$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft File: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft (raw, json) Hash identifier: r7TUzKdqjLJJhPRncs3JrqP5TNWVUVKk+z16jOyvUBo= Subject key identifier: 1E:CC:67:54:C3:96:4B:62:37:F8:D0:D1:BF:DE:0E:61:18:33:AA:8D Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Certificate serial: 0B62159F527C9F1069234CF7F3A60BBEF4D32AAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft Manifest number: 010E Signing time: Fri 17 May 2024 21:50:48 +0000 Manifest this update: Fri 17 May 2024 21:45:48 +0000 Manifest next update: Tue 21 May 2024 06:01:48 +0000 Files and hashes: 1: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: 21IoLbT/NSivKUgf7HxsIt7w7tpjHpnX7r2U23ZpHZM=) 2: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: +M8UPM+LIRH6aDGnDPYN6jqVzfR2WJd7rVgqJFOfxrw=) 3: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl (hash: 72tWzv8HYRIHjpl22YLkds8/PYLF5frJShQcwKtcyBM=) 4: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: Yet2W7OvAYE8i0Mx+J5NTo7EWwR6JzO+ouJ32PjcSw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:62:15:9f:52:7c:9f:10:69:23:4c:f7:f3:a6:0b:be:f4:d3:2a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Validity Not Before: May 17 21:45:48 2024 GMT Not After : May 21 06:01:48 2024 GMT Subject: CN=1ECC6754C3964B6237F8D0D1BFDE0E611833AA8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cb:25:a3:d2:f4:76:4d:d1:2c:b1:aa:8c:99: 8d:4e:69:c4:db:ad:82:ff:dd:7f:96:6c:e1:4d:19: 77:76:b7:0f:0e:c5:6d:ad:35:78:ee:0f:d4:e8:18: f1:0a:42:13:f6:d3:73:3f:8b:3e:7d:50:d1:68:36: d5:28:92:83:2d:b1:45:21:66:80:50:b9:84:76:20: 50:21:f2:ee:e7:e4:e1:04:2e:ab:cd:b5:5a:49:f2: c6:2a:3b:2e:8b:24:87:e9:d3:c5:ab:38:78:50:64: d4:a1:c9:d7:95:b7:b9:9e:9e:6f:d8:e1:24:9f:66: d1:73:d9:e7:96:08:ee:9c:1a:b1:f3:87:ca:cc:54: 77:fa:c3:bc:57:05:c8:82:d3:c9:f2:3f:0e:dd:00: 04:a0:b9:9d:9e:69:34:86:e9:a5:a2:ca:c8:b7:2d: c4:f8:01:7e:50:31:42:42:f7:0f:ec:aa:32:22:c9: db:bc:2d:43:09:55:58:f1:14:f8:ef:3b:b0:41:11: 3a:8f:ea:d4:14:2e:62:05:19:93:01:d4:d0:e9:da: a7:7b:36:57:da:d1:c8:e1:25:41:ce:62:da:da:2e: 32:66:ce:80:2d:65:c6:5d:ad:be:1b:b4:e7:df:55: cf:05:1c:f2:63:b0:9c:b7:70:6f:e9:b8:eb:60:9b: da:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CC:67:54:C3:96:4B:62:37:F8:D0:D1:BF:DE:0E:61:18:33:AA:8D X509v3 Authority Key Identifier: keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:e8:4d:f6:2e:2a:a0:dd:02:0e:d9:31:7a:84:07:22:87:68: 1e:a2:7a:17:50:53:98:db:3b:70:84:f3:74:5e:19:35:eb:e3: fe:60:d4:ca:d7:67:04:cd:e6:16:ff:ac:84:f1:70:72:82:71: 6e:45:a2:71:d6:00:c6:78:4b:cb:42:9d:65:3b:60:bd:53:17: d5:3f:a7:d0:19:77:8e:68:20:0d:24:aa:94:df:7c:c7:d2:58: 43:47:6b:f1:22:29:cd:73:b0:b1:3f:d8:14:72:85:a8:91:c1: e1:6f:3c:fd:ce:60:b2:da:cb:95:ce:8c:fd:78:eb:d2:d1:d7: 85:a3:e8:d3:6f:0e:4a:06:5b:a3:3c:db:ba:e0:8e:d6:e0:96: 00:ff:6a:a9:af:04:e5:b9:7c:78:2d:b3:ed:c1:44:07:fe:22: 39:ea:c7:46:ed:3e:be:03:9d:5d:59:6e:3b:ab:ea:49:c6:f5: ce:fe:34:af:6e:7d:51:3d:9a:8d:89:f5:6d:a2:48:9a:05:6b: c7:be:ea:20:4e:f1:b5:8d:24:17:77:a9:82:aa:8c:3c:2f:8d: e6:e1:d2:23:49:17:f5:b6:48:3c:d4:04:16:1a:c0:c8:ae:d4: e8:cc:cd:e0:5f:bf:bc:da:2b:8f:44:5a:dc:16:c6:5e:89:b1: 4a:56:a1:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2IVn1J8nxBpI0z386YLvvTTKqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4 NUMzNUU0RjAeFw0yNDA1MTcyMTQ1NDhaFw0yNDA1MjEwNjAxNDhaMDMxMTAvBgNV BAMTKDFFQ0M2NzU0QzM5NjRCNjIzN0Y4RDBEMUJGREUwRTYxMTgzM0FBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkyyWj0vR2TdEssaqMmY1OacTb rYL/3X+WbOFNGXd2tw8OxW2tNXjuD9ToGPEKQhP203M/iz59UNFoNtUokoMtsUUh ZoBQuYR2IFAh8u7n5OEELqvNtVpJ8sYqOy6LJIfp08WrOHhQZNShydeVt7menm/Y 4SSfZtFz2eeWCO6cGrHzh8rMVHf6w7xXBciC08nyPw7dAASguZ2eaTSG6aWiysi3 LcT4AX5QMUJC9w/sqjIiydu8LUMJVVjxFPjvO7BBETqP6tQULmIFGZMB1NDp2qd7 Nlfa0cjhJUHOYtraLjJmzoAtZcZdrb4btOffVc8FHPJjsJy3cG/puOtgm9qZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHsxnVMOWS2I3+NDRv94OYRgzqo0wHwYDVR0j BBgwFoAUPXifr19+vmk4xMcj3NLu14XDXk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDk3MDAzMi0wOGVhLTQ4OTAtYmRiYS02MzA5YTQ5NzkxN2QvMC8zRDc4OUZBRjVG N0VCRTY5MzhDNEM3MjNEQ0QyRUVENzg1QzM1RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4NUMz NUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5NzAwMzItMDhlYS00ODkwLWJk YmEtNjMwOWE0OTc5MTdkLzAvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVF RDc4NUMzNUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANHoTfYuKqDdAg7ZMXqEByKHaB6iehdQU5jb O3CE83ReGTXr4/5g1MrXZwTN5hb/rITxcHKCcW5FonHWAMZ4S8tCnWU7YL1TF9U/ p9AZd45oIA0kqpTffMfSWENHa/EiKc1zsLE/2BRyhaiRweFvPP3OYLLay5XOjP14 69LR14Wj6NNvDkoGW6M827rgjtbglgD/aqmvBOW5fHgts+3BRAf+Ijnqx0btPr4D nV1Zbjur6knG9c7+NK9ufVE9mo2J9W2iSJoFa8e+6iBO8bWNJBd3qYKqjDwvjebh 0iNJF/W2SDzUBBYawMiu1OjMzeBfv7zaK49EWtwWxl6JsUpWoew= -----END CERTIFICATE-----Generated at Fri May 17 22:18:50 2024 by rpki-client on console-fra.rpki-client.org