$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: d9xqC2jZGCZHj6eTmd3nBnHkqqBj88xKC+jS0hSqwHU= Subject key identifier: 5E:7E:0A:48:FB:11:11:37:85:FA:91:49:FC:3E:D7:BE:A3:9F:9D:07 Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 5A3613C65746CB6CDFA964C305432973DEA40365 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: 45 Signing time: Sun 24 Nov 2024 00:12:25 +0000 Manifest this update: Sun 24 Nov 2024 00:07:25 +0000 Manifest next update: Wed 27 Nov 2024 07:04:25 +0000 Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: 49HTMVxx05wPdArfdbkc8ZuyfBJmlfmMETsXKqg+H4o=) 2: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: xP4kRcnoMQb/0gVn1djwWU8NAK9tcyrl501sua4qN5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:36:13:c6:57:46:cb:6c:df:a9:64:c3:05:43:29:73:de:a4:03:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Nov 24 00:07:25 2024 GMT Not After : Nov 27 07:04:25 2024 GMT Subject: CN=5E7E0A48FB11113785FA9149FC3ED7BEA39F9D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:fa:eb:f3:72:81:b4:e7:fb:71:1c:80:a4: 9c:0b:47:c0:62:12:48:aa:99:bb:75:ce:9e:8a:62: 38:f3:ef:01:50:7d:a9:00:da:68:d4:e7:ae:5b:79: 1b:45:de:00:9b:5b:40:9d:be:d0:f0:b7:4c:61:21: 6a:45:33:78:2a:e3:17:22:93:47:3a:ac:bd:85:e3: cb:8d:77:fd:ac:f4:16:98:34:55:37:bb:0f:02:f7: 13:0f:5e:5a:60:1e:a7:03:14:e4:64:4e:44:80:2c: 7d:18:14:2c:47:98:d4:c5:fd:c9:37:64:23:af:dd: 6c:97:54:0d:49:2d:7f:f2:aa:ed:fc:e5:d0:6e:b1: de:a2:fe:32:4c:cd:72:56:ff:23:09:ea:27:5a:85: 3b:b4:9b:f8:7d:08:a9:e4:c8:78:18:55:89:37:de: e3:18:73:b2:2c:99:c8:f0:9e:97:61:43:ae:c2:d2: c6:34:06:94:ad:78:f5:95:ae:4e:c0:28:1b:33:14: 2e:18:92:92:55:d9:18:03:82:e8:af:1f:f3:5c:0e: 31:82:af:af:ef:a9:27:9d:5f:2c:9f:c6:26:cc:a6: 45:83:fb:15:fa:1c:62:eb:bb:c6:85:11:8a:af:11: 61:97:28:fa:d7:ba:cd:79:24:b0:58:5f:b1:d5:ab: 2d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7E:0A:48:FB:11:11:37:85:FA:91:49:FC:3E:D7:BE:A3:9F:9D:07 X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a6:97:88:84:f4:8c:ec:f8:59:16:72:f8:0e:e4:d2:74:96: 4f:a5:3d:b0:09:bf:ca:7a:ce:69:6c:45:97:48:18:24:34:e0: 94:19:9c:8e:05:07:0e:79:33:1c:80:78:9b:fb:f7:ff:f8:20: fc:45:14:6e:cf:91:9e:57:ab:7a:35:92:44:5e:8f:78:0e:d3: 5b:cf:ff:0f:f8:96:61:75:f5:5f:70:1a:b9:1b:14:bc:26:f2: c4:18:29:99:eb:73:3f:41:04:ff:28:05:49:66:e9:4b:d2:bb: 49:73:46:ad:d4:86:1f:64:2c:32:52:2b:36:09:b4:14:f1:29: ab:fb:11:e3:10:e5:43:97:0e:d3:ed:26:a1:eb:02:50:79:33: 40:e6:55:8c:25:6b:f0:52:c9:6d:e6:ec:a0:07:fd:78:c5:46: ce:8c:aa:61:18:17:30:da:bd:7a:41:49:93:79:ab:94:d1:d0: 44:97:45:66:61:d9:33:3d:d3:05:b7:7c:70:09:40:75:db:19: 1d:ec:18:4f:69:cc:3a:e1:8c:a9:99:88:95:e7:62:41:1e:7d: 11:9e:f8:46:35:0b:cd:3d:99:36:d3:f1:61:64:f1:39:76:a4: 7c:62:fe:54:92:d7:30:7a:55:48:c7:a9:c0:53:ab:24:a9:79: a8:7c:37:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjYTxldGy2zfqWTDBUMpc96kA2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNDExMjQwMDA3MjVaFw0yNDExMjcwNzA0MjVaMDMxMTAvBgNV BAMTKDVFN0UwQTQ4RkIxMTExMzc4NUZBOTE0OUZDM0VEN0JFQTM5RjlEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbvrr83KBtOf7cRyApJwLR8Bi Ekiqmbt1zp6KYjjz7wFQfakA2mjU565beRtF3gCbW0CdvtDwt0xhIWpFM3gq4xci k0c6rL2F48uNd/2s9BaYNFU3uw8C9xMPXlpgHqcDFORkTkSALH0YFCxHmNTF/ck3 ZCOv3WyXVA1JLX/yqu385dBusd6i/jJMzXJW/yMJ6idahTu0m/h9CKnkyHgYVYk3 3uMYc7IsmcjwnpdhQ67C0sY0BpStePWVrk7AKBszFC4YkpJV2RgDguivH/NcDjGC r6/vqSedXyyfxibMpkWD+xX6HGLru8aFEYqvEWGXKPrXus15JLBYX7HVqy3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXn4KSPsRETeF+pFJ/D7XvqOfnQcwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+ml4iE9Izs+FkWcvgO5NJ0lk+lPbAJv8p6 zmlsRZdIGCQ04JQZnI4FBw55MxyAeJv79//4IPxFFG7PkZ5Xq3o1kkRej3gO01vP /w/4lmF19V9wGrkbFLwm8sQYKZnrcz9BBP8oBUlm6UvSu0lzRq3Uhh9kLDJSKzYJ tBTxKav7EeMQ5UOXDtPtJqHrAlB5M0DmVYwla/BSyW3m7KAH/XjFRs6MqmEYFzDa vXpBSZN5q5TR0ESXRWZh2TM90wW3fHAJQHXbGR3sGE9pzDrhjKmZiJXnYkEefRGe +EY1C809mTbT8WFk8Tl2pHxi/lSS1zB6VUjHqcBTqySpeah8N5U= -----END CERTIFICATE-----Generated at Sun Nov 24 01:31:57 2024 by rpki-client on console-ams.rpki-client.org