$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft File: 3D93688202931D72322A7EE0053964A2DD8EB457.mft (raw, json) Hash identifier: mXaeK6RiyUn8oMQQFNik3R/4X2bOLdgn5/YUMHwqjro= Subject key identifier: 38:4A:86:A6:74:79:B8:D5:FC:3F:7F:7F:1D:2D:EE:1F:CB:04:DF:85 Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457 Certificate serial: 688D469C1229F0D0E9A08F89663D08282C53AF16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft Manifest number: 0161 Signing time: Sat 18 May 2024 11:12:02 +0000 Manifest this update: Sat 18 May 2024 11:07:02 +0000 Manifest next update: Tue 21 May 2024 16:24:02 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: WppDQZbLtIowk4IxpdQBVBACqIFMpSeToWGYOCIl8Tc=) 2: 3D93688202931D72322A7EE0053964A2DD8EB457.crl (hash: dKG9OB81JBSDJy3LzRFN6zfCvNArWbc0GcKmtqE9Q0I=) 3: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: SPAwpGkaSWc0uNdATDp1XNpucbYxl6+PHS3pp5iqZpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8d:46:9c:12:29:f0:d0:e9:a0:8f:89:66:3d:08:28:2c:53:af:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457 Validity Not Before: May 18 11:07:02 2024 GMT Not After : May 21 16:24:02 2024 GMT Subject: CN=384A86A67479B8D5FC3F7F7F1D2DEE1FCB04DF85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b8:bc:10:d6:d2:54:59:ce:f2:2b:1f:3f:23: 61:cb:87:16:48:7e:3e:c1:55:ed:05:31:0f:a2:f6: 3c:25:fd:b4:dd:2c:c5:8d:a9:7d:d4:04:74:db:82: 35:df:bd:e2:d9:99:73:43:75:33:c6:99:da:bb:9e: 49:c7:a7:e1:46:61:a6:79:e9:81:7e:df:07:5f:4d: d7:7b:fe:a8:9b:94:94:02:02:0d:1b:db:51:72:f6: 08:5c:ec:f2:40:85:4c:f2:ac:5f:f8:ca:79:bc:83: c6:8b:15:18:d3:95:6a:7f:af:23:75:fa:51:55:00: 15:0f:b3:77:5c:8f:f0:48:36:d9:07:98:5a:d2:18: 2f:fb:13:7f:1e:fb:56:6a:53:e6:4a:39:c9:71:28: 2b:be:29:e4:39:d0:7b:f2:16:b2:8e:5b:c5:8a:75: 63:5e:b4:9e:84:0a:86:3c:2d:58:16:2a:37:8d:2e: a2:41:5a:be:bd:51:42:af:e3:c9:3f:ce:1f:4f:6b: d3:8f:9f:6b:75:f5:9d:54:d9:23:dc:a7:99:0a:4d: f6:2f:d3:51:6d:33:05:76:b1:b3:e1:3e:5e:75:aa: 6f:dc:d7:46:68:32:19:f6:6e:c3:fa:45:ed:02:25: 45:ad:b1:f7:da:b3:34:1e:74:f4:47:cb:e0:55:08: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4A:86:A6:74:79:B8:D5:FC:3F:7F:7F:1D:2D:EE:1F:CB:04:DF:85 X509v3 Authority Key Identifier: keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ab:9f:28:cc:9c:52:65:d7:e8:bb:49:a7:09:d0:db:bd:32: 55:8d:d1:fb:fa:83:c8:82:14:fa:37:f1:b0:3d:1a:2d:1b:45: 45:dd:2d:0f:b6:cc:dc:8f:51:26:d7:4b:68:b4:03:07:1c:36: b5:95:34:5a:59:45:29:e4:ee:6e:58:da:74:1e:58:4f:6f:e2: 95:c8:ea:39:c5:23:37:bd:d1:94:a7:a8:a2:ac:4d:10:60:48: af:4e:eb:e6:06:ac:34:97:1e:46:0c:9c:73:23:23:2c:4e:8a: 08:b8:1f:66:3d:35:da:76:59:7f:d9:47:cf:6c:ef:db:28:69: ad:50:ad:bf:9b:62:6c:6d:b6:5c:e6:c9:eb:93:14:f8:65:fd: ec:fb:91:46:e9:af:92:b8:38:23:bd:2d:8d:fd:65:8e:31:4f: 83:02:48:4e:22:8d:c1:01:56:a4:9c:f1:62:e2:f2:aa:cb:8f: dc:9d:af:36:9b:56:77:be:d5:1f:4a:b7:72:b6:c6:a1:d6:65: f1:e6:a5:ac:bf:be:29:39:4c:99:f3:20:54:17:d4:02:22:a7: de:9f:bf:0b:52:de:8b:9a:aa:b8:9c:da:bb:e3:ac:e6:12:38: e9:ed:eb:68:56:e3:88:72:ba:5d:50:9e:70:b1:75:c1:01:41: a8:cf:2f:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaI1GnBIp8NDpoI+JZj0IKCxTrxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE RDhFQjQ1NzAeFw0yNDA1MTgxMTA3MDJaFw0yNDA1MjExNjI0MDJaMDMxMTAvBgNV BAMTKDM4NEE4NkE2NzQ3OUI4RDVGQzNGN0Y3RjFEMkRFRTFGQ0IwNERGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbuLwQ1tJUWc7yKx8/I2HLhxZI fj7BVe0FMQ+i9jwl/bTdLMWNqX3UBHTbgjXfveLZmXNDdTPGmdq7nknHp+FGYaZ5 6YF+3wdfTdd7/qiblJQCAg0b21Fy9ghc7PJAhUzyrF/4ynm8g8aLFRjTlWp/ryN1 +lFVABUPs3dcj/BINtkHmFrSGC/7E38e+1ZqU+ZKOclxKCu+KeQ50HvyFrKOW8WK dWNetJ6ECoY8LVgWKjeNLqJBWr69UUKv48k/zh9Pa9OPn2t19Z1U2SPcp5kKTfYv 01FtMwV2sbPhPl51qm/c10ZoMhn2bsP6Re0CJUWtsffaszQedPRHy+BVCLVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOEqGpnR5uNX8P39/HS3uH8sE34UwHwYDVR0j BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF QjQ1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0 QTJERDhFQjQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+rnyjMnFJl1+i7SacJ0Nu9MlWN0fv6g8iC FPo38bA9Gi0bRUXdLQ+2zNyPUSbXS2i0AwccNrWVNFpZRSnk7m5Y2nQeWE9v4pXI 6jnFIze90ZSnqKKsTRBgSK9O6+YGrDSXHkYMnHMjIyxOigi4H2Y9Ndp2WX/ZR89s 79soaa1Qrb+bYmxttlzmyeuTFPhl/ez7kUbpr5K4OCO9LY39ZY4xT4MCSE4ijcEB VqSc8WLi8qrLj9ydrzabVne+1R9Kt3K2xqHWZfHmpay/vik5TJnzIFQX1AIip96f vwtS3ouaqric2rvjrOYSOOnt62hW44hyul1QnnCxdcEBQajPLys= -----END CERTIFICATE-----Generated at Sat May 18 11:39:19 2024 by rpki-client on console-fra.rpki-client.org