$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: JZnY8sYVR4l/6P/fILYMVnKmEmRAv6WRG/xEml2ZoSE= Subject key identifier: 55:89:DC:A3:25:73:6C:70:86:2C:61:86:C4:8F:EB:49:40:AD:C0:B6 Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 5E42D02483874C3ECD23538D205510D9CE4662AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: 55 Signing time: Thu 21 Nov 2024 17:52:27 +0000 Manifest this update: Thu 21 Nov 2024 17:47:27 +0000 Manifest next update: Mon 25 Nov 2024 01:14:27 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: nNBKEktVr9A2xOgxY2L/OFz+wOS0Vx4v39iGjYuuiPI=) 2: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: PmqzL8amMERDLAtabTaDiAh8yxKxQq3w7vMcUILIbp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:42:d0:24:83:87:4c:3e:cd:23:53:8d:20:55:10:d9:ce:46:62:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Nov 21 17:47:27 2024 GMT Not After : Nov 25 01:14:27 2024 GMT Subject: CN=5589DCA325736C70862C6186C48FEB4940ADC0B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:cf:3a:55:7c:53:79:b4:54:3a:f1:87:78: 1c:30:9e:b9:25:0c:20:93:13:86:da:7b:7e:d9:f0: 1c:95:47:59:15:e2:4c:e5:c3:f6:0b:90:d7:ca:63: c7:7c:46:ad:ba:e8:ec:e9:8b:65:67:88:13:6f:2b: fa:05:95:fb:ff:d6:77:cb:c6:0f:4e:eb:5b:50:31: dd:f2:a3:7c:1c:68:ed:8d:a5:cd:89:da:10:44:e6: 62:24:35:4a:89:71:11:e9:65:39:62:4a:7c:1a:42: d3:1d:25:de:41:05:d0:68:89:06:40:0e:64:8e:71: 18:1c:be:f0:75:46:24:6c:11:1d:3d:bd:ef:b5:57: ed:95:3d:bf:c4:70:9d:ba:11:06:b8:e5:32:7c:b9: ce:d3:5c:f4:03:8a:38:f1:07:e7:2b:88:de:c1:79: 1b:af:fe:c3:53:62:06:b6:f3:f4:f6:5f:1f:45:af: b0:20:4e:15:47:c1:f6:89:c2:b1:fa:43:54:ce:62: ee:c3:b4:44:bf:db:03:50:e5:51:f8:1b:c6:1a:0e: 00:c3:c0:01:af:68:a4:7f:23:46:aa:be:cb:bc:05: 28:b2:18:e9:17:7f:4f:68:94:b2:f7:f7:fd:e6:73: e4:9a:fd:60:b2:ec:72:45:5d:86:93:c8:74:2e:af: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:89:DC:A3:25:73:6C:70:86:2C:61:86:C4:8F:EB:49:40:AD:C0:B6 X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a4:88:8c:6c:0a:b8:57:fd:f6:4c:dc:26:c9:b4:82:7d:29: 98:70:a2:24:0d:79:28:5c:08:14:af:9d:e0:56:bc:f8:23:72: 84:dc:5a:86:7c:9a:fd:9f:99:a9:9a:20:04:f8:67:f3:de:6f: ab:c7:ea:4e:b2:6e:da:d9:b0:0e:52:5a:e6:f0:4f:88:d0:ff: 83:e9:3d:b6:02:7c:a5:3e:14:ea:20:e1:13:7f:40:5e:29:12: 78:01:7f:a0:ab:79:b4:aa:9e:55:50:b6:1b:b9:90:0b:af:96: 1d:8c:7c:e2:51:57:2c:94:f8:44:5c:8b:f0:c8:53:04:c9:ab: 21:ad:3f:19:10:1b:97:6f:7c:77:ae:1a:7a:f1:59:b8:e9:4c: 2a:23:02:ca:e2:48:d8:c2:a1:61:1b:09:e9:1c:40:bc:8f:f1: bc:20:26:49:28:82:ee:24:85:9b:60:57:8f:db:c4:e2:6e:ee: 90:5f:d2:7a:5d:43:30:75:ca:b6:50:16:33:a5:96:9b:51:92: df:e8:cf:9b:92:07:8c:1f:64:d1:c7:59:9b:e6:0f:8c:0d:22: 80:30:d1:b3:79:27:d0:2c:5d:f8:31:88:43:71:18:9b:83:4c: 0b:b6:50:6f:a5:17:74:71:7d:64:33:3e:8f:75:31:1b:d0:aa: 86:63:06:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXkLQJIOHTD7NI1ONIFUQ2c5GYqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNDExMjExNzQ3MjdaFw0yNDExMjUwMTE0MjdaMDMxMTAvBgNV BAMTKDU1ODlEQ0EzMjU3MzZDNzA4NjJDNjE4NkM0OEZFQjQ5NDBBREMwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh1886VXxTebRUOvGHeBwwnrkl DCCTE4bae37Z8ByVR1kV4kzlw/YLkNfKY8d8Rq266Ozpi2VniBNvK/oFlfv/1nfL xg9O61tQMd3yo3wcaO2Npc2J2hBE5mIkNUqJcRHpZTliSnwaQtMdJd5BBdBoiQZA DmSOcRgcvvB1RiRsER09ve+1V+2VPb/EcJ26EQa45TJ8uc7TXPQDijjxB+criN7B eRuv/sNTYga28/T2Xx9Fr7AgThVHwfaJwrH6Q1TOYu7DtES/2wNQ5VH4G8YaDgDD wAGvaKR/I0aqvsu8BSiyGOkXf09olLL39/3mc+Sa/WCy7HJFXYaTyHQur9/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYncoyVzbHCGLGGGxI/rSUCtwLYwHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGakiIxsCrhX/fZM3CbJtIJ9KZhwoiQNeShc CBSvneBWvPgjcoTcWoZ8mv2fmamaIAT4Z/Peb6vH6k6ybtrZsA5SWubwT4jQ/4Pp PbYCfKU+FOog4RN/QF4pEngBf6CrebSqnlVQthu5kAuvlh2MfOJRVyyU+ERci/DI UwTJqyGtPxkQG5dvfHeuGnrxWbjpTCojAsriSNjCoWEbCekcQLyP8bwgJkkogu4k hZtgV4/bxOJu7pBf0npdQzB1yrZQFjOllptRkt/oz5uSB4wfZNHHWZvmD4wNIoAw 0bN5J9AsXfgxiENxGJuDTAu2UG+lF3RxfWQzPo91MRvQqoZjBnU= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org