$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft File: 3E0D060F214DF8E6493243033EBD30ABD627ED36.mft (raw, json) Hash identifier: a7tSCTMms3tuw19wZb2u3jeo7A5orbBIdD5jQJV0Ozg= Subject key identifier: ED:01:1D:B1:A1:C4:F5:A1:8D:25:1D:42:6C:42:F6:9F:10:7A:2F:5D Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Certificate serial: 7CFBCEBAF777EB4AC9C7D995A7E2289EF8D870E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft Manifest number: 0278 Signing time: Sat 18 May 2024 23:01:10 +0000 Manifest this update: Sat 18 May 2024 22:56:10 +0000 Manifest next update: Wed 22 May 2024 02:37:10 +0000 Files and hashes: 1: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: SemSZYaNeMLoGhhhOVOJUOmfGYH2uZuTmyZuqU9M0JA=) 2: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: qTfQOKPprLnLH/tTSq6srxv1Y3PYBAqFbcVyrUlpNiQ=) 3: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: 9eO7pgXqLdCe1UzkIz0YPEaAlXA/Obel7xoFOXBcmxk=) 4: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: jlew9+EL7Hx51Q1/fYnwBsPei2BjOb5Z/aNKqZMyLu0=) 5: 3E0D060F214DF8E6493243033EBD30ABD627ED36.crl (hash: IFOCkdX2vFACLPWNdIr8AnGvmgvMSZ0SU1WGkZMNyM8=) 6: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: tDrYvzr+waLgUorXmfZvrIxCs/XBl7uiif7e5iytf4M=) 7: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: xHrYTXOxZag0p2mpTPSa60kYzihupucJrJV9czXgXDM=) 8: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: Sgx32MhbFX+LuBkfZz9cheSTEtwkKgK/VvHJ4jyLMyc=) 9: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: H0i+DzQ/HrIDs4QWE62E2b/SHkf/xRItIhXvXOpB4l8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fb:ce:ba:f7:77:eb:4a:c9:c7:d9:95:a7:e2:28:9e:f8:d8:70:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36 Validity Not Before: May 18 22:56:10 2024 GMT Not After : May 22 02:37:10 2024 GMT Subject: CN=ED011DB1A1C4F5A18D251D426C42F69F107A2F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:d4:2f:24:48:cb:15:e7:eb:48:2a:6e:58: ef:57:4f:0e:87:21:36:e0:f4:f4:e6:b2:cd:4a:24: e3:3b:89:fc:e9:55:f1:d3:b5:fe:ba:f6:63:09:30: 23:ee:4b:4f:5c:d6:b5:6f:c1:57:3b:7e:91:13:5b: 69:c1:4b:b6:c7:0b:ec:5d:80:1e:89:2c:46:6e:aa: 7c:84:25:8c:0d:e5:a6:99:bf:89:b0:ef:d9:2a:a5: a0:ca:be:68:d6:df:6d:99:0f:22:57:e9:3d:e2:b7: 63:e2:2f:b7:03:46:7f:b5:0a:8d:0b:4f:e7:c4:41: 3c:11:1b:a7:4e:9d:e1:34:00:0c:10:aa:44:28:19: e3:6f:17:96:a1:ee:db:c7:93:dd:cf:38:19:40:b7: 11:91:d9:72:80:cd:43:43:49:e6:36:f4:69:94:89: bb:21:5a:31:a0:21:23:84:63:a7:f1:0e:49:fc:ef: ea:6e:7a:fe:f5:26:12:4a:0f:c2:de:5f:98:41:1c: 15:aa:87:b7:b2:d6:e2:3a:9c:a3:cf:8b:e5:27:00: 10:43:31:a8:42:04:52:df:ab:0b:94:f4:0d:28:ca: db:38:3d:94:d4:3f:59:64:c1:af:c8:90:87:27:69: bf:a5:16:9d:9f:0b:68:7f:7d:1e:b2:91:24:b1:44: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:01:1D:B1:A1:C4:F5:A1:8D:25:1D:42:6C:42:F6:9F:10:7A:2F:5D X509v3 Authority Key Identifier: keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c6:5a:68:ce:8e:32:c6:0e:88:df:16:62:9b:b4:12:02:9d: 46:58:ce:89:a1:5f:26:fd:32:74:74:1f:eb:a9:a4:dd:9c:cc: 6a:51:f1:d3:a0:1b:b4:e5:cc:8c:ac:d4:31:f3:82:08:4a:4a: fa:e7:36:ac:93:e5:66:93:82:14:2e:ec:de:6e:f8:08:fe:49: 55:27:6d:52:69:c6:a5:3c:a0:5d:71:08:50:8b:96:78:0b:4b: f2:75:1e:e7:94:ac:c6:57:53:7c:e5:90:47:07:f0:da:0b:9d: 29:fc:6a:e7:4e:cf:4b:ea:2f:b9:fa:d9:a9:62:ca:34:d9:0e: ef:07:4f:01:e3:d8:ed:fc:6b:2b:d7:93:1e:da:2c:f8:fe:3e: fb:2d:28:13:02:3c:dc:12:6e:bc:20:ae:1a:3a:36:0c:9e:e9: 03:55:4d:5a:ca:3b:de:93:d0:4e:1e:5d:4c:bf:b7:e3:86:e5: 20:45:8e:a6:04:57:6f:e6:cd:3e:94:e9:15:fd:46:e8:18:ce: 01:92:a9:fa:05:44:fe:3e:76:bd:89:28:c2:c7:58:10:55:47: e3:7a:84:fe:b0:30:54:90:a5:f4:0e:95:e8:0b:c2:97:5c:f0: 8f:41:76:7d:e4:a3:54:80:36:36:2b:cc:8d:47:be:63:ce:a5: eb:81:bd:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPvOuvd360rJx9mVp+IonvjYcOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJE NjI3RUQzNjAeFw0yNDA1MTgyMjU2MTBaFw0yNDA1MjIwMjM3MTBaMDMxMTAvBgNV BAMTKEVEMDExREIxQTFDNEY1QTE4RDI1MUQ0MjZDNDJGNjlGMTA3QTJGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiDNQvJEjLFefrSCpuWO9XTw6H ITbg9PTmss1KJOM7ifzpVfHTtf669mMJMCPuS09c1rVvwVc7fpETW2nBS7bHC+xd gB6JLEZuqnyEJYwN5aaZv4mw79kqpaDKvmjW322ZDyJX6T3it2PiL7cDRn+1Co0L T+fEQTwRG6dOneE0AAwQqkQoGeNvF5ah7tvHk93POBlAtxGR2XKAzUNDSeY29GmU ibshWjGgISOEY6fxDkn87+puev71JhJKD8LeX5hBHBWqh7ey1uI6nKPPi+UnABBD MahCBFLfqwuU9A0oyts4PZTUP1lkwa/IkIcnab+lFp2fC2h/fR6ykSSxRKwpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7QEdsaHE9aGNJR1CbEL2nxB6L10wHwYDVR0j BBgwFoAUPg0GDyFN+OZJMkMDPr0wq9Yn7TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjRmODUxMS0wN2IzLTRhNjEtYmQwNC0yZTY2NWM5Mjc4ZmMvMC8zRTBEMDYwRjIx NERGOEU2NDkzMjQzMDMzRUJEMzBBQkQ2MjdFRDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJENjI3 RUQzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI0Zjg1MTEtMDdiMy00YTYxLWJk MDQtMmU2NjVjOTI3OGZjLzAvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMw QUJENjI3RUQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXGWmjOjjLGDojfFmKbtBICnUZYzomhXyb9 MnR0H+uppN2czGpR8dOgG7TlzIys1DHzgghKSvrnNqyT5WaTghQu7N5u+Aj+SVUn bVJpxqU8oF1xCFCLlngLS/J1HueUrMZXU3zlkEcH8NoLnSn8audOz0vqL7n62ali yjTZDu8HTwHj2O38ayvXkx7aLPj+PvstKBMCPNwSbrwgrho6Ngye6QNVTVrKO96T 0E4eXUy/t+OG5SBFjqYEV2/mzT6U6RX9RugYzgGSqfoFRP4+dr2JKMLHWBBVR+N6 hP6wMFSQpfQOlegLwpdc8I9Bdn3ko1SANjYrzI1HvmPOpeuBvXg= -----END CERTIFICATE-----Generated at Sun May 19 00:29:19 2024 by rpki-client on console-ams.rpki-client.org