$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: AOpHszFa6YwogwY7AO5ras4mKrHw1+GIPHNMPZAlMTM= Subject key identifier: F2:37:29:A5:A7:BF:92:C8:70:0B:C5:DD:FD:2A:80:D8:E5:95:2B:72 Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 58826B3A0AEF45E86AD155A2BFF7CFDF8400C1C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: 37 Signing time: Sat 18 May 2024 05:21:27 +0000 Manifest this update: Sat 18 May 2024 05:16:27 +0000 Manifest next update: Tue 21 May 2024 11:49:27 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: k0lW1N1irYnbQFRC/axc+idc2h6EHlNAiSp4C4zr7+4=) 2: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: EB8NKlR0UAi5D3eAx5DF51T0Zo+bFJIVNrEf+9LZkqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 11:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:82:6b:3a:0a:ef:45:e8:6a:d1:55:a2:bf:f7:cf:df:84:00:c1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: May 18 05:16:27 2024 GMT Not After : May 21 11:49:27 2024 GMT Subject: CN=F23729A5A7BF92C8700BC5DDFD2A80D8E5952B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:78:4b:06:80:3a:56:dd:cf:60:58:6d:d2: f3:03:d4:3f:45:7c:5c:5f:4a:88:62:96:67:16:c3: 82:4c:be:5b:2d:e2:2d:05:09:c8:cf:d6:55:e8:3a: 89:f2:70:38:cd:a4:1b:a9:b9:d6:5d:b5:ed:39:fb: 4d:5b:5a:cd:26:67:06:63:c7:c4:12:40:36:2c:bc: 6c:3a:b1:ed:b0:b9:33:85:55:32:31:80:73:7f:93: 59:76:21:da:fd:e2:ce:73:bc:4b:b5:ae:18:60:a6: b9:86:38:30:d6:2b:a6:de:4a:2e:6f:45:7a:9c:03: aa:a1:31:4b:cf:a2:7e:09:31:ee:d5:3b:43:1d:2e: 18:83:94:90:77:ca:ff:58:ff:af:94:e3:7c:d3:7e: 91:aa:24:f8:62:f4:34:8e:72:1b:ce:1e:bc:ba:64: 61:a5:ed:11:4e:53:d9:91:cf:3b:0b:c0:4c:15:d8: 61:c5:91:dc:a6:01:b3:83:14:05:49:cd:09:de:51: a8:14:09:46:6b:fa:d7:a6:34:bd:0b:1a:22:44:62: 54:16:60:fd:22:d6:2c:a5:46:c1:b9:74:d9:9f:cc: d5:49:1f:b1:0b:5b:8d:3e:80:45:1d:9c:c5:de:d6: 79:62:30:e8:ab:9b:9e:13:6c:9d:3a:ca:12:8d:ff: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:37:29:A5:A7:BF:92:C8:70:0B:C5:DD:FD:2A:80:D8:E5:95:2B:72 X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c9:ad:1d:43:5e:36:f7:b4:43:0c:1d:c1:f2:aa:ce:06:40: f7:1b:9b:5c:67:d7:01:43:0d:e2:b9:88:31:b3:d4:20:dc:9f: 1f:45:36:a9:37:d6:3c:c2:84:da:b7:34:e6:28:a9:68:6b:b6: 73:70:ba:19:07:76:29:e1:85:bd:f6:40:89:b2:5e:4e:a7:5a: 0d:0d:6f:57:82:f3:79:49:8d:b0:07:fb:ae:d7:2d:40:47:89: 82:cd:6d:7b:6a:04:59:3c:fb:18:ab:9b:00:b5:46:e5:b0:5d: 62:7d:92:be:c7:ad:18:d9:75:92:0b:56:53:5e:43:45:b5:ed: 7e:d9:81:3b:55:bd:8a:f1:76:e0:25:e5:f7:cc:c3:e3:73:df: a6:c0:db:66:fa:4f:a6:b8:82:68:2c:fa:06:da:f5:47:85:c9: 4d:8d:2b:20:c0:d9:02:1b:e0:74:af:4d:9d:dc:88:76:67:da: 87:e5:a0:8c:e4:b3:22:5b:85:22:21:26:cb:d8:0a:6d:4a:3e: b4:0d:fa:e6:dd:f8:9d:3b:3a:65:78:73:e7:62:9d:bd:15:df: 81:bf:aa:c7:d7:cf:3d:ad:60:ae:e1:ad:50:47:bf:14:91:f3: 87:84:ef:41:5d:66:76:7f:44:e1:5f:a9:64:09:ae:90:34:34: 50:2a:5c:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIJrOgrvRehq0VWiv/fP34QAwcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNDA1MTgwNTE2MjdaFw0yNDA1MjExMTQ5MjdaMDMxMTAvBgNV BAMTKEYyMzcyOUE1QTdCRjkyQzg3MDBCQzVEREZEMkE4MEQ4RTU5NTJCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+XhLBoA6Vt3PYFht0vMD1D9F fFxfSohilmcWw4JMvlst4i0FCcjP1lXoOonycDjNpBupudZdte05+01bWs0mZwZj x8QSQDYsvGw6se2wuTOFVTIxgHN/k1l2Idr94s5zvEu1rhhgprmGODDWK6beSi5v RXqcA6qhMUvPon4JMe7VO0MdLhiDlJB3yv9Y/6+U43zTfpGqJPhi9DSOchvOHry6 ZGGl7RFOU9mRzzsLwEwV2GHFkdymAbODFAVJzQneUagUCUZr+temNL0LGiJEYlQW YP0i1iylRsG5dNmfzNVJH7ELW40+gEUdnMXe1nliMOirm54TbJ06yhKN/zmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8jcppae/kshwC8Xd/SqA2OWVK3IwHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7JrR1DXjb3tEMMHcHyqs4GQPcbm1xn1wFD DeK5iDGz1CDcnx9FNqk31jzChNq3NOYoqWhrtnNwuhkHdinhhb32QImyXk6nWg0N b1eC83lJjbAH+67XLUBHiYLNbXtqBFk8+xirmwC1RuWwXWJ9kr7HrRjZdZILVlNe Q0W17X7ZgTtVvYrxduAl5ffMw+Nz36bA22b6T6a4gmgs+gba9UeFyU2NKyDA2QIb 4HSvTZ3ciHZn2ofloIzksyJbhSIhJsvYCm1KPrQN+ubd+J07OmV4c+dinb0V34G/ qsfXzz2tYK7hrVBHvxSR84eE70FdZnZ/ROFfqWQJrpA0NFAqXF8= -----END CERTIFICATE-----Generated at Sat May 18 07:18:46 2024 by rpki-client on console-fra.rpki-client.org