$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: +aFoBL7zHa0nsKQSAQXzmWl9OsPcY4U0mV4aO+NJyHQ= Subject key identifier: 7A:23:53:11:78:92:A2:F0:CE:B3:13:F2:06:1B:62:2F:C1:A7:29:E4 Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 3D3D82AD1C95589DBE2A7F328723D1971BC4F026 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: A4 Signing time: Fri 17 May 2024 14:51:43 +0000 Manifest this update: Fri 17 May 2024 14:46:43 +0000 Manifest next update: Tue 21 May 2024 00:37:43 +0000 Files and hashes: 1: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: sAp6C2N02k5mmJU1c/uI9sfpVfLQkaCzK/kM9YZXFJs=) 2: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: qojGF0usxC/jpZ/27nqg0YzAXVQOl0gNJYMfkrdSwlI=) 3: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: gaqJSCs7+hDmCyf0XOHyjUCuECeDMAZ1JaNIuHSRSvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3d:82:ad:1c:95:58:9d:be:2a:7f:32:87:23:d1:97:1b:c4:f0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: May 17 14:46:43 2024 GMT Not After : May 21 00:37:43 2024 GMT Subject: CN=7A2353117892A2F0CEB313F2061B622FC1A729E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:96:94:57:f4:1c:7b:2c:3f:9a:86:12:a1:a1: c7:1b:64:c8:07:8e:5e:22:4f:a0:d3:af:6f:b7:70: ec:73:6f:95:83:d8:a8:3a:0c:b1:30:f4:33:4e:19: c6:25:c6:52:0a:b5:4a:14:bb:83:fa:25:32:3c:14: 79:15:92:38:e1:ca:bc:c9:75:60:f1:8c:80:c8:e7: c5:23:5b:49:5b:74:6a:2b:b6:44:ca:6b:32:25:bf: 45:05:a2:89:9c:60:16:74:c8:11:57:3c:9c:a4:b8: 0e:cc:25:93:b2:e0:71:13:d1:c4:fe:4f:3f:6f:61: 20:8b:5c:41:19:55:c8:d0:fb:61:50:54:e6:80:e1: b6:97:2b:da:09:62:e7:6f:4c:42:ac:23:ee:3b:b2: 48:a7:36:34:4f:96:fd:e4:3e:e3:df:69:93:53:85: cf:0b:ef:9d:e4:fb:47:b6:75:2c:02:c5:c2:3f:2c: c0:6d:8f:55:9d:2e:7f:b1:ab:30:72:84:cc:66:29: c4:6d:ac:62:08:96:fc:58:ec:d2:29:5a:f5:57:ce: b6:5f:e0:99:38:3b:6e:ba:96:9e:4d:c9:ed:c2:d8: 06:69:15:c4:89:98:d4:1a:90:08:40:2f:99:cd:a6: f8:b3:59:7d:aa:00:0b:2e:d9:cc:74:eb:3e:57:f2: a8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:23:53:11:78:92:A2:F0:CE:B3:13:F2:06:1B:62:2F:C1:A7:29:E4 X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1d:72:90:8f:c6:69:8c:69:ac:65:33:a2:1e:11:fe:71:f8: 9f:1c:76:8a:72:97:32:9a:84:81:f6:3e:90:35:b9:40:07:f5: 54:a4:5b:44:9d:77:54:60:8c:e0:c0:ae:44:ac:88:79:fa:a8: 22:c8:ae:33:ff:97:44:38:40:67:f9:f0:25:d9:b1:43:3a:99: a0:13:b0:d0:c6:9d:c4:80:21:91:84:97:e4:e8:a1:4d:f8:cf: e6:21:0a:55:48:f8:42:d0:5b:e0:db:aa:9c:89:8e:eb:88:45: c3:71:87:3f:08:12:45:ac:cd:84:04:0f:3d:7b:bf:dc:84:80: 1b:c2:54:a4:15:89:d9:25:98:d4:50:59:59:94:9c:16:02:b8: 85:83:f9:89:39:a0:28:ee:e7:fe:1f:a0:14:70:5b:76:2d:a3: c7:77:1f:33:79:1c:a8:7f:69:07:82:50:27:09:8c:cf:44:69: 78:d8:0c:e3:ec:7d:5f:ec:7c:a3:a8:ad:40:7d:9f:46:3f:b5: 94:d3:17:47:f9:ec:3f:af:2d:e1:23:eb:91:c7:04:a0:1e:44: 3d:ac:b5:f1:5c:a8:02:ed:00:47:46:7a:cc:2c:8d:1b:7a:f8: 20:d9:a6:1b:c4:6b:27:03:54:02:9c:c7:43:77:38:df:e4:84: 0c:4b:91:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPT2CrRyVWJ2+Kn8yhyPRlxvE8CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNDA1MTcxNDQ2NDNaFw0yNDA1MjEwMDM3NDNaMDMxMTAvBgNV BAMTKDdBMjM1MzExNzg5MkEyRjBDRUIzMTNGMjA2MUI2MjJGQzFBNzI5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4lpRX9Bx7LD+ahhKhoccbZMgH jl4iT6DTr2+3cOxzb5WD2Kg6DLEw9DNOGcYlxlIKtUoUu4P6JTI8FHkVkjjhyrzJ dWDxjIDI58UjW0lbdGortkTKazIlv0UFoomcYBZ0yBFXPJykuA7MJZOy4HET0cT+ Tz9vYSCLXEEZVcjQ+2FQVOaA4baXK9oJYudvTEKsI+47skinNjRPlv3kPuPfaZNT hc8L753k+0e2dSwCxcI/LMBtj1WdLn+xqzByhMxmKcRtrGIIlvxY7NIpWvVXzrZf 4Jk4O266lp5Nye3C2AZpFcSJmNQakAhAL5nNpvizWX2qAAsu2cx06z5X8qhzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeiNTEXiSovDOsxPyBhtiL8GnKeQwHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgdcpCPxmmMaaxlM6IeEf5x+J8cdopylzKa hIH2PpA1uUAH9VSkW0Sdd1RgjODArkSsiHn6qCLIrjP/l0Q4QGf58CXZsUM6maAT sNDGncSAIZGEl+TooU34z+YhClVI+ELQW+DbqpyJjuuIRcNxhz8IEkWszYQEDz17 v9yEgBvCVKQVidklmNRQWVmUnBYCuIWD+Yk5oCju5/4foBRwW3Yto8d3HzN5HKh/ aQeCUCcJjM9EaXjYDOPsfV/sfKOorUB9n0Y/tZTTF0f57D+vLeEj65HHBKAeRD2s tfFcqALtAEdGeswsjRt6+CDZphvEaycDVAKcx0N3ON/khAxLkRM= -----END CERTIFICATE-----Generated at Fri May 17 16:04:26 2024 by rpki-client on console-fra.rpki-client.org