$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: PpfWhvK1XAuzLZ7nPejYfQwLbiBZ7FeSjF8ZQSrY2Gc= Subject key identifier: D4:33:5C:6F:37:0E:61:4D:E0:D6:1A:E8:9E:43:48:33:B8:9A:3E:4F Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 5C1EA14FA803951F7E90548AEB67957B631787EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 01F7 Signing time: Fri 22 Nov 2024 22:31:56 +0000 Manifest this update: Fri 22 Nov 2024 22:26:56 +0000 Manifest next update: Tue 26 Nov 2024 03:37:56 +0000 Files and hashes: 1: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: EjLbvK2oqsTiRiGKlwtAoPHkP9Nb3ROZTOdi9nsAuyU=) 2: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: biBc3b6GGx2dUj7YnQWOhcGsodIKTbyhZn9FTYFEG1E=) 3: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 03:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1e:a1:4f:a8:03:95:1f:7e:90:54:8a:eb:67:95:7b:63:17:87:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Nov 22 22:26:56 2024 GMT Not After : Nov 26 03:37:56 2024 GMT Subject: CN=D4335C6F370E614DE0D61AE89E434833B89A3E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:d9:27:81:1b:81:1a:35:6c:d8:e7:5b:76: 17:69:c9:80:b4:6d:ef:7d:16:c5:60:f1:a8:2a:e0: bf:ae:88:63:86:d6:e4:bd:0d:ad:61:6b:94:eb:cf: 6b:49:1a:05:55:95:11:0b:cf:73:d8:ad:a0:09:75: cb:a4:05:0f:ad:52:8c:20:eb:b3:ad:d2:10:20:70: a9:16:a8:81:83:0e:33:8c:7c:d7:31:7f:5d:f7:62: f8:e8:c4:10:43:d4:e3:69:39:8f:a1:38:64:84:48: 3b:8a:2d:e5:49:a1:77:c3:b0:ce:b5:29:75:a6:77: 93:13:70:43:4b:44:4e:35:2b:a6:37:a9:ef:91:96: d4:14:eb:46:55:d4:80:3d:ab:e9:96:77:73:a7:21: 0b:1d:ad:5c:b6:3b:76:59:2d:74:d0:a2:cf:96:79: 14:cd:cf:51:32:6a:0f:3e:14:5a:8f:4c:67:86:d0: eb:f0:37:5f:ce:75:24:1a:ba:46:dd:d2:99:da:99: fa:1b:de:89:5a:cf:94:69:c5:ae:a6:e3:a2:87:51: a4:31:06:41:e4:45:4b:1e:d7:9a:5c:0b:c7:89:8d: 4b:40:d6:5a:73:e4:56:26:48:04:5a:66:c0:db:b5: 1b:61:a0:77:71:6d:dc:5f:81:5f:2b:a6:e8:15:15: 8f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:33:5C:6F:37:0E:61:4D:E0:D6:1A:E8:9E:43:48:33:B8:9A:3E:4F X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:8f:f0:e0:ac:52:b0:0b:7f:39:b9:d7:30:ec:5e:1e:eb:f6: 5e:4d:4b:e0:a1:48:19:db:0a:db:2d:ea:8d:cb:6b:f1:5b:92: 46:17:58:7e:95:20:c7:61:d4:8a:0b:f7:79:cf:c6:e2:0b:14: d6:a4:51:41:12:1f:6c:71:07:01:54:23:60:c5:0c:67:80:b2: c6:51:14:66:4a:f7:aa:cb:41:cf:8d:a1:a5:8b:77:17:49:5d: 48:6f:fd:09:d3:32:8b:f4:b3:e4:b5:db:e1:0a:d8:1d:d0:68: f6:a0:51:7e:42:f2:cd:c1:8f:dc:ce:ff:5d:ff:d5:ca:26:57: 37:0f:d0:f7:37:12:fd:80:9c:5f:fe:0f:fd:73:66:45:0f:ae: f8:46:9d:cf:1d:03:05:89:f3:0b:26:28:bf:1a:cb:6b:b2:b8: 2f:e2:8c:84:99:21:0e:eb:38:b8:0d:74:3a:4f:70:86:80:e6: 97:f2:27:24:66:03:de:1e:01:72:c9:4c:f9:44:1b:d1:c1:e0: 31:1d:55:b1:44:fd:62:3d:d6:f6:10:0f:36:b3:7d:ed:32:8b: 32:a8:4f:11:22:8c:a8:0e:ac:94:af:6e:75:cb:e6:57:21:89: 57:8a:d0:bf:4f:98:25:94:b9:18:90:97:04:46:e6:03:b0:4d: c1:80:8d:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXB6hT6gDlR9+kFSK62eVe2MXh+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNDExMjIyMjI2NTZaFw0yNDExMjYwMzM3NTZaMDMxMTAvBgNV BAMTKEQ0MzM1QzZGMzcwRTYxNERFMEQ2MUFFODlFNDM0ODMzQjg5QTNFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9NkngRuBGjVs2OdbdhdpyYC0 be99FsVg8agq4L+uiGOG1uS9Da1ha5Trz2tJGgVVlRELz3PYraAJdcukBQ+tUowg 67Ot0hAgcKkWqIGDDjOMfNcxf133YvjoxBBD1ONpOY+hOGSESDuKLeVJoXfDsM61 KXWmd5MTcENLRE41K6Y3qe+RltQU60ZV1IA9q+mWd3OnIQsdrVy2O3ZZLXTQos+W eRTNz1Eyag8+FFqPTGeG0OvwN1/OdSQaukbd0pnamfob3olaz5Rpxa6m46KHUaQx BkHkRUse15pcC8eJjUtA1lpz5FYmSARaZsDbtRthoHdxbdxfgV8rpugVFY/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1DNcbzcOYU3g1hronkNIM7iaPk8wHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSP8OCsUrALfzm51zDsXh7r9l5NS+ChSBnb Ctst6o3La/FbkkYXWH6VIMdh1IoL93nPxuILFNakUUESH2xxBwFUI2DFDGeAssZR FGZK96rLQc+NoaWLdxdJXUhv/QnTMov0s+S12+EK2B3QaPagUX5C8s3Bj9zO/13/ 1comVzcP0Pc3Ev2AnF/+D/1zZkUPrvhGnc8dAwWJ8wsmKL8ay2uyuC/ijISZIQ7r OLgNdDpPcIaA5pfyJyRmA94eAXLJTPlEG9HB4DEdVbFE/WI91vYQDzazfe0yizKo TxEijKgOrJSvbnXL5lchiVeK0L9PmCWUuRiQlwRG5gOwTcGAjRw= -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:18 2024 by rpki-client on console-ams.rpki-client.org