$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft File: 30C39359651C33B59AC32BC46831980108960568.mft (raw, json) Hash identifier: xXOYqD4i49XhA0CX81Dr3ZgmgXOBD+31Blp6DTg3zoc= Subject key identifier: 99:6A:11:3A:76:99:34:04:39:BA:70:F6:77:B2:65:53:69:FE:50:AD Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568 Certificate serial: 6821ACA5C29207D10DC21CA017BE3A9920808248 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft Manifest number: 0434 Signing time: Wed 29 May 2024 00:31:53 +0000 Manifest this update: Wed 29 May 2024 00:26:53 +0000 Manifest next update: Sat 01 Jun 2024 12:22:53 +0000 Files and hashes: 1: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: lMdg/MNFYujMSAEqrx4gbCtB/vdRZN9mK0Vg+Inow1s=) 2: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: wJEcAzW5hJ2mLs7nwQRoiCekDLwIz3WgYcOhoC9zCDo=) 3: 30C39359651C33B59AC32BC46831980108960568.crl (hash: 2CBlL+4RwhLCxB2hq76Zxos7kktYK40xG+3qb4Nmb+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:21:ac:a5:c2:92:07:d1:0d:c2:1c:a0:17:be:3a:99:20:80:82:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C39359651C33B59AC32BC46831980108960568 Validity Not Before: May 29 00:26:53 2024 GMT Not After : Jun 1 12:22:53 2024 GMT Subject: CN=996A113A7699340439BA70F677B2655369FE50AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:c6:1f:1a:a9:7b:c8:e4:49:4b:5c:ef:36: f1:22:0c:6d:80:0c:ae:a0:d9:93:9b:04:9d:3e:46: af:d8:72:0b:6a:79:a5:fe:76:aa:8e:cd:8b:7e:08: c7:21:5a:36:51:cf:53:3e:dd:99:81:6f:89:ce:1c: b0:85:2d:2a:67:3a:fb:23:c8:58:4c:c2:f9:fa:b0: 8e:be:94:e0:99:71:bb:5f:05:30:f4:70:ae:0d:c0: 66:80:a1:18:0b:87:7a:6b:a8:4a:8b:16:4e:d1:94: b2:6e:90:d9:79:91:4f:21:98:3e:82:fa:56:1f:c7: f4:28:64:e5:61:63:2d:1d:5b:7b:7d:78:1c:cf:8e: 9f:cd:9c:81:20:88:6d:14:59:4b:1a:a6:90:16:fb: 81:9f:39:52:76:49:8b:17:28:8e:60:44:8c:88:9c: 0d:fa:26:42:92:b0:25:aa:9f:fd:37:ea:63:b3:61: a2:1b:3a:14:c8:61:29:de:99:7e:44:2a:90:b9:cb: eb:16:ed:30:86:a9:35:1e:a1:69:94:69:bb:20:ff: 96:59:40:55:07:24:60:2c:d5:dc:c9:27:c3:66:5d: a8:d7:72:f0:37:ad:60:e4:eb:e7:8a:81:ae:28:04: 8b:6e:a0:ec:25:61:af:44:56:dd:ed:b2:d3:01:41: b5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6A:11:3A:76:99:34:04:39:BA:70:F6:77:B2:65:53:69:FE:50:AD X509v3 Authority Key Identifier: keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:f7:cc:71:93:3b:a0:b4:fc:17:d3:7f:63:3c:0c:9f:34:26: 25:35:25:43:ab:12:e3:d0:50:ba:e2:64:81:22:9b:4b:a4:ed: e5:bc:b0:27:e9:9f:94:74:34:c6:5c:5c:75:1c:12:8f:99:85: e6:8a:83:64:7f:67:41:25:5a:d8:39:56:6c:f1:f2:68:9c:14: cd:30:17:84:3f:e5:0a:42:ce:d9:a4:ff:a9:d0:7e:7b:ab:f0: 31:8a:49:9b:4e:30:44:e4:95:b4:39:c7:3a:a6:2f:39:1c:68: 52:53:90:41:00:e5:44:43:3f:98:ce:58:7f:5f:ba:27:29:fd: 89:2a:1f:eb:50:c0:77:1a:39:08:76:74:3b:a9:84:ac:b0:58: b4:4c:96:34:58:0a:ed:28:b3:7b:68:7c:79:2d:b9:61:63:b7: 53:62:68:6d:98:b5:f1:ec:b4:f7:8c:e6:fa:15:6e:87:74:93: 7f:73:d3:e8:77:f7:9d:31:48:d0:19:ca:17:94:f2:9f:a4:aa: 80:19:99:68:11:5d:51:00:6c:66:7f:a0:bd:64:1c:98:2b:b8: 74:2e:e8:4e:77:e8:17:6f:b9:75:7d:52:2e:ed:ef:35:26:4e: 79:98:b9:bf:a5:49:d6:f0:b3:f8:1e:d6:5e:ce:70:f8:c8:f2: 5e:06:1f:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaCGspcKSB9ENwhygF746mSCAgkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEw ODk2MDU2ODAeFw0yNDA1MjkwMDI2NTNaFw0yNDA2MDExMjIyNTNaMDMxMTAvBgNV BAMTKDk5NkExMTNBNzY5OTM0MDQzOUJBNzBGNjc3QjI2NTUzNjlGRTUwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDMYfGql7yORJS1zvNvEiDG2A DK6g2ZObBJ0+Rq/YcgtqeaX+dqqOzYt+CMchWjZRz1M+3ZmBb4nOHLCFLSpnOvsj yFhMwvn6sI6+lOCZcbtfBTD0cK4NwGaAoRgLh3prqEqLFk7RlLJukNl5kU8hmD6C +lYfx/QoZOVhYy0dW3t9eBzPjp/NnIEgiG0UWUsappAW+4GfOVJ2SYsXKI5gRIyI nA36JkKSsCWqn/036mOzYaIbOhTIYSnemX5EKpC5y+sW7TCGqTUeoWmUabsg/5ZZ QFUHJGAs1dzJJ8NmXajXcvA3rWDk6+eKga4oBItuoOwlYa9EVt3tstMBQbUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmWoROnaZNAQ5unD2d7JlU2n+UK0wHwYDVR0j BBgwFoAUMMOTWWUcM7WawyvEaDGYAQiWBWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTc5OTZmNS1hOTM0LTRiNDQtODU0Ny0xOWVjMzdjZjdjMTQvMC8zMEMzOTM1OTY1 MUMzM0I1OUFDMzJCQzQ2ODMxOTgwMTA4OTYwNTY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEwODk2 MDU2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3OTk2ZjUtYTkzNC00YjQ0LTg1 NDctMTllYzM3Y2Y3YzE0LzAvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4 MDEwODk2MDU2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL33zHGTO6C0/BfTf2M8DJ80JiU1JUOrEuPQ ULriZIEim0uk7eW8sCfpn5R0NMZcXHUcEo+ZheaKg2R/Z0ElWtg5Vmzx8micFM0w F4Q/5QpCztmk/6nQfnur8DGKSZtOMETklbQ5xzqmLzkcaFJTkEEA5URDP5jOWH9f uicp/YkqH+tQwHcaOQh2dDuphKywWLRMljRYCu0os3tofHktuWFjt1NiaG2YtfHs tPeM5voVbod0k39z0+h3950xSNAZyheU8p+kqoAZmWgRXVEAbGZ/oL1kHJgruHQu 6E536BdvuXV9Ui7t7zUmTnmYub+lSdbws/ge1l7OcPjI8l4GH9Y= -----END CERTIFICATE-----Generated at Wed May 29 02:48:29 2024 by rpki-client on console-fra.rpki-client.org