$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: SVD4/kFfXkO2ZI4QWIFG6LvBLMvIq6/+AIokjIFaNvM= Subject key identifier: 25:98:82:77:61:B7:BF:51:92:C5:B7:C9:E7:A7:A7:96:24:CD:91:4D Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 6E94CF31B813824F1E0A2C186A4B859EDB5E02E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: 3A Signing time: Sat 28 Sep 2024 03:32:17 +0000 Manifest this update: Sat 28 Sep 2024 03:27:17 +0000 Manifest next update: Tue 01 Oct 2024 05:37:17 +0000 Files and hashes: 1: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: phraPaHMULd0CdiMhYCuYrXL+SrNRbG2SVNx3f0aCBc=) 2: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: UffQnz05QFV8GgWK1doH6hmpZ9NUthRZ5as/2PM5Ybc=) 3: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LrI1MXered6/Wn/sgVv2p3qHmbqQpnmve4fLzG+M9WE=) 4: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 1f4UXWKsOacyCVtxubj2AeJTPPvOpeqJnHyC0iziuxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 10:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:94:cf:31:b8:13:82:4f:1e:0a:2c:18:6a:4b:85:9e:db:5e:02:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Sep 28 03:27:17 2024 GMT Not After : Oct 1 05:37:17 2024 GMT Subject: CN=2598827761B7BF5192C5B7C9E7A7A79624CD914D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c4:b7:16:c2:07:cf:19:04:ca:aa:e9:cb:39: da:45:0b:5d:b9:f6:e7:25:53:d9:d2:a2:2c:4b:49: 95:39:ae:da:f6:8f:0d:3e:a9:0e:5c:3f:16:49:5f: 68:ce:0f:af:97:a2:f8:45:71:54:91:a4:22:9f:33: 84:c1:73:66:47:78:8b:c9:0c:68:8c:08:0f:cb:00: 6d:ec:ff:90:79:f7:5b:2e:4f:f0:7c:5a:e0:b3:99: 79:8d:d2:f3:d4:e6:92:89:7b:91:97:45:a6:6a:30: 10:cb:02:d0:ad:00:e0:ba:cc:e3:45:6a:9c:04:e9: b5:99:50:f6:0c:38:d3:9f:8f:ad:79:b5:fa:2a:ed: ba:a2:eb:50:6e:ea:d7:f1:a0:2b:5c:be:6e:c1:f6: be:0b:f4:22:8e:a2:ef:82:06:a4:ce:71:02:1e:83: 78:58:69:52:d4:b5:1a:2d:26:31:6f:1e:60:d9:82: 53:41:4c:de:15:32:94:55:35:ea:b0:71:11:16:4c: aa:13:d6:ff:df:d3:61:a1:d2:73:90:5a:65:9e:01: d0:59:8a:13:36:c4:9f:a1:91:1d:c4:fb:1d:e3:d5: 97:2e:32:25:f4:e7:03:26:44:e6:ca:f4:cb:30:00: 38:b9:b5:9e:51:cb:58:0b:42:89:27:80:94:66:85: 63:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:82:77:61:B7:BF:51:92:C5:B7:C9:E7:A7:A7:96:24:CD:91:4D X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:77:63:fb:0d:03:cb:fa:7d:43:c0:98:ab:ca:fb:62:b4:77: c7:c1:f7:8d:5e:73:44:30:6f:55:df:b7:2d:99:67:1b:c0:43: ca:4f:35:de:d9:d5:21:e4:03:5f:7f:e5:90:49:22:40:e4:3d: fd:64:15:36:71:55:85:a3:9f:0a:f8:7a:62:54:d2:e7:7b:6e: 33:d5:18:36:e1:09:08:8d:d2:f3:8f:0b:af:cb:2f:ba:33:da: cf:34:2e:df:87:ab:82:c2:4a:78:57:35:21:7b:d2:6e:24:a6: e2:63:43:24:f3:08:2a:e2:ad:be:dc:f8:21:d2:b3:48:6d:a2: cb:7a:ac:ff:3f:14:63:44:94:9a:91:05:07:7a:3e:6c:af:3c: f6:6b:ee:73:7d:c1:56:95:38:f9:ef:54:0e:65:94:eb:37:e2: f9:17:9e:94:b6:18:c7:79:df:ab:f2:7b:e8:4d:41:c4:4d:8c: 70:31:cd:c3:87:81:11:4e:8b:ee:04:8d:ec:dc:61:ad:97:69: 76:44:95:2d:ba:71:cf:eb:42:b0:ee:d1:41:f1:b0:be:18:f4: 5b:c0:69:f7:77:7b:72:b6:c3:f1:63:c5:7b:64:d2:18:9b:fe: c9:2b:56:a9:8a:39:35:35:44:0c:56:ab:72:43:77:18:f0:1a: 0f:c8:6b:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpTPMbgTgk8eCiwYakuFntteAuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNDA5MjgwMzI3MTdaFw0yNDEwMDEwNTM3MTdaMDMxMTAvBgNV BAMTKDI1OTg4Mjc3NjFCN0JGNTE5MkM1QjdDOUU3QTdBNzk2MjRDRDkxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvxLcWwgfPGQTKqunLOdpFC125 9uclU9nSoixLSZU5rtr2jw0+qQ5cPxZJX2jOD6+XovhFcVSRpCKfM4TBc2ZHeIvJ DGiMCA/LAG3s/5B591suT/B8WuCzmXmN0vPU5pKJe5GXRaZqMBDLAtCtAOC6zONF apwE6bWZUPYMONOfj615tfoq7bqi61Bu6tfxoCtcvm7B9r4L9CKOou+CBqTOcQIe g3hYaVLUtRotJjFvHmDZglNBTN4VMpRVNeqwcREWTKoT1v/f02Gh0nOQWmWeAdBZ ihM2xJ+hkR3E+x3j1ZcuMiX05wMmRObK9MswADi5tZ5Ry1gLQokngJRmhWNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJZiCd2G3v1GSxbfJ56enliTNkU0wHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd3Y/sNA8v6fUPAmKvK+2K0d8fB941ec0Qw b1Xfty2ZZxvAQ8pPNd7Z1SHkA19/5ZBJIkDkPf1kFTZxVYWjnwr4emJU0ud7bjPV GDbhCQiN0vOPC6/LL7oz2s80Lt+Hq4LCSnhXNSF70m4kpuJjQyTzCCrirb7c+CHS s0htost6rP8/FGNElJqRBQd6PmyvPPZr7nN9wVaVOPnvVA5llOs34vkXnpS2GMd5 36vye+hNQcRNjHAxzcOHgRFOi+4EjezcYa2XaXZElS26cc/rQrDu0UHxsL4Y9FvA afd3e3K2w/FjxXtk0hib/skrVqmKOTU1RAxWq3JDdxjwGg/Ia5k= -----END CERTIFICATE-----Generated at Sat Sep 28 05:42:01 2024 by rpki-client on console-fra.rpki-client.org