$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: 2QAvMJrK5DlNjnh5szAJVcPpxiZhDsrCOVEM90Vmasw= Subject key identifier: 84:00:21:DA:3B:B4:7E:7A:B2:BA:DD:2E:18:6E:12:CF:32:F8:4C:32 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 377CE435A4012E60CF360DDACB515E8AFB9C28FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 0484 Signing time: Wed 20 Nov 2024 23:30:38 +0000 Manifest this update: Wed 20 Nov 2024 23:25:38 +0000 Manifest next update: Sun 24 Nov 2024 01:33:38 +0000 Files and hashes: 1: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: PEQZ1k/ofd/ZbsfC3vOA3H3PrXYnrx08f8jOPFTboHQ=) 2: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: Maowy9ZefjHDMfvujJn0ro1tBo40XSiT/nD665jrUOE=) 3: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: Dshq7FLG/8IwFv2djPDoFCF11ZS5aruhkwaXf8oFx88=) 4: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: s19IDj9mMJ0lErBIJsliZ5CjEuGnp4A/oBPXh9EeGJ0=) 5: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: RzpF8tFy62QFxO5rx50rJvqckeHeBS/lfFxDrWgg/Gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 01:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7c:e4:35:a4:01:2e:60:cf:36:0d:da:cb:51:5e:8a:fb:9c:28:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Nov 20 23:25:38 2024 GMT Not After : Nov 24 01:33:38 2024 GMT Subject: CN=840021DA3BB47E7AB2BADD2E186E12CF32F84C32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2f:41:ee:f5:09:ea:9b:7b:6d:ba:f3:12:bf: 56:8b:96:e2:5f:61:df:a0:9f:4e:1f:37:3e:83:e3: b3:68:9a:05:9b:e5:28:0a:ee:b8:6b:bd:bb:ce:88: 81:f1:2f:5a:1a:90:51:8e:7c:21:26:d2:3a:70:85: c7:38:32:cb:34:4c:a1:e5:ba:9d:c1:c9:4f:06:d3: a5:1c:ba:ce:52:6f:9a:67:df:ad:70:22:90:f0:26: 91:9f:ca:39:e2:97:63:29:e3:dc:6d:85:98:53:52: 31:db:4a:8f:43:cb:fb:fc:4a:16:bc:f2:0e:11:07: 39:f0:6e:c5:05:c2:a9:cc:24:c2:42:c8:0b:41:40: ec:3f:10:ac:76:32:5c:44:dd:99:5e:ef:3d:a7:9d: e2:c2:bb:78:5c:1a:8b:6a:b0:77:6b:6b:ff:52:cb: 2a:e3:35:63:a0:c4:5f:b4:46:95:40:83:02:a9:29: 1d:a7:42:84:f9:52:69:9a:2a:5f:f1:69:cf:a0:38: ba:3e:4e:85:0f:0a:4a:dc:13:e4:e8:17:d9:0e:63: c7:a4:46:28:01:b1:c4:0a:69:08:32:0a:5a:90:aa: c0:9f:a1:14:a1:1c:ae:55:70:e3:93:98:51:77:d8: 8c:bc:e2:57:1a:71:49:10:fc:49:c6:b1:d4:63:19: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:21:DA:3B:B4:7E:7A:B2:BA:DD:2E:18:6E:12:CF:32:F8:4C:32 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6e:72:63:cd:e6:ca:ea:7d:bf:a2:6c:a9:6a:c3:8e:99:10: 30:73:7f:f2:50:05:58:5a:f1:3c:ad:c4:5b:01:f2:71:6d:6f: 76:0c:81:25:f6:9a:21:a6:6b:14:f9:7e:93:63:2a:b7:d3:d9: 7e:1c:b4:a5:22:5a:5d:8f:a5:5b:a2:7e:cd:96:b0:17:c3:c0: bf:9a:3d:3f:e5:80:78:d3:bd:e6:72:4b:35:28:b7:8d:99:46: d5:62:54:c2:58:9c:87:8e:be:6e:f6:56:50:94:4d:c6:e6:b5: 39:21:ff:55:9f:20:c6:06:d6:30:be:ef:99:6d:96:42:e0:d7: 91:e8:f1:56:3e:86:7e:96:54:12:cd:8f:7c:71:26:8d:b0:45: c6:f3:22:3e:51:00:1a:82:dd:fd:8b:cc:a5:ff:c0:6d:4b:85: f2:15:72:ba:64:0c:28:4e:50:4f:5c:6b:5d:87:74:e6:3b:e5: be:98:e8:58:e0:f2:e6:63:d9:3c:bf:51:25:81:39:89:f7:87: 46:71:73:42:25:3b:85:01:cb:10:6d:89:db:8e:a6:0e:6d:43: 52:cf:77:fa:f5:a0:e9:03:c6:0d:98:39:55:85:1c:47:11:fa: 24:97:70:e7:1a:ec:dd:de:ca:fd:cf:9e:c4:15:ad:a7:e1:31: 8a:9e:9d:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3zkNaQBLmDPNg3ay1FeivucKPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNDExMjAyMzI1MzhaFw0yNDExMjQwMTMzMzhaMDMxMTAvBgNV BAMTKDg0MDAyMURBM0JCNDdFN0FCMkJBREQyRTE4NkUxMkNGMzJGODRDMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtL0Hu9Qnqm3ttuvMSv1aLluJf Yd+gn04fNz6D47NomgWb5SgK7rhrvbvOiIHxL1oakFGOfCEm0jpwhcc4Mss0TKHl up3ByU8G06Ucus5Sb5pn361wIpDwJpGfyjnil2Mp49xthZhTUjHbSo9Dy/v8Sha8 8g4RBznwbsUFwqnMJMJCyAtBQOw/EKx2MlxE3Zle7z2nneLCu3hcGotqsHdra/9S yyrjNWOgxF+0RpVAgwKpKR2nQoT5UmmaKl/xac+gOLo+ToUPCkrcE+ToF9kOY8ek RigBscQKaQgyClqQqsCfoRShHK5VcOOTmFF32Iy84lcacUkQ/EnGsdRjGaF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhAAh2ju0fnqyut0uGG4SzzL4TDIwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJucmPN5srqfb+ibKlqw46ZEDBzf/JQBVha 8TytxFsB8nFtb3YMgSX2miGmaxT5fpNjKrfT2X4ctKUiWl2PpVuifs2WsBfDwL+a PT/lgHjTveZySzUot42ZRtViVMJYnIeOvm72VlCUTcbmtTkh/1WfIMYG1jC+75lt lkLg15Ho8VY+hn6WVBLNj3xxJo2wRcbzIj5RABqC3f2LzKX/wG1LhfIVcrpkDChO UE9ca12HdOY75b6Y6Fjg8uZj2Ty/USWBOYn3h0Zxc0IlO4UByxBtiduOpg5tQ1LP d/r1oOkDxg2YOVWFHEcR+iSXcOca7N3eyv3PnsQVrafhMYqenZw= -----END CERTIFICATE-----Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org