$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json) Hash identifier: Npvf6ptCinjdhEX5VYZJTj8STySC228PCzECFg1uT7o= Subject key identifier: 8F:3F:22:5F:DE:4A:39:9F:05:3E:A2:26:19:6F:5D:3B:76:A1:C7:80 Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Certificate serial: 73E4B266D67071248A6FF32ADBC4981C939B74C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft Manifest number: 02CF Signing time: Tue 28 May 2024 12:51:00 +0000 Manifest this update: Tue 28 May 2024 12:46:00 +0000 Manifest next update: Fri 31 May 2024 20:27:00 +0000 Files and hashes: 1: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: E52YAp0FJ9u8G//EqtRWOZiqzgLVOegQWuDE2zxQceM=) 2: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: wR/WIm5HzRrLb0WrvYxAHH5TiJsH+DxFLIgn2GJBjrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e4:b2:66:d6:70:71:24:8a:6f:f3:2a:db:c4:98:1c:93:9b:74:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Validity Not Before: May 28 12:46:00 2024 GMT Not After : May 31 20:27:00 2024 GMT Subject: CN=8F3F225FDE4A399F053EA226196F5D3B76A1C780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:1c:d7:a2:9b:75:36:9e:2f:f7:7c:41:23: e0:04:12:71:3c:50:4f:e2:7d:6d:cc:86:f4:1d:95: 14:68:d1:9a:21:20:47:93:da:8b:9a:7f:cd:65:19: 77:50:44:25:fc:80:9b:dc:0d:7e:2c:f3:32:42:8b: ea:d9:33:fc:fa:72:17:be:8a:94:6e:f5:aa:fe:4f: 31:b0:9a:1d:f3:c7:52:59:3f:40:d0:b5:a5:b3:68: 3a:90:6b:ba:2b:85:e0:c5:0f:31:76:20:58:da:0b: 20:45:be:12:b5:c0:74:48:b9:99:ee:88:a6:b3:70: 5b:89:db:e8:fb:ab:18:86:f0:3a:80:35:54:46:ef: 5d:05:ec:d4:83:fc:33:17:eb:15:fe:c4:0b:b8:f3: 50:44:31:97:a3:87:6d:e7:02:41:37:73:ac:96:53: ad:e5:f3:d4:de:d8:8c:33:c1:14:52:21:d6:4a:4b: cc:f5:d1:6f:8b:5f:7b:b4:f0:38:78:ae:ed:fe:02: 8e:1c:0e:e6:a3:89:91:a7:78:b8:65:3a:5e:51:f3: c0:2d:e0:a9:dc:ea:ba:4b:7b:e7:08:24:cd:8a:15: 87:0e:21:7c:4c:5a:6c:83:f0:7a:6c:47:6f:78:92: ab:39:2b:4d:e4:7c:db:ad:a3:cc:37:c1:1c:ce:87: cb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3F:22:5F:DE:4A:39:9F:05:3E:A2:26:19:6F:5D:3B:76:A1:C7:80 X509v3 Authority Key Identifier: keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:38:06:58:fa:bb:e0:74:0c:e0:d4:4e:86:d8:f4:69:c9:87: d8:8a:b2:49:d9:7c:43:d2:d0:91:94:e4:9f:59:81:18:45:42: 45:c2:7a:a9:34:b3:10:d0:52:c5:f2:9f:0a:1a:15:21:fb:58: aa:47:3b:63:d4:fb:48:55:a4:e9:41:1c:30:49:65:c3:d8:68: c2:d8:8c:38:87:37:c7:20:48:89:c3:06:f1:3a:fa:e3:c0:4f: d2:b2:a4:71:8e:93:cf:6f:a3:bd:ee:32:4d:54:9f:c0:f6:10: de:81:19:34:54:8b:b9:48:4b:9b:26:3f:54:06:41:20:5e:08: 65:89:13:da:f4:4a:9e:53:1d:12:14:c0:be:90:de:5a:fa:09: 09:8e:ae:ff:c0:dd:a1:88:13:d9:5d:f3:cb:42:b0:54:0e:71: a3:29:72:14:b3:db:de:bc:6d:78:db:88:36:8f:36:17:6c:57: 57:39:96:7f:9b:fe:44:da:ab:47:31:43:cf:41:89:66:06:d4: ec:26:ab:e0:ae:ff:1e:6f:de:9c:b0:a1:f6:fc:90:36:4a:92: 3f:7f:90:e8:eb:74:57:0d:f3:c9:04:89:d5:9b:8c:12:05:97: d8:3d:77:0e:c9:b4:9b:f9:73:9b:ab:d2:6a:fb:be:2b:00:22: d0:66:11:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+SyZtZwcSSKb/Mq28SYHJObdMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC QzY0MzUyNTAeFw0yNDA1MjgxMjQ2MDBaFw0yNDA1MzEyMDI3MDBaMDMxMTAvBgNV BAMTKDhGM0YyMjVGREU0QTM5OUYwNTNFQTIyNjE5NkY1RDNCNzZBMUM3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyYhzXopt1Np4v93xBI+AEEnE8 UE/ifW3MhvQdlRRo0ZohIEeT2ouaf81lGXdQRCX8gJvcDX4s8zJCi+rZM/z6che+ ipRu9ar+TzGwmh3zx1JZP0DQtaWzaDqQa7orheDFDzF2IFjaCyBFvhK1wHRIuZnu iKazcFuJ2+j7qxiG8DqANVRG710F7NSD/DMX6xX+xAu481BEMZejh23nAkE3c6yW U63l89Te2IwzwRRSIdZKS8z10W+LX3u08Dh4ru3+Ao4cDuajiZGneLhlOl5R88At 4Knc6rpLe+cIJM2KFYcOIXxMWmyD8HpsR294kqs5K03kfNuto8w3wRzOh8v7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjz8iX95KOZ8FPqImGW9dO3ahx4AwHwYDVR0j BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0 MzUyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJG MkNCQzY0MzUyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAY4Blj6u+B0DODUTobY9GnJh9iKsknZfEPS 0JGU5J9ZgRhFQkXCeqk0sxDQUsXynwoaFSH7WKpHO2PU+0hVpOlBHDBJZcPYaMLY jDiHN8cgSInDBvE6+uPAT9KypHGOk89vo73uMk1Un8D2EN6BGTRUi7lIS5smP1QG QSBeCGWJE9r0Sp5THRIUwL6Q3lr6CQmOrv/A3aGIE9ld88tCsFQOcaMpchSz2968 bXjbiDaPNhdsV1c5ln+b/kTaq0cxQ89BiWYG1Owmq+Cu/x5v3pywofb8kDZKkj9/ kOjrdFcN88kEidWbjBIFl9g9dw7JtJv5c5ur0mr7visAItBmEQ8= -----END CERTIFICATE-----Generated at Tue May 28 13:23:27 2024 by rpki-client on console-fra.rpki-client.org