$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: TkYDmSckLymK0zrakxPwhSz4iXMQnHorul51PhqvyGc= Subject key identifier: 73:4F:7D:8A:30:F0:42:9C:F5:55:E4:21:4B:A0:3E:D7:8D:18:E0:BF Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 7404BD75BD3A28D20AD42B080D01DC178A4B13C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 01A6 Signing time: Mon 27 May 2024 08:11:41 +0000 Manifest this update: Mon 27 May 2024 08:06:41 +0000 Manifest next update: Thu 30 May 2024 10:06:41 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: iczaw2AvnGkNMMa/9c9aKJ+83W5DU61XDhEPQ8T0k0Q=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: Jg4pz3Hkw6f7QYdJvGC5dnSRK8+NePilRXf9XklU4Yk=) 3: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: dO9Qt1e++uJajxNIvs6k6S7nW9716qll9dPa05mfFVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 10:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:04:bd:75:bd:3a:28:d2:0a:d4:2b:08:0d:01:dc:17:8a:4b:13:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: May 27 08:06:41 2024 GMT Not After : May 30 10:06:41 2024 GMT Subject: CN=734F7D8A30F0429CF555E4214BA03ED78D18E0BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ff:85:0c:d4:58:ec:69:2d:92:7c:23:cf:36: 5e:ff:62:65:2a:82:49:e9:65:fc:ea:8c:31:b6:cb: 1d:e8:b0:df:5c:25:1f:3d:bf:97:a4:26:ff:83:18: 46:ea:91:65:c6:79:72:ee:96:2b:b9:7d:4c:b1:bb: 6b:8c:c1:4a:65:a4:0f:da:66:95:ba:2b:1e:82:cb: ba:ce:92:48:4d:3a:b5:e6:d5:cd:0e:41:a3:6d:23: 6c:1e:81:96:67:f9:64:24:75:78:21:ca:15:f5:a6: 87:b3:d9:ea:09:28:a8:b8:91:64:12:87:ff:1b:19: 6f:6e:02:52:ee:24:ac:5b:cc:15:d6:63:54:12:2e: b7:c0:c6:a4:a4:73:7a:85:83:af:33:ab:f7:14:0a: 20:9a:a7:28:1f:7f:ce:3b:27:c9:7b:af:7f:fc:eb: 13:83:77:9d:00:58:43:27:71:4b:6b:ed:dc:85:78: 97:74:f3:e7:fd:2c:d4:7b:60:4f:59:f4:39:43:18: 39:79:39:28:65:c6:28:13:1b:f6:05:dc:48:9e:af: 40:a3:e2:14:42:75:e5:f0:f1:3d:1e:a9:9a:9f:3b: 81:93:1f:d4:0c:f3:af:58:16:ff:17:df:5a:d9:39: ba:01:07:cc:ca:4a:20:35:5d:9f:83:ff:65:36:8e: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4F:7D:8A:30:F0:42:9C:F5:55:E4:21:4B:A0:3E:D7:8D:18:E0:BF X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:dc:0e:23:9f:cb:8c:a0:76:e6:70:7c:cb:e0:5a:29:2a:2e: e1:71:41:ea:c1:e8:08:6f:fb:75:86:39:b6:16:c8:94:84:65: e6:1c:b6:bc:ee:a7:d4:33:33:b5:2e:48:74:13:f5:dc:aa:aa: 13:93:02:9c:91:1e:77:05:94:ec:03:c4:ac:aa:a8:ed:60:76: e5:ec:a5:13:bd:da:85:c8:c9:b3:b4:e0:39:00:c2:d0:d0:9a: e9:69:f9:c3:46:69:fe:73:08:98:9c:e9:fa:d2:a6:c8:2d:a4: 76:4f:a0:eb:d2:13:02:d4:5f:57:f8:41:46:db:1c:08:72:f0: 62:b6:3c:5a:fd:9b:10:99:d9:72:bc:83:12:d2:f7:ef:b2:b7: 8f:f6:95:f9:79:1e:6a:9d:a7:d2:e6:dd:3d:07:3f:31:79:50: 4c:b4:76:a2:5f:11:77:aa:b2:3f:3f:28:07:24:67:aa:83:42: b8:ea:90:e1:a6:b1:7f:4c:04:8f:59:34:2b:b5:61:f4:cd:03: f5:96:0b:06:72:ca:84:67:52:b8:db:b3:87:dc:89:c6:ef:39: a1:6b:f7:44:96:30:65:97:35:64:94:b5:21:7b:73:b5:c7:ab: 2a:dc:17:39:6a:01:ac:46:df:46:06:c6:70:90:47:df:fc:53: a9:36:9d:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdAS9db06KNIK1CsIDQHcF4pLE8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNDA1MjcwODA2NDFaFw0yNDA1MzAxMDA2NDFaMDMxMTAvBgNV BAMTKDczNEY3RDhBMzBGMDQyOUNGNTU1RTQyMTRCQTAzRUQ3OEQxOEUwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/4UM1FjsaS2SfCPPNl7/YmUq gknpZfzqjDG2yx3osN9cJR89v5ekJv+DGEbqkWXGeXLuliu5fUyxu2uMwUplpA/a ZpW6Kx6Cy7rOkkhNOrXm1c0OQaNtI2wegZZn+WQkdXghyhX1poez2eoJKKi4kWQS h/8bGW9uAlLuJKxbzBXWY1QSLrfAxqSkc3qFg68zq/cUCiCapygff847J8l7r3/8 6xODd50AWEMncUtr7dyFeJd08+f9LNR7YE9Z9DlDGDl5OShlxigTG/YF3Eier0Cj 4hRCdeXw8T0eqZqfO4GTH9QM869YFv8X31rZOboBB8zKSiA1XZ+D/2U2jmSbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc099ijDwQpz1VeQhS6A+140Y4L8wHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbcDiOfy4ygduZwfMvgWikqLuFxQerB6Ahv +3WGObYWyJSEZeYctrzup9QzM7UuSHQT9dyqqhOTApyRHncFlOwDxKyqqO1gduXs pRO92oXIybO04DkAwtDQmulp+cNGaf5zCJic6frSpsgtpHZPoOvSEwLUX1f4QUbb HAhy8GK2PFr9mxCZ2XK8gxLS9++yt4/2lfl5Hmqdp9Lm3T0HPzF5UEy0dqJfEXeq sj8/KAckZ6qDQrjqkOGmsX9MBI9ZNCu1YfTNA/WWCwZyyoRnUrjbs4fcicbvOaFr 90SWMGWXNWSUtSF7c7XHqyrcFzlqAaxG30YGxnCQR9/8U6k2nQg= -----END CERTIFICATE-----Generated at Mon May 27 10:24:26 2024 by rpki-client on console-fra.rpki-client.org