:4b: f2:62:bc:b1:c1:ed:fb:7c:37:22:a8:a6:7c:54:48: dd:bc:61:4c:6c:b8:9a:cd:41:e2:49:ee:bf:88:24: 1a:af:01:99:dd:ac:24:fb:1d:c7:14:26:51:de:a9: e5:6d:b9:55:59:71:d4:4c:ef:ec:0d:70:d4:43:b9: 90:f5:90:4e:50:fe:b7:45:38:29:d4:81:8e:52:fb: 8e:56:77:e2:1b:2a:1d:8f:37:79:f4:c9:eb:0c:02: 37:f9:7f:23:0f:e9:db:2b:a8:e4:a8:8d:62:e8:1a: ba:15:ee:04:65:75:61:04:d5:cb:de:a0:d8:45:c8: b6:48:26:68:08:9f:56:89:80:7f:88:cd:a4:d1:98: b0:10:61:fb:f8:50:39:10:bd:30:8c:79:ee:e3:54: d7:01:26:5c:4c:1e:9c:c4:ef:18:2c:70:83:0d:25: 8f:e4:0c:ff:15:de:38:45:8a:03:e1:78:f2:55:b8: 33:fa:59:6a:ab:b6:0e:9b:f8:2e:46:0e:91:0b:7a: 50:20:e3:6d:95:83:b0:e1:d6:95:4c:33:af:81:51: 95:85:17:a5:a5:a2:7c:3e:9c:63:e1:aa:18:80:8f: 79:e8:d8:64:26:73:c7:16:bf:ab:c0:fd:34:ff:24: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D7:E2:AE:15:62:3E:56:07:4D:98:E4:62:4B:2A:01:C9:B8:69:F1 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b7:d2:2a:00:2c:0d:d9:5e:dc:ce:db:ee:f5:62:9b:76:f1: 11:e3:43:b0:58:02:63:34:56:e8:e4:1b:0c:97:7d:a7:43:4b: 2f:3a:be:4b:4e:2d:1b:a0:80:6d:e6:b7:04:84:17:09:9f:76: 74:20:65:1f:06:ee:ab:da:af:8d:c2:14:d6:d6:65:92:e8:58: da:b7:54:83:9c:1f:ce:ef:eb:1a:7a:34:34:61:56:ba:68:da: ee:d4:5e:2f:89:62:7c:14:08:b4:c2:16:23:54:e1:57:9a:38: 04:ad:61:24:4c:df:63:b4:eb:e4:d5:64:24:21:6a:05:91:b9: 23:52:4d:29:33:c4:b0:db:de:40:c9:6c:13:c7:c2:05:1a:fd: 47:63:a1:16:b5:55:16:e4:88:73:77:6b:6c:1c:da:0f:21:b4: ef:82:09:d1:f5:fe:ce:c1:c0:e2:d5:3c:71:75:20:4b:63:c4: 9b:f2:6d:c8:fa:ca:a0:7b:33:6d:07:11:11:f9:62:9b:4f:0c: 02:57:3b:cf:26:c0:72:24:0e:74:d7:6a:5b:5f:08:27:96:b9: 28:87:52:31:d1:31:d2:7b:d7:8b:ea:04:0f:f0:cc:cc:fa:d0: b1:94:e6:ee:60:68:47:7b:f9:9c:29:48:30:b3:b2:ce:94:9d: 87:b8:82:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAGaf10euRIZaOzt5+lwHrcwxI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNDA1MDQxMzA1MzFaFw0yNDA1MDcxNTM2MzFaMDMxMTAvBgNV BAMTKDQ5RDdFMkFFMTU2MjNFNTYwNzREOThFNDYyNEIyQTAxQzlCODY5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHVY8Td4uCoURQgDmS/JivLHB 7ft8NyKopnxUSN28YUxsuJrNQeJJ7r+IJBqvAZndrCT7HccUJlHeqeVtuVVZcdRM 7+wNcNRDuZD1kE5Q/rdFOCnUgY5S+45Wd+IbKh2PN3n0yesMAjf5fyMP6dsrqOSo jWLoGroV7gRldWEE1cveoNhFyLZIJmgIn1aJgH+IzaTRmLAQYfv4UDkQvTCMee7j VNcBJlxMHpzE7xgscIMNJY/kDP8V3jhFigPhePJVuDP6WWqrtg6b+C5GDpELelAg 422Vg7Dh1pVMM6+BUZWFF6Wlonw+nGPhqhiAj3no2GQmc8cWv6vA/TT/JPwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSdfirhViPlYHTZjkYksqAcm4afEwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe30ioALA3ZXtzO2+71Ypt28RHjQ7BYAmM0 VujkGwyXfadDSy86vktOLRuggG3mtwSEFwmfdnQgZR8G7qvar43CFNbWZZLoWNq3 VIOcH87v6xp6NDRhVrpo2u7UXi+JYnwUCLTCFiNU4VeaOAStYSRM32O06+TVZCQh agWRuSNSTSkzxLDb3kDJbBPHwgUa/UdjoRa1VRbkiHN3a2wc2g8htO+CCdH1/s7B wOLVPHF1IEtjxJvybcj6yqB7M20HERH5YptPDAJXO88mwHIkDnTXaltfCCeWuSiH UjHRMdJ714vqBA/wzMz60LGU5u5gaEd7+ZwpSDCzss6UnYe4gkM= -----END CERTIFICATE-----Generated at Sat May 4 14:41:15 2024 by rpki-client on console-fra.rpki-client.org