$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: IwpF34n1iNW2vXygdNEx+pRBha5Py7c2PNhc/e3suBI= Subject key identifier: 8D:C0:9D:03:A7:8D:3F:28:A3:40:06:7E:DF:A3:1D:8B:B5:CA:42:78 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 4864267DD9F35CC851A76F997848174FC4F10898 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: E9 Signing time: Fri 22 Nov 2024 18:20:56 +0000 Manifest this update: Fri 22 Nov 2024 18:15:56 +0000 Manifest next update: Tue 26 Nov 2024 03:56:56 +0000 Files and hashes: 1: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: nniErfK002dK7QyMM2A5j82N51jRcj0qmWVOVl13/FY=) 2: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: Z06476NaHt115mn6/pag0qCNS8otsV8hkdLcQH3kosY=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: tNa2iWz1Y62lu1NCdufrg6k1iWefHX4gFLjt/Rd+OAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:64:26:7d:d9:f3:5c:c8:51:a7:6f:99:78:48:17:4f:c4:f1:08:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Nov 22 18:15:56 2024 GMT Not After : Nov 26 03:56:56 2024 GMT Subject: CN=8DC09D03A78D3F28A340067EDFA31D8BB5CA4278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:c5:70:0f:7f:3e:1a:d0:e0:51:39:9c:06: f7:67:cd:e5:91:f8:46:27:6b:ac:8e:6f:a7:7c:1d: 5b:2a:73:58:f7:b4:66:65:12:d5:81:2e:d4:4a:d1: ae:b1:1a:54:55:fe:a9:00:52:b6:c5:53:b6:28:b9: a6:83:63:db:dc:7d:12:82:85:3c:68:80:f0:67:38: f8:13:45:e9:30:f7:2a:03:50:d6:f8:d5:b2:b0:c1: 56:75:d2:f4:13:43:45:66:e0:3c:84:87:29:05:23: b8:77:79:87:ab:68:4b:8a:3c:c4:32:b5:74:5c:77: 8f:23:f0:52:3b:25:c1:34:01:cf:48:64:86:76:0f: 03:a2:c5:24:62:99:b6:47:80:c2:01:7f:b1:90:ac: f6:4f:65:9b:e9:57:7b:03:8f:c1:12:13:cd:5b:3a: a0:62:c1:b4:ec:ed:e4:ab:16:43:27:cc:55:97:5c: 29:69:d0:6d:b8:77:17:9b:ae:ee:83:b1:f8:67:ab: 65:83:51:92:17:c3:3a:86:ad:54:9c:55:d3:b0:6a: 64:a7:b1:f3:f2:10:d4:1c:f3:1e:e1:07:5f:8e:8e: f5:91:86:2e:0e:11:6d:37:92:66:bf:cc:47:af:e5: 41:98:bd:e8:94:3a:ef:1e:14:ed:4c:78:c6:6a:69: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C0:9D:03:A7:8D:3F:28:A3:40:06:7E:DF:A3:1D:8B:B5:CA:42:78 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3a:4c:0d:3f:45:13:85:0e:52:b4:bc:ed:20:ac:8f:89:dd: ae:88:35:e5:be:ba:9c:96:da:31:62:f6:e3:42:a5:55:c7:17: a8:14:b4:da:22:e8:1c:a0:47:cb:12:99:1a:9b:5f:25:f9:54: 0d:4d:01:ea:79:ff:f6:ea:f3:08:12:8d:4d:36:10:8e:f0:4f: 4f:5b:8f:8c:41:b5:79:de:09:f2:a8:8f:38:e5:41:9e:0a:4b: b5:11:f3:6c:a3:98:0e:63:43:3f:44:5a:6d:5f:83:8e:db:6d: 30:82:78:a2:94:c7:00:63:ce:e3:58:0d:81:b1:a9:a0:2c:84: 45:3c:04:2f:a0:9e:1d:c6:60:9c:f4:8a:02:c6:1d:ed:bc:66: 13:ec:7e:13:72:d6:65:2d:38:af:e6:ad:a4:83:92:6a:54:85: 93:f1:e6:65:56:1e:ca:33:2b:8c:e5:8b:13:a6:bd:d4:76:b2: cc:3f:fe:0d:39:dc:18:cd:ca:c8:74:63:14:42:f2:79:3d:a3: b8:b9:84:4e:6e:ce:11:67:c9:a9:55:de:54:f3:d7:76:ef:e8: aa:ed:56:a2:0b:f8:66:0f:4a:6d:a8:48:cf:56:73:5b:0b:59: 4b:ef:0f:52:f8:dd:8e:08:6e:b0:0e:0a:71:6d:9c:f7:76:ac: a6:f6:d3:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSGQmfdnzXMhRp2+ZeEgXT8TxCJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNDExMjIxODE1NTZaFw0yNDExMjYwMzU2NTZaMDMxMTAvBgNV BAMTKDhEQzA5RDAzQTc4RDNGMjhBMzQwMDY3RURGQTMxRDhCQjVDQTQyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWsVwD38+GtDgUTmcBvdnzeWR +EYna6yOb6d8HVsqc1j3tGZlEtWBLtRK0a6xGlRV/qkAUrbFU7YouaaDY9vcfRKC hTxogPBnOPgTRekw9yoDUNb41bKwwVZ10vQTQ0Vm4DyEhykFI7h3eYeraEuKPMQy tXRcd48j8FI7JcE0Ac9IZIZ2DwOixSRimbZHgMIBf7GQrPZPZZvpV3sDj8ESE81b OqBiwbTs7eSrFkMnzFWXXClp0G24dxebru6Dsfhnq2WDUZIXwzqGrVScVdOwamSn sfPyENQc8x7hB1+OjvWRhi4OEW03kma/zEev5UGYveiUOu8eFO1MeMZqaQmRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjcCdA6eNPyijQAZ+36Mdi7XKQngwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs6TA0/RROFDlK0vO0grI+J3a6INeW+upyW 2jFi9uNCpVXHF6gUtNoi6BygR8sSmRqbXyX5VA1NAep5//bq8wgSjU02EI7wT09b j4xBtXneCfKojzjlQZ4KS7UR82yjmA5jQz9EWm1fg47bbTCCeKKUxwBjzuNYDYGx qaAshEU8BC+gnh3GYJz0igLGHe28ZhPsfhNy1mUtOK/mraSDkmpUhZPx5mVWHsoz K4zlixOmvdR2ssw//g053BjNysh0YxRC8nk9o7i5hE5uzhFnyalV3lTz13bv6Krt VqIL+GYPSm2oSM9Wc1sLWUvvD1L43Y4IbrAOCnFtnPd2rKb204g= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org