$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: 2tE79GYZPbYTFdtoMe9RyHlxh++CMgVfSmGmjCWWs0s= Subject key identifier: 19:16:A1:EC:F5:1E:D7:51:F9:76:1C:D3:4F:8D:27:7D:D5:4D:6C:23 Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 5B4B5203CDC7C3FEFE5154AC9B13B89D768340FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 01A3 Signing time: Fri 22 Nov 2024 07:42:09 +0000 Manifest this update: Fri 22 Nov 2024 07:37:09 +0000 Manifest next update: Mon 25 Nov 2024 17:45:09 +0000 Files and hashes: 1: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: BX9QXEo5+DeT0FFJeJtGFqqCX7is6TLuP+owGzNXawI=) 2: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: lP471DAs+VGEU2gNJAg4M1deWki7GoizfHdZip4yqT8=) 3: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: ks9JPidHkztZIEPJWllI8TTDIV5/YT8ex9LJ2kaaAYU=) 4: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: UN0NCYVujIp/qu34FQUrBo2LMocWK6K1f7LxsvSm0hk=) 5: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: nmfqdJt0aXuTPYm1CDeqAamB0d6pnRG7QixtZqaeJvs=) 6: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: 3WBjii6d4mutsCLs/Us9xOB5sBsYJoFJdt9zsTSYHzk=) 7: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: a5XbgxWOlYfxiizoKqkwomxuwG1c799qt6OAm6CmmC0=) 8: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 1J6jGWgVogKQtYs6/NmHB+yspYKVU7ZdBvWeMjJNpqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4b:52:03:cd:c7:c3:fe:fe:51:54:ac:9b:13:b8:9d:76:83:40:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Nov 22 07:37:09 2024 GMT Not After : Nov 25 17:45:09 2024 GMT Subject: CN=1916A1ECF51ED751F9761CD34F8D277DD54D6C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:49:5d:5d:f7:20:51:54:2a:9e:6a:4d:3d:3a: 5c:94:f1:59:50:6b:c3:8e:ed:26:f4:c4:00:27:9c: ee:35:f6:ee:2e:40:43:d4:ed:20:40:cc:4a:5c:7a: de:5d:20:62:85:17:2d:dc:88:d1:47:15:d3:e5:60: 50:de:12:f6:12:68:90:d1:a7:83:52:d4:54:ce:91: 4e:97:33:f9:c6:c4:02:96:31:a2:db:9e:52:77:1b: 50:73:ff:34:c9:03:e3:37:34:cc:71:1f:f3:5f:a8: 2b:91:9f:70:dc:5c:2c:15:2c:f4:f9:62:92:c6:4e: b4:ed:9b:9f:84:85:1d:16:26:69:b4:a9:1a:b8:d1: 88:32:63:6b:68:8c:3a:2c:91:13:13:ce:ba:9d:fe: 73:eb:b6:85:34:a2:39:1b:15:4d:c5:6a:01:40:de: 53:4c:14:55:46:cc:5f:6c:c2:c8:14:d5:e4:d3:8c: c5:37:0a:90:23:ed:1f:52:6c:6b:24:5d:80:f2:79: 5e:06:02:29:20:a9:7f:24:3d:8a:85:ce:2d:25:cf: b8:c7:4e:ce:5b:66:82:48:4a:1c:c6:1a:f6:bb:5a: bc:0d:d5:c6:82:35:e0:96:e0:26:8e:c0:5c:17:24: 0e:88:4f:5d:72:38:a7:91:3c:3d:eb:4f:e5:77:dd: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:16:A1:EC:F5:1E:D7:51:F9:76:1C:D3:4F:8D:27:7D:D5:4D:6C:23 X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0a:3f:61:11:fc:40:73:bd:e8:6e:f4:87:ec:6f:41:55:1b: d6:3a:2e:fa:9c:39:44:64:29:a9:4b:68:6e:03:9a:9c:4b:07: 7b:39:c9:34:ec:75:1f:5f:c4:92:74:ce:7e:11:9d:88:73:09: 33:d8:27:0d:23:51:b6:35:6e:70:ed:26:58:62:73:5f:c5:86: 8d:87:7f:37:df:e9:de:1f:35:7f:87:02:9a:09:ff:df:b0:c6: 20:3c:a1:54:69:f0:c0:fe:73:f8:32:4c:d4:e3:67:fa:a4:cc: f5:cb:07:86:4e:26:05:09:e2:66:e7:dc:ee:00:ea:93:b8:63: 2e:81:88:a2:f6:5d:de:61:a2:4d:dc:cb:c5:d8:86:ea:45:5c: e7:8e:c9:25:a6:e9:81:9f:01:c7:13:70:1a:72:f3:80:b9:36: b1:37:06:b9:99:6d:69:26:0d:2c:99:3e:1a:34:a2:92:68:fa: 3c:72:34:55:1c:18:c5:b7:06:9a:5d:a2:51:65:96:cb:c9:a6: 07:74:12:9a:46:eb:07:e5:1c:b9:dd:b8:34:3f:56:04:62:c6: 17:0d:c8:16:a4:aa:ce:80:5d:ef:ab:cb:e2:7f:0d:05:48:53: 08:a9:e5:e2:72:9d:48:eb:01:04:42:3a:c8:d2:a5:47:1b:02: c6:55:d0:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0tSA83Hw/7+UVSsmxO4nXaDQPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNDExMjIwNzM3MDlaFw0yNDExMjUxNzQ1MDlaMDMxMTAvBgNV BAMTKDE5MTZBMUVDRjUxRUQ3NTFGOTc2MUNEMzRGOEQyNzdERDU0RDZDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSV1d9yBRVCqeak09OlyU8VlQ a8OO7Sb0xAAnnO419u4uQEPU7SBAzEpcet5dIGKFFy3ciNFHFdPlYFDeEvYSaJDR p4NS1FTOkU6XM/nGxAKWMaLbnlJ3G1Bz/zTJA+M3NMxxH/NfqCuRn3DcXCwVLPT5 YpLGTrTtm5+EhR0WJmm0qRq40YgyY2tojDoskRMTzrqd/nPrtoU0ojkbFU3FagFA 3lNMFFVGzF9swsgU1eTTjMU3CpAj7R9SbGskXYDyeV4GAikgqX8kPYqFzi0lz7jH Ts5bZoJIShzGGva7WrwN1caCNeCW4CaOwFwXJA6IT11yOKeRPD3rT+V33ckJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGRah7PUe11H5dhzTT40nfdVNbCMwHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoKP2ER/EBzvehu9Ifsb0FVG9Y6LvqcOURk KalLaG4DmpxLB3s5yTTsdR9fxJJ0zn4RnYhzCTPYJw0jUbY1bnDtJlhic1/Fho2H fzff6d4fNX+HApoJ/9+wxiA8oVRp8MD+c/gyTNTjZ/qkzPXLB4ZOJgUJ4mbn3O4A 6pO4Yy6BiKL2Xd5hok3cy8XYhupFXOeOySWm6YGfAccTcBpy84C5NrE3BrmZbWkm DSyZPho0opJo+jxyNFUcGMW3BppdolFllsvJpgd0EppG6wflHLnduDQ/VgRixhcN yBakqs6AXe+ry+J/DQVIUwip5eJynUjrAQRCOsjSpUcbAsZV0B8= -----END CERTIFICATE-----Generated at Fri Nov 22 09:38:56 2024 by rpki-client on console-ams.rpki-client.org