$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: WbxhokOLCBJQKV5p+EXwV3KY7OEEysEBJWQ/i9GPF5k= Subject key identifier: 8E:EF:06:28:F6:BF:BF:C1:D9:2C:D4:E4:32:BC:E3:48:FE:8B:98:A6 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 0CBD7492238FB9C43E5574837E7D141151A8ECD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 010E Signing time: Thu 21 Nov 2024 20:51:45 +0000 Manifest this update: Thu 21 Nov 2024 20:46:45 +0000 Manifest next update: Sun 24 Nov 2024 23:49:45 +0000 Files and hashes: 1: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: 88ohjkjE5bMHAEds6QltQFWa4ma+p8M2H41/CMctJA0=) 2: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: JKolR7sBa4kw4qaWhjCWbg23HDmyQumcCaOvKcudJ5g=) 3: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: JsCcOYCCZcrHahiYR50Q4uI+wdcdC/l11dFP4GX5TNM=) 4: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: f2l7IOVuUVczMbKaVhcWu2z/adO9OAD0UAUi5eZr3oU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 23:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bd:74:92:23:8f:b9:c4:3e:55:74:83:7e:7d:14:11:51:a8:ec:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Nov 21 20:46:45 2024 GMT Not After : Nov 24 23:49:45 2024 GMT Subject: CN=8EEF0628F6BFBFC1D92CD4E432BCE348FE8B98A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1d:9a:6f:57:98:e0:40:21:0f:dd:c9:d5:bb: 8a:a6:d0:d2:c7:26:eb:77:ce:6e:77:02:e4:15:0a: 90:b0:00:12:78:41:c3:58:d8:34:c1:bf:3e:14:3f: c3:e8:d2:0c:d7:36:f1:41:da:94:a8:f4:0f:75:e1: a2:f9:7f:49:86:03:8a:3b:dd:5b:5b:74:ab:a3:e5: 65:54:26:1c:4b:99:c9:4e:93:d6:fc:6e:91:b3:e5: c8:ef:92:c9:6a:58:e4:53:cd:ef:58:25:0a:28:38: 4e:ae:d1:08:3a:9c:9a:13:43:4f:0d:d6:44:74:c4: c5:a1:fa:1b:57:c9:e4:b3:02:70:0d:9e:21:9f:bc: ca:20:76:48:17:d7:f6:33:76:cc:12:72:77:53:42: 6f:29:de:d9:a6:c6:b0:6e:be:f5:58:9c:c4:26:b4: eb:9f:c8:5c:f5:c7:f3:a5:b0:4e:82:38:5e:63:56: 79:20:98:3c:01:d2:91:2c:1e:44:4b:f4:84:53:97: 00:8d:27:b9:4e:93:dc:eb:02:18:b1:28:71:3c:88: 11:23:0a:2a:4b:d0:b9:27:90:71:03:a3:ce:e4:13: e2:2e:8a:62:90:28:b0:5f:9d:4a:76:f6:53:f0:e3: cb:60:2a:f1:c2:af:ae:37:e7:1a:b9:85:08:ab:34: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EF:06:28:F6:BF:BF:C1:D9:2C:D4:E4:32:BC:E3:48:FE:8B:98:A6 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f3:7b:b7:85:76:9f:d4:39:b3:fa:86:ca:e4:3b:33:6f:76: 1e:3d:6f:54:19:87:03:c7:a5:93:af:bd:ca:0c:f3:19:76:97: 52:41:76:00:4d:0a:ff:37:1e:26:20:44:66:84:08:ce:38:07: 8c:f0:1c:a0:da:6c:f1:a7:1f:04:04:68:2f:ab:74:2c:d8:60: eb:2c:60:7e:0e:c7:b7:19:5e:35:8a:40:6d:f6:7f:1e:31:a6: 13:66:23:4e:f2:91:2e:92:ca:40:f2:fb:94:a0:77:be:76:d5: 36:57:72:cc:9e:08:f3:ae:db:18:cf:96:cc:de:d0:eb:91:b9: 45:d9:79:8a:a6:70:47:dd:28:66:4f:12:41:94:2e:00:b0:3a: 20:54:35:af:2e:4a:db:1a:08:66:58:ae:aa:cb:07:71:06:81: 9a:9c:55:7b:2b:77:21:01:a7:78:f5:74:04:64:dd:89:64:e9: ac:36:93:37:cb:27:bd:92:77:05:78:27:70:c1:6e:34:a5:a0: 36:86:74:90:44:08:0f:63:27:3b:60:6e:62:de:9e:bb:83:9b: 99:03:3a:7f:41:0b:42:d2:74:82:2a:82:02:58:d6:69:27:a2: fc:93:84:db:a8:24:f8:c9:89:a8:ab:80:a6:e5:9a:92:c7:1a: 20:52:c5:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDL10kiOPucQ+VXSDfn0UEVGo7NQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNDExMjEyMDQ2NDVaFw0yNDExMjQyMzQ5NDVaMDMxMTAvBgNV BAMTKDhFRUYwNjI4RjZCRkJGQzFEOTJDRDRFNDMyQkNFMzQ4RkU4Qjk4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoHZpvV5jgQCEP3cnVu4qm0NLH Jut3zm53AuQVCpCwABJ4QcNY2DTBvz4UP8Po0gzXNvFB2pSo9A914aL5f0mGA4o7 3VtbdKuj5WVUJhxLmclOk9b8bpGz5cjvkslqWORTze9YJQooOE6u0Qg6nJoTQ08N 1kR0xMWh+htXyeSzAnANniGfvMogdkgX1/YzdswScndTQm8p3tmmxrBuvvVYnMQm tOufyFz1x/OlsE6COF5jVnkgmDwB0pEsHkRL9IRTlwCNJ7lOk9zrAhixKHE8iBEj CipL0LknkHEDo87kE+IuimKQKLBfnUp29lPw48tgKvHCr6435xq5hQirNCpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUju8GKPa/v8HZLNTkMrzjSP6LmKYwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzze7eFdp/UObP6hsrkOzNvdh49b1QZhwPH pZOvvcoM8xl2l1JBdgBNCv83HiYgRGaECM44B4zwHKDabPGnHwQEaC+rdCzYYOss YH4Ox7cZXjWKQG32fx4xphNmI07ykS6SykDy+5Sgd7521TZXcsyeCPOu2xjPlsze 0OuRuUXZeYqmcEfdKGZPEkGULgCwOiBUNa8uStsaCGZYrqrLB3EGgZqcVXsrdyEB p3j1dARk3Ylk6aw2kzfLJ72SdwV4J3DBbjSloDaGdJBECA9jJztgbmLenruDm5kD On9BC0LSdIIqggJY1mknovyThNuoJPjJiairgKblmpLHGiBSxeM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org