$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: XPXNRhh7eWTFVxAkvtpOKd0LLIY3W8ji4ytds7eapho= Subject key identifier: EB:FD:32:BA:86:C7:25:AD:1C:0E:C9:D9:AE:68:72:2B:67:B1:74:F9 Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 56902BE2989E581D8B3655539945D34D751FA8A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 0435 Signing time: Thu 09 May 2024 18:02:00 +0000 Manifest this update: Thu 09 May 2024 17:57:00 +0000 Manifest next update: Sun 12 May 2024 19:16:00 +0000 Files and hashes: 1: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: LZ1vdWz3/boVsbp321bRWV1XOQWdeFXuFo8nSi0dxK4=) 2: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: Zb5MzFp7+Nny7jviVJCbZOvrIotwM5mlvuVCEf4IpwE=) 3: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: YI5DvNRQf8JSW6se99E1GrLPWecZZgVWCVaatT5ap+w=) 4: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: KfHz+q5ecjX/hxcT8SeL4CtrUXZd01Mni1e3idENIM8=) 5: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: R/C9PeIkqh907LKWqETxc7+iRmlLnSFqpVC9LKh0Ew8=) 6: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: Meg/Qp3deYAK5S6MhaSDRqgp8dmkER447J/zFok35lI=) 7: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: TY/f9sU+q5Yd5pS7++vY6X7t1zvDTQ+dGJE+buUf9v8=) 8: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: zPWQTSnp8f/0kMDC3XL+3BNuen9SSN7n2MclvrGO0PI=) 9: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: zRZSw9cO7N/meNvjy881qzb2zf+rB0v3i4mzbBV+noo=) 10: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: 1aa3LFRMZig1ObmRqoMxeqtdpL9wtQYieZy5hhi4vPU=) 11: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: xJ85m8iBbSTYvL2T1rRSh9bnVhzPLk6uBxTnm+QfIMg=) 12: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: 9Pc0YDLggJwWJaYXQ3OoFN7it2eCxjtznO0GzK8pdWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 14:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:90:2b:e2:98:9e:58:1d:8b:36:55:53:99:45:d3:4d:75:1f:a8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: May 9 17:57:00 2024 GMT Not After : May 12 19:16:00 2024 GMT Subject: CN=EBFD32BA86C725AD1C0EC9D9AE68722B67B174F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:65:f6:49:24:c6:88:e3:fe:b8:69:0a:ec: 16:d2:85:ff:f4:c0:5a:b9:11:92:79:41:5d:93:35: c6:1f:ee:3c:61:3b:d6:6c:fe:db:02:b8:65:86:c4: f3:66:23:a7:f4:ee:e0:af:34:4d:ea:32:8c:43:0e: 1c:64:28:5d:94:57:33:f5:d1:83:52:6c:a6:34:15: 56:13:09:29:65:f0:88:66:34:aa:f4:1e:44:a3:10: 62:7d:9b:b7:c8:7e:e9:e3:79:51:4e:f7:69:59:7d: 5a:72:57:62:5e:c4:19:02:a1:f7:63:3f:a0:6b:91: f3:fc:dc:b5:ab:86:56:51:96:a7:71:ab:18:10:42: d7:9f:1f:8b:8b:67:06:f6:76:31:c5:da:ae:22:5e: 9a:0f:02:ea:cb:d6:77:b8:10:c7:25:b9:23:df:1e: e2:d4:2a:67:dd:9a:ba:00:6b:93:0d:46:89:10:6f: f6:f6:9c:65:cb:f2:48:ab:de:06:0c:9f:42:14:2e: 57:e7:a2:5a:d9:75:f0:37:8c:5d:17:70:9f:de:59: b7:ee:d7:16:69:66:42:94:0f:8b:34:4b:0c:89:98: 0e:04:35:77:53:30:e6:49:c1:e9:ec:d3:9a:c3:79: 3e:0f:af:1b:9a:84:55:20:5b:de:05:c0:c4:57:55: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FD:32:BA:86:C7:25:AD:1C:0E:C9:D9:AE:68:72:2B:67:B1:74:F9 X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a9:43:bb:7a:e4:4f:bc:57:de:a1:e6:e2:d1:15:5a:79:ff: c6:7e:f4:a2:73:0c:a9:39:70:14:ec:82:f2:9d:f8:a9:ee:6e: 19:dd:2e:2c:19:8f:9c:fb:d3:f7:ac:aa:97:6d:fa:98:e2:78: a6:f3:ce:ef:e7:bf:cb:73:c1:bb:3b:3e:61:44:2d:ee:3e:b2: 54:e3:a1:57:ad:10:ec:a9:69:6e:86:70:2e:8a:2d:b4:f4:44: 05:e0:9f:08:7c:4e:e9:20:a9:9a:62:73:eb:90:88:a1:07:8a: c1:34:e8:35:30:ba:71:a5:93:9b:43:66:81:92:f2:29:bd:f0: 41:7c:1e:da:d4:b1:90:f2:46:9b:bf:b7:1b:f1:ab:d4:26:e0: fa:56:3c:a1:11:50:56:e6:65:78:e3:ee:3b:a8:bd:7f:3b:11: 1d:cf:91:88:e6:d6:7e:3c:24:c7:a7:27:57:52:1b:17:6a:9c: 28:dc:2e:8a:ec:fc:70:18:b5:2e:a1:06:39:ad:4e:37:e0:f1: a1:a4:e8:28:7f:88:8c:84:42:f5:d3:ae:f5:cf:6e:43:a4:1b: 9f:56:fb:7c:51:06:13:e7:83:85:b9:29:93:49:86:96:eb:2d: 92:21:71:a4:17:20:77:c7:d1:91:d0:1c:ee:e4:f9:72:dc:8a: 05:c2:9d:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVpAr4pieWB2LNlVTmUXTTXUfqKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNDA1MDkxNzU3MDBaFw0yNDA1MTIxOTE2MDBaMDMxMTAvBgNV BAMTKEVCRkQzMkJBODZDNzI1QUQxQzBFQzlEOUFFNjg3MjJCNjdCMTc0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvf2X2SSTGiOP+uGkK7BbShf/0 wFq5EZJ5QV2TNcYf7jxhO9Zs/tsCuGWGxPNmI6f07uCvNE3qMoxDDhxkKF2UVzP1 0YNSbKY0FVYTCSll8IhmNKr0HkSjEGJ9m7fIfunjeVFO92lZfVpyV2JexBkCofdj P6BrkfP83LWrhlZRlqdxqxgQQtefH4uLZwb2djHF2q4iXpoPAurL1ne4EMcluSPf HuLUKmfdmroAa5MNRokQb/b2nGXL8kir3gYMn0IULlfnolrZdfA3jF0XcJ/eWbfu 1xZpZkKUD4s0SwyJmA4ENXdTMOZJwens05rDeT4PrxuahFUgW94FwMRXVeRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6/0yuobHJa0cDsnZrmhyK2exdPkwHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmpQ7t65E+8V96h5uLRFVp5/8Z+9KJzDKk5 cBTsgvKd+KnubhndLiwZj5z70/esqpdt+pjieKbzzu/nv8tzwbs7PmFELe4+slTj oVetEOypaW6GcC6KLbT0RAXgnwh8TukgqZpic+uQiKEHisE06DUwunGlk5tDZoGS 8im98EF8HtrUsZDyRpu/txvxq9Qm4PpWPKERUFbmZXjj7juovX87ER3PkYjm1n48 JMenJ1dSGxdqnCjcLors/HAYtS6hBjmtTjfg8aGk6Ch/iIyEQvXTrvXPbkOkG59W +3xRBhPng4W5KZNJhpbrLZIhcaQXIHfH0ZHQHO7k+XLcigXCnco= -----END CERTIFICATE-----Generated at Thu May 9 20:54:33 2024 by rpki-client on console-fra.rpki-client.org