$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: yYAz3MVQjKrGs0ohHH/uHU9lybFm2NK00e31hgCXidE= Subject key identifier: 3D:78:A6:B5:C1:9B:4F:D3:45:09:7A:BA:3C:84:C0:C7:EC:54:3E:17 Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 2CBE608CCD3A4D31B842BC3CB7D3672052D135D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: 3E Signing time: Fri 27 Sep 2024 11:52:14 +0000 Manifest this update: Fri 27 Sep 2024 11:47:14 +0000 Manifest next update: Mon 30 Sep 2024 16:19:14 +0000 Files and hashes: 1: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: Yj9fVpEoMhbJbpBW/RZjbI15F62UsbvXsfVpuRK2Epo=) 2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: 4jkdQCcw/oC60Uqzp6OYMYN8DQx59gTLPYhgvW+GgPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 06:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:be:60:8c:cd:3a:4d:31:b8:42:bc:3c:b7:d3:67:20:52:d1:35:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Sep 27 11:47:14 2024 GMT Not After : Sep 30 16:19:14 2024 GMT Subject: CN=3D78A6B5C19B4FD345097ABA3C84C0C7EC543E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d0:e9:95:16:fa:cb:68:5c:7f:6a:5b:6d:67: 5f:91:e8:cb:8e:79:58:4f:86:3b:3b:a8:9a:88:c8: 27:f5:67:ef:e2:eb:d8:83:08:0c:c7:c5:d8:5a:68: 93:2f:f4:99:8e:45:e7:13:66:a5:6a:23:db:7e:7d: 99:c1:d8:54:d3:97:07:37:4a:a0:b3:77:ca:af:c1: 58:ff:ae:bf:2d:99:b1:13:90:a2:5b:39:f6:6e:97: 6b:4b:90:b2:57:03:e7:88:9f:1d:d2:05:24:42:8f: e9:02:fe:52:4b:35:ba:3b:d9:d2:67:a6:30:3d:18: b8:14:73:6f:f4:1b:2e:03:50:34:8f:e9:1e:bc:13: 89:52:20:bb:e6:9a:47:84:68:01:bd:fa:21:08:21: 8e:6b:86:3b:27:39:cf:77:01:1f:80:b2:e2:63:58: d3:83:ac:74:0e:61:55:ed:78:d1:e9:5a:66:53:4a: 97:08:39:54:65:3f:03:5d:3b:5d:45:6d:c0:5a:34: 9e:f5:4f:64:c4:7d:79:f8:af:cd:34:92:3f:c5:71: fc:83:a8:1f:cc:21:f6:73:a2:6b:bf:7e:e6:d4:aa: 1e:11:8a:c2:5c:a5:b3:d5:4f:da:a9:08:25:56:ae: 35:39:46:7e:9d:dd:37:15:66:1a:2e:88:6c:4a:aa: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:78:A6:B5:C1:9B:4F:D3:45:09:7A:BA:3C:84:C0:C7:EC:54:3E:17 X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:37:e3:f3:b9:e3:fc:97:da:2e:75:7c:8f:33:bd:1e:61:73: 1c:62:d5:46:23:34:85:1a:0c:97:60:6b:c6:2f:f4:67:f7:9c: e5:8d:1b:6d:d0:e5:92:64:a7:ef:76:06:c3:c2:c1:7a:dd:16: e0:97:b7:e0:40:f5:84:1e:5b:b6:b7:66:6c:40:4d:15:15:23: a5:0b:62:db:07:0e:aa:d0:bb:99:69:63:78:28:bf:de:e6:4a: 59:3a:c7:58:26:c7:8a:7a:3b:04:71:8b:8c:60:83:59:03:e2: 4f:98:3b:4f:fd:3d:07:d7:57:b9:43:86:9e:9e:ef:a8:f7:40: 9f:0e:fa:c3:d3:0f:17:29:d1:50:d3:ca:32:60:b5:cd:83:f8: 56:0a:a8:7d:e3:71:72:cc:d9:c8:27:28:f9:15:ed:95:65:91: 7d:b3:8d:fb:93:27:bc:71:90:d8:b2:4a:55:41:b1:4f:2f:52: bf:15:f5:03:99:23:7d:34:c9:7b:d7:f2:02:dc:ab:32:ca:33: 2d:e7:22:01:49:8a:7d:4d:30:0f:06:67:b0:46:7f:18:4a:0a: 84:6e:18:1f:31:d0:5e:e1:31:24:a0:e3:f8:e7:3c:ba:81:44: f9:65:f7:9d:f9:67:f4:f3:10:0e:85:50:ff:12:90:6a:7e:44: e6:46:ad:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULL5gjM06TTG4Qrw8t9NnIFLRNdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNDA5MjcxMTQ3MTRaFw0yNDA5MzAxNjE5MTRaMDMxMTAvBgNV BAMTKDNENzhBNkI1QzE5QjRGRDM0NTA5N0FCQTNDODRDMEM3RUM1NDNFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl0OmVFvrLaFx/alttZ1+R6MuO eVhPhjs7qJqIyCf1Z+/i69iDCAzHxdhaaJMv9JmORecTZqVqI9t+fZnB2FTTlwc3 SqCzd8qvwVj/rr8tmbETkKJbOfZul2tLkLJXA+eInx3SBSRCj+kC/lJLNbo72dJn pjA9GLgUc2/0Gy4DUDSP6R68E4lSILvmmkeEaAG9+iEIIY5rhjsnOc93AR+AsuJj WNODrHQOYVXteNHpWmZTSpcIOVRlPwNdO11FbcBaNJ71T2TEfXn4r800kj/FcfyD qB/MIfZzomu/fubUqh4RisJcpbPVT9qpCCVWrjU5Rn6d3TcVZhouiGxKqoYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPXimtcGbT9NFCXq6PITAx+xUPhcwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJU34/O54/yX2i51fI8zvR5hcxxi1UYjNIUa DJdga8Yv9Gf3nOWNG23Q5ZJkp+92BsPCwXrdFuCXt+BA9YQeW7a3ZmxATRUVI6UL YtsHDqrQu5lpY3gov97mSlk6x1gmx4p6OwRxi4xgg1kD4k+YO0/9PQfXV7lDhp6e 76j3QJ8O+sPTDxcp0VDTyjJgtc2D+FYKqH3jcXLM2cgnKPkV7ZVlkX2zjfuTJ7xx kNiySlVBsU8vUr8V9QOZI300yXvX8gLcqzLKMy3nIgFJin1NMA8GZ7BGfxhKCoRu GB8x0F7hMSSg4/jnPLqBRPll9535Z/TzEA6FUP8SkGp+ROZGrYg= -----END CERTIFICATE-----Generated at Fri Sep 27 12:52:45 2024 by rpki-client on console-ams.rpki-client.org