$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: gFEZFUrJsGd3psM3CzsLDoTsc8yeOAp2VMuS94Yec4A= Subject key identifier: 62:F7:C4:6E:A0:D2:6B:40:F8:BB:F9:11:91:10:18:0B:25:8E:A0:D9 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 60A40D8C1D2DDF022B91C2DBEF6869320FDCC724 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 03F0 Signing time: Sun 19 May 2024 18:31:55 +0000 Manifest this update: Sun 19 May 2024 18:26:54 +0000 Manifest next update: Thu 23 May 2024 00:20:54 +0000 Files and hashes: 1: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: QOVatFBEKk+uDfsZrvDgv1MiF5HhMikwT+yx4/oRYrY=) 2: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: vdvaAVgeoexb0fOPYdz9wHRCwTIigjFgq5lb6n4ekgo=) 3: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: VZep5SMLlhmK4fCJQVZwVXTZa74wijq/UOE4w+1JN4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a4:0d:8c:1d:2d:df:02:2b:91:c2:db:ef:68:69:32:0f:dc:c7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: May 19 18:26:54 2024 GMT Not After : May 23 00:20:54 2024 GMT Subject: CN=62F7C46EA0D26B40F8BBF9119110180B258EA0D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:a2:2d:eb:c2:f4:78:45:ce:c5:06:e4:b3: 24:f4:2a:9c:eb:74:34:0f:12:bd:12:4f:23:ca:d6: 71:5c:d7:1e:be:cd:00:3e:cb:78:94:f6:1c:5f:95: 28:a7:72:5f:aa:c6:99:83:3a:9d:13:e8:ab:46:98: 57:a1:b4:13:61:b1:7a:89:47:f6:25:bf:88:ea:61: 27:2d:1e:1d:68:c8:02:83:fd:f8:24:8c:5d:c5:83: b9:8f:70:2b:54:ad:81:40:f7:ca:60:f9:c4:5c:37: 60:2c:85:50:49:93:c5:5c:1b:a4:0e:7a:8a:47:bd: 17:a0:d6:24:01:9c:2f:1b:40:c1:d8:a0:ff:3f:6f: 36:d4:14:5f:48:3e:25:ab:71:c0:cf:f9:4c:6c:01: d8:23:0a:99:5b:0d:10:0c:79:18:40:af:2b:81:f9: 57:1e:0d:ac:b1:eb:11:ab:e8:cd:c6:cc:14:32:7c: 7e:3a:0b:aa:ed:f0:ee:47:d7:9d:e3:a5:95:ea:ff: 9e:fc:e6:72:e9:6f:46:93:43:c2:0d:80:4b:18:a1: 34:1e:ab:a7:35:e1:92:d6:ab:f1:eb:b2:b2:70:a4: a1:89:cc:7c:9a:e3:c5:f5:ef:a4:d2:68:b9:df:a4: 27:fb:2e:65:59:6b:8e:91:b5:40:81:c5:0f:26:1d: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F7:C4:6E:A0:D2:6B:40:F8:BB:F9:11:91:10:18:0B:25:8E:A0:D9 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:44:2d:9e:d5:a7:9f:23:7d:c7:c9:63:1d:a3:58:47:ef:57: 0b:ae:eb:93:3b:ad:bb:10:f7:d1:90:78:6f:bc:45:98:bc:44: 85:04:97:83:33:c2:72:09:3a:40:74:94:11:d9:c7:f4:90:9c: 76:87:ff:57:70:a8:b9:cb:06:3c:0a:a0:a5:61:54:4e:f9:46: 9a:28:44:6b:45:a7:24:b8:66:9e:5c:1e:90:5d:a5:fb:90:90: 59:a5:7e:d8:bd:cc:89:0f:58:6d:39:73:be:ea:c7:e5:d1:1e: ad:8f:ef:35:e3:0b:6a:c2:53:d2:f8:ae:27:f1:89:ee:81:42: 5b:a1:3d:9a:1a:40:47:bc:a8:6c:eb:87:56:5a:fa:a9:a1:1e: 1b:86:82:90:ce:1e:0f:09:89:47:19:16:f4:72:b4:2b:bc:85: 0d:9c:81:a5:9e:38:bc:9d:d9:f3:59:3f:95:cc:2c:ce:da:94: 22:45:57:f7:ec:e7:70:ad:f6:06:90:3c:8b:4f:96:6d:67:f5: e8:64:6f:5f:72:8b:17:dc:dc:0b:04:50:b3:ed:cd:bb:fe:61: 10:25:d6:f0:20:27:e6:c1:32:7e:64:cd:85:70:42:0d:09:b0: d1:55:fd:99:2d:ea:e3:42:f0:19:91:6f:40:06:fe:5b:61:a1: 76:92:76:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKQNjB0t3wIrkcLb72hpMg/cxyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNDA1MTkxODI2NTRaFw0yNDA1MjMwMDIwNTRaMDMxMTAvBgNV BAMTKDYyRjdDNDZFQTBEMjZCNDBGOEJCRjkxMTkxMTAxODBCMjU4RUEwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3aIt68L0eEXOxQbksyT0Kpzr dDQPEr0STyPK1nFc1x6+zQA+y3iU9hxflSincl+qxpmDOp0T6KtGmFehtBNhsXqJ R/Ylv4jqYSctHh1oyAKD/fgkjF3Fg7mPcCtUrYFA98pg+cRcN2AshVBJk8VcG6QO eopHvReg1iQBnC8bQMHYoP8/bzbUFF9IPiWrccDP+UxsAdgjCplbDRAMeRhAryuB +VceDayx6xGr6M3GzBQyfH46C6rt8O5H153jpZXq/5785nLpb0aTQ8INgEsYoTQe q6c14ZLWq/HrsrJwpKGJzHya48X176TSaLnfpCf7LmVZa46RtUCBxQ8mHXwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYvfEbqDSa0D4u/kRkRAYCyWOoNkwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBELZ7Vp58jfcfJYx2jWEfvVwuu65M7rbsQ 99GQeG+8RZi8RIUEl4MzwnIJOkB0lBHZx/SQnHaH/1dwqLnLBjwKoKVhVE75Rpoo RGtFpyS4Zp5cHpBdpfuQkFmlfti9zIkPWG05c77qx+XRHq2P7zXjC2rCU9L4rifx ie6BQluhPZoaQEe8qGzrh1Za+qmhHhuGgpDOHg8JiUcZFvRytCu8hQ2cgaWeOLyd 2fNZP5XMLM7alCJFV/fs53Ct9gaQPItPlm1n9ehkb19yixfc3AsEULPtzbv+YRAl 1vAgJ+bBMn5kzYVwQg0JsNFV/Zkt6uNC8BmRb0AG/lthoXaSdtg= -----END CERTIFICATE-----Generated at Sun May 19 19:40:03 2024 by rpki-client on console-ams.rpki-client.org