$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: iIlNVExh0ogJvpmfKJEzQ1AEFFbVJkBi96FEpMt95FQ= Subject key identifier: C6:E9:BE:F8:CF:42:FF:14:EF:5C:9D:0A:6C:E4:CD:AD:B1:D4:01:0C Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 3F5A42BC0D94058165ADC6AC53F40C576307D03E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 0157 Signing time: Sat 18 May 2024 18:51:01 +0000 Manifest this update: Sat 18 May 2024 18:46:01 +0000 Manifest next update: Tue 21 May 2024 23:55:01 +0000 Files and hashes: 1: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: 3WAGUxj/2EOgWdD0bDTjy0LX/1wg5ITtf4y2dTfVS/s=) 2: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: j8YqoLk3LKlAJbpij9kjCUeVQUfsqMbQ+SBoghZef+w=) 3: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: LkKeG9ESZa/NLh7Xm3ZiP4uaI8GgGt5EDUDI9OkVd50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5a:42:bc:0d:94:05:81:65:ad:c6:ac:53:f4:0c:57:63:07:d0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: May 18 18:46:01 2024 GMT Not After : May 21 23:55:01 2024 GMT Subject: CN=C6E9BEF8CF42FF14EF5C9D0A6CE4CDADB1D4010C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4f:cf:27:64:82:23:42:90:fd:7d:3d:68:8a: fa:67:3d:16:ed:c7:7f:8c:99:cc:f9:2d:b0:8a:a7: a7:74:b2:d2:58:d9:14:a1:69:41:44:9a:17:a1:9b: 03:ea:0d:04:21:02:df:6b:a3:eb:2d:53:fc:00:74: fe:e5:ac:23:a0:40:26:4d:5a:00:b7:85:04:bd:68: 8d:1d:51:9e:69:dd:ef:5b:ec:6c:fe:46:57:6c:6b: 21:8a:da:18:ba:ad:77:0b:ef:f6:90:1c:e4:77:ee: 5f:63:54:97:3d:7f:99:a7:89:3c:f1:4b:c9:5f:12: 84:c5:17:90:04:1f:57:6a:48:53:1f:ff:f2:7e:7a: 4b:39:85:4c:dc:dc:63:7e:f6:c8:f4:18:af:94:2b: 10:32:3e:1f:b4:ae:4a:e3:e4:02:9a:c5:33:80:ee: bd:94:29:ff:64:2e:fd:f4:9b:bf:6e:b0:70:33:4f: 9a:8d:87:87:5e:6b:95:0f:f9:70:20:cb:42:07:0b: 75:e0:4c:68:42:a4:5e:cf:67:93:a9:71:6f:fe:fe: d8:e9:d0:bd:03:6a:cc:8a:80:b3:ce:12:ca:5d:de: 16:24:9b:e5:7b:ce:f2:b3:95:ef:82:a1:a5:92:17: 9f:3a:e5:05:d8:5a:8e:22:bc:07:64:7c:18:3c:09: 05:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E9:BE:F8:CF:42:FF:14:EF:5C:9D:0A:6C:E4:CD:AD:B1:D4:01:0C X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:66:1d:f6:61:3d:42:2b:6c:4d:d2:eb:14:6d:8e:f2:71:f9: 3c:88:4d:b3:1f:d6:1c:ba:26:1d:6a:5a:d4:b4:0b:7e:aa:49: ca:ca:a9:11:df:cf:7e:c2:f4:f9:14:ae:42:fc:c2:15:e8:39: c4:12:de:a2:b7:75:55:39:0f:36:86:ad:ec:0b:fd:fe:dc:c8: b4:10:89:a0:bf:3f:65:5c:15:7f:c5:c0:eb:ec:8c:de:9f:f0: b0:4d:fa:64:b3:a4:10:c0:e2:f1:d1:94:71:e2:a5:25:56:e7: 76:07:be:fb:24:75:32:04:43:1b:ef:5d:c8:e2:1a:63:7f:06: 39:94:b6:38:32:70:2a:cf:3b:b8:cc:91:da:c9:77:a1:f1:f8: 07:41:d6:b8:50:eb:b6:2b:5e:e5:99:f3:0f:8c:a2:84:38:69: a1:51:d8:1e:6a:e7:a8:e7:24:00:23:8c:d5:3e:a2:7f:e2:db: 29:44:f7:36:12:e0:e0:17:a2:8e:5d:9f:2d:35:df:4e:ea:4a: 6d:73:83:67:64:6d:de:c5:dc:ee:e0:47:a3:8f:74:af:63:0c: f0:52:3b:1d:89:ac:66:a7:7e:d6:9b:3a:70:2a:bb:36:1e:36: c7:6a:6e:66:75:63:0c:8d:77:cc:e2:2c:6c:8e:ef:57:c2:20: 31:31:20:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1pCvA2UBYFlrcasU/QMV2MH0D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNDA1MTgxODQ2MDFaFw0yNDA1MjEyMzU1MDFaMDMxMTAvBgNV BAMTKEM2RTlCRUY4Q0Y0MkZGMTRFRjVDOUQwQTZDRTRDREFEQjFENDAxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeT88nZIIjQpD9fT1oivpnPRbt x3+Mmcz5LbCKp6d0stJY2RShaUFEmhehmwPqDQQhAt9ro+stU/wAdP7lrCOgQCZN WgC3hQS9aI0dUZ5p3e9b7Gz+RldsayGK2hi6rXcL7/aQHOR37l9jVJc9f5mniTzx S8lfEoTFF5AEH1dqSFMf//J+eks5hUzc3GN+9sj0GK+UKxAyPh+0rkrj5AKaxTOA 7r2UKf9kLv30m79usHAzT5qNh4dea5UP+XAgy0IHC3XgTGhCpF7PZ5OpcW/+/tjp 0L0DasyKgLPOEspd3hYkm+V7zvKzle+CoaWSF5865QXYWo4ivAdkfBg8CQUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxum++M9C/xTvXJ0KbOTNrbHUAQwwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1mHfZhPUIrbE3S6xRtjvJx+TyITbMf1hy6 Jh1qWtS0C36qScrKqRHfz37C9PkUrkL8whXoOcQS3qK3dVU5DzaGrewL/f7cyLQQ iaC/P2VcFX/FwOvsjN6f8LBN+mSzpBDA4vHRlHHipSVW53YHvvskdTIEQxvvXcji GmN/BjmUtjgycCrPO7jMkdrJd6Hx+AdB1rhQ67YrXuWZ8w+MooQ4aaFR2B5q56jn JAAjjNU+on/i2ylE9zYS4OAXoo5dny01307qSm1zg2dkbd7F3O7gR6OPdK9jDPBS Ox2JrGanftabOnAquzYeNsdqbmZ1YwyNd8ziLGyO71fCIDExIGI= -----END CERTIFICATE-----Generated at Sat May 18 19:20:39 2024 by rpki-client on console-fra.rpki-client.org