$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft File: 2985976A4B3081770748882703E16497964D05A6.mft (raw, json) Hash identifier: 6K2TNbhLbAVRYxfqmROq7DgaHrYZyiZbiwG2+cxXvi4= Subject key identifier: 88:4E:D6:0E:98:E1:3C:2A:AE:A1:34:44:98:8B:FB:C7:12:55:E9:37 Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6 Certificate serial: 47951F06368302B681DF1BCD5989F7010E43C3AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft Manifest number: 011F Signing time: Sun 19 May 2024 08:20:33 +0000 Manifest this update: Sun 19 May 2024 08:15:33 +0000 Manifest next update: Wed 22 May 2024 19:06:33 +0000 Files and hashes: 1: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: 0SZoE9FimdCCAUoQVm4KUOkCGuZEmykdrKWe8GOnmgA=) 2: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: fiISZfj0T/Mi3R7JDyAgxDOhQ7du8ejglV39z6sEMtQ=) 3: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: DvuKOTUzQqOnSuKTbt9NOIh+dOKwPqVLhRaeJ9zz6d8=) 4: 2985976A4B3081770748882703E16497964D05A6.crl (hash: zm91jIiTPV7+AVfVwQGiShc5psRnQoy8PUV6wEeWb4Q=) 5: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: 4rpuC2/GfmkDJRPuT4xqRfIxFwGb21EDQrgZnQzV//I=) 6: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: JlDaZrGzQTOn7AFg5I8wOcR2j5/F5xAdduxK8J39GZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:95:1f:06:36:83:02:b6:81:df:1b:cd:59:89:f7:01:0e:43:c3:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2985976A4B3081770748882703E16497964D05A6 Validity Not Before: May 19 08:15:33 2024 GMT Not After : May 22 19:06:33 2024 GMT Subject: CN=884ED60E98E13C2AAEA13444988BFBC71255E937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:13:f6:a7:7a:36:45:d0:0c:90:a0:fc:d2:da: 68:bc:c3:3f:01:73:10:d7:96:65:6d:0d:4e:8e:e3: 77:80:06:29:33:6d:a7:29:a0:b9:9f:4e:7d:2b:42: e9:d8:fb:6b:00:ff:1f:7d:28:84:69:a5:d4:bb:ef: 57:3c:52:6f:5d:54:59:09:0c:71:1b:fb:bd:47:51: ab:64:d7:53:47:12:5f:64:0b:3d:b6:97:30:5c:a2: 2c:3d:8b:1b:26:d4:6d:cc:50:01:65:cc:05:e6:97: 86:b9:f0:2f:46:3c:c8:9e:d4:47:13:7e:74:a0:98: 95:c1:0d:05:8f:da:77:b1:69:cd:93:43:52:9b:50: 4a:fe:a0:9a:79:52:bf:4b:17:c3:9e:af:cf:26:8f: 9c:16:16:98:ae:bc:47:b8:21:17:a4:b0:56:7b:22: 05:93:17:84:51:f8:b9:40:5f:3e:5a:35:f1:a2:4b: 91:41:79:03:d0:94:13:7d:0d:c3:a8:38:70:69:75: 49:07:f6:da:6a:3b:9f:66:8c:66:8f:67:33:9c:3a: 9b:b0:58:23:d9:96:ea:5c:24:9c:d1:3b:ce:fe:5e: 84:08:89:78:19:00:5c:c9:a5:2c:2f:35:9a:4e:33: a3:5c:02:cf:e0:8d:ea:06:f9:53:3d:e7:42:ec:3a: 5f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4E:D6:0E:98:E1:3C:2A:AE:A1:34:44:98:8B:FB:C7:12:55:E9:37 X509v3 Authority Key Identifier: keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ca:15:5d:ae:63:b6:fb:b0:10:da:d6:40:cb:a3:cc:18:be: 2b:78:8d:db:95:13:43:52:eb:5d:b2:6d:1b:cd:e0:a8:e1:8a: 48:ee:09:cc:17:62:58:82:a1:ba:34:05:82:ee:fd:c3:18:33: 08:78:9c:c6:1f:1e:a8:17:ba:85:0f:5a:cd:3a:aa:2d:d5:a3: b4:06:5e:a5:d5:5c:4f:21:2c:8d:07:8d:60:73:cf:89:2f:02: c1:72:fb:18:3f:58:15:d6:33:b1:16:13:e7:43:1a:91:e1:9d: c4:21:ac:51:44:29:2d:65:d2:bb:f4:73:4e:e7:98:62:86:11: 5c:30:1e:d6:4f:18:c5:6a:97:08:c2:34:3c:72:86:45:68:98: 85:ee:89:fa:62:e5:88:29:ca:3c:58:02:ae:4b:c3:a9:98:96: d6:e1:9b:e9:d0:03:17:28:77:cb:33:c2:9b:40:af:6b:f5:45: 61:a1:cc:63:a4:43:39:e9:d9:c9:7b:83:68:3b:31:f0:29:44: e8:92:91:09:c3:bf:04:27:05:a7:46:c9:b1:5f:d2:d5:e3:58: 53:4a:42:cd:55:82:b2:22:2d:51:67:72:65:61:49:5a:38:ab: 9a:cb:1a:20:ea:84:1f:94:88:c4:f7:6b:bc:bd:cd:07:45:93: 67:65:ac:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5UfBjaDAraB3xvNWYn3AQ5Dw6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5 NjREMDVBNjAeFw0yNDA1MTkwODE1MzNaFw0yNDA1MjIxOTA2MzNaMDMxMTAvBgNV BAMTKDg4NEVENjBFOThFMTNDMkFBRUExMzQ0NDk4OEJGQkM3MTI1NUU5MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdE/anejZF0AyQoPzS2mi8wz8B cxDXlmVtDU6O43eABikzbacpoLmfTn0rQunY+2sA/x99KIRppdS771c8Um9dVFkJ DHEb+71HUatk11NHEl9kCz22lzBcoiw9ixsm1G3MUAFlzAXml4a58C9GPMie1EcT fnSgmJXBDQWP2nexac2TQ1KbUEr+oJp5Ur9LF8Oer88mj5wWFpiuvEe4IReksFZ7 IgWTF4RR+LlAXz5aNfGiS5FBeQPQlBN9DcOoOHBpdUkH9tpqO59mjGaPZzOcOpuw WCPZlupcJJzRO87+XoQIiXgZAFzJpSwvNZpOM6NcAs/gjeoG+VM950LsOl+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiE7WDpjhPCquoTREmIv7xxJV6TcwHwYDVR0j BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0 OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbKFV2uY7b7sBDa1kDLo8wYvit4jduVE0NS 612ybRvN4KjhikjuCcwXYliCobo0BYLu/cMYMwh4nMYfHqgXuoUPWs06qi3Vo7QG XqXVXE8hLI0HjWBzz4kvAsFy+xg/WBXWM7EWE+dDGpHhncQhrFFEKS1l0rv0c07n mGKGEVwwHtZPGMVqlwjCNDxyhkVomIXuifpi5YgpyjxYAq5Lw6mYltbhm+nQAxco d8szwptAr2v1RWGhzGOkQznp2cl7g2g7MfApROiSkQnDvwQnBadGybFf0tXjWFNK Qs1VgrIiLVFncmVhSVo4q5rLGiDqhB+UiMT3a7y9zQdFk2dlrG4= -----END CERTIFICATE-----Generated at Sun May 19 09:31:53 2024 by rpki-client on console-ams.rpki-client.org