$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft File: 26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json) Hash identifier: qAOw/MhNw10iNN7alymqPtewPXSqmNrqH+PDYKmuZrY= Subject key identifier: F9:F1:E1:68:CD:20:B0:A3:1B:72:B8:1C:08:17:5C:7B:CA:52:59:95 Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Certificate serial: 53915FD0520A8F2FA8AA50C9CC6DBECB4A8E918F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft Manifest number: 0425 Signing time: Sun 28 Apr 2024 02:30:01 +0000 Manifest this update: Sun 28 Apr 2024 02:25:01 +0000 Manifest next update: Wed 01 May 2024 05:49:01 +0000 Files and hashes: 1: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Bum4HCBdrT9Gdqclg2qtPRlP+0cDgpgXVoHamcf0r/A=) 2: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: twmxECkN+7skyAQREQtMlObojHv490Tr0WaFXloU4XM=) 3: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: cfMfEejyBhXTskaO4FNt/Ea6aluNxfAadJMX+fw0U0s=) 4: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: s17FqbTdUV5BFrAQQeM/NFQPFJ7Kud5vbbB3yscKWEk=) 5: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: wqDMlU7h2U+b/IOAevK6tdAun7fkFwWrcCjD+PF8Mns=) 6: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: lVweKKB8QUhf2svNiIxc3+TeTyTKmNyCT1S5G0Yns6g=) 7: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: ETjmr0vbZqDmotb4XLq8niPrpEIZf7M1nN0Vj8GjET0=) 8: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: jFtpdvTv9RSavdXkb+6/2bNsUyWtEQPQyaoxsueD6uI=) 9: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: bEwC4T9KmyxTluKSIzWZspUKuCA65r7exWiBeDH3hx4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:91:5f:d0:52:0a:8f:2f:a8:aa:50:c9:cc:6d:be:cb:4a:8e:91:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Validity Not Before: Apr 28 02:25:01 2024 GMT Not After : May 1 05:49:01 2024 GMT Subject: CN=F9F1E168CD20B0A31B72B81C08175C7BCA525995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:60:23:6a:04:60:04:a2:89:b6:13:87:f3: 2b:c2:9d:5f:c0:7a:42:cc:f2:7d:f2:13:8f:fb:15: b5:48:7a:95:f4:1b:a8:a9:0e:6a:2d:a5:74:e0:ab: 6b:d8:97:4d:4d:6d:32:8b:c5:17:ab:dc:b0:1a:cd: a6:e0:c6:4c:54:99:e1:64:68:5c:6c:03:1a:3a:cf: 6b:e9:62:7e:e5:7d:da:39:58:f5:ee:21:52:83:72: a7:93:8d:d9:0b:45:56:26:89:8e:92:66:b0:e1:5d: dc:60:8d:33:1d:7a:2a:d5:e1:37:b7:c6:f0:91:08: fe:fc:99:54:f7:ae:15:b4:90:ff:87:28:c6:71:93: bc:64:a7:82:28:2d:20:ad:eb:46:a5:ba:dd:10:b3: 23:38:5e:9c:b1:32:82:58:35:ce:f1:b3:5c:b8:8c: ee:bb:46:13:4b:7f:74:7b:f4:4c:59:b5:46:63:0a: 86:35:ea:1c:85:81:ee:fc:e2:d6:b3:f1:86:b7:b2: b9:b1:63:f7:6e:b6:b7:96:7f:8c:23:45:dd:84:fd: 57:43:7b:9b:8e:c5:2a:49:75:9b:c0:bd:c6:e4:72: 67:95:ea:e8:74:56:29:08:0d:97:44:4b:b4:f5:23: 28:35:4f:d2:31:58:e3:f4:e7:0d:25:85:1c:5c:2f: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F1:E1:68:CD:20:B0:A3:1B:72:B8:1C:08:17:5C:7B:CA:52:59:95 X509v3 Authority Key Identifier: keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:fc:74:9f:fe:62:7f:a5:14:7d:74:72:0b:fb:bf:b2:f4:ee: a0:d8:03:21:87:58:6c:4f:b4:cf:93:4c:6c:b4:09:64:06:85: 15:3f:3e:49:8a:2f:7e:21:b1:49:19:6f:3d:a6:00:4f:dd:74: 9b:c8:43:30:d7:0e:e8:72:7b:fe:38:16:7a:ca:22:3c:3f:54: ec:c5:d2:a9:a3:29:78:e9:ec:3e:bc:8e:70:c8:4a:fd:60:eb: 07:ef:c3:51:39:6e:36:ff:77:c3:1b:00:a7:c6:bb:3e:ff:38: 47:de:e8:10:0b:79:07:84:36:bc:cc:2a:77:0d:73:71:94:42: ba:02:04:19:0f:dc:4d:90:90:c3:d2:70:4c:a2:5e:19:6d:7d: 4d:49:b9:8c:0a:6d:88:89:62:52:b2:5f:a3:fc:3d:d8:68:54: 7e:ee:34:8a:64:0d:15:fa:28:af:65:74:5a:84:95:57:98:52: 53:f8:4d:d5:08:31:9d:12:ab:ad:4f:fb:6b:c7:f1:55:d5:0f: 26:68:38:98:7c:12:ab:ff:08:4d:95:18:a0:e3:13:ea:63:d2: 01:cb:26:8d:f2:4f:bf:d3:30:35:55:fc:30:d9:18:39:73:71: c7:9a:25:8f:a0:5b:e9:59:5b:a9:b4:1d:32:22:17:98:3d:90: 43:d9:c6:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5Ff0FIKjy+oqlDJzG2+y0qOkY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNF QjlDOUNFNTAeFw0yNDA0MjgwMjI1MDFaFw0yNDA1MDEwNTQ5MDFaMDMxMTAvBgNV BAMTKEY5RjFFMTY4Q0QyMEIwQTMxQjcyQjgxQzA4MTc1QzdCQ0E1MjU5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mmAjagRgBKKJthOH8yvCnV/A ekLM8n3yE4/7FbVIepX0G6ipDmotpXTgq2vYl01NbTKLxRer3LAazabgxkxUmeFk aFxsAxo6z2vpYn7lfdo5WPXuIVKDcqeTjdkLRVYmiY6SZrDhXdxgjTMdeirV4Te3 xvCRCP78mVT3rhW0kP+HKMZxk7xkp4IoLSCt60alut0QsyM4XpyxMoJYNc7xs1y4 jO67RhNLf3R79ExZtUZjCoY16hyFge784taz8Ya3srmxY/dutreWf4wjRd2E/VdD e5uOxSpJdZvAvcbkcmeV6uh0VikIDZdES7T1Iyg1T9IxWOP05w0lhRxcL7iFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+fHhaM0gsKMbcrgcCBdce8pSWZUwHwYDVR0j BBgwFoAUJkJbcClPmANdOHiOWXpKbOucnOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YzMDkzNi1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC8yNjQyNUI3MDI5 NEY5ODAzNUQzODc4OEU1OTdBNEE2Q0VCOUM5Q0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNFQjlD OUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMzA5MzYtYzc1MC00MzNiLTlj MmEtOGZmNWYzOGU2M2Q0LzAvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRB NkNFQjlDOUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALj8dJ/+Yn+lFH10cgv7v7L07qDYAyGHWGxP tM+TTGy0CWQGhRU/PkmKL34hsUkZbz2mAE/ddJvIQzDXDuhye/44FnrKIjw/VOzF 0qmjKXjp7D68jnDISv1g6wfvw1E5bjb/d8MbAKfGuz7/OEfe6BALeQeENrzMKncN c3GUQroCBBkP3E2QkMPScEyiXhltfU1JuYwKbYiJYlKyX6P8PdhoVH7uNIpkDRX6 KK9ldFqElVeYUlP4TdUIMZ0Sq61P+2vH8VXVDyZoOJh8Eqv/CE2VGKDjE+pj0gHL Jo3yT7/TMDVV/DDZGDlzcceaJY+gW+lZW6m0HTIiF5g9kEPZxjQ= -----END CERTIFICATE-----Generated at Sun Apr 28 03:09:21 2024 by rpki-client on console-ams.rpki-client.org