$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json) Hash identifier: 77A/M6Bwq3oj00KxkEggjQBWaeKyTUXsdSnf/KH6mK0= Subject key identifier: AF:B7:10:23:F8:65:49:E9:91:01:D2:1F:CC:05:7B:A2:7C:02:7B:4C Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 5C1B4ECBD41639714EE2B2EFF5237C6D3EA2F5B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft Manifest number: 20 Signing time: Sat 22 Jun 2024 15:42:01 +0000 Manifest this update: Sat 22 Jun 2024 15:37:01 +0000 Manifest next update: Tue 25 Jun 2024 22:19:01 +0000 Files and hashes: 1: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: tD+b/BhiZF1DS+3OZHLeTbkSAo3p7V4gaka2aIPmA9o=) 2: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: n84lQxFjMaL3Y9UQU8GKoerRQT4fOqmo8MdPg5kVYsQ=) 3: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: UmEBU3Sgynao9lbw1JJMUo4viflFWrDSm3vbkMs9u64=) 4: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: NVHsn6xcnGPEYPmwwXLF9Ee2xqv4swX+J8kRowDTzVU=) 5: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: RP7rUocoC3D/j1TwADshI6ZpMeqAmaI5nGcmRaAlwtE=) 6: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: dHGjsmtyNiK8srSzYwGL3Hg8o303N6ZWYYsYI6Ez2Y4=) 7: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: y0Ec6JrQKxzntUk48Us/rCX52IJwb03iB7KaQZ7Fux0=) 8: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: VlPySr1z7+TkmzqDg9LkNmufmjg7AcW+Dqxto5/JHQ0=) 9: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: ArXTOYnm1P+DtxvOZZotGhqpOCXfX/Bv4u7RE7ppZGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1b:4e:cb:d4:16:39:71:4e:e2:b2:ef:f5:23:7c:6d:3e:a2:f5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Jun 22 15:37:01 2024 GMT Not After : Jun 25 22:19:01 2024 GMT Subject: CN=AFB71023F86549E99101D21FCC057BA27C027B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ed:2e:b9:71:fb:54:9b:9f:f2:5e:0e:98:35: 7f:c1:f4:04:81:3c:b8:95:01:c6:d6:fc:8f:3c:88: 6c:c2:a6:43:c5:cb:43:6d:aa:39:f9:1e:db:19:60: 63:91:2b:60:68:74:e4:d4:43:ca:53:bf:27:30:52: 58:1e:61:ac:20:e6:11:4e:2c:91:29:dd:97:53:13: 88:1b:94:74:2c:3c:1e:53:50:ba:02:c8:40:03:d0: 00:75:a1:13:98:d8:54:7d:47:5e:ec:d1:e9:3d:09: 0b:f3:dc:5e:31:f6:a4:82:87:6a:80:a1:0f:a7:be: 9a:6a:38:ee:0f:ad:61:07:3a:b0:c5:2d:b0:b0:34: aa:53:44:3d:11:9c:d3:e6:b1:32:80:95:82:d7:21: 3a:d3:74:79:2d:3d:2b:ba:e9:98:86:7f:0f:04:1a: 01:5b:c3:90:96:41:0b:83:1d:68:05:00:59:f4:b2: 24:ac:06:f1:f9:62:02:46:1c:da:7b:a3:70:06:69: 64:e4:34:08:a4:cc:15:42:a1:61:ad:21:8d:ef:5d: e1:4c:50:c6:b2:cd:7e:5e:dd:94:7d:26:4c:e4:70: da:01:26:99:e5:78:6a:52:5e:d5:4f:d2:68:aa:7f: 64:9b:65:04:23:0c:d1:b2:25:41:96:b0:98:45:0e: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B7:10:23:F8:65:49:E9:91:01:D2:1F:CC:05:7B:A2:7C:02:7B:4C X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3a:27:b3:b2:8f:7b:6f:4c:a0:45:78:82:69:b6:85:34:09: f3:33:fc:5b:7e:5a:f5:dd:4d:56:2a:6e:09:d7:76:10:ed:51: 33:f7:bc:e2:38:e5:0e:5b:3c:55:aa:7c:95:64:50:fa:b4:92: 32:7d:09:20:c3:61:d0:89:2e:98:d0:2e:36:05:53:ac:fd:a2: 6d:27:dd:ca:7d:1b:4b:1b:c6:da:12:ca:bb:1a:b5:06:c0:c6: a3:15:da:1f:13:21:b2:95:21:2d:f0:71:be:fe:bb:cb:9b:88: 5d:86:53:cd:46:f9:bb:5b:8b:8f:58:a4:92:82:fb:72:dd:37: 09:b4:a7:f5:1e:ba:38:5a:f6:9e:ff:d0:45:b7:b4:d6:9a:25: f0:ec:47:aa:5d:c3:b7:d3:23:22:2e:99:62:e0:90:89:ea:d0: 06:9b:67:69:18:f1:52:ad:8d:17:4a:af:34:91:ba:b8:28:e7: 9f:92:94:ef:2d:b5:21:dd:9e:d9:cf:83:c0:64:7a:ee:6a:ff: 2c:25:f9:6b:3d:ff:51:a7:fb:59:16:36:11:7f:74:46:b6:5f: bc:a7:81:8a:e0:71:ea:e3:48:eb:d8:d5:4f:1a:88:f7:6d:f2: 12:0f:6c:15:93:11:ff:69:96:13:0f:9c:71:14:c1:35:99:4b: e8:f1:e8:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBtOy9QWOXFO4rLv9SN8bT6i9bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNDA2MjIxNTM3MDFaFw0yNDA2MjUyMjE5MDFaMDMxMTAvBgNV BAMTKEFGQjcxMDIzRjg2NTQ5RTk5MTAxRDIxRkNDMDU3QkEyN0MwMjdCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo7S65cftUm5/yXg6YNX/B9ASB PLiVAcbW/I88iGzCpkPFy0Ntqjn5HtsZYGORK2BodOTUQ8pTvycwUlgeYawg5hFO LJEp3ZdTE4gblHQsPB5TULoCyEAD0AB1oROY2FR9R17s0ek9CQvz3F4x9qSCh2qA oQ+nvppqOO4PrWEHOrDFLbCwNKpTRD0RnNPmsTKAlYLXITrTdHktPSu66ZiGfw8E GgFbw5CWQQuDHWgFAFn0siSsBvH5YgJGHNp7o3AGaWTkNAikzBVCoWGtIY3vXeFM UMayzX5e3ZR9JkzkcNoBJpnleGpSXtVP0miqf2SbZQQjDNGyJUGWsJhFDh9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr7cQI/hlSemRAdIfzAV7onwCe0wwHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUx RDc0Q0MyODE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA46J7Oyj3tvTKBFeIJptoU0CfMz/Ft+WvXd TVYqbgnXdhDtUTP3vOI45Q5bPFWqfJVkUPq0kjJ9CSDDYdCJLpjQLjYFU6z9om0n 3cp9G0sbxtoSyrsatQbAxqMV2h8TIbKVIS3wcb7+u8ubiF2GU81G+btbi49YpJKC +3LdNwm0p/Ueujha9p7/0EW3tNaaJfDsR6pdw7fTIyIumWLgkInq0AabZ2kY8VKt jRdKrzSRurgo55+SlO8ttSHdntnPg8Bkeu5q/ywl+Ws9/1Gn+1kWNhF/dEa2X7yn gYrgcerjSOvY1U8aiPdt8hIPbBWTEf9plhMPnHEUwTWZS+jx6DM= -----END CERTIFICATE-----Generated at Sat Jun 22 17:13:22 2024 by rpki-client on console-ams.rpki-client.org