$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json) Hash identifier: crPcUH3o5tJ6x3TGcM5nRk9ZshDw3OG/Df1rPU0RHAM= Subject key identifier: 53:8A:26:84:85:92:DC:9B:75:D9:8B:6C:EB:FD:66:70:21:CC:12:22 Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Certificate serial: 75BEBB8679C404EB886543E6F9C5668DF31DA3AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft Manifest number: 3A Signing time: Mon 25 Nov 2024 13:02:30 +0000 Manifest this update: Mon 25 Nov 2024 12:57:30 +0000 Manifest next update: Thu 28 Nov 2024 19:08:30 +0000 Files and hashes: 1: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: HdQz1dWfKOGxSjvYAjfqgzM8praYpuYX0xMaqB08kJM=) 2: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: 8Y/k4LyWjtUx8L4pfjic+9+23kTs4b0J1bZtYjYX84k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:be:bb:86:79:c4:04:eb:88:65:43:e6:f9:c5:66:8d:f3:1d:a3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A Validity Not Before: Nov 25 12:57:30 2024 GMT Not After : Nov 28 19:08:30 2024 GMT Subject: CN=538A26848592DC9B75D98B6CEBFD667021CC1222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:7b:30:f5:9f:df:b0:12:7b:9b:b4:68:74: 6a:a0:bf:0a:1f:5f:4d:83:ef:17:89:56:26:30:94: 2b:6d:cc:b9:fc:9f:7f:96:2f:a2:4d:3a:e2:a2:e6: ec:ff:c3:52:75:d2:af:c6:2e:7c:c4:b2:e1:02:ab: 0f:be:7f:73:68:50:24:1f:56:f6:1b:d2:72:d5:f1: 9f:1e:ee:8e:fe:f4:bd:2d:00:ef:77:cd:34:ba:0a: e9:8c:16:51:ca:df:c2:eb:fa:1f:30:cd:f1:75:cd: 88:1d:16:82:7a:16:9b:bb:41:dd:1b:8b:19:54:68: 17:ec:4f:79:e0:20:93:79:0f:59:01:78:b2:1f:6d: 0b:ec:1f:15:3e:13:67:77:05:5d:ff:55:60:b8:a6: a7:3a:97:c0:06:eb:4e:d7:0e:03:6a:b2:dc:fe:88: 37:cd:09:e2:04:b3:cb:50:ed:60:d4:f7:1a:f7:c0: fd:78:2e:c6:62:2b:b4:01:57:bb:f0:08:dc:64:6e: ac:53:19:88:f6:46:53:ca:36:41:d4:78:9a:e4:1f: 85:91:9d:d0:8a:44:36:93:2b:c1:ea:f4:64:b9:c1: e1:a7:f5:d6:14:48:95:a3:da:80:66:55:65:70:1c: ba:a7:ae:14:57:02:e5:63:e5:36:b3:cd:7f:cb:12: d3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8A:26:84:85:92:DC:9B:75:D9:8B:6C:EB:FD:66:70:21:CC:12:22 X509v3 Authority Key Identifier: keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d9:60:b9:12:85:e5:6f:5e:e0:80:0e:75:fc:fd:f0:7d:6b: 3b:f9:9d:c6:52:07:99:0c:76:9d:6d:a5:7e:0f:95:83:3a:06: 15:13:2c:08:da:d6:ab:c2:24:ad:39:f1:4e:4e:f5:69:89:8a: cb:6d:c1:f9:ea:b3:ac:6c:17:c9:7c:58:d9:7d:02:21:d9:02: fe:e0:bd:1d:b4:3f:57:f2:63:69:0c:56:c3:67:41:a6:81:b5: 15:2b:6b:b7:ee:43:cb:3d:48:af:5c:24:9a:10:e5:3a:fb:a7: cb:d7:6d:41:3c:37:69:af:7a:84:7f:9a:19:3f:71:8a:c7:8a: 28:d0:bc:e7:ed:3d:ac:63:a9:cd:2a:4c:30:95:e3:fe:77:51: 91:6e:e9:d8:f4:b7:29:32:57:b8:ea:23:19:bf:4e:94:02:4b: 9f:1b:65:f0:87:7e:6d:7d:6a:dc:6f:0b:d7:af:c9:0a:f4:b5: 3b:a1:93:e8:16:1a:e1:bc:ec:05:d1:ad:e6:83:83:94:10:52: b2:69:0a:72:a0:b2:eb:c5:1f:fc:b6:19:1a:45:69:da:8e:1f: 7f:d1:30:ad:a6:e9:f1:95:43:35:e3:9d:95:fe:d5:95:c3:85: 8b:61:f5:02:54:50:0f:3e:75:25:02:7a:8b:09:6e:5e:9a:05: 34:9a:10:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdb67hnnEBOuIZUPm+cVmjfMdo60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVG ODlCQUI5QTAeFw0yNDExMjUxMjU3MzBaFw0yNDExMjgxOTA4MzBaMDMxMTAvBgNV BAMTKDUzOEEyNjg0ODU5MkRDOUI3NUQ5OEI2Q0VCRkQ2NjcwMjFDQzEyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQNXsw9Z/fsBJ7m7RodGqgvwof X02D7xeJViYwlCttzLn8n3+WL6JNOuKi5uz/w1J10q/GLnzEsuECqw++f3NoUCQf VvYb0nLV8Z8e7o7+9L0tAO93zTS6CumMFlHK38Lr+h8wzfF1zYgdFoJ6Fpu7Qd0b ixlUaBfsT3ngIJN5D1kBeLIfbQvsHxU+E2d3BV3/VWC4pqc6l8AG607XDgNqstz+ iDfNCeIEs8tQ7WDU9xr3wP14LsZiK7QBV7vwCNxkbqxTGYj2RlPKNkHUeJrkH4WR ndCKRDaTK8Hq9GS5weGn9dYUSJWj2oBmVWVwHLqnrhRXAuVj5TazzX/LEtO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU4omhIWS3Jt12Yts6/1mcCHMEiIwHwYDVR0j BBgwFoAUPdzEykO0kvQMjLBuSZNOxfibq5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWI1MzQyMC04YzU5LTQ5Y2YtYjNiMi1mNTVlOTg5MGRkY2QvMC8zRERDQzRDQTQz QjQ5MkY0MEM4Q0IwNkU0OTkzNEVDNUY4OUJBQjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRFQzVGODlC QUI5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliNTM0MjAtOGM1OS00OWNmLWIz YjItZjU1ZTk4OTBkZGNkLzAvM0REQ0M0Q0E0M0I0OTJGNDBDOENCMDZFNDk5MzRF QzVGODlCQUI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLZYLkSheVvXuCADnX8/fB9azv5ncZSB5kM dp1tpX4PlYM6BhUTLAja1qvCJK058U5O9WmJisttwfnqs6xsF8l8WNl9AiHZAv7g vR20P1fyY2kMVsNnQaaBtRUra7fuQ8s9SK9cJJoQ5Tr7p8vXbUE8N2mveoR/mhk/ cYrHiijQvOftPaxjqc0qTDCV4/53UZFu6dj0tykyV7jqIxm/TpQCS58bZfCHfm19 atxvC9evyQr0tTuhk+gWGuG87AXRreaDg5QQUrJpCnKgsuvFH/y2GRpFadqOH3/R MK2m6fGVQzXjnZX+1ZXDhYth9QJUUA8+dSUCeosJbl6aBTSaEMA= -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:44 2024 by rpki-client on console-fra.rpki-client.org