$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: w6XvMJLZd+SS/2LbWzST1837Xqhl5lUxalxgOrrAHLE= Subject key identifier: 7E:3B:FB:D5:0F:B1:5B:E9:17:00:2A:3D:52:FF:E5:27:C6:A3:61:8C Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 5622041AC3D85B9E072B44CAF1B50CBE03BC0C86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 020B Signing time: Sat 18 May 2024 03:20:03 +0000 Manifest this update: Sat 18 May 2024 03:15:03 +0000 Manifest next update: Tue 21 May 2024 15:07:03 +0000 Files and hashes: 1: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: iEUdKqHkd8fQHEzYBktRGZmlKrFF8e+8FbEGBSsAPQg=) 2: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: TePIzLIB9ArVyB73gby2ISIYm96EquSl18KDb1RdrqQ=) 3: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: 5lgPtsfzmaF0Js7nU/7Q5MhJSN8nccgqyuNwPpW/eVc=) 4: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: sprm3SkuUjx8GO16otbVR6Fs16cE4VStHw110jcReM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:22:04:1a:c3:d8:5b:9e:07:2b:44:ca:f1:b5:0c:be:03:bc:0c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: May 18 03:15:03 2024 GMT Not After : May 21 15:07:03 2024 GMT Subject: CN=7E3BFBD50FB15BE917002A3D52FFE527C6A3618C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4a:17:20:2c:25:2c:1e:1b:da:12:fb:ab:e3: f5:66:61:e7:c3:a1:ee:70:da:f1:29:36:b4:ee:93: 62:e5:46:2b:43:3d:3e:6c:aa:ba:62:33:6a:23:05: 46:a3:40:6d:db:6c:33:65:b2:73:e1:df:83:cd:0e: b8:e1:66:ce:e4:bc:8c:15:de:43:55:73:41:b3:9e: 80:b7:a4:b3:e9:68:af:df:d2:7e:06:d3:75:4a:9a: 8b:cf:30:38:15:56:d1:00:41:cc:e8:d1:43:80:59: 47:db:71:b5:15:81:99:37:51:f3:ae:df:fb:52:fc: 99:ca:11:b2:66:c4:7a:26:05:a4:9b:03:1b:ce:f8: 2a:29:91:2a:25:7f:e6:bd:68:39:b1:ca:d7:ac:3a: 17:11:a1:97:44:4c:78:eb:f6:29:cb:d2:dd:c0:b9: 5d:a5:18:57:85:e9:1b:be:3a:b8:86:2f:0d:87:a8: ce:b7:ed:32:42:9e:fa:f3:f5:58:b7:0d:17:fe:72: 79:29:06:19:a7:05:c7:c9:af:1f:e1:9a:08:ee:88: 62:2f:2a:f6:51:e2:10:5d:84:d7:61:80:00:70:cd: 23:e9:c8:31:69:53:6b:c2:c5:22:dc:5b:33:53:d2: 1c:1c:1e:ce:eb:ca:c2:b8:92:8c:2a:93:c4:79:61: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3B:FB:D5:0F:B1:5B:E9:17:00:2A:3D:52:FF:E5:27:C6:A3:61:8C X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:08:a4:7f:77:31:9d:9a:fe:86:69:7e:32:ef:b6:8f:2e:00: c0:25:85:d3:9d:88:7b:b7:e7:14:c1:a0:e1:a5:bf:ea:24:4f: 2d:ca:b0:f2:b7:5a:29:23:66:cd:16:e7:8e:c5:93:15:b6:51: f3:23:a9:6a:84:50:35:59:fc:17:0c:c7:37:05:6f:94:db:cd: 17:d8:45:90:48:6f:69:59:8f:a7:f4:5e:41:53:0c:cc:07:00: 48:91:cb:bf:64:b8:3b:17:fe:87:f5:93:80:a2:74:98:fb:4d: d4:e6:c4:20:12:c2:e6:5e:d1:96:ca:ee:9c:4f:da:82:e3:7e: 06:d8:4c:4c:20:5e:98:0d:3e:c0:d5:71:a7:1c:23:4d:3c:98: 72:5d:10:37:bb:9d:a8:83:6e:3b:58:6e:d6:59:6c:f7:28:81: 22:a1:dc:41:b8:cb:f0:14:ef:f8:e1:80:34:7b:64:49:99:82: c9:d3:42:13:a1:14:86:03:a0:9e:53:8c:a8:80:dd:23:ff:15: 5b:b2:d8:bb:0a:7b:9f:bc:39:fc:68:45:f8:60:54:3d:16:b5: 49:42:5b:b9:5e:b8:38:82:17:60:ee:03:a0:b6:be:59:d4:a7: 4a:e2:73:a4:3a:41:98:7b:6d:85:c3:87:bc:ff:2e:e7:4b:42: 37:16:c7:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViIEGsPYW54HK0TK8bUMvgO8DIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNDA1MTgwMzE1MDNaFw0yNDA1MjExNTA3MDNaMDMxMTAvBgNV BAMTKDdFM0JGQkQ1MEZCMTVCRTkxNzAwMkEzRDUyRkZFNTI3QzZBMzYxOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhShcgLCUsHhvaEvur4/VmYefD oe5w2vEpNrTuk2LlRitDPT5sqrpiM2ojBUajQG3bbDNlsnPh34PNDrjhZs7kvIwV 3kNVc0GznoC3pLPpaK/f0n4G03VKmovPMDgVVtEAQczo0UOAWUfbcbUVgZk3UfOu 3/tS/JnKEbJmxHomBaSbAxvO+CopkSolf+a9aDmxytesOhcRoZdETHjr9inL0t3A uV2lGFeF6Ru+OriGLw2HqM637TJCnvrz9Vi3DRf+cnkpBhmnBcfJrx/hmgjuiGIv KvZR4hBdhNdhgABwzSPpyDFpU2vCxSLcWzNT0hwcHs7rysK4kowqk8R5Ydw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfjv71Q+xW+kXACo9Uv/lJ8ajYYwwHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMIpH93MZ2a/oZpfjLvto8uAMAlhdOdiHu3 5xTBoOGlv+okTy3KsPK3WikjZs0W547FkxW2UfMjqWqEUDVZ/BcMxzcFb5TbzRfY RZBIb2lZj6f0XkFTDMwHAEiRy79kuDsX/of1k4CidJj7TdTmxCASwuZe0ZbK7pxP 2oLjfgbYTEwgXpgNPsDVcaccI008mHJdEDe7naiDbjtYbtZZbPcogSKh3EG4y/AU 7/jhgDR7ZEmZgsnTQhOhFIYDoJ5TjKiA3SP/FVuy2LsKe5+8OfxoRfhgVD0WtUlC W7leuDiCF2DuA6C2vlnUp0ric6Q6QZh7bYXDh7z/LudLQjcWx+I= -----END CERTIFICATE-----Generated at Sat May 18 04:02:39 2024 by rpki-client on console-ams.rpki-client.org