$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: SCPgTDNcBQaE4aM4N2ljfdvmPPEYRQ5xY+mGvXNHyOM= Subject key identifier: FC:5E:5E:8B:70:A1:C5:9D:F9:F4:FA:B6:82:52:C0:B1:8A:C1:1A:2C Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 6AB7898CFC09CCA0C1E74409D993F23E6C70648D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: BE Signing time: Wed 15 May 2024 16:11:20 +0000 Manifest this update: Wed 15 May 2024 16:06:20 +0000 Manifest next update: Sun 19 May 2024 03:11:20 +0000 Files and hashes: 1: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: UGYd2KBhH+/1D0d90d0bVvS+Zik8mVd/+wylom/g5ho=) 2: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: ZjAatsMbqem2M1+X3kvcjs774YMqFrhWPF0EDDLVfTA=) 3: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: pIS4GC5017+F7pAIam6MB9IXHRUgli0lMO/8IkyjYc8=) 4: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: ZnUdzYnE6HKQLuav9EC8DrZrnvhrEm4Gkn8aDSX9YBU=) 5: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: +T+pV+w4sy/AcyrcZ47zD+xcb+FuTkZiEDOZ+MS5pI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 23:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b7:89:8c:fc:09:cc:a0:c1:e7:44:09:d9:93:f2:3e:6c:70:64:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: May 15 16:06:20 2024 GMT Not After : May 19 03:11:20 2024 GMT Subject: CN=FC5E5E8B70A1C59DF9F4FAB68252C0B18AC11A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:f6:05:ef:5a:81:8b:b0:5e:f3:11:a7:0b: ef:f4:22:0c:95:48:bb:3e:2b:a1:6d:22:58:1b:43: 62:8f:6d:2b:a3:f7:1b:98:e3:6c:a3:f5:af:74:a1: 7d:0f:45:41:de:07:31:d8:6f:8e:7f:f3:57:d4:36: 2d:45:c9:ab:33:44:19:0a:04:91:94:d9:95:94:7b: 7d:9a:ca:a7:94:f6:f7:d3:77:fa:d7:53:dd:40:97: 0a:de:b3:9c:a8:f4:97:c2:08:b0:f2:fb:4d:92:5b: 92:80:e3:74:b0:fe:ab:40:40:bc:ca:db:e8:e1:95: 80:79:ce:56:df:7e:ff:5a:56:63:f3:2c:a3:f6:ff: 6f:85:b7:5b:c5:53:51:43:ba:ea:38:ae:49:e4:d5: 66:a4:08:22:f9:14:3f:fa:30:60:9e:1b:c0:3c:7e: 26:af:b0:c8:60:85:c8:f3:68:1f:a0:6e:57:2c:22: bf:6f:d2:ab:9d:95:7e:44:20:e2:e1:ea:61:8e:85: 4d:67:8f:ab:51:09:dc:4f:1c:f6:df:66:80:6d:18: 39:43:db:9d:9e:9c:38:11:8c:7c:48:4f:ab:81:99: 43:8e:fd:54:9f:f9:a9:6e:d0:15:de:ad:6c:d6:0b: ac:b3:9e:2d:f2:90:f0:07:92:da:94:81:85:c8:a6: f1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5E:5E:8B:70:A1:C5:9D:F9:F4:FA:B6:82:52:C0:B1:8A:C1:1A:2C X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:cd:7e:f4:35:e9:13:78:1b:db:5d:4a:3a:58:fa:81:39:15: 1d:fc:90:7b:59:39:79:62:36:91:80:89:fc:b6:8e:8c:9e:f5: 91:f8:c3:6c:1e:72:d1:e2:90:44:92:2f:f1:c6:f8:92:ed:0e: e4:13:ea:88:f9:b2:bc:b8:c5:5c:c5:d8:05:bd:f1:04:a1:78: 00:f9:3b:02:76:6f:b8:a2:cd:26:79:35:44:d0:98:27:2a:e2: d9:ba:d4:52:a4:77:bd:25:6d:8c:1f:c8:9b:ae:83:33:67:7d: ab:f3:52:91:76:e3:be:7c:5a:28:b2:ce:13:8e:0c:08:2d:30: 8e:64:76:f1:21:8b:bf:f0:ba:e9:1b:07:f8:b6:e4:19:21:40: 03:e6:90:b5:e9:21:46:3c:b4:ff:d4:e5:5a:da:f0:02:bf:30: 72:f0:9c:8e:7e:54:b0:80:ac:c0:f4:f3:66:4c:ef:31:b3:96: 06:c0:b6:2e:db:ec:3a:96:2d:09:2f:a7:18:4d:dd:e6:e0:fe: 53:b2:b2:2a:db:68:98:1f:bf:ac:0f:1c:ac:93:e7:26:4c:1c: 1b:52:82:34:14:7b:af:ab:25:d1:71:d6:a1:91:af:dc:d9:6d: 30:99:32:4a:fd:c4:f9:f1:2e:74:7e:db:84:0b:a2:fd:21:db: be:23:17:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUareJjPwJzKDB50QJ2ZPyPmxwZI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNDA1MTUxNjA2MjBaFw0yNDA1MTkwMzExMjBaMDMxMTAvBgNV BAMTKEZDNUU1RThCNzBBMUM1OURGOUY0RkFCNjgyNTJDMEIxOEFDMTFBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bPYF71qBi7Be8xGnC+/0IgyV SLs+K6FtIlgbQ2KPbSuj9xuY42yj9a90oX0PRUHeBzHYb45/81fUNi1FyaszRBkK BJGU2ZWUe32ayqeU9vfTd/rXU91Alwres5yo9JfCCLDy+02SW5KA43Sw/qtAQLzK 2+jhlYB5zlbffv9aVmPzLKP2/2+Ft1vFU1FDuuo4rknk1WakCCL5FD/6MGCeG8A8 fiavsMhghcjzaB+gblcsIr9v0qudlX5EIOLh6mGOhU1nj6tRCdxPHPbfZoBtGDlD 252enDgRjHxIT6uBmUOO/VSf+alu0BXerWzWC6yzni3ykPAHktqUgYXIpvG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/F5ei3ChxZ359Pq2glLAsYrBGiwwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjNfvQ16RN4G9tdSjpY+oE5FR38kHtZOXli NpGAify2joye9ZH4w2wectHikESSL/HG+JLtDuQT6oj5sry4xVzF2AW98QSheAD5 OwJ2b7iizSZ5NUTQmCcq4tm61FKkd70lbYwfyJuugzNnfavzUpF24758WiiyzhOO DAgtMI5kdvEhi7/wuukbB/i25BkhQAPmkLXpIUY8tP/U5Vra8AK/MHLwnI5+VLCA rMD082ZM7zGzlgbAti7b7DqWLQkvpxhN3ebg/lOysirbaJgfv6wPHKyT5yZMHBtS gjQUe6+rJdFx1qGRr9zZbTCZMkr9xPnxLnR+24QLov0h274jF0Q= -----END CERTIFICATE-----Generated at Wed May 15 18:18:29 2024 by rpki-client on console-ams.rpki-client.org