$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: a0FmxDAQoBiRllg9kyrh5Y9q44WEosGTX9pnPvWzfww= Subject key identifier: 19:64:38:C1:8D:C9:08:14:60:29:95:93:11:39:D1:F7:A8:DE:49:5E Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 0DB7C4334762EFCAFE6812A7B4E22157B902C6B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 018C Signing time: Thu 21 Nov 2024 20:21:58 +0000 Manifest this update: Thu 21 Nov 2024 20:16:58 +0000 Manifest next update: Mon 25 Nov 2024 04:20:58 +0000 Files and hashes: 1: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: VC94uApMh/Z0DYKaoeCGQAF7ZA1fW8loKx7KN+eUjIU=) 2: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: XWnh1VykZqMD04Gqe6UZfKtVzo0XPT3InbmErZuC12M=) 3: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: j+xMG0Mja1vgbHDmB6Mk1vqe3c5PuIR+QXfVG/S4zas=) 4: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: R94Jhrt2peQ9VoyHvkm97VBfx7MWEw69Cox/hXCe3MY=) 5: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: 8y5JK94ZhR3xgyaECM453KUX1kpdfDuJgnhaIAM+DdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b7:c4:33:47:62:ef:ca:fe:68:12:a7:b4:e2:21:57:b9:02:c6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Nov 21 20:16:58 2024 GMT Not After : Nov 25 04:20:58 2024 GMT Subject: CN=196438C18DC90814602995931139D1F7A8DE495E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:4e:05:9e:2e:98:61:86:91:fa:5b:61:20: 0b:1c:7e:08:25:00:07:7e:35:a2:d2:de:58:ab:d9: e5:8e:33:b6:b4:f7:b3:ef:a0:b6:ba:6b:9f:46:de: 41:fc:10:f3:2b:6b:7a:1c:43:5a:02:89:10:49:da: 84:94:5d:4d:84:a7:36:f9:b2:55:aa:74:47:eb:67: af:a4:5f:ac:32:57:15:e4:ea:9a:a1:8b:4c:89:03: f6:50:71:c8:01:e7:1e:d6:81:a2:87:f9:22:ca:ef: 2b:a5:17:9d:ef:68:55:eb:ac:f1:e8:4d:1f:3a:fb: b3:23:ea:7f:b7:e6:39:5c:17:e9:03:91:2d:2a:81: 1f:bc:cb:9a:36:11:57:11:20:65:89:89:87:f2:dc: 59:15:07:33:77:b6:64:dc:ea:d8:2f:36:51:78:47: f8:0b:ad:b6:7d:03:6c:a0:a6:7b:25:9f:b3:0c:b9: 0d:e8:72:73:ad:d9:dd:5c:e7:e1:1d:36:a6:f3:c1: d4:3f:4c:e1:d2:89:00:5f:61:dd:a0:1a:c3:27:a1: 1b:60:85:86:7c:48:74:1d:c9:59:b2:f6:e6:2b:67: cf:83:05:43:3f:27:c6:32:87:e9:14:d8:ee:cd:2b: fd:92:13:41:69:fe:6a:4d:d7:9f:5c:22:6b:f5:de: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:64:38:C1:8D:C9:08:14:60:29:95:93:11:39:D1:F7:A8:DE:49:5E X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:55:05:b4:27:65:27:fb:a9:03:19:c9:aa:83:9e:e1:35:51: 40:e1:1a:e8:02:eb:d6:db:36:fd:b4:52:ad:f9:97:7d:d3:97: 22:6a:7a:aa:d5:da:cd:bf:2c:3d:76:77:fb:6d:35:35:da:2d: a2:a1:54:e4:0e:da:e0:ff:07:b9:15:16:7f:2d:e3:a3:2b:dd: fb:70:25:60:9f:29:9e:35:32:da:95:44:45:cd:59:07:3f:20: a3:7c:05:4d:c5:98:f7:3b:7a:a9:96:09:2c:68:ca:a8:25:d3: 60:4f:41:89:12:8d:01:16:e1:9c:ea:81:c7:19:6f:8f:ec:aa: 77:b7:c4:82:64:31:a7:da:bf:0b:d3:4a:4c:af:0c:93:e6:e9: 62:0a:7d:ed:63:eb:77:28:1c:7a:41:9b:aa:bb:b3:c1:29:22: b5:03:25:17:f4:32:63:48:a8:96:e1:1e:e0:d6:06:29:1c:37: 47:80:5a:24:29:e3:eb:f4:c8:f4:6e:42:eb:2b:32:30:59:23: f2:b4:1a:d7:4c:ef:c3:2f:87:14:3b:95:26:91:4a:03:e7:83: f7:db:2e:f6:e3:8a:5a:89:80:15:b3:6e:45:c9:78:9d:2f:e5: ae:17:f7:c9:f8:b2:56:73:8f:8d:40:85:d5:89:67:4b:27:a0: 49:e5:e4:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbfEM0di78r+aBKntOIhV7kCxrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNDExMjEyMDE2NThaFw0yNDExMjUwNDIwNThaMDMxMTAvBgNV BAMTKDE5NjQzOEMxOERDOTA4MTQ2MDI5OTU5MzExMzlEMUY3QThERTQ5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaIU4Fni6YYYaR+lthIAscfggl AAd+NaLS3lir2eWOM7a097PvoLa6a59G3kH8EPMra3ocQ1oCiRBJ2oSUXU2Epzb5 slWqdEfrZ6+kX6wyVxXk6pqhi0yJA/ZQccgB5x7WgaKH+SLK7yulF53vaFXrrPHo TR86+7Mj6n+35jlcF+kDkS0qgR+8y5o2EVcRIGWJiYfy3FkVBzN3tmTc6tgvNlF4 R/gLrbZ9A2ygpnsln7MMuQ3ocnOt2d1c5+EdNqbzwdQ/TOHSiQBfYd2gGsMnoRtg hYZ8SHQdyVmy9uYrZ8+DBUM/J8Yyh+kU2O7NK/2SE0Fp/mpN159cImv13nfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGWQ4wY3JCBRgKZWTETnR96jeSV4wHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANNVBbQnZSf7qQMZyaqDnuE1UUDhGugC69bb Nv20Uq35l33TlyJqeqrV2s2/LD12d/ttNTXaLaKhVOQO2uD/B7kVFn8t46Mr3ftw JWCfKZ41MtqVREXNWQc/IKN8BU3FmPc7eqmWCSxoyqgl02BPQYkSjQEW4ZzqgccZ b4/sqne3xIJkMafavwvTSkyvDJPm6WIKfe1j63coHHpBm6q7s8EpIrUDJRf0MmNI qJbhHuDWBikcN0eAWiQp4+v0yPRuQusrMjBZI/K0GtdM78MvhxQ7lSaRSgPng/fb LvbjilqJgBWzbkXJeJ0v5a4X98n4slZzj41AhdWJZ0snoEnl5K0= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org