$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: /WfctgLymusZGzz4c0YNLicokMiPICUOaB/jODZHPm4= Subject key identifier: 9A:CB:53:AC:36:FE:DB:01:5B:5F:30:95:AE:91:43:73:7F:BB:4A:35 Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 2835AEB1FE80F2BA11BD56467018C9C96EEA6CFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: 0101 Signing time: Tue 28 May 2024 16:11:13 +0000 Manifest this update: Tue 28 May 2024 16:06:13 +0000 Manifest next update: Fri 31 May 2024 18:41:13 +0000 Files and hashes: 1: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: 2eZReKxoWiqw15MwiLMpFmsr1Ax2kE3sD2eDpawCLD8=) 2: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: iikxiNkTJKaYC4VLYjN4A5ypFehw5xOUrg7BMWrFLp0=) 3: 3130332e32352e3130382e302f32342d3234203d3e203338353237.roa (hash: Bv8+N1YZfCOW9Mp7ZexXKugvyjYari83w80CY0qHyeM=) 4: 3132342e3130392e32322e302f32342d3234203d3e203338353237.roa (hash: radLee8jKyOqtTKA/5KUI0z20EAw6UagbI424s1rKQQ=) 5: 32372e3132342e38332e302f32342d3234203d3e20313338303839.roa (hash: Nk9nfDWsxIJywmYhHNIEOyLCZi5H+xbwJBnaNxBmKiM=) 6: 32372e3132342e38372e302f32342d3234203d3e203338353237.roa (hash: UcmU8aB4eGLwy3uk7kl62Yz0rtXFjCU+HO9XmOHngFE=) 7: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: qNHc6aw3RgUmG2ISmtrXdC24D4mddWYbCDMSSOJPsns=) 8: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: nVBQut9cLfqGgtbiyks5zEITKa9iT1MH4ntzbKpfbZ8=) 9: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gXtAKsat10piv34P6t4y8Tc8WIx9/KwM7U5XBGfjT58=) 10: 3131392e34372e39302e302f32342d3234203d3e20313338303839.roa (hash: 0DnYU2jr7QxjixoSztZEMdXjq3UixntmcvFZ+jIl2KU=) 11: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: gCC0swqHXvpcApwPTdCl9wNVSBPpLb7/ZKJHFnKkvAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:35:ae:b1:fe:80:f2:ba:11:bd:56:46:70:18:c9:c9:6e:ea:6c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: May 28 16:06:13 2024 GMT Not After : May 31 18:41:13 2024 GMT Subject: CN=9ACB53AC36FEDB015B5F3095AE9143737FBB4A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:52:ef:e1:07:e7:6e:66:be:45:af:5b:90:61: db:04:2d:d9:d2:aa:a3:e5:15:1b:9d:a8:7a:6c:41: e8:8f:1f:54:90:8b:1d:22:d4:3c:ea:18:2f:68:33: 62:d1:b4:0a:ed:7e:43:9d:17:61:a2:61:d2:ad:fd: 12:ff:2f:69:21:35:f0:35:ab:35:d7:35:e3:fc:d1: 77:46:11:ad:5c:b5:c3:4c:95:da:b2:dd:e7:62:22: 2c:d6:42:b7:e5:b6:e0:33:0f:77:c5:b5:c0:62:11: eb:da:9b:40:0a:52:10:14:10:a3:67:ff:dc:d4:31: 4d:17:7e:5c:64:e4:00:c5:f4:3c:83:0c:7b:e8:04: b9:7b:a2:a9:74:9f:17:ff:eb:c5:a7:bc:f5:d2:b2: 55:00:a9:01:02:ab:b1:e9:01:1c:d6:19:16:df:51: bb:e9:e3:45:c3:71:38:14:93:b5:4c:8f:e5:e5:96: cf:3a:34:7d:c9:d3:75:65:f8:e9:20:7b:0b:1f:ce: 00:05:c4:d1:03:11:1e:3c:02:16:2d:a4:06:a7:53: c3:05:de:6b:79:6d:e3:72:ca:67:a4:43:37:4a:5c: 1b:16:e4:2e:88:b4:21:75:6e:c9:4b:3b:70:a1:c6: 7f:5b:d6:19:b7:88:c3:43:73:e6:e3:ea:c4:69:43: 5e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CB:53:AC:36:FE:DB:01:5B:5F:30:95:AE:91:43:73:7F:BB:4A:35 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:43:87:27:8a:24:a3:79:cd:94:fa:6a:26:70:06:a2:82:34: 62:2a:fd:62:96:2a:a0:de:d7:98:c7:64:cd:f0:c3:01:3c:61: a5:48:bf:da:f9:87:0c:99:87:63:4e:14:ae:59:e7:77:1f:46: f6:ca:b3:4e:87:ad:26:33:77:88:02:89:d3:79:c6:06:51:b9: 7b:f1:c9:86:0a:73:59:ec:86:b3:80:d6:d4:e7:48:38:1d:c7: d9:99:65:b9:24:95:f0:6f:7a:19:48:99:6e:ec:d5:e3:2f:b7: fb:2d:f5:e5:9c:0b:42:91:28:30:81:88:84:6e:ce:07:e4:81: d7:f6:4b:85:e6:56:6a:8d:aa:ee:ee:6d:d7:0c:c5:b4:ec:35: 8b:42:a7:6c:2c:13:d7:db:96:75:cf:04:45:9d:0c:08:db:cf: 9f:77:c9:18:8b:46:5c:f4:a8:13:f4:bd:af:d3:57:9f:c2:40: a5:9e:7b:1f:83:b0:5b:9d:51:ed:7a:4d:ec:cc:a4:4d:fe:1c: f2:8e:d8:8d:63:7f:02:4f:02:0e:e4:9a:2b:10:d2:0e:b2:86: 74:e5:6f:86:ee:4e:8e:ab:4f:50:72:bd:69:62:3c:e9:08:f1: 15:7d:45:0f:87:35:d5:41:89:06:af:7c:d1:1c:cb:14:0c:5e: 2f:54:a4:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKDWusf6A8roRvVZGcBjJyW7qbPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNDA1MjgxNjA2MTNaFw0yNDA1MzExODQxMTNaMDMxMTAvBgNV BAMTKDlBQ0I1M0FDMzZGRURCMDE1QjVGMzA5NUFFOTE0MzczN0ZCQjRBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsUu/hB+duZr5Fr1uQYdsELdnS qqPlFRudqHpsQeiPH1SQix0i1DzqGC9oM2LRtArtfkOdF2GiYdKt/RL/L2khNfA1 qzXXNeP80XdGEa1ctcNMldqy3ediIizWQrfltuAzD3fFtcBiEevam0AKUhAUEKNn /9zUMU0Xflxk5ADF9DyDDHvoBLl7oql0nxf/68WnvPXSslUAqQECq7HpARzWGRbf Ubvp40XDcTgUk7VMj+Xlls86NH3J03Vl+OkgewsfzgAFxNEDER48AhYtpAanU8MF 3mt5beNyymekQzdKXBsW5C6ItCF1bslLO3Chxn9b1hm3iMNDc+bj6sRpQ14LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmstTrDb+2wFbXzCVrpFDc3+7SjUwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZDhyeKJKN5zZT6aiZwBqKCNGIq/WKWKqDe 15jHZM3wwwE8YaVIv9r5hwyZh2NOFK5Z53cfRvbKs06HrSYzd4gCidN5xgZRuXvx yYYKc1nshrOA1tTnSDgdx9mZZbkklfBvehlImW7s1eMvt/st9eWcC0KRKDCBiIRu zgfkgdf2S4XmVmqNqu7ubdcMxbTsNYtCp2wsE9fblnXPBEWdDAjbz593yRiLRlz0 qBP0va/TV5/CQKWeex+DsFudUe16TezMpE3+HPKO2I1jfwJPAg7kmisQ0g6yhnTl b4buTo6rT1ByvWliPOkI8RV9RQ+HNdVBiQavfNEcyxQMXi9UpKg= -----END CERTIFICATE-----Generated at Tue May 28 17:49:09 2024 by rpki-client on console-fra.rpki-client.org