$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: yfEvcW2qSx9qnt33egPKZiCluqvXx6uIE/Q7x9L1CVM= Subject key identifier: 30:14:88:85:32:11:09:2D:F7:38:8C:B4:6C:0E:CB:03:5C:33:EF:CE Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 39340FD7B91DB9E445A454B104D91F3E2DCE476D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 01E4 Signing time: Wed 29 May 2024 17:41:12 +0000 Manifest this update: Wed 29 May 2024 17:36:12 +0000 Manifest next update: Sun 02 Jun 2024 03:45:12 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: q5Y3Tv2VROliZbT6DG7eRFqlkh4CzWlPaEDwCtvAlhc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 20:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:34:0f:d7:b9:1d:b9:e4:45:a4:54:b1:04:d9:1f:3e:2d:ce:47:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: May 29 17:36:12 2024 GMT Not After : Jun 2 03:45:12 2024 GMT Subject: CN=301488853211092DF7388CB46C0ECB035C33EFCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bd:5f:f0:d5:79:7d:64:fe:a3:5f:a1:63:ef: 95:43:a8:22:f8:6f:b3:37:42:32:8f:19:fd:3d:0a: 79:e7:06:ca:29:ef:e5:66:28:8b:70:c7:93:70:5c: ea:33:cc:e6:c5:7a:c5:98:42:22:16:41:24:4c:21: 61:55:c3:f9:26:41:ca:3f:77:c8:44:cb:0a:8c:df: 3d:1c:2b:1c:e5:48:3f:71:e0:77:4a:7f:b9:9b:fd: db:50:fe:42:1d:8a:63:ff:1b:e1:0f:94:fa:41:7b: 14:2f:4c:fd:38:b8:52:76:7d:37:16:4d:e4:3c:44: db:cf:31:38:89:22:0f:3f:d0:93:94:e2:9a:e7:e1: 8a:09:82:2b:f4:9d:87:bc:4b:74:53:c2:42:c4:43: d0:7f:67:24:25:76:94:ed:db:c8:89:15:44:39:8e: 07:91:b6:31:a2:ad:87:21:a7:68:65:60:f5:04:d5: 02:10:62:48:b5:0b:60:f8:cf:66:1f:30:99:20:09: 75:8d:f7:ea:ee:a8:3b:e0:21:d3:20:62:f6:43:6f: dd:8f:4a:28:ff:cd:48:d0:2c:46:b1:1a:5a:a6:cc: d0:45:2b:ad:7e:5f:aa:2c:d6:22:97:34:aa:ce:8c: af:30:d2:9d:17:97:16:79:ae:15:98:44:00:0a:f9: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:14:88:85:32:11:09:2D:F7:38:8C:B4:6C:0E:CB:03:5C:33:EF:CE X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:df:2e:89:bf:04:8a:c5:f4:bd:51:01:5c:02:b6:07:59:68: 1c:96:a3:fd:92:9a:50:f2:c4:28:66:23:52:70:48:a2:f6:81: ba:9a:13:6c:ff:2b:a9:6d:6b:ca:54:3f:ea:c3:c6:41:dc:f9: 51:d2:44:df:7e:18:61:46:16:3a:e3:fe:09:59:9b:f8:f9:7c: 4c:3a:ad:a5:2c:b7:f1:92:ad:c3:51:fc:ad:85:8e:90:02:c6: 8c:7a:29:aa:26:45:38:12:4f:3d:42:c5:44:35:cf:a1:9a:24: 88:81:28:9f:27:ef:0f:63:34:49:70:97:6b:5e:de:16:bb:58: e0:fe:7e:01:ee:e2:42:da:f5:3d:cf:a0:58:35:f8:7d:0d:c6: b6:8d:50:25:02:d6:ca:4b:b8:40:ca:0d:cd:e1:3c:33:84:be: ae:39:7e:ba:9b:82:23:b0:81:c0:b3:cb:c2:a0:19:23:a6:2b: 19:b3:d2:27:25:08:95:7a:1e:70:de:1b:33:23:af:30:bc:04: b4:12:d1:55:0a:75:2d:c6:57:60:28:1d:45:b7:4f:a1:ac:22: ac:dd:7e:06:ed:1a:8e:5a:db:37:0d:15:e7:63:eb:28:e8:9a: a2:a0:90:7a:37:07:89:9a:2c:2a:44:3e:4b:83:bd:ec:6e:95: 09:90:48:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTQP17kdueRFpFSxBNkfPi3OR20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNDA1MjkxNzM2MTJaFw0yNDA2MDIwMzQ1MTJaMDMxMTAvBgNV BAMTKDMwMTQ4ODg1MzIxMTA5MkRGNzM4OENCNDZDMEVDQjAzNUMzM0VGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnvV/w1Xl9ZP6jX6Fj75VDqCL4 b7M3QjKPGf09CnnnBsop7+VmKItwx5NwXOozzObFesWYQiIWQSRMIWFVw/kmQco/ d8hEywqM3z0cKxzlSD9x4HdKf7mb/dtQ/kIdimP/G+EPlPpBexQvTP04uFJ2fTcW TeQ8RNvPMTiJIg8/0JOU4prn4YoJgiv0nYe8S3RTwkLEQ9B/ZyQldpTt28iJFUQ5 jgeRtjGirYchp2hlYPUE1QIQYki1C2D4z2YfMJkgCXWN9+ruqDvgIdMgYvZDb92P Sij/zUjQLEaxGlqmzNBFK61+X6os1iKXNKrOjK8w0p0XlxZ5rhWYRAAK+SMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMBSIhTIRCS33OIy0bA7LA1wz784wHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzfLom/BIrF9L1RAVwCtgdZaByWo/2SmlDy xChmI1JwSKL2gbqaE2z/K6lta8pUP+rDxkHc+VHSRN9+GGFGFjrj/glZm/j5fEw6 raUst/GSrcNR/K2FjpACxox6KaomRTgSTz1CxUQ1z6GaJIiBKJ8n7w9jNElwl2te 3ha7WOD+fgHu4kLa9T3PoFg1+H0NxraNUCUC1spLuEDKDc3hPDOEvq45frqbgiOw gcCzy8KgGSOmKxmz0iclCJV6HnDeGzMjrzC8BLQS0VUKdS3GV2AoHUW3T6GsIqzd fgbtGo5a2zcNFedj6yjomqKgkHo3B4maLCpEPkuDvexulQmQSFo= -----END CERTIFICATE-----Generated at Wed May 29 18:31:37 2024 by rpki-client on console-fra.rpki-client.org