$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft File: 03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json) Hash identifier: pAr85gwLYFqJr7Na/0R0J7DPOLrp/S3R5DMobISJUyA= Subject key identifier: 68:A6:2B:BB:F4:CF:EC:25:8F:D8:82:E1:6D:DB:F1:12:13:4B:5E:0D Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Certificate issuer: /CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Certificate serial: 0AE66B8177183B1603EA25922B97EC44D54A4498 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft Manifest number: 0317 Signing time: Sun 19 May 2024 15:40:53 +0000 Manifest this update: Sun 19 May 2024 15:35:53 +0000 Manifest next update: Wed 22 May 2024 17:45:53 +0000 Files and hashes: 1: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: JSCoBXPkLTBaLAhuKYXyG3fIZ0QFEUIr+MDSxSrcqlg=) 2: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: IETtQ3uZAC0oK7sYf+df5qvmoPWU+4KnPPjPCTWlgyk=) 3: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: fokYhW9/gFIK27xSf2UWcGLNcXafIAYFOvtqI4bMTpQ=) 4: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: 1PR8k35uBdtWKJbRwobyFaxAhGMR+zfYhfWD/SSaHfs=) 5: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: vCviBuLccT7CWRQRRe12L7Vl5powdA2YAudQFBNsUgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 17:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e6:6b:81:77:18:3b:16:03:ea:25:92:2b:97:ec:44:d5:4a:44:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Validity Not Before: May 19 15:35:53 2024 GMT Not After : May 22 17:45:53 2024 GMT Subject: CN=68A62BBBF4CFEC258FD882E16DDBF112134B5E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:c3:4d:11:65:1f:e4:a1:3c:1c:f1:f3:ac: 94:97:37:3f:89:90:54:9e:a8:d3:39:4d:22:46:c7: 0e:62:d0:b8:cc:a4:5b:62:1c:51:e9:d5:d3:c3:41: 71:d2:80:77:cc:84:c3:35:03:ee:c0:c7:9f:03:ab: 30:94:11:02:52:2c:18:eb:7f:0b:bd:d1:cc:34:97: ca:a0:9e:5c:5e:44:65:fa:c1:d9:2a:74:ba:86:89: 4f:e8:cf:be:d4:c1:3e:22:a6:35:a9:17:0e:35:03: bd:56:ad:37:9b:fb:cf:5b:05:ea:c6:49:c6:2c:c4: fe:62:12:9d:ee:fd:bf:cf:ea:ee:81:bf:f1:84:82: 81:06:f1:0a:2b:78:40:8e:74:da:fb:6a:0a:c4:c3: 00:1a:e5:f5:79:7d:48:a4:87:3b:16:00:70:5e:f0: 28:fb:00:a4:2f:ad:35:26:d8:11:de:89:10:03:1e: e4:9f:04:72:6d:e8:58:28:6d:24:f5:4c:c3:f1:e4: ce:3f:a8:27:d2:b4:95:dd:64:f2:d7:aa:de:2b:6c: 19:0a:98:b0:e3:66:ec:73:1f:7d:2c:d6:7b:d5:2a: 0a:ce:4d:6d:95:28:0e:29:54:2d:6f:69:00:f8:bb: 3e:6c:97:6b:4f:d6:25:9e:97:bb:19:ae:9e:45:a3: 6b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A6:2B:BB:F4:CF:EC:25:8F:D8:82:E1:6D:DB:F1:12:13:4B:5E:0D X509v3 Authority Key Identifier: keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4e:47:c9:32:90:44:86:c5:bf:53:e3:2c:5d:05:aa:22:cc: 1a:7d:5c:07:85:32:98:03:a3:48:d6:f4:89:d9:36:96:42:e3: c8:8b:59:01:e6:46:6a:ec:e3:81:5c:19:b3:1e:c0:0b:79:30: b3:8c:d2:cd:cc:6b:b4:88:67:55:90:29:54:15:9c:cb:66:ee: 0d:e7:e0:de:6e:fe:e0:1b:ee:53:48:6b:c1:bf:41:5d:d5:84: 92:c2:8b:6a:37:65:4e:da:8e:18:4c:be:66:7b:81:f1:1f:f0: c8:9f:83:38:c5:a5:ad:79:8f:25:3d:c6:3a:43:29:71:07:be: 00:71:4f:01:e2:28:e2:60:bb:16:74:a5:4b:1e:51:c9:5a:c7: 83:63:b8:98:60:e5:1f:ea:31:f0:83:ac:2e:63:e1:c7:8a:c1: 79:3c:e7:7c:23:0a:04:7e:ec:cb:b9:af:eb:da:78:5e:a0:0e: 58:01:8b:de:ca:dc:bf:90:22:8f:d2:0a:47:6e:67:76:40:bc: 54:a5:ff:3e:63:e3:66:f3:73:11:4e:1a:0f:5f:77:b6:3f:06: f0:79:d4:b3:43:27:de:bc:52:43:24:6a:90:5f:42:ec:cd:79: bf:1b:3c:89:08:4e:da:9d:b5:82:c1:11:2b:0f:cd:91:11:e5: 11:b5:0e:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCuZrgXcYOxYD6iWSK5fsRNVKRJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF QzM0NzgzNDAeFw0yNDA1MTkxNTM1NTNaFw0yNDA1MjIxNzQ1NTNaMDMxMTAvBgNV BAMTKDY4QTYyQkJCRjRDRkVDMjU4RkQ4ODJFMTZEREJGMTEyMTM0QjVFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCus8NNEWUf5KE8HPHzrJSXNz+J kFSeqNM5TSJGxw5i0LjMpFtiHFHp1dPDQXHSgHfMhMM1A+7Ax58DqzCUEQJSLBjr fwu90cw0l8qgnlxeRGX6wdkqdLqGiU/oz77UwT4ipjWpFw41A71WrTeb+89bBerG ScYsxP5iEp3u/b/P6u6Bv/GEgoEG8QoreECOdNr7agrEwwAa5fV5fUikhzsWAHBe 8Cj7AKQvrTUm2BHeiRADHuSfBHJt6FgobST1TMPx5M4/qCfStJXdZPLXqt4rbBkK mLDjZuxzH30s1nvVKgrOTW2VKA4pVC1vaQD4uz5sl2tP1iWel7sZrp5Fo2uXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaKYru/TP7CWP2ILhbdvxEhNLXg0wHwYDVR0j BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5 OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0 NzgzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5OGQ2ZWUtNmZkNy00ZTJkLWFl NDEtNjkzOWZkYjE1M2VlLzAvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFB RkFFQzM0NzgzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADROR8kykESGxb9T4yxdBaoizBp9XAeFMpgD o0jW9InZNpZC48iLWQHmRmrs44FcGbMewAt5MLOM0s3Ma7SIZ1WQKVQVnMtm7g3n 4N5u/uAb7lNIa8G/QV3VhJLCi2o3ZU7ajhhMvmZ7gfEf8MifgzjFpa15jyU9xjpD KXEHvgBxTwHiKOJguxZ0pUseUclax4NjuJhg5R/qMfCDrC5j4ceKwXk853wjCgR+ 7Mu5r+vaeF6gDlgBi97K3L+QIo/SCkduZ3ZAvFSl/z5j42bzcxFOGg9fd7Y/BvB5 1LNDJ968UkMkapBfQuzNeb8bPIkITtqdtYLBESsPzZER5RG1Dig= -----END CERTIFICATE-----Generated at Sun May 19 17:04:58 2024 by rpki-client on console-ams.rpki-client.org