$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: EuCgozlDaDMadFt+sHgXuhP0ofMu2+IazU1LYDdd1PY= Subject key identifier: DD:55:F9:77:E3:7D:93:C5:F2:6A:43:8F:33:EF:56:DA:8E:72:A4:A0 Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 5CA168281A1A39EB9F3053F0FEADB835B207DE14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 010F Signing time: Sat 23 Nov 2024 23:22:22 +0000 Manifest this update: Sat 23 Nov 2024 23:17:22 +0000 Manifest next update: Wed 27 Nov 2024 00:51:22 +0000 Files and hashes: 1: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: g/ChgrLQc9aKmKTkPLKvFQ82SdQEkpSXUef1u80fyvo=) 2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: TvX5alwAkygDG9mtc84ZvWFXvtuvRWJmPKN/WDkOyYo=) 3: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: 04l5UKh0HfOjsHMzR5ci/LYQ30XPkieTpMXSum+fIOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a1:68:28:1a:1a:39:eb:9f:30:53:f0:fe:ad:b8:35:b2:07:de:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Nov 23 23:17:22 2024 GMT Not After : Nov 27 00:51:22 2024 GMT Subject: CN=DD55F977E37D93C5F26A438F33EF56DA8E72A4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:a8:12:af:ae:a7:3c:8a:2b:af:12:67:83: 6d:90:d6:47:ca:23:3b:4c:6e:b3:54:6c:ff:65:73: 91:66:bb:f3:43:d2:4d:e2:70:c7:11:b3:4f:b1:3c: 72:9e:4e:42:5a:fd:bb:ae:29:c2:6d:7b:bc:b1:4c: fd:89:d4:11:fb:4b:e6:e9:c9:8a:f7:a4:0b:12:57: e7:ab:bc:5f:d1:c9:aa:bf:f1:ce:55:03:64:61:f6: 43:82:dd:6e:24:96:c0:ce:03:5c:65:57:8c:ea:7c: b4:92:45:6a:ee:86:14:a6:bd:0d:35:87:0f:16:f5: 5f:8b:e8:a7:33:44:a7:28:c7:98:72:26:6f:9c:5a: 55:dd:04:ba:40:32:c7:94:cb:95:de:f2:85:3c:e2: 8e:e5:9f:29:7f:52:12:89:cd:2f:04:d9:8c:18:38: 8e:58:42:15:e9:6b:98:8c:54:ad:b5:ed:4e:87:9d: 6c:ee:44:b5:ed:d1:1c:9b:fe:72:74:9c:f8:73:83: 12:c5:9e:ec:39:f2:b1:0d:06:01:52:06:75:5a:4b: cb:9b:d1:3b:6b:cd:b9:1e:1b:e2:d5:f9:5b:77:1d: 4d:d4:92:e4:93:fd:03:b9:b0:33:e1:37:49:27:14: d4:48:5a:f0:b9:61:16:a1:3c:6d:77:d6:54:58:d2: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:55:F9:77:E3:7D:93:C5:F2:6A:43:8F:33:EF:56:DA:8E:72:A4:A0 X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d3:66:fe:4a:8c:b0:4c:6f:d0:db:30:b9:c0:e3:58:07:a2: bb:eb:57:dc:a5:3a:a6:d6:63:86:2b:b6:2e:33:a2:db:19:1b: 12:1a:69:86:8a:cd:18:b0:d9:52:0d:7e:5d:bd:a4:42:81:c6: 3f:5b:19:2e:b3:8e:5e:5d:7c:00:11:89:5c:9e:38:da:04:7e: c5:c2:91:b8:6b:fa:e9:70:e5:c2:e7:68:6b:fa:19:42:94:c1: d9:d0:08:73:eb:0c:d3:2c:68:36:b5:c9:09:52:58:c4:45:6d: a2:c7:26:94:0a:2a:d1:bb:65:61:cf:8f:38:1f:6c:07:a7:fb: 27:f4:b1:b3:7c:ec:ab:b6:24:6c:0b:08:e1:c8:a5:a8:1c:a0: da:d8:08:4a:89:ea:37:20:d2:38:d8:36:6e:24:2f:cc:ff:08: 16:0f:14:f9:68:ae:27:59:d4:ad:8e:c9:39:84:14:b9:43:b8: 7b:e9:50:cd:54:51:90:10:df:8f:30:76:53:15:ac:7b:5b:15: c6:3c:eb:f3:c7:2d:f3:fc:eb:22:51:ae:98:51:94:7f:51:e6: b4:e6:0b:59:97:25:96:0e:d5:7a:70:91:76:75:4f:38:8f:c5: d5:13:af:58:b7:9e:d5:f0:ce:cc:c2:00:7f:95:1a:b1:b5:57: d4:a8:85:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXKFoKBoaOeufMFPw/q24NbIH3hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNDExMjMyMzE3MjJaFw0yNDExMjcwMDUxMjJaMDMxMTAvBgNV BAMTKERENTVGOTc3RTM3RDkzQzVGMjZBNDM4RjMzRUY1NkRBOEU3MkE0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaCagSr66nPIorrxJng22Q1kfK IztMbrNUbP9lc5Fmu/ND0k3icMcRs0+xPHKeTkJa/buuKcJte7yxTP2J1BH7S+bp yYr3pAsSV+ervF/Ryaq/8c5VA2Rh9kOC3W4klsDOA1xlV4zqfLSSRWruhhSmvQ01 hw8W9V+L6KczRKcox5hyJm+cWlXdBLpAMseUy5Xe8oU84o7lnyl/UhKJzS8E2YwY OI5YQhXpa5iMVK217U6HnWzuRLXt0Ryb/nJ0nPhzgxLFnuw58rENBgFSBnVaS8ub 0TtrzbkeG+LV+Vt3HU3UkuST/QO5sDPhN0knFNRIWvC5YRahPG131lRY0hkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3VX5d+N9k8XyakOPM+9W2o5ypKAwHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3TZv5KjLBMb9DbMLnA41gHorvrV9ylOqbW Y4Yrti4zotsZGxIaaYaKzRiw2VINfl29pEKBxj9bGS6zjl5dfAARiVyeONoEfsXC kbhr+ulw5cLnaGv6GUKUwdnQCHPrDNMsaDa1yQlSWMRFbaLHJpQKKtG7ZWHPjzgf bAen+yf0sbN87Ku2JGwLCOHIpagcoNrYCEqJ6jcg0jjYNm4kL8z/CBYPFPloridZ 1K2OyTmEFLlDuHvpUM1UUZAQ348wdlMVrHtbFcY86/PHLfP86yJRrphRlH9R5rTm C1mXJZYO1XpwkXZ1TziPxdUTr1i3ntXwzszCAH+VGrG1V9SohWI= -----END CERTIFICATE-----Generated at Sun Nov 24 00:53:31 2024 by rpki-client on console-fra.rpki-client.org