$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: z3UxYkq9RMDODCk15Th7F4sRBk3Bc7GjD/3knUW4eqA= Subject key identifier: DE:BA:91:FF:3E:CD:38:F6:99:88:5D:1F:4F:D7:D9:DD:6F:E5:89:1E Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 27BA4A2CE439B626F06B368A42E48C0F2F42619C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: E9 Signing time: Fri 17 May 2024 22:41:40 +0000 Manifest this update: Fri 17 May 2024 22:36:40 +0000 Manifest next update: Tue 21 May 2024 08:26:40 +0000 Files and hashes: 1: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: rm08D0NMv1yWU3n7Y2iTe7wwKtWOGymMN4hLCqSwd2g=) 2: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: +AXYk7vxs84UF7QswDPHTN2FPO+TZz2ALWKwWEEv07M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ba:4a:2c:e4:39:b6:26:f0:6b:36:8a:42:e4:8c:0f:2f:42:61:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: May 17 22:36:40 2024 GMT Not After : May 21 08:26:40 2024 GMT Subject: CN=DEBA91FF3ECD38F699885D1F4FD7D9DD6FE5891E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:08:35:2c:aa:69:ee:01:1b:2a:a9:99:4b: bd:ef:50:37:2c:d0:12:f8:eb:df:f7:2e:d0:e2:4e: bf:23:4d:49:1a:f4:8e:d8:f0:77:cd:19:4f:d6:88: 6c:1e:b9:67:20:73:d0:36:a3:f8:16:2b:da:47:d3: 47:9b:7d:fd:21:82:3b:00:b6:f3:75:02:39:2a:9e: c8:86:01:63:3e:48:87:96:7e:18:7f:86:77:80:5e: b3:1b:d0:5d:75:e8:e2:e4:05:63:a9:16:6e:cc:89: f8:71:f1:98:15:9e:97:97:3f:55:8a:5d:b8:3e:6a: b8:cf:db:e8:1d:e1:43:7a:d3:ce:a5:0b:3c:45:bb: 02:7c:56:a9:ba:59:72:b9:cc:58:f0:26:a0:8f:3b: 12:2c:f3:70:d6:fc:cc:d5:56:6d:6b:cf:34:e9:78: 2e:03:78:8d:20:05:d1:81:0c:a3:6f:4a:1f:53:38: 94:13:f0:8c:2f:cd:96:db:2f:82:31:43:45:91:8f: b9:ae:74:e3:ea:34:d8:8a:85:af:32:2e:d3:25:a3: 3f:b9:cd:0f:f9:ac:cc:63:b1:7b:a4:aa:46:52:35: 35:e0:73:ec:9e:82:5f:50:1a:d7:52:cc:8f:0d:a8: 86:1b:61:56:bd:81:10:de:b9:b2:3c:a3:f8:44:58: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BA:91:FF:3E:CD:38:F6:99:88:5D:1F:4F:D7:D9:DD:6F:E5:89:1E X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:9c:09:b0:67:52:3b:9c:23:9b:99:48:37:4f:59:a2:30:25: 46:35:e5:cb:dd:df:51:bb:f1:53:4f:13:e7:f9:97:bb:2a:d9: 7a:0f:e5:b8:38:10:99:9b:4c:60:e8:5d:a1:c4:ee:e0:c0:e5: 1c:96:fc:4a:75:e1:0e:df:ed:77:f7:dd:1d:f7:07:45:71:b7: 35:7a:2e:96:94:e2:64:47:ae:81:66:e5:0e:07:bb:8d:c7:05: ae:40:ef:51:2f:9e:6d:17:2e:76:e0:fb:62:5b:95:d3:c8:9b: 39:b2:e5:c7:ca:77:9c:8c:77:9d:55:00:a4:af:45:87:53:6b: 4a:0a:06:26:d5:8d:10:f7:d9:29:f0:56:d1:03:8f:67:f4:0f: 7e:94:11:d6:e1:ab:29:d7:dd:f2:76:64:bf:ab:86:2a:c9:78: c6:a9:0f:13:92:46:45:93:55:84:dd:d7:f2:d3:60:48:49:dc: a5:be:00:57:26:0f:28:3c:e0:6a:f0:56:bf:e6:82:5a:32:6d: 03:e9:e4:a9:ff:d6:f9:2b:17:e0:89:ac:94:b9:26:b4:31:4c: 1b:90:e0:4d:b0:16:7b:1f:6c:23:eb:e2:3c:74:f3:1d:c1:bf: 25:1f:70:cd:03:d3:29:3f:9c:ce:d1:6b:42:ac:d5:2b:f4:7b: 78:f2:23:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7pKLOQ5tibwazaKQuSMDy9CYZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNDA1MTcyMjM2NDBaFw0yNDA1MjEwODI2NDBaMDMxMTAvBgNV BAMTKERFQkE5MUZGM0VDRDM4RjY5OTg4NUQxRjRGRDdEOURENkZFNTg5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLgg1LKpp7gEbKqmZS73vUDcs 0BL469/3LtDiTr8jTUka9I7Y8HfNGU/WiGweuWcgc9A2o/gWK9pH00ebff0hgjsA tvN1AjkqnsiGAWM+SIeWfhh/hneAXrMb0F116OLkBWOpFm7Mifhx8ZgVnpeXP1WK Xbg+arjP2+gd4UN6086lCzxFuwJ8Vqm6WXK5zFjwJqCPOxIs83DW/MzVVm1rzzTp eC4DeI0gBdGBDKNvSh9TOJQT8IwvzZbbL4IxQ0WRj7mudOPqNNiKha8yLtMloz+5 zQ/5rMxjsXukqkZSNTXgc+yegl9QGtdSzI8NqIYbYVa9gRDeubI8o/hEWFsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rqR/z7NOPaZiF0fT9fZ3W/liR4wHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEicCbBnUjucI5uZSDdPWaIwJUY15cvd31G7 8VNPE+f5l7sq2XoP5bg4EJmbTGDoXaHE7uDA5RyW/Ep14Q7f7Xf33R33B0VxtzV6 LpaU4mRHroFm5Q4Hu43HBa5A71Evnm0XLnbg+2JbldPImzmy5cfKd5yMd51VAKSv RYdTa0oKBibVjRD32SnwVtEDj2f0D36UEdbhqynX3fJ2ZL+rhirJeMapDxOSRkWT VYTd1/LTYEhJ3KW+AFcmDyg84GrwVr/mgloybQPp5Kn/1vkrF+CJrJS5JrQxTBuQ 4E2wFnsfbCPr4jx08x3BvyUfcM0D0yk/nM7Ra0Ks1Sv0e3jyIw0= -----END CERTIFICATE-----Generated at Fri May 17 23:32:46 2024 by rpki-client on console-fra.rpki-client.org