$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft File: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft (raw, json) Hash identifier: U9limf7GXC9qibLVYcNTAUVg08rB/URMoX3b8WbWHJw= Subject key identifier: E6:F2:59:DE:36:8F:37:57:A2:06:C2:4B:73:EF:61:D9:E4:C5:E0:52 Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 Certificate issuer: /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Certificate serial: 2323C349360B487E42D0FDD1B125A07DED44CEE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft Manifest number: 0431 Signing time: Sat 18 May 2024 12:01:07 +0000 Manifest this update: Sat 18 May 2024 11:56:07 +0000 Manifest next update: Tue 21 May 2024 22:40:07 +0000 Files and hashes: 1: 3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl (hash: j1Q1Q+x8bgqnO5MGR23teEyCSu54wCOxPNTcWGRcuDc=) 2: 3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (hash: sGfAJTHu/ofiRg1sesSjoK2jNOkCxLaCnUqi38w/yBk=) 3: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (hash: 34BvxPyaFuhgbSVnyk20wGUlcHgXfBXV5OB/eN6wufI=) 4: 3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (hash: X/RuB1v3SR8yYoBomP6cZAp2AVDBopHjnU89QLVvHJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:23:c3:49:36:0b:48:7e:42:d0:fd:d1:b1:25:a0:7d:ed:44:ce:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28 Validity Not Before: May 18 11:56:07 2024 GMT Not After : May 21 22:40:07 2024 GMT Subject: CN=E6F259DE368F3757A206C24B73EF61D9E4C5E052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ec:98:f9:0b:85:54:f6:52:47:46:93:55:5b: 24:f2:13:11:28:48:ea:2f:9e:a2:7f:35:19:3f:f3: 90:1a:30:ec:1e:73:97:ee:ea:32:7c:c0:37:3b:23: 41:73:32:46:18:7b:05:1b:55:00:2a:31:0c:11:bf: 73:46:dc:c2:4d:a3:a4:25:df:67:d1:0e:3c:30:1f: d4:20:1a:7c:5a:4e:d6:f7:8b:6f:b6:d2:b4:54:9f: 2e:b3:4d:bc:e3:a3:44:94:92:e6:5e:b7:88:7c:0e: d0:f7:40:91:a7:1d:02:07:32:0f:62:fc:20:d6:ba: 38:f6:b2:79:ec:4d:c4:89:cc:3c:d0:72:c5:6c:46: ed:3b:31:c8:ca:6d:ef:4a:c4:6f:a7:d0:81:3f:85: e8:09:67:d5:b1:02:7e:66:7d:fc:82:59:f6:cb:59: ae:d5:2e:54:9d:58:2f:c6:bc:9f:95:9d:93:a3:d9: cc:cd:4b:33:5c:95:43:e9:79:8b:bf:ae:8e:24:f2: 3e:bb:91:2c:b3:a1:d7:4a:71:16:0b:07:4f:45:95: 56:be:d2:97:2e:03:8c:a9:36:1f:db:ed:2e:81:29: 50:dc:98:58:2d:4f:b7:19:0b:c4:18:06:7f:f1:0f: 9f:2a:a2:e1:41:31:83:83:3b:31:8d:51:f5:a3:37: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F2:59:DE:36:8F:37:57:A2:06:C2:4B:73:EF:61:D9:E4:C5:E0:52 X509v3 Authority Key Identifier: keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ec:c8:17:02:6b:9b:44:de:d3:91:60:06:42:16:66:1c:45: 05:9d:54:ed:19:c0:e7:72:54:5a:d9:b1:c7:54:00:8e:f2:c2: 5d:50:ee:e9:48:bc:47:3a:30:47:68:f3:35:7a:c0:67:39:8a: d3:a6:f5:65:e0:81:04:7f:9f:d7:cc:4e:f8:93:8e:d2:d9:a5: 65:a4:c2:84:be:c2:03:13:8c:7d:eb:5b:12:e1:1a:bb:fb:80: 7c:49:25:67:fb:e4:38:83:54:5e:9b:fd:57:95:82:d0:f4:4b: 3d:0a:90:f6:61:e0:e5:c4:dd:c7:34:b1:38:58:bb:b7:d7:a5: 24:a1:0c:3a:1b:49:32:e7:87:f3:49:53:5a:70:2b:81:26:a3: 30:3b:5e:4a:45:5c:65:f7:7c:d4:49:93:bc:30:8c:58:cc:a4: d9:8a:01:31:94:84:76:63:5a:b6:f2:60:60:6a:9a:c9:02:e7: ee:c1:12:27:c6:ac:1c:2e:54:1a:ab:cd:c0:4d:b4:1c:73:c1: a0:fc:78:5b:46:fd:45:4b:62:79:5e:5a:c4:69:37:18:3a:87: 75:a8:e6:a2:b9:0b:16:e6:d8:24:5b:80:35:33:db:5c:95:c2: 30:57:a7:4d:90:30:d9:e1:33:93:8d:48:c3:ae:b9:be:f9:9a: 94:5f:dc:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyPDSTYLSH5C0P3RsSWgfe1EzuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENC NUFEQkQyODAeFw0yNDA1MTgxMTU2MDdaFw0yNDA1MjEyMjQwMDdaMDMxMTAvBgNV BAMTKEU2RjI1OURFMzY4RjM3NTdBMjA2QzI0QjczRUY2MUQ5RTRDNUUwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ7Jj5C4VU9lJHRpNVWyTyExEo SOovnqJ/NRk/85AaMOwec5fu6jJ8wDc7I0FzMkYYewUbVQAqMQwRv3NG3MJNo6Ql 32fRDjwwH9QgGnxaTtb3i2+20rRUny6zTbzjo0SUkuZet4h8DtD3QJGnHQIHMg9i /CDWujj2snnsTcSJzDzQcsVsRu07McjKbe9KxG+n0IE/hegJZ9WxAn5mffyCWfbL Wa7VLlSdWC/GvJ+VnZOj2czNSzNclUPpeYu/ro4k8j67kSyzoddKcRYLB09FlVa+ 0pcuA4ypNh/b7S6BKVDcmFgtT7cZC8QYBn/xD58qouFBMYODOzGNUfWjN+A3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vJZ3jaPN1eiBsJLc+9h2eTF4FIwHwYDVR0j BBgwFoAUNWa2zwDXsLZz+LUmxWrr3LWtvSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2I4YWU5Ny02ODE4LTQ4YTktYWJlNC1lZGI5NjA0OWYzYzgvMC8zNTY2QjZDRjAw RDdCMEI2NzNGOEI1MjZDNTZBRUJEQ0I1QURCRDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVCRENCNUFE QkQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNiOGFlOTctNjgxOC00OGE5LWFi ZTQtZWRiOTYwNDlmM2M4LzAvMzU2NkI2Q0YwMEQ3QjBCNjczRjhCNTI2QzU2QUVC RENCNUFEQkQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzsyBcCa5tE3tORYAZCFmYcRQWdVO0ZwOdy VFrZscdUAI7ywl1Q7ulIvEc6MEdo8zV6wGc5itOm9WXggQR/n9fMTviTjtLZpWWk woS+wgMTjH3rWxLhGrv7gHxJJWf75DiDVF6b/VeVgtD0Sz0KkPZh4OXE3cc0sThY u7fXpSShDDobSTLnh/NJU1pwK4EmozA7XkpFXGX3fNRJk7wwjFjMpNmKATGUhHZj WrbyYGBqmskC5+7BEifGrBwuVBqrzcBNtBxzwaD8eFtG/UVLYnleWsRpNxg6h3Wo 5qK5Cxbm2CRbgDUz21yVwjBXp02QMNnhM5ONSMOuub75mpRf3EE= -----END CERTIFICATE-----Generated at Sat May 18 12:39:50 2024 by rpki-client on console-ams.rpki-client.org