$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: BMdrQ13LHUeW40PVyoVdytHRif+1sSSgeJ73HGXLqCA= Subject key identifier: BA:38:A7:E3:95:EA:35:BB:CC:81:39:3C:C5:B1:6D:6D:8B:BD:AD:3C Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 525E0D3AADB60C92A9D8763F700ADCA8A51E2A12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 25 Signing time: Sat 18 May 2024 19:51:40 +0000 Manifest this update: Sat 18 May 2024 19:46:40 +0000 Manifest next update: Wed 22 May 2024 05:36:40 +0000 Files and hashes: 1: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: nuuW2NAFx/czZyKv0aGKbqD/ff+nwPT0+qRXUnuzzxg=) 2: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: EuWDRw74O+k8JEJvK09P76kFiPDImOnN/O3rdBgN6mY=) 3: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: pMG+ZAw0cWb9oW6JXLAMB44cr+AtbRvCQ3Z+y/D0PjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5e:0d:3a:ad:b6:0c:92:a9:d8:76:3f:70:0a:dc:a8:a5:1e:2a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: May 18 19:46:40 2024 GMT Not After : May 22 05:36:40 2024 GMT Subject: CN=BA38A7E395EA35BBCC81393CC5B16D6D8BBDAD3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:c1:9c:e6:35:c3:1b:6a:54:58:f0:c5:79: 49:2b:e5:ea:3b:b6:f8:7a:ad:b8:e8:ee:89:22:91: a8:59:80:56:bd:a5:f3:38:da:49:a6:b8:95:5b:63: 4e:0e:4b:96:27:aa:6c:c7:c1:02:b3:22:b4:44:78: 7e:5b:ac:70:af:52:55:b2:94:ce:12:8f:a9:6f:a5: 55:ec:f6:5d:8d:f4:3c:3b:a2:1e:2e:f5:97:fc:5a: d4:e9:3c:27:6d:d3:02:59:d0:a6:81:f4:1e:e6:23: 9e:5e:f0:9e:8c:e4:7c:16:f5:7b:32:d2:5c:d9:7b: 6f:ba:30:84:d1:30:21:b4:44:47:6c:1f:92:dc:1c: aa:87:66:dc:b5:aa:ba:c8:4d:c1:6a:a5:97:b8:71: 1b:9b:7f:a9:d9:de:4a:6c:63:b8:dd:91:d9:cb:58: 0c:a6:5e:d7:a6:c2:d4:e8:db:f6:5d:6a:32:a9:8a: 74:b3:97:f9:de:b2:80:01:d6:64:92:71:c7:70:18: 78:fe:12:f1:9f:0a:be:b5:68:11:da:9c:98:03:4d: 1a:1f:b9:f0:ef:0d:7e:d1:f0:22:de:86:5a:bb:e1: 78:19:06:2a:c7:88:73:27:58:fa:ad:03:21:ce:f7: 2e:88:da:48:d8:35:76:40:21:2f:92:2d:6f:f3:58: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:38:A7:E3:95:EA:35:BB:CC:81:39:3C:C5:B1:6D:6D:8B:BD:AD:3C X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:0e:72:97:c4:70:56:62:fd:33:23:7a:3e:54:7f:19:2d:2e: 2d:8f:7b:09:83:54:5c:fe:d5:20:2c:a0:d4:4b:95:cd:1e:e2: 80:68:dc:ec:52:df:5a:1c:e7:3f:ce:50:75:7d:7e:e3:be:02: 28:56:c9:d7:95:d1:3b:27:1a:ab:10:39:d6:b0:25:70:ca:c1: 6f:9f:c2:2e:e0:7d:1d:ba:64:e9:d7:66:e5:86:1a:4e:49:4e: c5:c9:b9:8c:54:97:74:40:7c:33:d0:ae:32:4b:8f:5d:c5:be: 6f:78:a1:ae:cc:f9:db:a2:3f:ce:46:72:76:ec:51:31:48:fe: 2f:c6:81:80:09:d7:9c:25:08:ca:11:b6:c6:98:6b:3c:1d:7a: 8b:75:af:b0:28:76:bb:da:d0:ce:20:f5:a7:e1:a2:36:82:05: 53:76:d6:bb:61:72:f1:b9:8a:38:db:64:d1:c5:39:23:23:2c: f5:3a:78:68:3b:92:56:95:75:1f:14:ef:11:9c:4d:e8:3d:f8: 6a:91:16:c9:28:08:9c:bf:b6:2f:64:c4:0d:f2:11:b2:6d:0e: 68:0a:6b:4f:f2:8c:4c:64:ef:b7:e9:73:6a:c7:20:14:3d:3b: 74:2e:e8:8f:47:5c:c9:9d:28:44:87:90:65:fa:45:d0:e1:38: 07:e7:08:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUl4NOq22DJKp2HY/cArcqKUeKhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNDA1MTgxOTQ2NDBaFw0yNDA1MjIwNTM2NDBaMDMxMTAvBgNV BAMTKEJBMzhBN0UzOTVFQTM1QkJDQzgxMzkzQ0M1QjE2RDZEOEJCREFEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ocGc5jXDG2pUWPDFeUkr5eo7 tvh6rbjo7okikahZgFa9pfM42kmmuJVbY04OS5YnqmzHwQKzIrREeH5brHCvUlWy lM4Sj6lvpVXs9l2N9Dw7oh4u9Zf8WtTpPCdt0wJZ0KaB9B7mI55e8J6M5HwW9Xsy 0lzZe2+6MITRMCG0REdsH5LcHKqHZty1qrrITcFqpZe4cRubf6nZ3kpsY7jdkdnL WAymXtemwtTo2/ZdajKpinSzl/nesoAB1mSSccdwGHj+EvGfCr61aBHanJgDTRof ufDvDX7R8CLehlq74XgZBirHiHMnWPqtAyHO9y6I2kjYNXZAIS+SLW/zWNctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUujin45XqNbvMgTk8xbFtbYu9rTwwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIOcpfEcFZi/TMjej5UfxktLi2PewmDVFz+ 1SAsoNRLlc0e4oBo3OxS31oc5z/OUHV9fuO+AihWydeV0TsnGqsQOdawJXDKwW+f wi7gfR26ZOnXZuWGGk5JTsXJuYxUl3RAfDPQrjJLj13Fvm94oa7M+duiP85Gcnbs UTFI/i/GgYAJ15wlCMoRtsaYazwdeot1r7Aodrva0M4g9afhojaCBVN21rthcvG5 ijjbZNHFOSMjLPU6eGg7klaVdR8U7xGcTeg9+GqRFskoCJy/ti9kxA3yEbJtDmgK a0/yjExk77fpc2rHIBQ9O3Qu6I9HXMmdKESHkGX6RdDhOAfnCIo= -----END CERTIFICATE-----Generated at Sat May 18 20:47:39 2024 by rpki-client on console-fra.rpki-client.org