$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft (raw, json) Hash identifier: fT2rXxNhNJptAfNxVxTdNFsS1mJO+icsOWc60HHu0ro= Subject key identifier: D0:90:FD:5C:62:D4:E9:C7:7A:D9:62:2E:09:C3:49:D7:F6:84:0D:AE Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 4FDCD06EC17D9E958751D64D06FE890DEED26795 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft Manifest number: E4 Signing time: Wed 20 Nov 2024 21:31:02 +0000 Manifest this update: Wed 20 Nov 2024 21:26:02 +0000 Manifest next update: Sun 24 Nov 2024 04:19:02 +0000 Files and hashes: 1: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 5H4JKwnq4oresa7MkpV7TriW3ivumi6N3jRxijZ21Fs=) 2: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl (hash: lk4mBZ7rZpzEs3xMsmK7l1yuEWrOuDr3gNz4rb3BJ+s=) 3: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: ndDFlzQ0IuA3S69ND6C8Jsle8tJZdiO7+mspElCpg00=) 4: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: Lyic6tpyx8dE3BSp7Wiu55L5Zbno6Dp9EUOJ8PKwjfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:dc:d0:6e:c1:7d:9e:95:87:51:d6:4d:06:fe:89:0d:ee:d2:67:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: Nov 20 21:26:02 2024 GMT Not After : Nov 24 04:19:02 2024 GMT Subject: CN=D090FD5C62D4E9C77AD9622E09C349D7F6840DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:95:71:24:b7:08:9b:73:75:45:f8:1d:e9: 7d:de:46:59:4c:9a:9f:c1:6e:0f:d8:71:80:0e:27: 89:4a:66:e5:03:98:7c:af:1f:38:c1:f3:1f:5c:09: f8:8f:df:82:f7:3e:60:4a:43:f8:bd:f9:72:e2:0d: c9:bc:87:10:5b:91:72:08:9a:c9:6f:eb:fd:c0:0a: 67:87:03:21:32:fe:0e:fa:e3:1c:87:e6:28:bd:d9: b6:1b:20:34:e3:b9:9e:56:31:6a:8e:60:94:50:0b: bf:2a:89:15:41:8a:bb:b7:3a:18:1b:79:38:77:b2: ef:83:14:97:41:af:a5:b3:73:fe:c0:fe:6b:dc:79: 4d:7f:5c:ec:87:9d:ce:63:ba:61:27:97:20:28:6b: 03:1d:9b:49:57:88:1a:eb:bf:c5:4b:1e:f4:3e:b5: a4:ea:da:fd:76:f9:f2:7f:f2:e4:24:87:d3:ec:ec: 2a:df:f0:8a:03:c4:e6:b0:a9:bc:32:b9:c0:16:0f: 28:ab:f0:d4:2c:5a:ff:8d:ee:31:e8:05:ec:e8:4e: ac:cf:91:5f:8a:fe:fd:90:9b:11:00:d5:3c:12:f3: 68:fe:2b:36:3d:0a:41:39:07:2c:2f:ac:c9:49:65: 8e:5f:df:85:11:d8:f3:f5:49:a0:2a:c0:10:bb:b7: d3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:90:FD:5C:62:D4:E9:C7:7A:D9:62:2E:09:C3:49:D7:F6:84:0D:AE X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:73:f8:2c:87:28:d6:98:58:a4:b4:cb:fd:be:6f:8d:a1:fb: d8:0a:5c:6c:e6:87:08:cf:c0:28:63:5b:0f:3b:8c:87:06:e2: d8:e7:4c:9d:d2:56:8f:02:8c:26:f7:c2:42:f6:b4:ca:24:c8: b3:8a:a3:14:e2:f1:58:55:10:51:44:9f:f7:c4:7b:55:6b:8a: 97:60:e3:1a:8b:89:fa:e4:7d:3f:6b:96:a7:43:26:9c:6c:d6: 96:67:06:3d:8c:66:b4:ae:ea:50:20:9d:58:84:7a:82:68:6c: 01:da:07:6e:ab:ba:b4:d9:6f:af:64:2a:8c:f2:a7:58:06:cb: 0c:5c:75:5a:e5:bc:54:a1:06:f7:a7:bd:9b:8e:5f:e4:9b:bb: 0e:6d:ce:4a:e5:7b:2e:a4:6f:2c:8e:8a:b3:e4:e1:81:b0:62: 99:dd:b1:1d:ed:21:11:d2:f5:74:8b:2d:f1:77:f9:b4:60:17: 10:df:eb:ee:11:b3:a6:de:09:2e:14:a1:40:1c:c5:af:c6:c2: bb:16:47:a8:a7:1e:25:6f:0a:0b:2d:4b:56:d2:bc:3e:88:22: a8:f3:21:4b:9e:3c:66:5a:15:39:2a:90:f3:d9:08:16:55:76: ed:0b:06:ae:29:b3:13:c1:aa:36:74:2c:64:b8:50:55:4e:7c: dc:cd:a9:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9zQbsF9npWHUdZNBv6JDe7SZ5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNDExMjAyMTI2MDJaFw0yNDExMjQwNDE5MDJaMDMxMTAvBgNV BAMTKEQwOTBGRDVDNjJENEU5Qzc3QUQ5NjIyRTA5QzM0OUQ3RjY4NDBEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pJVxJLcIm3N1Rfgd6X3eRllM mp/Bbg/YcYAOJ4lKZuUDmHyvHzjB8x9cCfiP34L3PmBKQ/i9+XLiDcm8hxBbkXII mslv6/3ACmeHAyEy/g764xyH5ii92bYbIDTjuZ5WMWqOYJRQC78qiRVBiru3Ohgb eTh3su+DFJdBr6Wzc/7A/mvceU1/XOyHnc5jumEnlyAoawMdm0lXiBrrv8VLHvQ+ taTq2v12+fJ/8uQkh9Ps7Crf8IoDxOawqbwyucAWDyir8NQsWv+N7jHoBezoTqzP kV+K/v2QmxEA1TwS82j+KzY9CkE5BywvrMlJZY5f34UR2PP1SaAqwBC7t9PXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0JD9XGLU6cd62WIuCcNJ1/aEDa4wHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFE NEM1MDg1MkE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJz+CyHKNaYWKS0y/2+b42h+9gKXGzmhwjP wChjWw87jIcG4tjnTJ3SVo8CjCb3wkL2tMokyLOKoxTi8VhVEFFEn/fEe1Vripdg 4xqLifrkfT9rlqdDJpxs1pZnBj2MZrSu6lAgnViEeoJobAHaB26rurTZb69kKozy p1gGywxcdVrlvFShBvenvZuOX+Sbuw5tzkrley6kbyyOirPk4YGwYpndsR3tIRHS 9XSLLfF3+bRgFxDf6+4Rs6beCS4UoUAcxa/GwrsWR6inHiVvCgstS1bSvD6IIqjz IUuePGZaFTkqkPPZCBZVdu0LBq4psxPBqjZ0LGS4UFVOfNzNqQg= -----END CERTIFICATE-----Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org