$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: PWln1jBlJzFzBE2uQ0RCsHUUF5AG+HgOgo7IErXEkY8= Subject key identifier: 23:C5:62:BC:4E:34:E5:91:57:4A:D3:90:A2:CD:7B:E5:19:ED:0D:D4 Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 3AFB19A1A6EF2A7338E525C69492D2F83AECC7BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 025C Signing time: Sat 18 May 2024 09:01:28 +0000 Manifest this update: Sat 18 May 2024 08:56:28 +0000 Manifest next update: Tue 21 May 2024 20:50:28 +0000 Files and hashes: 1: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: 9UmaE+b/XvxkRWumO4SltEy+WtpRHB9NvmppA+yqUZQ=) 2: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: lUn1kBEqYnNaT99WVKp7sEMB2TH93JCDJ7GQPnQ+uro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:fb:19:a1:a6:ef:2a:73:38:e5:25:c6:94:92:d2:f8:3a:ec:c7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: May 18 08:56:28 2024 GMT Not After : May 21 20:50:28 2024 GMT Subject: CN=23C562BC4E34E591574AD390A2CD7BE519ED0DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:00:4e:45:ca:a2:78:e3:3b:ae:c1:5c:35: c7:55:8a:ef:f8:61:f5:1e:20:59:9d:04:c4:1c:a8: d2:f2:68:ce:2e:cc:01:a7:63:8e:81:6c:90:1a:d9: 10:f2:3a:9a:12:d8:d1:7c:c4:77:28:83:54:e6:9e: 77:05:75:33:07:00:28:c7:49:d8:db:28:77:89:69: 7a:86:80:ec:b6:a6:f2:7d:96:f9:45:06:02:fb:b5: 42:05:dc:20:48:b5:ff:bd:7a:38:27:d0:10:c7:85: ca:c0:3e:ac:22:7b:e9:a9:8f:51:97:df:df:e9:a3: 90:ef:40:d3:be:43:75:90:20:4e:1d:0b:2f:66:5a: 42:15:2e:37:9b:b2:71:52:ea:34:1e:44:29:b4:de: 79:cd:3b:c9:2d:99:53:5e:e1:74:2e:e4:0e:c0:00: 92:33:3f:65:0d:9e:7b:db:e7:71:1f:cc:79:92:d7: 48:25:50:9e:dd:5c:71:15:98:d0:24:15:40:7d:08: c2:80:f4:26:10:39:57:79:dc:f3:ab:dc:09:a2:6e: af:5e:5c:49:3d:30:dd:05:0e:40:6a:15:2e:bf:c0: c6:6d:8e:7d:dc:a8:c1:c9:85:51:22:52:7e:75:d4: 31:b0:83:6c:df:2e:25:8c:ea:14:98:71:ee:fc:56: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C5:62:BC:4E:34:E5:91:57:4A:D3:90:A2:CD:7B:E5:19:ED:0D:D4 X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:3c:56:e0:9d:d8:f9:5d:c1:98:3b:d1:c4:eb:ae:80:65:3e: 18:91:ed:ed:5c:46:72:f6:0e:2b:29:ed:30:5a:79:3e:83:b9: 39:4e:a3:df:49:94:db:bf:a0:7e:3d:9b:8e:58:6b:71:e5:a2: e6:d7:d9:9a:f9:01:e8:6e:4b:44:7d:3f:c1:58:0b:b7:4b:05: fa:26:65:ab:a3:cd:d1:aa:68:21:fe:da:90:36:82:3b:e3:e5: 59:8d:10:85:30:fc:7c:18:a5:5b:34:be:17:8e:39:be:0d:45: ba:c0:b9:25:d7:66:11:87:90:21:5a:06:87:f8:21:af:74:2e: 14:13:ed:58:67:a4:2c:d2:28:f2:2f:06:19:a7:79:6e:72:ca: 07:23:8a:f8:f8:92:ec:ef:71:5c:a4:db:09:6a:09:5e:98:14: 3c:7f:3c:4a:4c:88:a2:12:e1:1e:79:0c:43:81:65:1b:89:fb: f4:48:14:99:cb:4b:e3:bc:c9:8f:64:87:5b:c1:06:63:64:dc: 0e:55:16:ee:9e:2f:11:94:3d:49:2f:24:6b:89:46:c9:3f:63: 11:17:f2:e7:f7:88:d6:af:95:da:79:d1:4d:e5:b7:72:9d:2c: f1:32:00:e1:91:70:aa:8e:59:33:c8:5f:4a:2e:9d:2f:96:93: 8a:3e:17:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOvsZoabvKnM45SXGlJLS+Drsx70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNDA1MTgwODU2MjhaFw0yNDA1MjEyMDUwMjhaMDMxMTAvBgNV BAMTKDIzQzU2MkJDNEUzNEU1OTE1NzRBRDM5MEEyQ0Q3QkU1MTlFRDBERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChJgBORcqieOM7rsFcNcdViu/4 YfUeIFmdBMQcqNLyaM4uzAGnY46BbJAa2RDyOpoS2NF8xHcog1TmnncFdTMHACjH SdjbKHeJaXqGgOy2pvJ9lvlFBgL7tUIF3CBItf+9ejgn0BDHhcrAPqwie+mpj1GX 39/po5DvQNO+Q3WQIE4dCy9mWkIVLjebsnFS6jQeRCm03nnNO8ktmVNe4XQu5A7A AJIzP2UNnnvb53EfzHmS10glUJ7dXHEVmNAkFUB9CMKA9CYQOVd53POr3Amibq9e XEk9MN0FDkBqFS6/wMZtjn3cqMHJhVEiUn511DGwg2zfLiWM6hSYce78VkxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI8VivE405ZFXStOQos175RntDdQwHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL08VuCd2PldwZg70cTrroBlPhiR7e1cRnL2 Disp7TBaeT6DuTlOo99JlNu/oH49m45Ya3HloubX2Zr5AehuS0R9P8FYC7dLBfom ZaujzdGqaCH+2pA2gjvj5VmNEIUw/HwYpVs0vheOOb4NRbrAuSXXZhGHkCFaBof4 Ia90LhQT7VhnpCzSKPIvBhmneW5yygcjivj4kuzvcVyk2wlqCV6YFDx/PEpMiKIS 4R55DEOBZRuJ+/RIFJnLS+O8yY9kh1vBBmNk3A5VFu6eLxGUPUkvJGuJRsk/YxEX 8uf3iNavldp50U3lt3KdLPEyAOGRcKqOWTPIX0ounS+Wk4o+F8s= -----END CERTIFICATE-----Generated at Sat May 18 09:23:12 2024 by rpki-client on console-fra.rpki-client.org