$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: 34yMG/820rt4A8Y1MsjKguHxrGUsjr0dg9dfX6TN4yY= Subject key identifier: C2:C0:E8:9C:1E:0C:0E:B2:D8:E0:65:5B:A7:F1:1D:8F:39:3A:10:8C Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 3D274FE19AB98BEE1F4E2864A3B9434A89AA0DB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 013C Signing time: Fri 22 Nov 2024 07:11:56 +0000 Manifest this update: Fri 22 Nov 2024 07:06:56 +0000 Manifest next update: Mon 25 Nov 2024 17:17:56 +0000 Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: JKF/2Ak9+OxYTe9YP1AwNOxIY3C6jXS6N4jtl3kEiIA=) 2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:27:4f:e1:9a:b9:8b:ee:1f:4e:28:64:a3:b9:43:4a:89:aa:0d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Nov 22 07:06:56 2024 GMT Not After : Nov 25 17:17:56 2024 GMT Subject: CN=C2C0E89C1E0C0EB2D8E0655BA7F11D8F393A108C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:42:20:bb:f3:b6:df:ad:5e:ed:eb:31:4d: dd:f8:62:9e:ed:4b:f4:68:91:d1:73:76:55:8e:ab: 27:75:f6:0f:8c:ed:fc:1e:82:f6:3d:f4:18:2c:f4: c2:16:1f:bf:b8:be:3e:25:53:db:ca:ef:a6:65:f4: c1:cd:8a:62:6a:46:05:be:86:bd:62:66:30:04:84: 65:ad:05:1e:aa:a3:e9:0f:52:f0:f1:5b:74:0a:c2: 07:94:65:9c:a5:d8:8d:b3:1d:4a:de:a6:02:fb:78: b7:b5:5b:76:dc:d7:bc:97:c1:f5:7e:d4:32:5a:c4: 18:ed:71:da:f0:f0:3b:3d:e7:fe:fe:1c:46:9c:17: 27:23:bc:45:05:f6:6a:9d:15:bd:f1:9e:32:d7:4e: b2:c2:f4:f3:ad:cb:57:0f:cd:04:34:c2:1b:bc:11: 0a:45:db:46:b9:ea:7c:5f:15:bc:59:31:00:8e:9a: 19:6f:91:cd:16:73:3f:62:b8:ba:9d:98:78:c1:f4: f4:0e:4f:08:d7:de:c0:85:71:76:98:9f:51:01:09: a8:6b:05:96:4c:c8:f4:0b:bd:1d:93:9b:f1:3d:38: cd:8e:e0:92:d4:45:26:2a:fe:13:3c:4e:bb:2e:73: 82:de:d4:0d:01:2a:ed:c4:87:f9:de:6d:9f:5a:2b: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C0:E8:9C:1E:0C:0E:B2:D8:E0:65:5B:A7:F1:1D:8F:39:3A:10:8C X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:78:8f:73:a5:e3:ee:46:8f:37:1d:5a:9f:f5:4d:12:d5:66: be:d2:63:68:c5:cb:ed:94:75:31:a9:64:1c:a4:fb:26:88:17: c5:58:bf:71:59:ca:ec:f3:4a:17:a0:bd:02:f8:1a:6b:c0:de: 8e:e5:a9:30:2b:5a:ff:eb:76:92:4f:4f:a5:c9:78:39:89:84: 63:a3:55:95:48:79:ed:88:62:92:0a:6a:e7:ae:82:0e:9b:f3: 5b:ba:20:5b:ca:54:2e:20:99:f4:ba:b4:e6:e5:66:c4:c6:6d: 26:f0:46:45:3d:c6:9b:d8:6d:a3:49:65:b9:c1:48:c5:5e:6d: f1:ea:f9:f7:45:f5:60:ca:57:65:bd:21:86:18:8d:f8:35:28: 77:19:92:70:b8:5f:af:ba:56:78:23:ff:cd:46:db:b9:ea:15: 73:50:80:cb:98:d2:49:23:27:af:e8:f4:ad:2f:37:2b:78:e9: 99:cb:74:e1:05:aa:e5:54:78:2c:d1:0f:68:9c:31:b6:2b:33: dc:6e:68:21:89:3a:17:0d:31:d2:ad:a4:41:06:44:09:11:06: 4a:00:f9:44:49:b7:6c:cd:e9:bb:86:4a:43:ca:5f:e5:cc:99: f5:ff:01:8e:3a:59:3c:4d:ce:74:e2:25:6f:be:04:db:ea:95: d1:6a:2a:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSdP4Zq5i+4fTihko7lDSomqDbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNDExMjIwNzA2NTZaFw0yNDExMjUxNzE3NTZaMDMxMTAvBgNV BAMTKEMyQzBFODlDMUUwQzBFQjJEOEUwNjU1QkE3RjExRDhGMzkzQTEwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2CkIgu/O2361e7esxTd34Yp7t S/RokdFzdlWOqyd19g+M7fwegvY99Bgs9MIWH7+4vj4lU9vK76Zl9MHNimJqRgW+ hr1iZjAEhGWtBR6qo+kPUvDxW3QKwgeUZZyl2I2zHUrepgL7eLe1W3bc17yXwfV+ 1DJaxBjtcdrw8Ds95/7+HEacFycjvEUF9mqdFb3xnjLXTrLC9POty1cPzQQ0whu8 EQpF20a56nxfFbxZMQCOmhlvkc0Wcz9iuLqdmHjB9PQOTwjX3sCFcXaYn1EBCahr BZZMyPQLvR2Tm/E9OM2O4JLURSYq/hM8Trsuc4Le1A0BKu3Eh/nebZ9aK1aDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwsDonB4MDrLY4GVbp/Edjzk6EIwwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABV4j3Ol4+5GjzcdWp/1TRLVZr7SY2jFy+2U dTGpZByk+yaIF8VYv3FZyuzzShegvQL4GmvA3o7lqTArWv/rdpJPT6XJeDmJhGOj VZVIee2IYpIKaueugg6b81u6IFvKVC4gmfS6tOblZsTGbSbwRkU9xpvYbaNJZbnB SMVebfHq+fdF9WDKV2W9IYYYjfg1KHcZknC4X6+6Vngj/81G27nqFXNQgMuY0kkj J6/o9K0vNyt46ZnLdOEFquVUeCzRD2icMbYrM9xuaCGJOhcNMdKtpEEGRAkRBkoA +URJt2zN6buGSkPKX+XMmfX/AY46WTxNznTiJW++BNvqldFqKt8= -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org