$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json) Hash identifier: e5iGQFrrjf9XAoxbFEK6EqXg/DLT/TLeGs5xa1JJHFY= Subject key identifier: E5:9E:C5:F9:AB:2A:77:58:E3:68:29:A0:1E:1F:1B:B9:FD:3B:C9:BB Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 13847516CDB7E5215AC20A452AB40690DEA0E7BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft Manifest number: 66 Signing time: Mon 25 Nov 2024 11:52:24 +0000 Manifest this update: Mon 25 Nov 2024 11:47:24 +0000 Manifest next update: Thu 28 Nov 2024 22:48:24 +0000 Files and hashes: 1: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: O+pwn6KCb2besz3RaeYvHXNsUUKQb3ZGYlxRNWuUkiU=) 2: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: UmEBU3Sgynao9lbw1JJMUo4viflFWrDSm3vbkMs9u64=) 3: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: ArXTOYnm1P+DtxvOZZotGhqpOCXfX/Bv4u7RE7ppZGQ=) 4: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: RP7rUocoC3D/j1TwADshI6ZpMeqAmaI5nGcmRaAlwtE=) 5: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: VlPySr1z7+TkmzqDg9LkNmufmjg7AcW+Dqxto5/JHQ0=) 6: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: y0Ec6JrQKxzntUk48Us/rCX52IJwb03iB7KaQZ7Fux0=) 7: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: n84lQxFjMaL3Y9UQU8GKoerRQT4fOqmo8MdPg5kVYsQ=) 8: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: dHGjsmtyNiK8srSzYwGL3Hg8o303N6ZWYYsYI6Ez2Y4=) 9: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: NVHsn6xcnGPEYPmwwXLF9Ee2xqv4swX+J8kRowDTzVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:84:75:16:cd:b7:e5:21:5a:c2:0a:45:2a:b4:06:90:de:a0:e7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Nov 25 11:47:24 2024 GMT Not After : Nov 28 22:48:24 2024 GMT Subject: CN=E59EC5F9AB2A7758E36829A01E1F1BB9FD3BC9BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:de:b5:ba:9c:90:16:0d:7d:80:45:be:40: 75:14:e3:a5:30:29:7d:cf:b3:2b:75:03:40:e4:cb: c0:c4:43:9a:09:18:7f:07:98:ba:45:b9:b4:73:24: 93:d0:79:6b:a6:3c:55:7b:e1:38:e8:f9:12:0e:e9: 81:04:b3:45:d3:19:1f:33:b2:a1:63:b3:94:00:7c: 1b:0e:ca:03:25:e9:b2:67:44:90:bb:31:41:f7:7a: 2f:db:89:33:7e:d7:5f:ec:4c:9d:e3:b3:50:6d:2c: 16:60:4c:33:04:3f:67:1b:3d:f5:a9:99:6c:4b:1d: 4a:35:91:ca:b9:6e:94:7c:4b:5b:aa:64:37:a7:18: 1e:ca:f8:f7:05:49:3e:99:65:aa:c4:d3:b9:0f:e4: fd:54:cc:05:ff:02:c2:ea:03:60:73:12:a1:5b:b4: 1c:9f:ea:bf:db:09:93:3c:19:6b:74:6a:bd:05:e2: 9f:a3:ad:8c:56:d5:05:ea:b2:23:86:a5:4b:4b:1f: 7c:71:74:56:71:90:c3:11:0e:4c:0c:9e:e1:e4:96: 1c:82:9e:ad:1a:e2:26:08:13:a2:2f:07:55:f4:eb: 54:22:2d:f5:40:e8:ef:6b:3e:e3:03:6c:28:c2:16: 59:3b:e0:9a:03:ec:e9:4a:9c:b1:4b:46:6f:55:13: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9E:C5:F9:AB:2A:77:58:E3:68:29:A0:1E:1F:1B:B9:FD:3B:C9:BB X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f7:4a:c6:8e:06:77:b7:18:9e:4e:bb:29:11:6d:7c:39:51: 57:a8:3f:ff:d2:af:5b:05:66:41:46:6a:a5:1f:99:a0:0e:c9: 0a:29:bf:e1:00:41:5f:ef:02:d4:69:27:84:8a:5a:a3:90:8d: cc:bc:e0:b2:4a:09:89:5c:77:83:fc:1a:4d:f2:54:a2:a3:1c: c6:1e:ac:74:6c:ba:e1:31:15:7a:75:1e:27:0c:d9:c0:97:9e: f0:42:7a:bf:4f:8e:b6:9f:aa:7e:05:23:f7:7a:cf:1d:9b:05: 24:bf:b3:f0:39:9b:29:b4:1d:3a:4b:8a:72:e9:ac:41:94:23: a6:1d:10:6b:dd:cf:0f:be:a1:6a:1f:95:28:24:49:51:57:8b: 06:c5:2c:db:b7:7d:04:7a:6f:df:36:10:2e:c4:62:ea:0d:3d: 48:59:7c:92:d3:08:a1:b2:73:61:bd:ac:f5:c8:25:46:6a:22: 39:78:04:7c:f4:41:d1:e8:fd:50:57:93:77:89:22:32:44:10: 4c:62:84:67:58:12:00:83:5e:1d:f6:ee:19:74:71:c4:d0:66: dc:33:30:fa:33:e7:40:1b:b6:dc:03:43:db:9d:b8:c8:fe:9d: f7:aa:2e:91:44:7e:ca:b7:99:87:69:55:5e:e6:4e:89:ea:4d: 23:dd:86:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4R1Fs235SFawgpFKrQGkN6g574wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNDExMjUxMTQ3MjRaFw0yNDExMjgyMjQ4MjRaMDMxMTAvBgNV BAMTKEU1OUVDNUY5QUIyQTc3NThFMzY4MjlBMDFFMUYxQkI5RkQzQkM5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSN61upyQFg19gEW+QHUU46Uw KX3Psyt1A0Dky8DEQ5oJGH8HmLpFubRzJJPQeWumPFV74Tjo+RIO6YEEs0XTGR8z sqFjs5QAfBsOygMl6bJnRJC7MUH3ei/biTN+11/sTJ3js1BtLBZgTDMEP2cbPfWp mWxLHUo1kcq5bpR8S1uqZDenGB7K+PcFST6ZZarE07kP5P1UzAX/AsLqA2BzEqFb tByf6r/bCZM8GWt0ar0F4p+jrYxW1QXqsiOGpUtLH3xxdFZxkMMRDkwMnuHklhyC nq0a4iYIE6IvB1X061QiLfVA6O9rPuMDbCjCFlk74JoD7OlKnLFLRm9VEzqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Z7F+asqd1jjaCmgHh8buf07ybswHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUx RDc0Q0MyODE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX3SsaOBne3GJ5OuykRbXw5UVeoP//Sr1sF ZkFGaqUfmaAOyQopv+EAQV/vAtRpJ4SKWqOQjcy84LJKCYlcd4P8Gk3yVKKjHMYe rHRsuuExFXp1HicM2cCXnvBCer9Pjrafqn4FI/d6zx2bBSS/s/A5mym0HTpLinLp rEGUI6YdEGvdzw++oWoflSgkSVFXiwbFLNu3fQR6b982EC7EYuoNPUhZfJLTCKGy c2G9rPXIJUZqIjl4BHz0QdHo/VBXk3eJIjJEEExihGdYEgCDXh327hl0ccTQZtwz MPoz50AbttwDQ9uduMj+nfeqLpFEfsq3mYdpVV7mTonqTSPdhgc= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:35 2024 by rpki-client on console-ams.rpki-client.org