$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: xLUUu/BS0YUBba7U597msoe0DG2BTc5kAoRGnjREivc= Subject key identifier: BF:AF:E5:10:1D:F0:8F:44:D7:B0:6E:5D:0D:EB:99:E2:39:64:49:51 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 7DCAFC03D7D48FCC9F3CCE8773EC08990815FC49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: 3B Signing time: Fri 27 Sep 2024 12:21:52 +0000 Manifest this update: Fri 27 Sep 2024 12:16:52 +0000 Manifest next update: Mon 30 Sep 2024 21:15:52 +0000 Files and hashes: 1: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: u6QpvlYTV/HPQTTyXQBTOk/JfisNI0dRACMd61jxaZ4=) 2: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: /J4qwElze/bQ2HOvKHKpbauyy3nIBEQmoLrnIDKLWb0=) 3: 3135372e32302e3235322e302f32342d3234203d3e20313532373530.roa (hash: xOzigRErFODQdDARf5QM/i0Y/lZ+YPGavEVLu/65CLs=) 4: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: YOfV9l8mIphWSX9GO2VG6QOcO1lYY9wjqJShR8OC/dU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 10:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ca:fc:03:d7:d4:8f:cc:9f:3c:ce:87:73:ec:08:99:08:15:fc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Sep 27 12:16:52 2024 GMT Not After : Sep 30 21:15:52 2024 GMT Subject: CN=BFAFE5101DF08F44D7B06E5D0DEB99E239644951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:7f:b2:22:2b:f0:70:63:82:60:9c:06:6d: 4f:4e:a4:51:e1:61:1e:91:05:de:35:a4:14:0d:54: ee:9d:e0:95:07:94:75:81:12:95:08:58:4c:a9:40: 36:fc:4c:cf:a9:b1:eb:d8:63:f7:1d:7f:6a:3a:73: 18:d1:45:48:17:f0:f8:6e:56:40:52:dc:7a:53:6c: 10:84:5d:41:36:53:95:91:63:d6:9a:99:d2:fa:e7: 54:3f:4c:d7:12:99:38:ae:db:f5:b6:0f:a9:f7:ea: e9:7d:c5:cf:75:e8:8b:98:41:08:ad:8e:19:5e:34: a7:b8:62:03:eb:2c:fb:fc:b3:13:0b:77:12:a3:ac: 90:9d:cb:bd:a2:1d:fc:45:be:07:f1:ed:32:16:29: e7:01:bf:bf:8c:96:51:b9:29:a0:46:1e:03:25:07: 29:8f:e3:c3:f6:50:06:ad:35:b6:b0:2c:f4:8e:53: 53:5b:73:16:bc:03:d7:78:dc:29:dd:8f:f1:6c:12: 82:73:b5:51:38:4c:af:9a:fb:bd:25:58:53:f2:3c: d0:1b:b8:9f:9b:14:26:10:f9:80:93:73:40:ed:51: f0:a2:ed:a3:12:35:7a:36:73:06:cb:39:da:97:92: 32:80:64:96:e8:c1:f7:bf:83:ea:1b:70:34:d3:a3: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AF:E5:10:1D:F0:8F:44:D7:B0:6E:5D:0D:EB:99:E2:39:64:49:51 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0b:c8:99:c3:f5:d9:80:be:05:6b:83:9b:71:f3:f8:91:1a: 7c:cf:04:85:b3:0f:2b:ea:13:3d:3d:09:06:d5:61:71:f0:a3: ed:59:8c:c2:84:06:10:e8:20:ee:d7:ec:bb:c3:8a:d2:d8:cc: df:42:b5:8f:f6:70:96:fc:5c:dc:1b:41:e5:1d:97:98:7a:df: d4:c4:d3:bb:35:ca:7b:06:3d:f2:20:4d:a8:a2:d0:4f:a6:3e: 23:31:bc:f5:05:24:09:1d:0d:43:06:c7:b2:b7:a0:09:77:1e: 87:89:fb:04:53:4a:7f:0a:b9:3a:bd:f7:60:92:dd:3b:b8:d1: 95:87:da:ef:fd:88:5a:5e:69:0b:13:60:64:99:41:18:21:be: 7c:6d:41:07:89:67:28:c5:84:71:57:d9:60:bb:f3:cc:d4:68: 48:94:f5:53:18:d6:70:02:05:ef:9d:84:d3:58:98:b7:e1:9f: b9:bf:85:e0:f8:bc:4d:16:79:9e:d6:5f:f4:ec:0a:72:54:66: a8:da:92:be:5b:ae:e7:14:be:03:95:db:59:7d:ef:1e:79:d4: 19:95:44:8f:0e:f8:b6:91:10:3a:a0:62:bc:70:58:1d:98:2f: e7:6f:a0:c6:bf:90:13:7f:29:51:72:3e:5a:12:d2:d0:cb:0e: 0c:c8:af:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfcr8A9fUj8yfPM6Hc+wImQgV/EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNDA5MjcxMjE2NTJaFw0yNDA5MzAyMTE1NTJaMDMxMTAvBgNV BAMTKEJGQUZFNTEwMURGMDhGNDREN0IwNkU1RDBERUI5OUUyMzk2NDQ5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYn+yIivwcGOCYJwGbU9OpFHh YR6RBd41pBQNVO6d4JUHlHWBEpUIWEypQDb8TM+psevYY/cdf2o6cxjRRUgX8Phu VkBS3HpTbBCEXUE2U5WRY9aamdL651Q/TNcSmTiu2/W2D6n36ul9xc916IuYQQit jhleNKe4YgPrLPv8sxMLdxKjrJCdy72iHfxFvgfx7TIWKecBv7+MllG5KaBGHgMl BymP48P2UAatNbawLPSOU1Nbcxa8A9d43Cndj/FsEoJztVE4TK+a+70lWFPyPNAb uJ+bFCYQ+YCTc0DtUfCi7aMSNXo2cwbLOdqXkjKAZJbowfe/g+obcDTTo8i7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv6/lEB3wj0TXsG5dDeuZ4jlkSVEwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQLyJnD9dmAvgVrg5tx8/iRGnzPBIWzDyvq Ez09CQbVYXHwo+1ZjMKEBhDoIO7X7LvDitLYzN9CtY/2cJb8XNwbQeUdl5h639TE 07s1ynsGPfIgTaii0E+mPiMxvPUFJAkdDUMGx7K3oAl3HoeJ+wRTSn8KuTq992CS 3Tu40ZWH2u/9iFpeaQsTYGSZQRghvnxtQQeJZyjFhHFX2WC788zUaEiU9VMY1nAC Be+dhNNYmLfhn7m/heD4vE0WeZ7WX/TsCnJUZqjakr5brucUvgOV21l97x551BmV RI8O+LaREDqgYrxwWB2YL+dvoMa/kBN/KVFyPloS0tDLDgzIrxY= -----END CERTIFICATE-----Generated at Fri Sep 27 15:50:28 2024 by rpki-client on console-ams.rpki-client.org