$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: uqIhDZJX2yHxxY3aVgm1zz1SKZVSg3yLPGG3E3wlRu4= Subject key identifier: 9E:1D:C6:D7:12:78:98:79:8F:92:82:3C:AD:71:14:1A:19:B5:D2:C3 Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 59EE49C7216BD16D88BC88E48353D0B847EA95BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: AD Signing time: Sun 19 May 2024 09:32:01 +0000 Manifest this update: Sun 19 May 2024 09:27:01 +0000 Manifest next update: Wed 22 May 2024 13:56:01 +0000 Files and hashes: 1: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: 3VNyV+xggxa7xMMWy16vGpUaFxQO4lL/tc83QDohu80=) 2: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: QFOSPaOYUcm/PJ8znImzZ2pOLfkEVWlNfOdnWzAd1hQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ee:49:c7:21:6b:d1:6d:88:bc:88:e4:83:53:d0:b8:47:ea:95:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: May 19 09:27:01 2024 GMT Not After : May 22 13:56:01 2024 GMT Subject: CN=9E1DC6D7127898798F92823CAD71141A19B5D2C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0a:3f:d2:a5:27:73:8c:9d:b1:56:97:1e:9e: ee:0a:89:96:af:7d:b1:56:2d:f8:8a:f4:72:ee:29: 24:22:48:43:1b:8b:d8:80:c0:ab:c2:b5:9d:a4:20: be:05:cd:5b:00:8e:96:c9:02:df:9b:7a:e6:cb:69: b6:e0:9b:68:1e:d4:87:eb:83:34:53:c3:1f:2e:1f: 97:38:18:ad:d4:22:e7:37:f4:11:bc:39:c4:6d:31: 68:03:50:82:cb:53:16:48:2c:dd:59:6e:7e:17:34: a6:c5:bf:99:a1:a2:18:e9:99:d2:7e:24:95:7c:7c: f3:54:1c:47:78:68:6b:27:a7:68:aa:17:01:11:60: 81:87:3a:cc:e1:a6:bd:c1:4a:e2:ff:1b:5e:86:a7: 2b:b9:b1:5c:c9:ee:5e:f3:69:57:d6:a7:61:6b:0f: a9:4a:87:4a:5b:10:27:47:7a:7f:26:32:bd:88:16: 9f:8f:f8:dc:df:3d:d3:b0:2a:dd:8f:c6:fc:5d:32: 65:f2:e3:3f:5a:74:46:27:95:8d:dd:23:bb:d2:14: ee:7b:c6:83:cc:62:c1:66:17:98:ed:00:0c:f7:60: 75:7b:11:df:40:4e:0a:16:6d:f8:a4:81:4f:a2:73: bd:06:ad:c2:b3:11:c4:20:4a:81:86:13:7f:55:97: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1D:C6:D7:12:78:98:79:8F:92:82:3C:AD:71:14:1A:19:B5:D2:C3 X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:75:63:5d:b8:35:0a:a7:a5:c5:72:26:e5:f2:3a:e3:90:a1: 2c:0a:cb:df:a4:65:bc:4d:43:59:81:11:aa:90:99:43:fa:09: f1:eb:6b:8a:01:5e:c9:cd:b3:c5:c9:9c:e5:29:90:2d:09:1c: 99:37:52:95:e5:c6:64:b8:56:26:e9:40:fe:6b:a9:98:42:92: 03:30:3f:e5:f4:1d:5f:7c:31:bc:b3:56:5a:75:7c:36:05:3f: e2:dd:26:45:4b:e3:bd:99:c2:6c:1a:b6:01:f5:d2:89:34:88: 19:98:6d:8c:6a:b4:49:2a:d3:80:46:b6:c1:7d:4d:a7:76:8f: f8:45:17:70:75:81:b6:50:b7:68:95:12:85:c1:d5:ed:ce:2f: d8:3d:4b:2c:ad:30:25:a4:e0:8b:09:6f:fa:3b:b9:77:ff:cd: d5:a6:66:10:19:7a:5b:f6:23:ef:34:f4:f1:0f:6a:5f:43:81: be:7f:db:78:b8:11:97:8a:14:f2:4a:3d:44:f0:fc:99:a1:c6: 60:b0:91:cc:c4:8d:9a:79:5b:57:06:de:f1:ac:12:42:9a:77: 95:58:33:fb:63:15:e0:cd:09:c0:9e:37:da:4a:e6:82:a3:aa: 04:88:a0:67:54:8c:13:21:ac:b1:cb:93:ee:be:6f:6c:12:f1: a9:67:1d:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWe5JxyFr0W2IvIjkg1PQuEfqlb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNDA1MTkwOTI3MDFaFw0yNDA1MjIxMzU2MDFaMDMxMTAvBgNV BAMTKDlFMURDNkQ3MTI3ODk4Nzk4RjkyODIzQ0FENzExNDFBMTlCNUQyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Cj/SpSdzjJ2xVpcenu4KiZav fbFWLfiK9HLuKSQiSEMbi9iAwKvCtZ2kIL4FzVsAjpbJAt+beubLabbgm2ge1Ifr gzRTwx8uH5c4GK3UIuc39BG8OcRtMWgDUILLUxZILN1Zbn4XNKbFv5mhohjpmdJ+ JJV8fPNUHEd4aGsnp2iqFwERYIGHOszhpr3BSuL/G16Gpyu5sVzJ7l7zaVfWp2Fr D6lKh0pbECdHen8mMr2IFp+P+NzfPdOwKt2PxvxdMmXy4z9adEYnlY3dI7vSFO57 xoPMYsFmF5jtAAz3YHV7Ed9ATgoWbfikgU+ic70GrcKzEcQgSoGGE39Vl86JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnh3G1xJ4mHmPkoI8rXEUGhm10sMwHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZ1Y124NQqnpcVyJuXyOuOQoSwKy9+kZbxN Q1mBEaqQmUP6CfHra4oBXsnNs8XJnOUpkC0JHJk3UpXlxmS4VibpQP5rqZhCkgMw P+X0HV98MbyzVlp1fDYFP+LdJkVL472ZwmwatgH10ok0iBmYbYxqtEkq04BGtsF9 Tad2j/hFF3B1gbZQt2iVEoXB1e3OL9g9SyytMCWk4IsJb/o7uXf/zdWmZhAZelv2 I+809PEPal9Dgb5/23i4EZeKFPJKPUTw/JmhxmCwkczEjZp5W1cG3vGsEkKad5VY M/tjFeDNCcCeN9pK5oKjqgSIoGdUjBMhrLHLk+6+b2wS8alnHbg= -----END CERTIFICATE-----Generated at Sun May 19 10:27:50 2024 by rpki-client on console-ams.rpki-client.org