$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: 4bdQeT2IVyv4m3YL1boJKmFl07CW1iQhT0hhjBunNLE= Subject key identifier: B0:7B:E6:7D:39:AB:39:E0:E9:E4:C4:17:17:65:A5:75:08:92:03:EF Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 729FF27F24A4CA8C3F75D369915FA4D21397C442 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 0112 Signing time: Thu 21 Nov 2024 02:29:37 +0000 Manifest this update: Thu 21 Nov 2024 02:24:37 +0000 Manifest next update: Sun 24 Nov 2024 08:38:37 +0000 Files and hashes: 1: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: UGYd2KBhH+/1D0d90d0bVvS+Zik8mVd/+wylom/g5ho=) 2: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: Rt307spCQW5D0CXovbfx6ZE2Rxoj9ih60pTjsLXwfWo=) 3: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: +T+pV+w4sy/AcyrcZ47zD+xcb+FuTkZiEDOZ+MS5pI8=) 4: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: IlEiGcTNRfLgc+5n98afB5648nnwVHDEvCuqj1ZmYkQ=) 5: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: ZnUdzYnE6HKQLuav9EC8DrZrnvhrEm4Gkn8aDSX9YBU=) 6: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: eRm8ddtsmSedKqcG2G82Bp1EhiRufznAWG1/ZjydYPs=) 7: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: ZjAatsMbqem2M1+X3kvcjs774YMqFrhWPF0EDDLVfTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9f:f2:7f:24:a4:ca:8c:3f:75:d3:69:91:5f:a4:d2:13:97:c4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Nov 21 02:24:37 2024 GMT Not After : Nov 24 08:38:37 2024 GMT Subject: CN=B07BE67D39AB39E0E9E4C4171765A575089203EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:22:15:97:81:1a:a3:c3:75:12:21:8b:56:1c: a9:81:8c:70:8f:54:bc:bf:11:01:2c:6d:0f:9c:9b: 6e:f3:9b:a9:d7:cf:90:dd:b1:f3:bb:9e:8e:63:4a: a3:ac:04:a9:b1:47:49:8e:30:78:4c:e9:72:ea:ab: ad:95:b2:f6:71:9f:8d:0a:46:70:34:26:70:ad:92: 6d:ad:fb:82:56:7b:c8:d3:b2:91:29:51:62:2d:06: 88:a6:d0:7f:22:35:5f:6d:94:e3:8f:c7:a7:28:19: 46:f4:05:a0:04:31:41:5a:15:71:e4:a9:c7:1b:0e: dd:3e:1e:ce:2f:27:ac:a9:0f:5a:65:62:0e:be:b5: ea:1c:8b:6a:67:3f:21:d1:b2:21:02:f8:87:5e:ac: de:71:e0:3f:ec:43:49:9c:4e:c5:50:1e:0d:e9:09: 4d:bc:a2:25:c8:27:85:9f:ef:a1:3e:a3:1a:1c:d2: 63:44:8c:19:2d:e4:55:be:d7:bb:02:1f:69:ff:e6: 0e:fb:7a:bc:bc:76:d5:8d:f1:aa:c7:89:35:51:31: e6:6e:53:3f:8c:1a:22:a9:1f:e0:21:dc:2e:a0:22: fd:20:03:d3:8b:61:6d:0e:42:15:1b:fe:5e:cd:6b: 8f:75:a1:9b:d3:15:9c:65:fe:ae:84:9d:3f:c6:e0: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7B:E6:7D:39:AB:39:E0:E9:E4:C4:17:17:65:A5:75:08:92:03:EF X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:75:8c:4d:1d:72:0c:0e:f2:ba:ca:8a:e8:63:ce:5c:0c:a2: a4:80:58:e9:f8:9b:a7:08:e7:ef:42:22:dd:90:d5:61:52:f4: 56:11:3c:1d:db:be:84:7b:51:a3:42:e9:0e:2d:21:e9:8b:9b: 71:8b:25:d3:88:6e:70:4a:7e:b1:bf:d2:fb:c0:1d:ee:5e:55: 17:3f:d9:7b:91:a9:fb:7f:e7:3c:e1:35:79:b7:c1:a1:44:1b: 60:95:1d:34:f8:f3:88:e9:05:04:e7:44:55:d0:cf:96:54:35: b4:4e:c3:d7:cf:68:06:17:32:70:ba:84:ad:0f:95:f1:c2:2d: f8:ca:6c:34:0c:d6:63:15:9d:76:c0:ef:bc:0f:62:ac:f3:fd: 0f:d5:03:16:f7:5f:19:74:64:f3:ec:c0:7e:b8:a9:e0:40:24: 75:ca:df:b2:c7:c1:4e:89:6b:f1:c6:f9:89:53:a3:d2:73:41: ec:69:b7:66:af:2d:a3:ea:5c:8c:7b:da:2e:8c:b5:cf:c2:84: ff:54:69:de:b7:6b:2b:94:cf:e2:87:67:ea:2a:96:43:9e:54: 53:32:08:e1:cf:5f:ba:46:df:32:87:93:15:b1:ac:bb:c6:f5: 42:90:87:ca:c0:d5:5b:9c:21:7c:36:df:5a:dc:1c:2e:2d:e2: b8:65:68:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcp/yfySkyow/ddNpkV+k0hOXxEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNDExMjEwMjI0MzdaFw0yNDExMjQwODM4MzdaMDMxMTAvBgNV BAMTKEIwN0JFNjdEMzlBQjM5RTBFOUU0QzQxNzE3NjVBNTc1MDg5MjAzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrIhWXgRqjw3USIYtWHKmBjHCP VLy/EQEsbQ+cm27zm6nXz5DdsfO7no5jSqOsBKmxR0mOMHhM6XLqq62VsvZxn40K RnA0JnCtkm2t+4JWe8jTspEpUWItBoim0H8iNV9tlOOPx6coGUb0BaAEMUFaFXHk qccbDt0+Hs4vJ6ypD1plYg6+teoci2pnPyHRsiEC+IderN5x4D/sQ0mcTsVQHg3p CU28oiXIJ4Wf76E+oxoc0mNEjBkt5FW+17sCH2n/5g77ery8dtWN8arHiTVRMeZu Uz+MGiKpH+Ah3C6gIv0gA9OLYW0OQhUb/l7Na491oZvTFZxl/q6EnT/G4Fn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsHvmfTmrOeDp5MQXF2WldQiSA+8wHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE11jE0dcgwO8rrKiuhjzlwMoqSAWOn4m6cI 5+9CIt2Q1WFS9FYRPB3bvoR7UaNC6Q4tIemLm3GLJdOIbnBKfrG/0vvAHe5eVRc/ 2XuRqft/5zzhNXm3waFEG2CVHTT484jpBQTnRFXQz5ZUNbROw9fPaAYXMnC6hK0P lfHCLfjKbDQM1mMVnXbA77wPYqzz/Q/VAxb3Xxl0ZPPswH64qeBAJHXK37LHwU6J a/HG+YlTo9JzQexpt2avLaPqXIx72i6Mtc/ChP9Uad63ayuUz+KHZ+oqlkOeVFMy COHPX7pG3zKHkxWxrLvG9UKQh8rA1VucIXw231rcHC4t4rhlaNY= -----END CERTIFICATE-----Generated at Thu Nov 21 03:17:49 2024 by rpki-client on console-ams.rpki-client.org