$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json) Hash identifier: Wvk3ROdfdUUB3HK8qq2Bgcw7B968eZsTy87VBHtzjCU= Subject key identifier: 8C:12:DC:34:76:58:83:08:7A:84:EB:39:FE:D6:ED:11:92:2D:3F:2E Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Certificate serial: 493FFBEB64D25382F07183D53B980F12A98F6F6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft Manifest number: FD Signing time: Sun 19 May 2024 07:31:25 +0000 Manifest this update: Sun 19 May 2024 07:26:25 +0000 Manifest next update: Wed 22 May 2024 19:03:25 +0000 Files and hashes: 1: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: cEfeh9eRNBRCfoRBeyG5X29YJrhRlb8c/oeEmtnYp4M=) 2: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: HwN2bg6tpN4cAXIdPWemoQWQlWDtQ2WndlHfeEiKW70=) 3: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: zh8C8yEgsQWITe2mVcIv2qnZDKZW2Dq6vUbCBbqtFxQ=) 4: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: a+SXRvE7emKOPu2QRVQLzHoqGsPriQE/XHqMVrem4wI=) 5: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: 1kVJ2Nb3+i+p9b/e1eeiWHV7mSFP6iPwxDCtqkJSIvQ=) 6: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: mRzBEM1oy53fQ+l9as6sV5RVNiVRGAdv4kVzbjbOmXg=) 7: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: ePagVnF/OxPUUWC60KDd6WTfdNFt8cA898KqElO8Qi8=) 8: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: r7VKvM3SE0DgtLaU+/G/ZTNpGtOtmn7p0XvQ5eAfSUo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3f:fb:eb:64:d2:53:82:f0:71:83:d5:3b:98:0f:12:a9:8f:6f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25 Validity Not Before: May 19 07:26:25 2024 GMT Not After : May 22 19:03:25 2024 GMT Subject: CN=8C12DC34765883087A84EB39FED6ED11922D3F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9f:9a:dd:28:65:0a:56:59:4b:90:e8:8a:1b: 5c:5e:37:3b:68:c5:8f:55:d7:79:3e:f5:97:8d:fc: 4e:d5:1a:66:01:d6:f4:4a:f4:ca:3e:b3:1b:de:ae: 8c:7c:fe:54:a4:8d:7d:a2:cb:de:a9:38:d2:45:b8: 9b:bd:cc:fd:cd:f9:e0:4e:7b:0f:92:af:e3:9e:2a: 36:08:82:d3:b1:23:19:39:92:43:39:24:9a:8d:27: d4:9b:23:b4:f5:4b:30:c6:f7:e9:68:a4:5e:f2:89: 04:f5:17:b6:d0:cd:af:6c:13:2f:c9:62:0c:6c:3c: 52:1c:e9:8a:a2:61:79:19:d6:e6:08:bb:46:f6:8e: 58:dd:e1:c5:75:0f:61:a9:89:c1:1f:d3:7d:1f:27: 8f:97:93:b1:f0:1d:20:ef:29:25:fa:38:05:97:88: 34:c6:b4:66:24:7d:23:ff:15:03:8b:09:9f:2c:1f: 1f:06:d6:92:8a:8a:57:da:c3:f0:1a:d4:59:74:6a: a7:05:02:9a:1e:69:f0:1d:4e:07:96:43:aa:47:e9: 02:ef:49:ab:f6:ce:27:7f:67:6a:7f:d3:08:7d:09: 27:95:72:2d:32:25:97:e0:b2:7e:66:71:9d:fd:8e: 83:89:6f:42:1b:33:f3:8f:4f:e1:e3:4a:4c:33:d3: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:12:DC:34:76:58:83:08:7A:84:EB:39:FE:D6:ED:11:92:2D:3F:2E X509v3 Authority Key Identifier: keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:1c:cd:3c:a0:63:6d:ed:31:9f:9c:2e:2e:6d:be:33:2c:f0: e6:c9:27:7f:b3:1e:88:e9:a9:1b:e7:bf:ef:c4:70:70:55:34: 42:76:62:6f:cd:88:a2:93:b4:bc:98:11:f8:a0:c8:72:5e:42: e6:2a:b8:9f:bc:7e:35:e8:61:cc:89:c3:9f:ac:e6:c9:39:b3: 9b:f8:fd:ff:67:2a:72:4b:d5:50:6c:45:f8:ac:50:29:15:4f: 24:0b:76:6e:da:a4:96:c8:35:4f:aa:1c:b2:f4:8d:0f:23:1f: ed:a1:c3:e4:93:f1:2a:29:65:c3:a4:41:8a:cf:81:0e:ac:f1: d2:f2:68:21:a3:c3:3f:9b:69:62:78:4f:05:15:a7:5e:8d:7c: d1:76:91:76:66:88:e7:49:ae:9c:50:7e:47:32:c5:5e:73:99: 28:e8:40:f1:c9:5b:b3:4d:f8:cd:b4:5c:3f:c6:9f:9d:6a:6f: b3:e4:14:39:6c:30:97:16:ff:32:a7:57:53:46:3a:84:b4:89: 64:56:30:bb:1d:1f:af:49:d3:22:d7:19:3c:6c:c9:49:0c:d9: 61:98:1a:59:72:46:16:9b:3c:30:7a:22:a6:84:ae:f2:d2:8f: 6d:0b:87:d5:5e:9d:6e:83:79:00:87:70:fb:d6:bd:e8:d4:4f: e9:29:36:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUST/762TSU4LwcYPVO5gPEqmPb24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2 NDg5MkMyNTAeFw0yNDA1MTkwNzI2MjVaFw0yNDA1MjIxOTAzMjVaMDMxMTAvBgNV BAMTKDhDMTJEQzM0NzY1ODgzMDg3QTg0RUIzOUZFRDZFRDExOTIyRDNGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgn5rdKGUKVllLkOiKG1xeNzto xY9V13k+9ZeN/E7VGmYB1vRK9Mo+sxverox8/lSkjX2iy96pONJFuJu9zP3N+eBO ew+Sr+OeKjYIgtOxIxk5kkM5JJqNJ9SbI7T1SzDG9+lopF7yiQT1F7bQza9sEy/J YgxsPFIc6YqiYXkZ1uYIu0b2jljd4cV1D2GpicEf030fJ4+Xk7HwHSDvKSX6OAWX iDTGtGYkfSP/FQOLCZ8sHx8G1pKKilfaw/Aa1Fl0aqcFApoeafAdTgeWQ6pH6QLv Sav2zid/Z2p/0wh9CSeVci0yJZfgsn5mcZ39joOJb0IbM/OPT+HjSkwz02pPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjBLcNHZYgwh6hOs5/tbtEZItPy4wHwYDVR0j BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5 MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwczTygY23tMZ+cLi5tvjMs8ObJJ3+zHojp qRvnv+/EcHBVNEJ2Ym/NiKKTtLyYEfigyHJeQuYquJ+8fjXoYcyJw5+s5sk5s5v4 /f9nKnJL1VBsRfisUCkVTyQLdm7apJbINU+qHLL0jQ8jH+2hw+ST8SopZcOkQYrP gQ6s8dLyaCGjwz+baWJ4TwUVp16NfNF2kXZmiOdJrpxQfkcyxV5zmSjoQPHJW7NN +M20XD/Gn51qb7PkFDlsMJcW/zKnV1NGOoS0iWRWMLsdH69J0yLXGTxsyUkM2WGY GllyRhabPDB6IqaErvLSj20Lh9VenW6DeQCHcPvWvejUT+kpNkg= -----END CERTIFICATE-----Generated at Sun May 19 08:26:21 2024 by rpki-client on console-fra.rpki-client.org