$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: fajJaqEBtPEwal/V4FHJxG4Sn7bEHo6HP2VhMcQFS10= Subject key identifier: 41:86:C9:ED:93:F5:22:43:84:15:2A:6E:FF:92:CB:30:F4:08:EC:0A Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 684CB3D965E5711F481CB3C9733C8FCF28822FB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 0443 Signing time: Fri 22 Nov 2024 13:02:14 +0000 Manifest this update: Fri 22 Nov 2024 12:57:14 +0000 Manifest next update: Mon 25 Nov 2024 14:57:14 +0000 Files and hashes: 1: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: rCIx7HyYXXr9oOl5mkfqiGs0XHsGZGfEMihhugWZ+mM=) 2: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: XqWIDcod31e38VgeahW9dRMzM4JKlsw/6vSF5Hd9Xv4=) 3: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: rzjnKVoPcvg8LoYYqlAPNG8z+kcZAMAEA1cgciQRlhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 14:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4c:b3:d9:65:e5:71:1f:48:1c:b3:c9:73:3c:8f:cf:28:82:2f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Nov 22 12:57:14 2024 GMT Not After : Nov 25 14:57:14 2024 GMT Subject: CN=4186C9ED93F5224384152A6EFF92CB30F408EC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9c:a7:d9:2e:06:7f:70:5e:ed:4a:16:ea:ba: 28:e0:75:69:68:e8:ff:57:f5:c4:90:86:60:fb:56: fb:ca:df:5d:64:45:a6:2a:0b:2e:43:d0:77:6b:d3: 8c:cd:ed:e6:64:4e:e3:73:0c:e0:09:c2:ea:9d:e7: 34:4b:f9:46:38:22:53:d8:b0:25:e2:3c:fa:c5:f4: fa:30:5f:d9:1c:30:81:38:ce:bc:76:67:e0:da:6b: 78:4d:a4:f0:e8:7c:17:d2:7c:ac:a4:d9:21:85:ee: 13:bb:e9:4b:75:a8:c0:9b:44:07:26:62:46:04:51: a5:5d:1a:c1:60:8b:43:18:dc:6a:cb:67:20:47:c9: fb:41:dc:a8:b3:c6:e3:4d:82:88:e7:1b:d5:1f:50: 7b:6d:8c:a2:9e:a4:77:59:46:ff:ac:57:5b:09:d9: b1:13:5b:eb:e8:33:34:f1:46:48:23:36:24:8b:08: c9:6c:9f:dc:be:47:ae:e7:0e:77:83:34:ed:71:f8: 3c:25:7a:60:0f:b2:c8:ac:f0:6d:91:39:5a:55:1a: b0:45:4e:f4:1a:f0:4e:26:bc:38:b8:78:82:59:a4: e7:f1:2d:d7:54:a5:6c:a6:09:fb:be:1e:2c:41:84: e3:ef:0f:43:e6:95:e2:eb:50:22:37:8a:c5:fd:5b: 0b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:86:C9:ED:93:F5:22:43:84:15:2A:6E:FF:92:CB:30:F4:08:EC:0A X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d1:0c:ec:ad:16:11:e5:6e:5b:fc:d3:5f:04:49:8c:3c:97: b8:7d:f3:97:1e:67:f5:ef:0f:e7:19:ed:f6:8b:39:f7:89:25: fc:9b:ee:41:ec:19:b1:5a:6b:1d:09:19:51:b5:46:08:71:02: 37:ab:a4:9d:42:a3:20:3e:29:6b:ff:e4:13:85:7e:f0:80:1e: 09:c1:44:a5:41:1d:f4:93:ab:8e:d7:d6:82:6d:e3:75:46:97: a9:75:08:6f:66:b7:b7:2e:df:9d:be:b6:93:c9:30:fe:6a:40: d1:3d:48:cd:42:35:77:a0:2c:aa:69:b1:99:82:44:91:18:8f: c6:b1:f6:8e:d0:f8:20:c9:e5:10:a2:1d:30:db:5a:ee:f6:be: 11:5c:46:1c:48:00:13:c0:d1:7f:c6:37:9f:93:68:3d:b3:f0: 41:fd:95:74:c2:be:bf:b8:8a:c0:af:a4:82:20:57:ae:01:8c: 3b:d6:8b:55:9b:7f:e6:37:0b:dd:4f:b9:c1:c1:5b:98:bf:bf: 19:41:10:90:12:e5:5a:b1:69:a2:0f:b4:3b:59:b3:71:0c:66: 31:39:aa:55:eb:07:d6:17:f9:9c:a7:0c:b6:18:51:49:f1:47: 91:55:08:a1:7f:ef:ac:7b:6a:df:d6:56:5f:4b:43:13:03:ae: bf:8c:b4:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaEyz2WXlcR9IHLPJczyPzyiCL7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNDExMjIxMjU3MTRaFw0yNDExMjUxNDU3MTRaMDMxMTAvBgNV BAMTKDQxODZDOUVEOTNGNTIyNDM4NDE1MkE2RUZGOTJDQjMwRjQwOEVDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRnKfZLgZ/cF7tShbquijgdWlo 6P9X9cSQhmD7VvvK311kRaYqCy5D0Hdr04zN7eZkTuNzDOAJwuqd5zRL+UY4IlPY sCXiPPrF9PowX9kcMIE4zrx2Z+Daa3hNpPDofBfSfKyk2SGF7hO76Ut1qMCbRAcm YkYEUaVdGsFgi0MY3GrLZyBHyftB3KizxuNNgojnG9UfUHttjKKepHdZRv+sV1sJ 2bETW+voMzTxRkgjNiSLCMlsn9y+R67nDneDNO1x+DwlemAPssis8G2ROVpVGrBF TvQa8E4mvDi4eIJZpOfxLddUpWymCfu+HixBhOPvD0PmleLrUCI3isX9WwtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYbJ7ZP1IkOEFSpu/5LLMPQI7AowHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7RDOytFhHlblv8018ESYw8l7h985ceZ/Xv D+cZ7faLOfeJJfyb7kHsGbFaax0JGVG1RghxAjerpJ1CoyA+KWv/5BOFfvCAHgnB RKVBHfSTq47X1oJt43VGl6l1CG9mt7cu352+tpPJMP5qQNE9SM1CNXegLKppsZmC RJEYj8ax9o7Q+CDJ5RCiHTDbWu72vhFcRhxIABPA0X/GN5+TaD2z8EH9lXTCvr+4 isCvpIIgV64BjDvWi1Wbf+Y3C91PucHBW5i/vxlBEJAS5VqxaaIPtDtZs3EMZjE5 qlXrB9YX+ZynDLYYUUnxR5FVCKF/76x7at/WVl9LQxMDrr+MtIM= -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org