$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: +kSfVBU1ieviNXDJ9bNosWjyeK37itO/Oumds0zrw48= Subject key identifier: 90:14:40:FA:0B:5F:64:32:1B:32:6A:A9:D3:E3:EF:23:EA:E2:93:E3 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 5680AAE14ADCDAFC33474D0A1E6ECA9BEC256CAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: BB Signing time: Sat 18 May 2024 21:31:27 +0000 Manifest this update: Sat 18 May 2024 21:26:27 +0000 Manifest next update: Wed 22 May 2024 07:32:27 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: JKolR7sBa4kw4qaWhjCWbg23HDmyQumcCaOvKcudJ5g=) 2: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: JsCcOYCCZcrHahiYR50Q4uI+wdcdC/l11dFP4GX5TNM=) 3: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: f2l7IOVuUVczMbKaVhcWu2z/adO9OAD0UAUi5eZr3oU=) 4: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: MUUhohVAxAwR+8gkvQfEVpAg3gD/Z6zSUQ9CB5HWiZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:80:aa:e1:4a:dc:da:fc:33:47:4d:0a:1e:6e:ca:9b:ec:25:6c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: May 18 21:26:27 2024 GMT Not After : May 22 07:32:27 2024 GMT Subject: CN=901440FA0B5F64321B326AA9D3E3EF23EAE293E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:50:85:03:63:37:e4:05:75:27:7f:97:a9: ca:b2:24:36:a8:25:0a:d5:9d:2b:f7:52:fa:5d:d3: aa:bd:17:a6:58:53:45:8b:a1:4b:6b:d8:ac:c2:2a: 77:28:b8:54:c1:d3:73:29:74:0a:7c:07:1f:36:69: 35:3e:29:af:54:6a:e6:1e:5a:b3:e8:83:ef:d3:eb: da:10:88:bb:4d:6d:3d:67:ca:b6:d9:a9:61:eb:2f: 96:c2:fd:80:3c:ea:54:27:1f:b8:6c:d3:b7:14:a4: cc:bb:fd:f8:7b:00:49:ea:c8:6f:6f:1c:7a:57:82: d3:d3:75:d1:dd:72:c1:a0:0f:32:07:7b:6f:53:20: b1:8e:25:3e:86:f7:ac:29:5c:02:f4:3f:d2:fa:ec: e0:0e:e3:d6:76:63:20:3c:35:a1:a0:ec:de:2f:e4: fc:0f:26:21:88:38:dc:9c:c7:86:40:18:c1:ad:71: 3a:79:6b:78:b1:53:4c:db:a3:b4:aa:66:70:c9:af: 8f:12:0d:72:32:57:8d:e6:f4:cf:11:e0:9e:48:3c: c2:b1:42:4e:86:98:b1:04:0c:b5:7d:54:a1:f8:c4: d0:96:27:b2:f2:db:15:5d:a2:dd:a6:9c:4c:7a:f7: bf:e9:d2:a9:62:ea:f7:30:71:09:d8:4e:b0:d5:1d: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:14:40:FA:0B:5F:64:32:1B:32:6A:A9:D3:E3:EF:23:EA:E2:93:E3 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a0:63:f7:ba:65:80:b4:24:4f:bc:e8:ce:d4:89:93:39:50: 88:0e:d1:89:ec:0e:36:63:17:ea:9a:31:a0:66:7a:73:86:94: 00:0a:5f:dc:8e:96:24:ad:da:73:7f:25:01:e3:5d:26:ec:9f: 40:e2:53:ab:9b:a2:72:41:1e:ba:ac:e1:23:81:75:36:c2:d1: 1c:f5:0f:c4:4f:53:70:7d:74:c1:a1:3e:65:b8:f9:7e:5d:68: 48:d0:df:eb:d2:17:18:12:91:ef:8b:94:ad:72:ce:1a:8b:8f: c4:88:4f:4c:4e:c9:04:9d:cf:9a:1a:5b:cf:22:e3:35:44:0d: fd:5f:43:b9:d8:4c:57:08:ed:5d:41:2a:68:d0:ff:f6:04:5d: 79:8b:50:c4:86:48:b4:e3:c6:54:fe:a0:f7:10:7a:6f:76:aa: 6d:34:aa:19:60:7b:2d:48:7e:9a:fc:fa:cb:53:d1:8b:28:93: 8f:01:49:da:b5:6f:0e:fa:e8:56:91:d4:a1:a8:a7:6c:9f:a6: 66:68:f9:4e:c8:ef:00:44:7e:3d:79:15:3d:3d:d0:04:fb:92: a6:60:d2:c2:9a:54:bf:fb:82:34:b7:47:1c:8c:70:bb:cf:7f: de:67:1b:3e:49:b7:a1:5a:a5:b2:3d:9c:8d:9d:18:f4:9a:df: e8:ed:ff:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVoCq4Urc2vwzR00KHm7Km+wlbKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNDA1MTgyMTI2MjdaFw0yNDA1MjIwNzMyMjdaMDMxMTAvBgNV BAMTKDkwMTQ0MEZBMEI1RjY0MzIxQjMyNkFBOUQzRTNFRjIzRUFFMjkzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZ1CFA2M35AV1J3+XqcqyJDao JQrVnSv3Uvpd06q9F6ZYU0WLoUtr2KzCKncouFTB03MpdAp8Bx82aTU+Ka9UauYe WrPog+/T69oQiLtNbT1nyrbZqWHrL5bC/YA86lQnH7hs07cUpMy7/fh7AEnqyG9v HHpXgtPTddHdcsGgDzIHe29TILGOJT6G96wpXAL0P9L67OAO49Z2YyA8NaGg7N4v 5PwPJiGIONycx4ZAGMGtcTp5a3ixU0zbo7SqZnDJr48SDXIyV43m9M8R4J5IPMKx Qk6GmLEEDLV9VKH4xNCWJ7Ly2xVdot2mnEx697/p0qli6vcwcQnYTrDVHVQFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkBRA+gtfZDIbMmqp0+PvI+rik+MwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGgY/e6ZYC0JE+86M7UiZM5UIgO0YnsDjZj F+qaMaBmenOGlAAKX9yOliSt2nN/JQHjXSbsn0DiU6ubonJBHrqs4SOBdTbC0Rz1 D8RPU3B9dMGhPmW4+X5daEjQ3+vSFxgSke+LlK1yzhqLj8SIT0xOyQSdz5oaW88i 4zVEDf1fQ7nYTFcI7V1BKmjQ//YEXXmLUMSGSLTjxlT+oPcQem92qm00qhlgey1I fpr8+stT0Ysok48BSdq1bw766FaR1KGop2yfpmZo+U7I7wBEfj15FT090AT7kqZg 0sKaVL/7gjS3RxyMcLvPf95nGz5Jt6FapbI9nI2dGPSa3+jt/ws= -----END CERTIFICATE-----Generated at Sat May 18 22:13:40 2024 by rpki-client on console-fra.rpki-client.org