$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft File: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft (raw, json) Hash identifier: TNtJRq7dxxMei8xicIhyHiCZe9u3GO8rX9p3SaZQaws= Subject key identifier: 48:26:CD:55:73:76:61:C8:5F:6C:B5:BD:7E:EA:89:46:D2:6D:B7:7D Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Certificate serial: 485ACEAE925B3BBB36FE40D4B8B11078271E6531 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft Manifest number: 02D1 Signing time: Sat 23 Nov 2024 04:41:58 +0000 Manifest this update: Sat 23 Nov 2024 04:36:58 +0000 Manifest next update: Tue 26 Nov 2024 05:55:58 +0000 Files and hashes: 1: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: 4eyGQzbDfR8YSCjXgShhm8vCsUJZCrVFODEnBrRJhv8=) 2: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: 7VSc9Gcvnpfn7ZPPafV+FSx6VsyDCdcR7tm8J+oVFFo=) 3: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl (hash: EsibrBhHlVu9kvU9GZpiKf49l2659OSLI4usHNmhpLA=) 4: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: KwtUaoClH3kiNpvEIWalSEf5bxo2cymUbkAJRaf/ygM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 05:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5a:ce:ae:92:5b:3b:bb:36:fe:40:d4:b8:b1:10:78:27:1e:65:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Validity Not Before: Nov 23 04:36:58 2024 GMT Not After : Nov 26 05:55:58 2024 GMT Subject: CN=4826CD55737661C85F6CB5BD7EEA8946D26DB77D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:51:b6:db:19:b7:f8:d1:5d:88:eb:73:d6: c5:44:86:5f:66:42:58:a5:18:1e:d5:79:95:c5:f8: 7d:b4:27:03:37:0d:d0:47:35:fa:e8:ff:b5:08:07: b9:6d:6c:68:41:c4:05:91:3f:42:01:59:7e:67:49: d6:bf:be:0b:54:84:22:1c:43:5a:ac:4b:1f:95:10: 13:7c:40:4d:e6:e6:cd:19:b8:94:16:bb:33:8c:0d: 3d:4c:94:03:36:eb:de:a6:39:3b:a6:38:9a:d2:93: ef:b7:d8:7c:b7:f0:22:d0:64:4c:35:71:01:c0:3c: 1b:e8:b7:30:de:7e:6d:5e:c7:37:6f:19:ae:1e:35: 1c:fa:94:f6:c8:ec:da:01:ad:e4:6d:c0:34:39:45: d9:1d:89:16:cb:df:7b:70:11:13:51:b8:de:5e:42: 9a:27:89:95:9e:c5:21:c1:27:7f:c9:c7:3a:d9:9a: 49:74:a1:71:a9:bb:74:68:39:92:a5:a8:45:8e:c6: 3c:0b:8f:08:0d:0d:15:9c:24:28:6d:68:07:f9:a4: 9e:45:2f:f8:73:42:0b:0b:a7:0d:d2:52:a5:5a:6e: 61:da:d6:cb:0b:78:74:34:5b:c6:0e:48:2e:44:88: 58:97:d2:a4:7c:06:9a:13:a4:46:0f:ae:3e:12:7e: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:26:CD:55:73:76:61:C8:5F:6C:B5:BD:7E:EA:89:46:D2:6D:B7:7D X509v3 Authority Key Identifier: keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b5:3f:4f:92:1f:22:96:c3:07:2b:d1:5b:56:a6:0f:59:08: f9:17:18:74:fd:ab:f1:67:7f:a2:f6:d1:f5:4f:c7:0c:2f:ac: 0e:8d:56:ec:67:e5:d5:89:4d:c5:95:48:e1:cc:43:30:f5:0e: dd:b4:32:b5:a0:10:fe:d3:e0:c7:45:4f:d0:ac:57:34:af:51: 6d:39:dd:98:a2:73:77:09:2e:4c:0b:a0:b4:9c:86:e6:dd:8e: 11:b5:b8:70:f4:eb:41:e8:0d:3a:74:af:fd:5a:fc:b1:45:43: ad:3d:00:3a:ee:d2:c9:6f:bf:dc:b6:b6:fe:7d:06:8f:01:b4: b2:9a:f9:ae:70:16:1c:57:cd:73:92:32:29:9d:08:52:81:f8: 4e:9b:13:f5:ad:ae:df:33:c6:20:f9:f8:72:a6:45:86:ee:49: 6f:b6:88:f5:62:49:1f:ad:52:9e:ca:ec:ad:2f:7f:1e:69:e9: 72:c2:a1:6e:fc:e2:dc:30:cc:31:0b:ed:99:24:c4:b7:fd:38: 83:c9:27:51:f5:0d:00:ab:20:3f:8b:cc:e4:cb:1b:c6:1d:1b: ac:3d:eb:f7:16:7f:76:f2:84:d7:bf:7d:66:7f:d9:b2:a2:c4: ce:32:38:30:b1:c8:ab:a2:5b:20:c6:87:e9:8a:06:98:47:f5: 51:9a:f5:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFrOrpJbO7s2/kDUuLEQeCceZTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG NjUxQkFBQTAeFw0yNDExMjMwNDM2NThaFw0yNDExMjYwNTU1NThaMDMxMTAvBgNV BAMTKDQ4MjZDRDU1NzM3NjYxQzg1RjZDQjVCRDdFRUE4OTQ2RDI2REI3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hFG22xm3+NFdiOtz1sVEhl9m QlilGB7VeZXF+H20JwM3DdBHNfro/7UIB7ltbGhBxAWRP0IBWX5nSda/vgtUhCIc Q1qsSx+VEBN8QE3m5s0ZuJQWuzOMDT1MlAM2696mOTumOJrSk++32Hy38CLQZEw1 cQHAPBvotzDefm1exzdvGa4eNRz6lPbI7NoBreRtwDQ5RdkdiRbL33twERNRuN5e QponiZWexSHBJ3/JxzrZmkl0oXGpu3RoOZKlqEWOxjwLjwgNDRWcJChtaAf5pJ5F L/hzQgsLpw3SUqVabmHa1ssLeHQ0W8YOSC5EiFiX0qR8BpoTpEYPrj4SfqlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSCbNVXN2YchfbLW9fuqJRtJtt30wHwYDVR0j BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx QkFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM1MDVjYjMtYjU1ZS00MGU0LWFj NzktNjM2NTYwNmY0ZWY5LzAvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMz RkVGNjUxQkFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFG1P0+SHyKWwwcr0VtWpg9ZCPkXGHT9q/Fn f6L20fVPxwwvrA6NVuxn5dWJTcWVSOHMQzD1Dt20MrWgEP7T4MdFT9CsVzSvUW05 3Ziic3cJLkwLoLSchubdjhG1uHD060HoDTp0r/1a/LFFQ609ADru0slvv9y2tv59 Bo8BtLKa+a5wFhxXzXOSMimdCFKB+E6bE/Wtrt8zxiD5+HKmRYbuSW+2iPViSR+t Up7K7K0vfx5p6XLCoW784twwzDEL7ZkkxLf9OIPJJ1H1DQCrID+LzOTLG8YdG6w9 6/cWf3byhNe/fWZ/2bKixM4yODCxyKuiWyDGh+mKBphH9VGa9W4= -----END CERTIFICATE-----Generated at Sat Nov 23 06:11:01 2024 by rpki-client on console-ams.rpki-client.org