$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: 21cYIe5ETNttoJd0EkLlqbg0s5VzV7YfQalgudgdiuQ= Subject key identifier: AB:E0:D4:8B:AE:32:F3:66:10:93:3C:EF:D9:C6:18:77:F8:A5:D5:DD Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 5AB4D65AA01F71DF086D58248C54A35ECEB2080F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: 3E Signing time: Wed 26 Jun 2024 04:11:47 +0000 Manifest this update: Wed 26 Jun 2024 04:06:47 +0000 Manifest next update: Sat 29 Jun 2024 12:05:47 +0000 Files and hashes: 1: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: KkpHse8jehWDQIQxYdjk8adkeVBbk27vLpMf88JmCyY=) 2: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: fyhYqE/uIKwXTb0Eshy8RqzwGgWI03pciEXfnnS+viM=) 3: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: K5p9Xih1OJGuh8PS6s7djckYJlvXSdVIIYiad8Ueq6c=) 4: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: jvqEiRAhSBLWr+kk8qIzjzYMuPw1+LDQ4+yF8eDI1BE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Jun 2024 22:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b4:d6:5a:a0:1f:71:df:08:6d:58:24:8c:54:a3:5e:ce:b2:08:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Jun 26 04:06:47 2024 GMT Not After : Jun 29 12:05:47 2024 GMT Subject: CN=ABE0D48BAE32F36610933CEFD9C61877F8A5D5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2b:f4:1b:be:9b:0f:50:10:10:9c:c2:c7:a9: e7:32:b8:3d:d5:6b:b2:df:8d:b1:15:aa:e0:32:40: e8:fa:17:66:a6:9d:3c:a4:a6:a1:3a:03:31:14:78: 10:ca:94:63:90:ca:1f:2f:a7:f6:ab:d8:72:15:d8: 05:8c:26:8e:51:a8:a9:55:38:58:bc:3d:65:a0:86: f4:e0:57:ae:f9:be:59:3c:65:82:c9:e1:99:d2:6c: c5:4d:29:4b:fe:ab:45:2c:9e:d4:18:b5:17:fd:c2: 2d:9d:a4:72:09:13:68:34:97:f2:0e:0a:7c:d6:67: e1:9e:f1:a5:76:80:96:01:de:95:87:8f:ea:3c:2a: 34:a0:84:64:7c:37:1e:2c:55:49:c0:ed:5f:f6:24: 33:85:97:df:f8:68:8f:1e:5d:1b:8b:f8:f4:82:da: 4d:57:ca:d4:33:b0:23:6b:d1:f5:74:e4:93:0d:94: 70:35:25:24:c9:90:99:32:40:b1:c5:91:5d:15:6f: e9:a9:88:23:d1:8e:92:85:8c:76:a1:c9:3a:40:81: 14:04:f8:06:b4:e1:ae:30:1c:e8:93:f7:90:0f:31: 8b:a9:50:c5:b6:fb:9f:80:e0:d9:c7:d8:3e:5c:0e: dc:9d:83:0b:e0:21:50:7b:a6:88:ee:e7:e8:36:4c: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E0:D4:8B:AE:32:F3:66:10:93:3C:EF:D9:C6:18:77:F8:A5:D5:DD X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0e:6c:50:77:8f:76:54:f5:15:e2:18:22:e6:ed:a0:63:b9: 15:76:81:38:bb:4b:57:a1:d3:80:cb:5b:65:77:60:84:01:77: 5c:9e:37:5c:95:04:a7:52:93:74:70:94:c1:68:dd:f2:f4:27: 8b:43:a0:b2:2d:10:8e:51:fb:90:76:8b:f9:6a:27:7d:08:8e: 43:d5:7b:90:47:26:f3:42:23:56:73:14:7d:bb:1b:cf:d3:2c: 27:d1:44:41:e0:32:fe:b8:e9:d6:b6:25:7b:35:14:43:e0:e3: 5f:53:ca:c1:07:59:33:6f:05:a1:99:1b:26:6f:50:d3:c8:58: fe:11:b6:e2:e6:5f:b7:40:0c:d8:81:d4:38:9e:db:01:ac:20: af:d8:72:2b:1d:b5:b2:2b:db:b1:cb:94:45:b5:cc:b8:dd:ff: 3e:6c:14:37:59:4a:f5:e8:e2:c3:06:9b:01:d2:b7:81:a3:9e: 5a:b5:8e:ef:b8:6e:40:66:9c:5a:cb:2a:8d:51:d3:31:22:8d: a9:c0:9b:94:90:4b:13:98:c4:0f:7a:70:1f:eb:f6:db:ae:a4: 63:ad:71:f4:ff:e5:eb:15:e0:b0:22:f4:ce:17:d2:be:6f:42: 5f:ce:5a:9e:15:3c:51:32:c8:c9:4a:51:67:11:21:15:32:29: d7:dd:f0:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrTWWqAfcd8IbVgkjFSjXs6yCA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNDA2MjYwNDA2NDdaFw0yNDA2MjkxMjA1NDdaMDMxMTAvBgNV BAMTKEFCRTBENDhCQUUzMkYzNjYxMDkzM0NFRkQ5QzYxODc3RjhBNUQ1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmK/QbvpsPUBAQnMLHqecyuD3V a7LfjbEVquAyQOj6F2amnTykpqE6AzEUeBDKlGOQyh8vp/ar2HIV2AWMJo5RqKlV OFi8PWWghvTgV675vlk8ZYLJ4ZnSbMVNKUv+q0UsntQYtRf9wi2dpHIJE2g0l/IO CnzWZ+Ge8aV2gJYB3pWHj+o8KjSghGR8Nx4sVUnA7V/2JDOFl9/4aI8eXRuL+PSC 2k1XytQzsCNr0fV05JMNlHA1JSTJkJkyQLHFkV0Vb+mpiCPRjpKFjHahyTpAgRQE +Aa04a4wHOiT95APMYupUMW2+5+A4NnH2D5cDtydgwvgIVB7poju5+g2TJoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq+DUi64y82YQkzzv2cYYd/il1d0wHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4ObFB3j3ZU9RXiGCLm7aBjuRV2gTi7S1eh 04DLW2V3YIQBd1yeN1yVBKdSk3RwlMFo3fL0J4tDoLItEI5R+5B2i/lqJ30IjkPV e5BHJvNCI1ZzFH27G8/TLCfRREHgMv646da2JXs1FEPg419TysEHWTNvBaGZGyZv UNPIWP4RtuLmX7dADNiB1Die2wGsIK/YcisdtbIr27HLlEW1zLjd/z5sFDdZSvXo 4sMGmwHSt4Gjnlq1ju+4bkBmnFrLKo1R0zEijanAm5SQSxOYxA96cB/r9tuupGOt cfT/5esV4LAi9M4X0r5vQl/OWp4VPFEyyMlKUWcRIRUyKdfd8NA= -----END CERTIFICATE-----Generated at Wed Jun 26 08:11:19 2024 by rpki-client on console-ams.rpki-client.org