$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft File: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft (raw, json) Hash identifier: Oet/1N2+Z6bcFnco3t1JfF1foGZuNDMwxXD9LOGyrNk= Subject key identifier: D1:28:41:0F:25:55:B8:46:76:90:3B:87:38:F1:AC:29:69:1D:16:92 Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 Certificate issuer: /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Certificate serial: 542E1760540F64E061A87A496C2F386C9F16B939 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft Manifest number: 0486 Signing time: Mon 25 Nov 2024 03:21:20 +0000 Manifest this update: Mon 25 Nov 2024 03:16:20 +0000 Manifest next update: Thu 28 Nov 2024 10:38:20 +0000 Files and hashes: 1: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl (hash: /bQA+r56XPkgtRaTLwQtPInGXhbgXIDrpUQKQnYsLMw=) 2: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: Nis2CwI3ez8v1WSHl89eT2Oh6FaKWW6bg0hXnRqd+og=) 3: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: cGLu2UMdrJRPRQG7pt7UtR/38tRpV8ciHNgw5Tldj8w=) 4: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: 5aELkp52c47kJfpzS6eF8UEMP56gj1U8I8vH3s1IURw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2e:17:60:54:0f:64:e0:61:a8:7a:49:6c:2f:38:6c:9f:16:b9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Validity Not Before: Nov 25 03:16:20 2024 GMT Not After : Nov 28 10:38:20 2024 GMT Subject: CN=D128410F2555B84676903B8738F1AC29691D1692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:0a:a7:de:14:d6:48:f2:56:37:0f:d3:49: af:63:ea:a0:a2:4f:c6:af:67:09:18:fe:3b:89:1d: 61:01:8d:d7:ed:c8:7e:2c:75:69:ec:f3:49:ea:64: 8f:b9:6c:36:34:2b:db:7e:c4:cd:41:b3:3b:23:c9: 31:4e:70:1c:11:20:bb:ed:b6:c3:f6:4a:03:ea:42: ec:2a:fd:e0:8a:d0:cd:cf:d5:d7:6f:15:d0:74:5d: ca:7d:2d:e0:45:19:87:d5:14:59:ee:b6:52:4c:02: 8c:b2:46:39:98:67:f2:b9:73:c4:cd:b2:5f:01:9f: 32:39:a7:b3:56:3e:05:99:bf:52:53:a0:6b:ad:ec: c5:e2:1e:25:2f:c5:5b:a3:5b:3a:f0:2b:bd:c0:c0: 04:94:b8:fd:8a:1a:77:90:69:03:c4:47:a7:e5:0d: c2:d7:53:27:0f:45:f1:09:45:da:b2:b8:d2:33:02: 9d:bb:e1:b1:f3:a4:1f:6e:a3:e8:f6:e3:33:f7:81: 1a:f4:42:a1:6d:07:f5:c8:c4:13:29:f8:ef:a0:c3: 0d:3f:c0:e1:15:68:d0:bc:6e:36:74:9a:c9:c6:29: d3:74:8b:71:89:61:57:86:51:27:24:8b:db:5c:1a: a4:cf:93:33:3e:14:90:a5:57:3d:c0:39:0e:d4:2b: d1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:28:41:0F:25:55:B8:46:76:90:3B:87:38:F1:AC:29:69:1D:16:92 X509v3 Authority Key Identifier: keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:27:24:aa:b5:a3:6a:20:72:fb:03:48:f5:de:fe:bf:c0:10: b2:41:2c:5c:c4:be:79:db:0d:ee:f0:6c:1b:87:27:ea:99:c7: 05:bc:5c:49:c1:ef:59:21:3a:ed:41:17:4a:15:9b:9b:6b:75: 78:01:47:ac:c6:93:f4:62:7a:af:49:c9:4b:7f:b6:14:76:c4: f8:af:f3:19:f1:21:27:e9:40:a6:72:1d:b3:b2:5b:54:34:f6: 09:ab:74:e3:86:c2:7b:07:88:79:df:b0:19:3d:0f:85:4b:3a: 15:6a:3c:51:16:98:58:6f:27:7c:c2:7a:65:e0:4e:4f:4e:8b: 56:c1:88:66:83:0b:7b:e2:1d:40:4a:96:c0:e9:0c:18:55:29: 07:04:9e:11:d0:f9:9c:54:14:36:28:2a:51:c4:db:fc:ab:c6: e6:54:4f:4f:68:c0:51:c2:eb:82:65:28:b1:69:b9:9a:89:97: ad:34:96:5d:a3:cc:02:8b:04:d7:2c:b9:40:97:3a:2e:07:0f: ad:c3:6b:32:e8:ac:0e:11:27:66:6e:3a:d9:fd:0c:a5:ba:22: 8d:67:05:1c:b1:f9:e3:98:25:ab:3f:60:86:d9:8e:5b:da:37: 7a:05:68:39:f5:25:24:e1:f7:78:0b:27:b4:3d:fa:9b:0b:30: ad:bc:c5:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVC4XYFQPZOBhqHpJbC84bJ8WuTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENC NUFEQkQyODAeFw0yNDExMjUwMzE2MjBaFw0yNDExMjgxMDM4MjBaMDMxMTAvBgNV BAMTKEQxMjg0MTBGMjU1NUI4NDY3NjkwM0I4NzM4RjFBQzI5NjkxRDE2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UQqn3hTWSPJWNw/TSa9j6qCi T8avZwkY/juJHWEBjdftyH4sdWns80nqZI+5bDY0K9t+xM1BszsjyTFOcBwRILvt tsP2SgPqQuwq/eCK0M3P1ddvFdB0Xcp9LeBFGYfVFFnutlJMAoyyRjmYZ/K5c8TN sl8BnzI5p7NWPgWZv1JToGut7MXiHiUvxVujWzrwK73AwASUuP2KGneQaQPER6fl DcLXUycPRfEJRdqyuNIzAp274bHzpB9uo+j24zP3gRr0QqFtB/XIxBMp+O+gww0/ wOEVaNC8bjZ0msnGKdN0i3GJYVeGUScki9tcGqTPkzM+FJClVz3AOQ7UK9FnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ShBDyVVuEZ2kDuHOPGsKWkdFpIwHwYDVR0j BBgwFoAUNWa2zwDXsLZz+LUmxWrr3LWtvSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2I4YWU5Ny02ODE4LTQ4YTktYWJlNC1lZGI5NjA0OWYzYzgvMC8zNTY2QjZDRjAw RDdCMEI2NzNGOEI1MjZDNTZBRUJEQ0I1QURCRDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENCNUFE QkQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVC RENCNUFEQkQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOAnJKq1o2ogcvsDSPXe/r/AELJBLFzEvnnb De7wbBuHJ+qZxwW8XEnB71khOu1BF0oVm5trdXgBR6zGk/Rieq9JyUt/thR2xPiv 8xnxISfpQKZyHbOyW1Q09gmrdOOGwnsHiHnfsBk9D4VLOhVqPFEWmFhvJ3zCemXg Tk9Oi1bBiGaDC3viHUBKlsDpDBhVKQcEnhHQ+ZxUFDYoKlHE2/yrxuZUT09owFHC 64JlKLFpuZqJl600ll2jzAKLBNcsuUCXOi4HD63DazLorA4RJ2ZuOtn9DKW6Io1n BRyx+eOYJas/YIbZjlvaN3oFaDn1JSTh93gLJ7Q9+psLMK28xes= -----END CERTIFICATE-----Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org