$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: Z67rPAWse1VbHcrYNQSxSQkaDMJjhNA9O/4cFOkGV4I= Subject key identifier: B3:8B:F5:3E:17:54:38:45:54:74:B3:AD:D9:D2:1F:72:CF:4B:F0:1B Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 4F76D2B9EC08188E74FE092EFEA1D0BDC34EBCF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 02DD Signing time: Wed 20 Nov 2024 11:41:21 +0000 Manifest this update: Wed 20 Nov 2024 11:36:21 +0000 Manifest next update: Sat 23 Nov 2024 22:06:21 +0000 Files and hashes: 1: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: vncd8kGmq8GX0ztE+KWHCFeoCee1arvniQNSZkp7N1g=) 2: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: 95dIsHfBAd4ni7Xj9frlcKjJEmgA0Y7hVgud6u8Un0w=) 3: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: fgjveOwv2BPgVRLquXhRLNpCWs07VKThVtJ2Byzn53g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:76:d2:b9:ec:08:18:8e:74:fe:09:2e:fe:a1:d0:bd:c3:4e:bc:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Nov 20 11:36:21 2024 GMT Not After : Nov 23 22:06:21 2024 GMT Subject: CN=B38BF53E175438455474B3ADD9D21F72CF4BF01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d5:4f:e7:e4:9e:42:a3:22:a6:b1:f2:f6:cf: 6d:ff:95:5a:27:0c:1d:73:8b:cd:75:e4:d9:d6:e4: 41:bf:c9:78:30:9a:04:39:a0:55:c9:40:1e:cb:a4: 00:99:32:29:47:a1:eb:51:e0:d9:50:c1:89:7f:20: 3d:79:ca:d2:86:25:10:6a:30:4c:f7:7e:71:4a:1f: ee:64:2a:a5:c8:47:5b:e3:7f:fc:e6:2e:44:ce:6d: c8:b5:6d:38:7c:4b:bb:e7:61:fc:93:32:3b:66:5a: 54:92:de:6f:60:77:8d:04:65:ad:de:d3:73:44:36: 60:25:f4:c1:5e:d8:6a:69:ac:2f:95:c6:90:fe:ea: 19:69:ab:ec:84:db:2c:39:c0:f3:e0:f2:b4:dd:d9: c8:24:e3:47:bc:7c:8f:08:90:95:66:be:6f:8f:ba: c3:1a:cf:f2:0c:fc:39:99:cf:d0:9c:29:2a:f4:a5: 64:67:a7:4f:e3:c2:84:44:e1:c8:d8:cd:93:a5:6f: 30:81:f4:4c:92:9e:1a:76:c8:6a:bd:ab:dc:15:d3: f8:88:64:a6:4c:f0:be:9a:98:c0:1c:a9:96:49:c8: 68:6a:7b:39:fe:b5:33:ce:42:87:5b:bb:c4:b9:e2: d2:f6:13:6c:b8:58:c9:c7:2f:a1:d2:1b:5d:d4:07: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8B:F5:3E:17:54:38:45:54:74:B3:AD:D9:D2:1F:72:CF:4B:F0:1B X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c6:58:2a:e5:9a:1e:30:e4:0e:2e:46:ed:0c:f4:72:9e:02: 63:9e:ed:07:19:f4:5f:52:59:aa:0f:3a:95:ad:42:b6:ac:78: 83:d8:23:1a:90:e6:b4:6a:15:bf:e5:21:5d:f9:64:9c:18:45: f5:be:80:bd:ab:e5:df:dc:3c:86:1d:97:7b:28:bc:f7:22:31: 3b:41:28:f2:99:f5:af:cc:40:1c:35:c9:4d:32:fe:3f:03:de: 97:b0:a4:d0:95:40:91:fb:7b:40:61:f8:b5:5c:fc:e9:1d:7f: 65:cd:ec:d6:69:96:0e:e7:2e:bc:18:09:fc:d7:a6:d3:74:ec: a9:e6:b7:97:c2:9c:b7:9a:7a:96:b8:4c:0e:36:61:44:a3:01: 8f:e6:ba:5f:98:79:13:e6:a0:a0:ac:e6:b9:60:c5:7e:3e:f1: 90:7a:b7:e1:5f:80:e6:ee:32:3a:12:d7:4e:27:e3:91:df:ef: 77:c9:2e:61:2b:1b:4b:3c:06:8f:b7:fa:5a:6a:bf:f4:da:61: 69:00:3e:65:ee:86:e6:4c:10:c8:12:0f:41:3f:ca:2f:85:04: 72:28:4a:1e:da:17:e5:08:c4:d2:ae:b5:13:8b:3a:27:83:92: 95:98:4d:f3:ce:f9:ef:27:28:84:bd:35:e8:99:07:62:39:33: c1:8f:7d:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3bSuewIGI50/gku/qHQvcNOvPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNDExMjAxMTM2MjFaFw0yNDExMjMyMjA2MjFaMDMxMTAvBgNV BAMTKEIzOEJGNTNFMTc1NDM4NDU1NDc0QjNBREQ5RDIxRjcyQ0Y0QkYwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1U/n5J5CoyKmsfL2z23/lVon DB1zi8115NnW5EG/yXgwmgQ5oFXJQB7LpACZMilHoetR4NlQwYl/ID15ytKGJRBq MEz3fnFKH+5kKqXIR1vjf/zmLkTObci1bTh8S7vnYfyTMjtmWlSS3m9gd40EZa3e 03NENmAl9MFe2GpprC+VxpD+6hlpq+yE2yw5wPPg8rTd2cgk40e8fI8IkJVmvm+P usMaz/IM/DmZz9CcKSr0pWRnp0/jwoRE4cjYzZOlbzCB9EySnhp2yGq9q9wV0/iI ZKZM8L6amMAcqZZJyGhqezn+tTPOQodbu8S54tL2E2y4WMnHL6HSG13UBxGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs4v1PhdUOEVUdLOt2dIfcs9L8BswHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvGWCrlmh4w5A4uRu0M9HKeAmOe7QcZ9F9S WaoPOpWtQraseIPYIxqQ5rRqFb/lIV35ZJwYRfW+gL2r5d/cPIYdl3sovPciMTtB KPKZ9a/MQBw1yU0y/j8D3pewpNCVQJH7e0Bh+LVc/Okdf2XN7NZplg7nLrwYCfzX ptN07Knmt5fCnLeaepa4TA42YUSjAY/mul+YeRPmoKCs5rlgxX4+8ZB6t+FfgObu MjoS104n45Hf73fJLmErG0s8Bo+3+lpqv/TaYWkAPmXuhuZMEMgSD0E/yi+FBHIo Sh7aF+UIxNKutROLOieDkpWYTfPO+e8nKIS9NeiZB2I5M8GPfaE= -----END CERTIFICATE-----Generated at Wed Nov 20 13:43:33 2024 by rpki-client on console-ams.rpki-client.org