$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: H+cxBUjqmFCFpqWzZfwiSeIT3dGaeoYhSyWbQia4cbY= Subject key identifier: 1D:D5:CE:6A:BC:7D:BD:3A:1C:DF:1F:CB:F5:D5:73:0B:E7:93:6A:31 Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 39E60A4D45E382FD41866A32BFB78B2486D7CEF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: 49 Signing time: Tue 28 May 2024 20:42:03 +0000 Manifest this update: Tue 28 May 2024 20:37:03 +0000 Manifest next update: Sat 01 Jun 2024 01:24:03 +0000 Files and hashes: 1: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: 3flPgHpt8KdE9dx+bJWTjOwFtAuLocuHewAXWIYfTjY=) 2: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: qwMVn+70JHunzlcyf3cx98F8ZvP+0T687qZFKHUVgTc=) 3: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: GrQogzIJql8vnvvQ/HCJMvEpKqHIeZlLv3i5gtMVXYs=) 4: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: fH9ekDtXHlvVQoJyiP7hBLDlPnte432kDbzqupkhg5s=) 5: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: yzdlqTGERUX5Dfls6N+zQVAwUXNqvvAY4qny6jM4Q3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 01:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e6:0a:4d:45:e3:82:fd:41:86:6a:32:bf:b7:8b:24:86:d7:ce:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: May 28 20:37:03 2024 GMT Not After : Jun 1 01:24:03 2024 GMT Subject: CN=1DD5CE6ABC7DBD3A1CDF1FCBF5D5730BE7936A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:96:93:2d:7c:b7:c1:66:85:99:12:23:a0: 42:1d:92:19:a8:14:6f:13:10:4f:7d:69:99:97:92: 6b:74:8e:06:3f:9e:ef:b4:ca:0b:ca:3f:a9:1c:99: 4a:07:02:9e:0d:d4:4e:76:fb:58:74:11:71:45:7f: 1f:93:77:50:18:04:0a:80:ca:ac:c8:ef:73:e6:dc: 28:30:1f:da:f6:73:18:17:d6:97:6e:bb:cc:12:08: 1e:19:46:6b:fe:d1:fc:54:18:f5:75:8d:d6:35:fb: 77:6b:b9:2e:9d:1a:c1:4f:2c:83:2e:f5:a0:8e:9c: 6d:23:c9:21:8a:f7:a3:b2:56:42:9e:1a:99:71:e7: c3:a0:5a:d0:16:db:38:1c:f7:b3:16:34:a9:a9:f2: a3:b7:68:9e:b8:65:d5:99:c4:7d:ca:46:f9:b6:09: c5:9f:88:bf:45:12:b8:3e:a6:2d:eb:5b:89:ab:13: f0:9d:df:72:28:6b:63:01:bb:a1:f5:a1:33:7e:44: d0:c8:4d:b7:02:b4:70:31:d9:c1:24:f7:45:79:97: 9f:de:a9:d0:76:7c:fd:38:e2:a4:46:9a:f5:11:19: fd:e6:da:da:e8:f2:ad:e0:bb:8e:4a:cb:9a:23:ac: 4b:11:a8:6a:bf:3c:b6:b8:3d:7d:80:b4:c7:f5:1e: d3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D5:CE:6A:BC:7D:BD:3A:1C:DF:1F:CB:F5:D5:73:0B:E7:93:6A:31 X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:57:3b:59:63:fa:f7:05:eb:79:39:b9:3f:8b:78:83:47:29: 7c:73:cd:eb:86:88:5e:55:dd:6b:3d:90:76:89:3b:48:53:23: b3:26:30:d7:b4:a6:bd:83:07:f7:3a:cd:39:4d:e6:e0:c0:db: 30:85:27:ee:05:83:57:bf:7a:d9:3b:2f:9e:56:6f:97:2c:e7: 2c:e8:ab:a4:51:5c:91:6c:e3:6b:a2:2a:60:b8:be:9e:bf:05: 6a:bd:cd:64:d9:d5:cb:4e:7c:12:94:70:6e:8c:e9:cc:e1:34: c8:11:28:3c:cb:2b:64:3e:1e:9a:31:c8:e8:36:d8:31:81:74: 7f:b0:68:51:c2:12:7f:2f:cb:89:05:66:aa:c8:4c:36:fd:23: 58:0b:98:6c:a4:88:94:9f:66:7f:c8:80:d1:6c:09:1f:97:ef: 52:7b:78:74:1b:f5:dd:87:f5:00:a0:a9:9a:13:3d:85:d0:58: b2:95:b8:ef:d8:3d:95:45:e9:96:d7:4e:b8:cb:63:6b:05:b2: 96:14:df:fd:9a:9b:6c:b4:c7:55:8c:a5:27:eb:8a:a0:f9:ef: da:45:d0:d4:16:81:bc:4a:ea:d1:58:d0:c2:76:68:30:08:b3: b4:46:77:29:b6:40:a8:3d:98:9e:b4:cc:f0:1f:e8:28:f9:c0: 99:92:95:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOeYKTUXjgv1Bhmoyv7eLJIbXzvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNDA1MjgyMDM3MDNaFw0yNDA2MDEwMTI0MDNaMDMxMTAvBgNV BAMTKDFERDVDRTZBQkM3REJEM0ExQ0RGMUZDQkY1RDU3MzBCRTc5MzZBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpppaTLXy3wWaFmRIjoEIdkhmo FG8TEE99aZmXkmt0jgY/nu+0ygvKP6kcmUoHAp4N1E52+1h0EXFFfx+Td1AYBAqA yqzI73Pm3CgwH9r2cxgX1pduu8wSCB4ZRmv+0fxUGPV1jdY1+3druS6dGsFPLIMu 9aCOnG0jySGK96OyVkKeGplx58OgWtAW2zgc97MWNKmp8qO3aJ64ZdWZxH3KRvm2 CcWfiL9FErg+pi3rW4mrE/Cd33Ioa2MBu6H1oTN+RNDITbcCtHAx2cEk90V5l5/e qdB2fP044qRGmvURGf3m2tro8q3gu45Ky5ojrEsRqGq/PLa4PX2AtMf1HtOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdXOarx9vToc3x/L9dVzC+eTajEwHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENXO1lj+vcF63k5uT+LeINHKXxzzeuGiF5V 3Ws9kHaJO0hTI7MmMNe0pr2DB/c6zTlN5uDA2zCFJ+4Fg1e/etk7L55Wb5cs5yzo q6RRXJFs42uiKmC4vp6/BWq9zWTZ1ctOfBKUcG6M6czhNMgRKDzLK2Q+HpoxyOg2 2DGBdH+waFHCEn8vy4kFZqrITDb9I1gLmGykiJSfZn/IgNFsCR+X71J7eHQb9d2H 9QCgqZoTPYXQWLKVuO/YPZVF6ZbXTrjLY2sFspYU3/2am2y0x1WMpSfriqD579pF 0NQWgbxK6tFY0MJ2aDAIs7RGdym2QKg9mJ60zPAf6Cj5wJmSlWI= -----END CERTIFICATE-----Generated at Tue May 28 22:49:01 2024 by rpki-client on console-ams.rpki-client.org