$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: WXJdH4EL88qFde0+iWK0s67vLIGZA+CYSLsK0wM3SfE= Subject key identifier: 27:F8:BD:6D:D7:79:62:BF:3E:73:0B:67:2C:6C:DF:0C:FC:05:12:B1 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 37C95B8B455509B2B0FE95EA2297CCEF10B6D478 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 0403 Signing time: Sat 18 May 2024 20:10:41 +0000 Manifest this update: Sat 18 May 2024 20:05:41 +0000 Manifest next update: Wed 22 May 2024 02:04:41 +0000 Files and hashes: 1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: 6Yo+GiL84V1XwkISVNBqet61qDEFA9Ra3K3/rVNbfDg=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: 54hmqesfDghXSCp9AwvNHZcITpifaUN9DJAl0aIxx64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c9:5b:8b:45:55:09:b2:b0:fe:95:ea:22:97:cc:ef:10:b6:d4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: May 18 20:05:41 2024 GMT Not After : May 22 02:04:41 2024 GMT Subject: CN=27F8BD6DD77962BF3E730B672C6CDF0CFC0512B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:dc:ca:4a:68:d1:0c:c4:0b:3d:d5:22:ff: b5:4a:c5:a3:29:62:a8:b9:7d:a3:ec:be:8f:20:91: c0:1d:34:a3:95:d3:e8:25:4f:81:3a:88:a2:b7:0f: ef:f6:89:83:6f:a2:d9:59:d4:a8:52:43:95:66:74: cf:f0:64:cd:57:9b:9b:c6:ed:71:8b:eb:31:8c:59: 47:5d:10:1a:45:a1:56:43:64:ab:ed:40:d6:b7:4d: 09:19:90:3f:56:df:d6:6d:43:ba:02:7b:32:08:66: 17:bc:85:d2:64:e0:c5:5b:b5:36:6a:c5:44:84:49: c4:f4:28:b6:67:5b:3b:9e:45:61:fe:70:de:9a:bb: 9c:1b:40:36:c9:2a:96:a0:c8:97:d6:03:6d:0a:40: 6e:19:26:f4:12:46:29:8e:62:43:9c:04:3b:53:73: 0e:ce:6b:5b:f9:6b:26:e0:a8:60:a4:4b:9c:5f:f0: 9b:45:59:83:e2:f2:1f:72:c7:a0:de:1d:90:59:79: c0:18:dd:a6:3b:76:e9:b7:8e:83:92:e2:2b:bb:85: b4:7c:ee:fe:c0:3f:7c:c2:27:3a:92:21:da:8e:29: bf:8e:8a:99:d4:f2:37:63:c1:1a:b0:16:6c:6a:2a: 2f:e5:a6:8b:a9:2c:f0:92:53:7d:6a:a2:c2:eb:d5: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F8:BD:6D:D7:79:62:BF:3E:73:0B:67:2C:6C:DF:0C:FC:05:12:B1 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:80:d5:d7:7e:42:5c:27:24:26:f4:0e:84:0f:0d:c6:96:46: 38:58:2e:14:d4:e6:0e:69:c5:72:06:3f:81:b8:b1:29:e9:cb: 6a:e3:ce:c2:25:f9:07:a0:db:46:87:21:0d:cd:bc:29:0a:88: 65:18:d0:c5:f4:a4:2b:5f:9a:bd:0b:74:b9:0e:b9:52:de:7a: 5e:cd:c0:e4:ec:6e:c2:65:30:4c:58:10:52:69:6c:ac:a7:e2: 4f:d2:b5:39:28:7b:06:0c:40:68:dd:de:87:54:f2:b5:1c:1e: 56:de:03:4e:a3:a7:f6:eb:23:14:b3:5d:25:c0:ee:a4:3c:a2: 0a:5a:fc:61:ef:f9:f8:3f:5a:1a:d0:89:cb:65:ef:d3:7e:a0: 6a:75:08:4c:51:8c:cf:20:8b:bf:ee:4e:5f:13:76:b5:25:a6: fb:66:e4:91:f6:ef:fa:87:5c:16:4d:da:39:72:82:02:a2:a4: d5:1f:48:e9:fe:10:c2:6e:b0:fe:8a:11:7b:51:a8:6f:e2:39: eb:05:19:e3:d2:08:08:c7:5c:42:d3:d9:1c:30:4d:09:47:e8: fe:0c:96:8e:20:15:09:48:ee:c9:1c:61:97:8e:f7:68:3e:db: 89:07:9e:1d:58:32:25:d0:7f:20:c1:a4:73:5d:39:49:39:47: 4b:ee:b2:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8lbi0VVCbKw/pXqIpfM7xC21HgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNDA1MTgyMDA1NDFaFw0yNDA1MjIwMjA0NDFaMDMxMTAvBgNV BAMTKDI3RjhCRDZERDc3OTYyQkYzRTczMEI2NzJDNkNERjBDRkMwNTEyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MtzKSmjRDMQLPdUi/7VKxaMp Yqi5faPsvo8gkcAdNKOV0+glT4E6iKK3D+/2iYNvotlZ1KhSQ5VmdM/wZM1Xm5vG 7XGL6zGMWUddEBpFoVZDZKvtQNa3TQkZkD9W39ZtQ7oCezIIZhe8hdJk4MVbtTZq xUSEScT0KLZnWzueRWH+cN6au5wbQDbJKpagyJfWA20KQG4ZJvQSRimOYkOcBDtT cw7Oa1v5aybgqGCkS5xf8JtFWYPi8h9yx6DeHZBZecAY3aY7dum3joOS4iu7hbR8 7v7AP3zCJzqSIdqOKb+OipnU8jdjwRqwFmxqKi/lpoupLPCSU31qosLr1TnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ/i9bdd5Yr8+cwtnLGzfDPwFErEwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN+A1dd+QlwnJCb0DoQPDcaWRjhYLhTU5g5p xXIGP4G4sSnpy2rjzsIl+Qeg20aHIQ3NvCkKiGUY0MX0pCtfmr0LdLkOuVLeel7N wOTsbsJlMExYEFJpbKyn4k/StTkoewYMQGjd3odU8rUcHlbeA06jp/brIxSzXSXA 7qQ8ogpa/GHv+fg/WhrQictl79N+oGp1CExRjM8gi7/uTl8TdrUlpvtm5JH27/qH XBZN2jlyggKipNUfSOn+EMJusP6KEXtRqG/iOesFGePSCAjHXELT2RwwTQlH6P4M lo4gFQlI7skcYZeO92g+24kHnh1YMiXQfyDBpHNdOUk5R0vusq8= -----END CERTIFICATE-----Generated at Sat May 18 20:47:39 2024 by rpki-client on console-fra.rpki-client.org