$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: GEatAg7eChC4bG5OwgBOdY06FODBm3on3rN+B/ydsgo= Subject key identifier: 30:1E:66:86:5E:84:77:D0:60:CE:A3:DC:87:A4:FA:05:FB:9A:EB:D3 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 34BAA7731059F28D3AE65C1C6E5387C981E3D4E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 92 Signing time: Tue 28 May 2024 00:02:02 +0000 Manifest this update: Mon 27 May 2024 23:57:02 +0000 Manifest next update: Fri 31 May 2024 07:38:02 +0000 Files and hashes: 1: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: lSEeYnpQjk/xx/Zrcasl7WNJUCyhGGbe+1tpDgFnX4k=) 2: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: Mwi6TlrH8qsXLiO86uPMeQi7yD4RDB3gaU3bUevlcP0=) 3: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: 66rWt+7VE1a3Aeqv35v/a9DZnUDm6tBXRIBPmCh9Q8w=) 4: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: U1E35iUX79KyelIJz82fu+ZwXkcKJN+REmP2ntHfD64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 21:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ba:a7:73:10:59:f2:8d:3a:e6:5c:1c:6e:53:87:c9:81:e3:d4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: May 27 23:57:02 2024 GMT Not After : May 31 07:38:02 2024 GMT Subject: CN=301E66865E8477D060CEA3DC87A4FA05FB9AEBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5a:49:ed:76:01:06:74:11:db:db:a2:c1:3f: 72:00:07:7b:74:9d:52:5a:03:35:80:d8:98:c0:c6: 12:2b:0a:95:ea:c6:b2:9e:47:db:52:ae:ab:15:31: fa:ab:97:8b:84:ec:78:09:e5:62:b7:f4:f3:55:48: ed:a0:4f:55:ef:f1:13:4a:ca:1c:ab:94:46:91:d2: 5f:1d:62:3a:83:de:d7:ca:57:76:be:bc:a6:f9:ae: bd:6b:58:44:ad:55:85:da:b4:ce:88:1e:3e:2d:36: df:16:e4:5e:83:0d:c2:5f:5e:8e:c8:af:92:eb:08: 3d:a0:83:e7:41:c2:39:11:98:a1:7a:5d:4e:90:03: f3:cc:b3:20:91:37:ba:a6:8c:8a:bd:ee:6c:5c:5e: 9c:87:7c:7c:e7:5b:a6:4e:8f:16:93:7a:b5:df:0a: 18:c9:25:e8:0a:39:a5:db:96:35:c9:1b:71:78:97: d9:4b:ac:fc:c4:54:ec:59:8f:03:be:2c:71:8d:1a: 76:26:4e:db:ca:2a:a6:06:78:6f:bb:06:bf:66:8b: 48:c2:b2:ae:d7:94:e5:f1:02:10:45:e9:31:85:0f: e0:87:fd:97:eb:e5:19:bc:3f:87:63:91:38:11:fe: 64:db:46:09:15:60:4e:f3:04:f8:ca:19:76:8c:05: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1E:66:86:5E:84:77:D0:60:CE:A3:DC:87:A4:FA:05:FB:9A:EB:D3 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fd:0c:eb:92:66:cf:ae:9a:eb:a2:5f:ba:bd:c5:5b:f1:90: 80:37:e4:23:c4:b6:fe:86:d7:88:ac:c4:ee:b6:f9:bf:4e:6d: 41:86:b7:4c:05:c8:51:49:49:24:e8:b1:0e:61:fd:8c:a5:e3: e2:ff:47:bb:00:1c:af:f5:8e:a5:09:d2:bd:e2:90:c2:2c:21: f5:93:f3:37:d7:bb:e8:9f:0b:81:24:35:fa:d7:d8:7c:10:6f: 74:64:34:ac:c6:3c:fd:a5:89:7a:58:95:67:4a:91:c9:9e:f1: 87:a6:81:0a:05:d4:93:73:de:d4:99:f0:62:83:db:40:8b:4a: 28:81:d9:2d:18:64:6d:4d:3d:47:c1:5e:67:40:9f:88:2e:16: 60:ea:ed:db:57:4a:4c:00:48:e1:7f:92:40:4a:f5:76:29:74: 50:ef:3b:bc:71:e1:6a:b6:8a:21:8e:1d:e0:5c:ef:c0:14:da: 88:55:a8:f2:5d:e0:43:e3:64:d1:f7:71:40:e1:73:0b:74:a4: c5:9e:4f:54:0b:6e:8b:d3:2d:00:f3:dd:75:49:df:f8:31:6a: 60:bd:9e:85:30:bc:ba:88:62:7b:08:e0:74:e3:ea:2d:ad:e9: fa:44:4a:af:43:21:e7:c4:2e:66:b8:f5:44:89:d9:bc:d6:d6: e6:6f:19:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNLqncxBZ8o065lwcblOHyYHj1OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNDA1MjcyMzU3MDJaFw0yNDA1MzEwNzM4MDJaMDMxMTAvBgNV BAMTKDMwMUU2Njg2NUU4NDc3RDA2MENFQTNEQzg3QTRGQTA1RkI5QUVCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWkntdgEGdBHb26LBP3IAB3t0 nVJaAzWA2JjAxhIrCpXqxrKeR9tSrqsVMfqrl4uE7HgJ5WK39PNVSO2gT1Xv8RNK yhyrlEaR0l8dYjqD3tfKV3a+vKb5rr1rWEStVYXatM6IHj4tNt8W5F6DDcJfXo7I r5LrCD2gg+dBwjkRmKF6XU6QA/PMsyCRN7qmjIq97mxcXpyHfHznW6ZOjxaTerXf ChjJJegKOaXbljXJG3F4l9lLrPzEVOxZjwO+LHGNGnYmTtvKKqYGeG+7Br9mi0jC sq7XlOXxAhBF6TGFD+CH/Zfr5Rm8P4djkTgR/mTbRgkVYE7zBPjKGXaMBX+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMB5mhl6Ed9BgzqPch6T6Bfua69MwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACr9DOuSZs+umuuiX7q9xVvxkIA35CPEtv6G 14isxO62+b9ObUGGt0wFyFFJSSTosQ5h/Yyl4+L/R7sAHK/1jqUJ0r3ikMIsIfWT 8zfXu+ifC4EkNfrX2HwQb3RkNKzGPP2liXpYlWdKkcme8YemgQoF1JNz3tSZ8GKD 20CLSiiB2S0YZG1NPUfBXmdAn4guFmDq7dtXSkwASOF/kkBK9XYpdFDvO7xx4Wq2 iiGOHeBc78AU2ohVqPJd4EPjZNH3cUDhcwt0pMWeT1QLbovTLQDz3XVJ3/gxamC9 noUwvLqIYnsI4HTj6i2t6fpESq9DIefELma49USJ2bzW1uZvGSY= -----END CERTIFICATE-----Generated at Tue May 28 02:06:43 2024 by rpki-client on console-ams.rpki-client.org