$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: mPK98SmTayPWq9NaUiz9ZwxPKD+fs84jQPNx8uRP1bY= Subject key identifier: BC:DF:8B:46:24:A5:FC:56:97:28:4E:DD:D3:C9:21:76:64:21:0E:98 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 03BF54743DBF489DCB70B299D66B6E5703A104F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: 14 Signing time: Thu 27 Jun 2024 02:12:05 +0000 Manifest this update: Thu 27 Jun 2024 02:07:05 +0000 Manifest next update: Sun 30 Jun 2024 02:56:05 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: nNBKEktVr9A2xOgxY2L/OFz+wOS0Vx4v39iGjYuuiPI=) 2: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: 7vOMce7ECZKur9MNJTNSXYLkjVSIh7m4AayMg2x0ym4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Jun 2024 23:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:bf:54:74:3d:bf:48:9d:cb:70:b2:99:d6:6b:6e:57:03:a1:04:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Jun 27 02:07:05 2024 GMT Not After : Jun 30 02:56:05 2024 GMT Subject: CN=BCDF8B4624A5FC5697284EDDD3C9217664210E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:c0:d1:52:55:e7:10:fc:09:de:e7:82:78: 36:2a:b3:aa:4a:2a:c4:12:d3:76:67:96:cf:bf:9a: 0a:12:f1:19:72:15:9b:8b:03:a3:89:08:b0:55:fb: 24:1d:14:f3:1e:0f:34:dd:5c:b6:9f:b9:f5:35:cb: cd:b1:ca:32:c0:c2:64:67:61:56:6d:f5:2b:22:29: 70:03:78:b0:e3:99:1e:2e:f6:2a:9d:8e:0e:7f:66: 8a:d5:c0:c5:34:36:54:93:12:15:1b:f2:dd:b3:6a: d9:b3:5c:81:9a:bf:3d:3d:4b:58:68:9b:40:c5:fe: 79:d0:11:8d:e3:8f:6b:4c:39:62:50:92:1a:76:26: 12:61:aa:b9:62:d8:5c:84:5f:c3:9a:f4:58:27:54: e9:02:c0:3e:ef:ee:83:64:47:1a:48:29:08:7f:71: dc:18:6f:d2:ad:86:4d:1a:28:a4:51:ac:c9:f9:81: 9f:7c:a7:09:0b:c8:2b:a1:c8:1d:b1:27:84:e8:e7: 55:9b:e0:c0:c5:fe:d8:5f:40:f0:1d:35:50:70:4d: 68:c0:c0:f6:b6:84:d8:78:e6:54:86:f3:b8:d1:38: ab:3e:93:a6:e3:e4:2a:c2:5a:73:24:a6:3f:12:bd: d5:bc:6b:b5:9b:fe:5d:6f:4b:55:eb:1e:9a:cb:0c: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DF:8B:46:24:A5:FC:56:97:28:4E:DD:D3:C9:21:76:64:21:0E:98 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:57:49:6b:c3:ed:a6:7a:51:d9:af:15:ea:b0:37:ba:8d:64: 45:1a:cd:cd:2b:b8:20:e4:99:76:70:06:17:3b:fb:4f:77:33: 8b:a9:53:c7:d1:8b:c5:e4:05:6d:08:bc:78:62:4a:cf:fa:eb: 16:75:66:6a:24:20:ef:f6:c3:8d:41:ed:15:fd:e5:1e:65:b9: 3e:12:f9:ca:f0:3d:e6:3e:06:fc:a9:58:a9:39:92:92:03:ac: 6f:8e:8e:3d:0a:fd:62:8c:49:03:ad:5d:9a:1d:52:b5:fe:ef: 2f:84:dd:86:fd:fd:b1:97:ca:99:e4:2f:ed:3a:39:26:eb:aa: 89:7c:47:de:a6:cd:fd:e6:f8:68:49:35:25:82:ec:be:d4:05: 74:fc:56:6c:7b:f2:4e:ea:fc:67:63:47:6a:57:46:5d:a3:61: c2:f9:9a:18:0d:6b:08:6a:26:28:a3:d9:b8:26:aa:b6:2b:97: 58:d5:ce:1b:92:eb:cf:55:ee:34:24:1c:00:d8:22:f0:99:0b: db:04:1a:21:ed:ed:ef:bc:0f:b8:9a:9c:d1:4e:fa:38:8e:38: 4a:bb:d7:22:df:69:70:cc:a3:3f:dd:4b:88:8a:3e:41:97:e2: 27:d0:f3:95:8d:1d:a6:18:65:f2:6d:6c:b1:39:92:8f:06:3b: 6a:02:f3:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA79UdD2/SJ3LcLKZ1mtuVwOhBPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNDA2MjcwMjA3MDVaFw0yNDA2MzAwMjU2MDVaMDMxMTAvBgNV BAMTKEJDREY4QjQ2MjRBNUZDNTY5NzI4NEVEREQzQzkyMTc2NjQyMTBFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMS8DRUlXnEPwJ3ueCeDYqs6pK KsQS03Znls+/mgoS8RlyFZuLA6OJCLBV+yQdFPMeDzTdXLafufU1y82xyjLAwmRn YVZt9SsiKXADeLDjmR4u9iqdjg5/ZorVwMU0NlSTEhUb8t2zatmzXIGavz09S1ho m0DF/nnQEY3jj2tMOWJQkhp2JhJhqrli2FyEX8Oa9FgnVOkCwD7v7oNkRxpIKQh/ cdwYb9Kthk0aKKRRrMn5gZ98pwkLyCuhyB2xJ4To51Wb4MDF/thfQPAdNVBwTWjA wPa2hNh45lSG87jROKs+k6bj5CrCWnMkpj8SvdW8a7Wb/l1vS1XrHprLDDjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvN+LRiSl/FaXKE7d08khdmQhDpgwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxXSWvD7aZ6UdmvFeqwN7qNZEUazc0ruCDk mXZwBhc7+093M4upU8fRi8XkBW0IvHhiSs/66xZ1ZmokIO/2w41B7RX95R5luT4S +crwPeY+BvypWKk5kpIDrG+Ojj0K/WKMSQOtXZodUrX+7y+E3Yb9/bGXypnkL+06 OSbrqol8R96mzf3m+GhJNSWC7L7UBXT8Vmx78k7q/GdjR2pXRl2jYcL5mhgNawhq Jiij2bgmqrYrl1jVzhuS689V7jQkHADYIvCZC9sEGiHt7e+8D7ianNFO+jiOOEq7 1yLfaXDMoz/dS4iKPkGX4ifQ85WNHaYYZfJtbLE5ko8GO2oC894= -----END CERTIFICATE-----Generated at Thu Jun 27 02:54:07 2024 by rpki-client on console-fra.rpki-client.org