$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json) Hash identifier: Dg1stiSOCZEemRyiI09H5IhLBsJwIU1KP1RgbgLyn4k= Subject key identifier: AB:1F:EC:93:4D:B8:F9:E4:5E:DC:02:B8:05:F4:16:CC:CA:16:DD:0E Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 7ED4203BA59BD01FDC69F64251091799DFDD87C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft Manifest number: 0140 Signing time: Sat 18 May 2024 14:21:54 +0000 Manifest this update: Sat 18 May 2024 14:16:54 +0000 Manifest next update: Wed 22 May 2024 00:47:54 +0000 Files and hashes: 1: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: Zq+GZcp7ZLRlz5PXOgmaRY0xCw3OhS1his94gY28X5o=) 2: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: Vowfqb01B3RQZ9usgO233LKgbomEwoSZKEz3MjhkLRs=) 3: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: QH7Y9dSNNwVfjFATImLxIsLTzx63Mso63M02HNkYnI0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d4:20:3b:a5:9b:d0:1f:dc:69:f6:42:51:09:17:99:df:dd:87:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: May 18 14:16:54 2024 GMT Not After : May 22 00:47:54 2024 GMT Subject: CN=AB1FEC934DB8F9E45EDC02B805F416CCCA16DD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:b4:ae:54:c5:28:bd:6f:d7:a1:4e:44:6a: a3:bb:80:16:cb:61:91:4f:e4:de:8e:26:a1:1c:6e: e3:f4:4e:50:5c:ef:52:63:30:60:64:65:05:cc:1f: b7:52:47:c6:f7:5f:7f:db:38:25:f1:11:aa:a9:a6: c3:0e:28:c4:a0:17:a2:e0:a5:4b:f1:99:70:42:f9: c1:4d:64:20:81:67:b0:10:8d:76:a9:b8:7e:39:08: 26:34:9c:20:10:fc:37:43:26:14:38:a3:51:fd:a7: 0b:f0:27:d8:1e:c7:85:f3:c4:fc:14:a0:2d:63:0c: eb:83:a0:6b:24:d8:98:ca:d2:ac:a8:97:66:f6:a1: 65:2d:14:b7:69:96:cc:05:ee:ca:71:54:57:5b:01: 20:82:f8:d4:ab:31:64:92:3a:8c:06:35:fc:42:ae: 0a:75:bd:03:27:18:21:da:66:8f:84:8b:6a:22:6f: d0:4c:a0:85:4f:d0:4b:21:ae:ee:bc:e4:67:31:e4: f5:55:a4:18:9a:d7:6a:87:a7:f7:19:e6:94:12:50: e3:18:f5:31:0e:a1:21:18:7c:3f:9a:9f:b6:13:6a: f2:02:ef:b7:b2:54:d3:12:ec:d7:ac:40:8d:c4:98: b0:86:a6:d7:ad:c2:ad:66:1d:d6:16:24:26:5b:93: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1F:EC:93:4D:B8:F9:E4:5E:DC:02:B8:05:F4:16:CC:CA:16:DD:0E X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:75:41:76:89:b3:1c:a2:24:20:35:b2:f0:fc:16:11:a1:48: 34:2e:f2:6d:99:87:fa:7a:3a:03:fd:1e:ee:58:9e:14:91:a0: 07:a6:0e:05:77:8d:72:02:61:a2:f8:89:93:25:d3:66:c1:b1: 79:a7:ed:00:10:82:90:e8:49:15:88:77:c0:3e:83:ef:d8:9b: e7:e1:03:e2:a3:f9:78:e5:e5:0a:5c:45:38:79:9b:85:58:7d: 62:47:3c:c9:1b:1b:a5:d0:99:fa:6f:6f:3a:a0:aa:73:52:66: 10:21:3b:0c:21:bb:25:35:6a:16:ae:0c:fc:51:6d:34:06:b7: 6f:cc:2f:15:06:d9:37:4d:a6:6b:f2:1f:74:fa:0f:d5:e9:3e: 07:77:d2:a0:f8:86:d7:62:41:1a:b2:0c:76:97:7e:04:c3:bb: e0:9d:fe:fb:a9:9f:8f:28:38:ef:ec:8a:58:91:7b:69:95:00: 93:7e:c9:1f:e8:54:af:7a:c4:db:03:d7:79:3a:4a:e9:0d:0f: a6:40:50:88:25:80:26:6f:ca:10:a1:f6:ff:e3:27:1e:3b:ca: 54:a0:74:75:4c:38:cb:be:4e:18:93:83:e8:71:be:e6:86:e4: 2b:e0:59:a2:f2:65:26:c6:79:c1:02:61:3b:02:42:ea:ff:7e: f4:87:2f:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftQgO6Wb0B/cafZCUQkXmd/dh8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNDA1MTgxNDE2NTRaFw0yNDA1MjIwMDQ3NTRaMDMxMTAvBgNV BAMTKEFCMUZFQzkzNERCOEY5RTQ1RURDMDJCODA1RjQxNkNDQ0ExNkREMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbALSuVMUovW/XoU5EaqO7gBbL YZFP5N6OJqEcbuP0TlBc71JjMGBkZQXMH7dSR8b3X3/bOCXxEaqppsMOKMSgF6Lg pUvxmXBC+cFNZCCBZ7AQjXapuH45CCY0nCAQ/DdDJhQ4o1H9pwvwJ9gex4XzxPwU oC1jDOuDoGsk2JjK0qyol2b2oWUtFLdplswF7spxVFdbASCC+NSrMWSSOowGNfxC rgp1vQMnGCHaZo+Ei2oib9BMoIVP0Eshru685Gcx5PVVpBia12qHp/cZ5pQSUOMY 9TEOoSEYfD+an7YTavIC77eyVNMS7NesQI3EmLCGptetwq1mHdYWJCZbk5MHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqx/sk024+eRe3AK4BfQWzMoW3Q4wHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMx QkExODhCQUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE11QXaJsxyiJCA1svD8FhGhSDQu8m2Zh/p6 OgP9Hu5YnhSRoAemDgV3jXICYaL4iZMl02bBsXmn7QAQgpDoSRWId8A+g+/Ym+fh A+Kj+Xjl5QpcRTh5m4VYfWJHPMkbG6XQmfpvbzqgqnNSZhAhOwwhuyU1ahauDPxR bTQGt2/MLxUG2TdNpmvyH3T6D9XpPgd30qD4htdiQRqyDHaXfgTDu+Cd/vupn48o OO/siliRe2mVAJN+yR/oVK96xNsD13k6SukND6ZAUIglgCZvyhCh9v/jJx47ylSg dHVMOMu+ThiTg+hxvuaG5CvgWaLyZSbGecECYTsCQur/fvSHL/4= -----END CERTIFICATE-----Generated at Sat May 18 15:57:29 2024 by rpki-client on console-ams.rpki-client.org