$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft File: 032056FFABA06741112BA404900B315C87E35361.mft (raw, json) Hash identifier: 826ceNgRB8pJ+39UVUtsfMspAOR1aMSa0MdmK23/mZo= Subject key identifier: 04:13:D1:3F:7B:56:E4:D9:E6:8B:DC:EF:B8:07:BD:5A:D0:AD:D1:5F Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 Certificate issuer: /CN=032056FFABA06741112BA404900B315C87E35361 Certificate serial: 43A80F94A5C40BD324914D19BF33FD7B47F5C806 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft Manifest number: 03BD Signing time: Wed 15 May 2024 04:41:32 +0000 Manifest this update: Wed 15 May 2024 04:36:32 +0000 Manifest next update: Sat 18 May 2024 07:23:32 +0000 Files and hashes: 1: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: WJzkF+M9+RSs1NESAmQDrBba/fGvI31v60AuNcwGbXA=) 2: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: k4kGEWmJPdH11JPWKVnLRe8PScrv+1tjgbdhWefh5yE=) 3: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: pefL5zpagMnN6F91vtiUchYBoYrPSLuComWqXyqtyhM=) 4: 032056FFABA06741112BA404900B315C87E35361.crl (hash: pocL+NnjA7B0GVpE9CDSmRmx7rCzRgeHaT1rsyrnkWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 07:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a8:0f:94:a5:c4:0b:d3:24:91:4d:19:bf:33:fd:7b:47:f5:c8:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032056FFABA06741112BA404900B315C87E35361 Validity Not Before: May 15 04:36:32 2024 GMT Not After : May 18 07:23:32 2024 GMT Subject: CN=0413D13F7B56E4D9E68BDCEFB807BD5AD0ADD15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7e:ca:ea:46:a3:c9:32:e3:86:be:55:e0:6a: db:53:1b:f5:27:1b:3b:c7:11:4f:1c:2a:80:6d:65: 0a:20:b3:8a:83:fc:88:7c:b4:da:20:1b:ae:12:a5: b0:01:f6:d5:28:f4:5d:e5:a3:8c:fe:94:3f:ad:ad: 53:53:fc:98:bc:b8:07:89:ac:17:3d:d6:80:45:90: f4:f7:21:a4:49:0d:d1:58:54:48:c6:48:6b:2c:cf: 55:ab:5b:a8:74:38:44:e3:8a:c4:cc:2e:3c:ff:86: d5:d8:0d:61:f2:06:8d:68:7d:63:46:88:a0:05:ad: ee:29:17:6d:e2:b0:52:b3:48:8e:b6:41:34:dd:d0: 4e:2f:4d:dd:37:93:c7:da:4f:ad:74:49:c3:3e:48: fb:f5:46:95:9d:84:bb:62:a4:8e:95:db:fc:e7:97: 19:0f:b2:ff:88:21:59:ff:9b:7e:c1:df:d7:dc:19: 5a:49:5a:eb:3a:6e:b1:6d:47:ba:5a:b0:9c:83:48: c1:dc:85:d0:cc:cf:8f:da:fd:2d:fe:64:ca:2e:c1: 55:06:4f:84:cb:ab:b8:a9:41:2f:2f:c9:4e:3b:60: f9:46:af:a3:6f:b7:64:b7:e9:cb:9a:71:4e:ef:46: 43:25:76:5a:8e:a5:b6:67:12:15:01:23:bb:ef:6d: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:13:D1:3F:7B:56:E4:D9:E6:8B:DC:EF:B8:07:BD:5A:D0:AD:D1:5F X509v3 Authority Key Identifier: keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fc:c7:69:4e:25:18:c7:8e:35:ae:e9:69:e2:b5:57:2b:a3: 9f:ba:45:22:07:49:0c:3d:03:dd:c5:5b:6d:f3:45:0c:f4:8c: 73:ed:36:33:71:07:bd:04:c0:8e:b8:7a:53:14:44:34:9e:0a: c1:fd:e2:30:5d:00:42:e3:a1:ee:b6:6a:66:ef:fe:cd:44:a0: d8:9b:88:9c:5d:97:59:bf:66:62:20:95:3b:9f:fd:1a:0d:3c: e8:75:96:e2:d4:53:7d:ad:0e:cd:2f:6b:91:00:34:65:ab:00: 17:3e:62:fe:f3:44:47:af:87:5d:0d:9c:8f:41:46:01:3f:06: c9:f7:ce:97:12:42:c9:0d:16:cf:71:b3:52:f5:e6:8a:25:01: 82:dc:d8:c2:19:bf:9c:43:8c:65:0b:11:c0:a9:c3:5b:9f:40: ac:84:c8:22:49:27:b3:a2:de:9d:b9:f5:fe:d9:6f:a3:8e:81: 88:dc:ee:37:f5:44:95:64:33:b5:3f:b3:b6:18:df:a0:03:ab: 5a:0f:d3:77:41:44:c7:10:c1:0e:d7:08:28:21:9e:fb:c7:c3: 67:44:26:dc:b5:27:72:c5:4f:dd:9b:09:55:e0:f0:0d:c0:4a: f6:65:87:5e:33:ec:d5:64:ba:b8:19:94:75:d3:90:ad:d6:e6: 9d:f7:57:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6gPlKXEC9MkkU0ZvzP9e0f1yAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4 N0UzNTM2MTAeFw0yNDA1MTUwNDM2MzJaFw0yNDA1MTgwNzIzMzJaMDMxMTAvBgNV BAMTKDA0MTNEMTNGN0I1NkU0RDlFNjhCRENFRkI4MDdCRDVBRDBBREQxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdfsrqRqPJMuOGvlXgattTG/Un GzvHEU8cKoBtZQogs4qD/Ih8tNogG64SpbAB9tUo9F3lo4z+lD+trVNT/Ji8uAeJ rBc91oBFkPT3IaRJDdFYVEjGSGssz1WrW6h0OETjisTMLjz/htXYDWHyBo1ofWNG iKAFre4pF23isFKzSI62QTTd0E4vTd03k8faT610ScM+SPv1RpWdhLtipI6V2/zn lxkPsv+IIVn/m37B39fcGVpJWus6brFtR7pasJyDSMHchdDMz4/a/S3+ZMouwVUG T4TLq7ipQS8vyU47YPlGr6Nvt2S36cuacU7vRkMldlqOpbZnEhUBI7vvbU2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBBPRP3tW5Nnmi9zvuAe9WtCt0V8wHwYDVR0j BBgwFoAUAyBW/6ugZ0ERK6QEkAsxXIfjU2EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE4MjBiNC04MmVmLTQ0MTItYmUyZS01ZDY5MTRiZDQ4NDQvMC8wMzIwNTZGRkFC QTA2NzQxMTEyQkE0MDQ5MDBCMzE1Qzg3RTM1MzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4N0Uz NTM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl MmUtNWQ2OTE0YmQ0ODQ0LzAvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMx NUM4N0UzNTM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAj8x2lOJRjHjjWu6WnitVcro5+6RSIHSQw9 A93FW23zRQz0jHPtNjNxB70EwI64elMURDSeCsH94jBdAELjoe62ambv/s1EoNib iJxdl1m/ZmIglTuf/RoNPOh1luLUU32tDs0va5EANGWrABc+Yv7zREevh10NnI9B RgE/Bsn3zpcSQskNFs9xs1L15oolAYLc2MIZv5xDjGULEcCpw1ufQKyEyCJJJ7Oi 3p259f7Zb6OOgYjc7jf1RJVkM7U/s7YY36ADq1oP03dBRMcQwQ7XCCghnvvHw2dE Jty1J3LFT92bCVXg8A3ASvZlh14z7NVkurgZlHXTkK3W5p33Vz0= -----END CERTIFICATE-----Generated at Wed May 15 05:28:08 2024 by rpki-client on console-ams.rpki-client.org