$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: O1Ul4aBN/i7qaWVgImqefhpWokUttLFySDwRtuSGYZs= Subject key identifier: CC:93:76:4B:42:61:DA:F4:9C:4A:94:33:F5:AD:EC:19:7F:AB:EA:F0 Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 4438BD654D36855892CA4122A12EAF43155C45AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: 99 Signing time: Fri 22 Nov 2024 06:12:27 +0000 Manifest this update: Fri 22 Nov 2024 06:07:27 +0000 Manifest next update: Mon 25 Nov 2024 07:48:27 +0000 Files and hashes: 1: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: yzdlqTGERUX5Dfls6N+zQVAwUXNqvvAY4qny6jM4Q3A=) 2: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: +s7mOlJGuu9sCE+kBtlNaPqB49/vOFNKMFjo4rwIBYU=) 3: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: 3flPgHpt8KdE9dx+bJWTjOwFtAuLocuHewAXWIYfTjY=) 4: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: GrQogzIJql8vnvvQ/HCJMvEpKqHIeZlLv3i5gtMVXYs=) 5: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: fH9ekDtXHlvVQoJyiP7hBLDlPnte432kDbzqupkhg5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:38:bd:65:4d:36:85:58:92:ca:41:22:a1:2e:af:43:15:5c:45:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Nov 22 06:07:27 2024 GMT Not After : Nov 25 07:48:27 2024 GMT Subject: CN=CC93764B4261DAF49C4A9433F5ADEC197FABEAF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:61:7b:74:ec:40:a1:d5:d8:91:96:01:0c: 0d:70:4a:87:2e:4f:98:f4:4e:7b:53:8f:1d:e5:ff: 4d:64:09:51:47:8b:c5:50:31:f3:1e:51:41:c3:f7: 9f:0d:d8:f0:61:ca:2e:d6:6a:c2:da:2c:95:f1:61: a5:28:9a:18:d9:43:0d:91:38:5d:54:c0:4f:2a:ea: 5c:f7:e1:29:e9:7e:15:ce:43:74:7e:09:95:ae:48: 6c:d8:b9:71:af:32:97:bb:8a:48:34:01:56:ab:2d: e3:5f:78:db:dc:9e:7e:da:07:28:99:99:1f:aa:cc: 14:13:bb:f9:82:71:cf:b2:13:ff:f1:3a:14:5d:3a: 91:94:8a:81:4a:b6:21:46:77:07:a5:47:98:15:d8: fe:fe:49:21:67:4a:10:7b:40:1c:90:fe:e2:25:26: 31:f7:48:16:94:a0:5c:7d:47:9d:0c:1a:56:56:80: 7e:45:6f:03:3c:bc:e5:16:0d:97:00:b3:62:93:f2: 20:c8:84:58:fc:47:3d:ad:d1:0f:79:33:23:17:f6: 58:45:02:1a:81:fa:66:a9:f2:52:2e:16:89:d6:e2: 54:7a:39:f2:3b:5e:5a:ee:19:9e:27:51:f6:67:db: ec:c0:78:14:90:c6:b0:e1:1c:7e:fc:95:dc:29:70: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:93:76:4B:42:61:DA:F4:9C:4A:94:33:F5:AD:EC:19:7F:AB:EA:F0 X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:63:ae:8f:a2:4a:39:53:a2:4a:c3:6c:2d:04:8c:2e:0e:55: 43:a9:3f:86:20:2a:dd:e3:bb:fd:4c:3d:e8:4d:f9:42:43:08: 29:80:21:62:96:a3:4a:51:4e:3b:19:b6:45:22:93:6a:da:64: 59:ae:fb:3d:f8:fd:3f:bf:ec:b9:0b:78:92:3e:66:17:5b:f5: 90:8f:a8:c5:e5:56:6e:e4:8a:d5:2b:e3:3f:19:8c:ad:86:15: c4:15:f8:30:f6:be:b9:bd:7b:a0:35:58:ab:c1:06:a1:89:b0: af:05:7c:63:62:6a:7d:f5:5c:63:a5:33:52:55:7b:b5:a9:59: 1c:32:fd:cb:7b:25:77:78:24:c9:2f:64:7e:64:28:b2:c4:29: ef:f9:9f:f6:67:ce:00:34:21:80:e2:dc:37:7d:aa:f4:66:82: 8a:df:b2:4a:7e:fc:95:f4:48:7c:ef:11:0e:2e:8a:79:2d:4a: 74:cb:1d:40:60:e4:31:bb:08:76:3d:57:74:d9:65:d4:9a:8d: 4b:3d:84:57:08:53:0d:4f:1a:9c:88:ac:e4:ab:94:01:f2:f0: b7:89:db:bd:c8:e3:35:89:3f:83:cd:92:ee:13:88:be:e5:ff: 17:c9:38:35:2c:35:0e:5a:77:ae:21:c2:22:73:98:c3:95:33: 0e:25:75:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDi9ZU02hViSykEioS6vQxVcRaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNDExMjIwNjA3MjdaFw0yNDExMjUwNzQ4MjdaMDMxMTAvBgNV BAMTKENDOTM3NjRCNDI2MURBRjQ5QzRBOTQzM0Y1QURFQzE5N0ZBQkVBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoi2F7dOxAodXYkZYBDA1wSocu T5j0TntTjx3l/01kCVFHi8VQMfMeUUHD958N2PBhyi7WasLaLJXxYaUomhjZQw2R OF1UwE8q6lz34SnpfhXOQ3R+CZWuSGzYuXGvMpe7ikg0AVarLeNfeNvcnn7aByiZ mR+qzBQTu/mCcc+yE//xOhRdOpGUioFKtiFGdwelR5gV2P7+SSFnShB7QByQ/uIl JjH3SBaUoFx9R50MGlZWgH5FbwM8vOUWDZcAs2KT8iDIhFj8Rz2t0Q95MyMX9lhF AhqB+map8lIuFonW4lR6OfI7XlruGZ4nUfZn2+zAeBSQxrDhHH78ldwpcPbvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJN2S0Jh2vScSpQz9a3sGX+r6vAwHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1jro+iSjlTokrDbC0EjC4OVUOpP4YgKt3j u/1MPehN+UJDCCmAIWKWo0pRTjsZtkUik2raZFmu+z34/T+/7LkLeJI+Zhdb9ZCP qMXlVm7kitUr4z8ZjK2GFcQV+DD2vrm9e6A1WKvBBqGJsK8FfGNian31XGOlM1JV e7WpWRwy/ct7JXd4JMkvZH5kKLLEKe/5n/ZnzgA0IYDi3Dd9qvRmgorfskp+/JX0 SHzvEQ4uinktSnTLHUBg5DG7CHY9V3TZZdSajUs9hFcIUw1PGpyIrOSrlAHy8LeJ 273I4zWJP4PNku4TiL7l/xfJODUsNQ5ad64hwiJzmMOVMw4ldVQ= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org