$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: oKXz3lrw7OF4cxqVOOE8bSmfqifgy1gERQzY4wdDFY4= Subject key identifier: 75:88:7D:92:05:14:5A:33:F5:D4:3B:74:98:B6:3C:1A:7C:BA:10:94 Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 445337732549D3181E73F4DA32A4443A11DA6659 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 02AB Signing time: Sat 11 May 2024 05:21:01 +0000 Manifest this update: Sat 11 May 2024 05:16:01 +0000 Manifest next update: Tue 14 May 2024 12:50:01 +0000 Files and hashes: 1: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: Wvw+oztJk/97gXz/1WDG0zfbrj8JQiQmgiZLyTxS4+Q=) 2: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: +2NTwuGyML6oGEBUaXntTc+SXaNlVscVHGmTTPJ2p+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:53:37:73:25:49:d3:18:1e:73:f4:da:32:a4:44:3a:11:da:66:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: May 11 05:16:01 2024 GMT Not After : May 14 12:50:01 2024 GMT Subject: CN=75887D9205145A33F5D43B7498B63C1A7CBA1094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:fa:1b:80:63:af:5a:15:ed:93:0b:51:b2: 06:f2:62:fa:cb:c3:a4:50:4d:6f:3d:17:93:b7:a5: 0c:a6:67:09:79:18:cf:79:53:a2:50:e3:d7:e0:b6: ca:10:7f:7e:98:93:eb:8d:2b:f2:ad:4d:8a:a6:ef: ec:2f:af:3a:aa:7c:52:7d:a0:a9:b5:8d:4d:72:bb: ba:58:f1:f2:44:f9:da:22:bf:fd:38:22:17:9d:b1: 3b:69:58:b4:5a:3a:85:2b:ba:23:e6:2d:81:e2:52: 2b:46:24:ea:14:d2:3c:b1:b5:93:82:b7:ec:53:b3: ba:3d:7b:12:be:cc:88:4f:0c:5d:a5:96:26:e2:7e: 75:dc:b2:1a:28:4c:78:f0:87:9f:ed:bd:1e:a5:24: 74:ff:56:2e:c2:05:bb:d2:0b:e2:b6:ef:e0:76:ad: 26:4b:09:ce:59:01:28:25:91:8b:2c:11:7a:b2:bf: 36:74:8b:e4:e3:b4:61:1d:8b:5b:dd:0f:14:ba:48: 8b:27:b2:57:5e:22:80:16:6f:1f:84:b3:36:7e:98: 74:68:df:a3:75:b6:79:52:c5:18:bf:ef:77:82:c4: 1a:16:20:17:a8:8d:bd:f0:0f:3f:d9:37:30:3c:86: 92:91:cb:3b:4f:2c:6d:c5:78:4d:63:31:c5:d1:97: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:88:7D:92:05:14:5A:33:F5:D4:3B:74:98:B6:3C:1A:7C:BA:10:94 X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:19:86:a0:1e:c5:15:22:e5:de:b0:db:17:3c:c7:b8:5a:93: 1e:9e:9e:43:96:03:92:ea:11:6b:39:c7:3e:24:7e:9b:db:00: 8c:35:58:89:f1:58:7b:ce:bd:9a:f2:bc:98:64:5d:b8:35:95: 1e:be:be:ec:5d:2f:f2:48:db:4f:aa:1f:db:2d:35:53:ff:32: dc:0c:ed:8c:f4:e5:b8:e9:19:87:9f:99:4d:72:c4:a0:55:c2: 67:22:2c:b2:46:af:47:83:3e:ed:25:d6:df:ce:23:d5:ba:cf: 7a:f1:b7:84:41:69:88:6c:cd:c6:b2:d0:64:50:22:ee:b6:a7: 7f:1a:42:ac:35:23:57:8f:cd:4c:de:da:3b:c8:2a:8c:dc:09: c1:03:84:95:3a:92:9c:a5:2f:6e:af:27:78:79:41:86:e8:70: 77:32:20:5b:a1:3d:77:7e:60:a1:ee:9f:48:86:13:23:4e:84: 7c:ed:96:1c:d7:4e:ae:ef:4f:a2:b5:a8:6b:df:7c:02:32:9d: c3:8a:ff:a6:8e:9e:d6:ac:5a:80:51:3a:08:4b:f3:dd:2d:91: ca:73:bf:86:1a:94:4f:cd:e7:43:06:90:50:68:58:6a:ec:e6: cd:8f:47:d9:26:53:f7:97:29:d4:36:1a:67:c9:78:ef:22:1d: 87:9b:09:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFM3cyVJ0xgec/TaMqREOhHaZlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNDA1MTEwNTE2MDFaFw0yNDA1MTQxMjUwMDFaMDMxMTAvBgNV BAMTKDc1ODg3RDkyMDUxNDVBMzNGNUQ0M0I3NDk4QjYzQzFBN0NCQTEwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLvobgGOvWhXtkwtRsgbyYvrL w6RQTW89F5O3pQymZwl5GM95U6JQ49fgtsoQf36Yk+uNK/KtTYqm7+wvrzqqfFJ9 oKm1jU1yu7pY8fJE+doiv/04IhedsTtpWLRaOoUruiPmLYHiUitGJOoU0jyxtZOC t+xTs7o9exK+zIhPDF2llibifnXcshooTHjwh5/tvR6lJHT/Vi7CBbvSC+K27+B2 rSZLCc5ZASglkYssEXqyvzZ0i+TjtGEdi1vdDxS6SIsnsldeIoAWbx+EszZ+mHRo 36N1tnlSxRi/73eCxBoWIBeojb3wDz/ZNzA8hpKRyztPLG3FeE1jMcXRl0YrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdYh9kgUUWjP11Dt0mLY8Gny6EJQwHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkZhqAexRUi5d6w2xc8x7hakx6enkOWA5Lq EWs5xz4kfpvbAIw1WInxWHvOvZryvJhkXbg1lR6+vuxdL/JI20+qH9stNVP/MtwM 7Yz05bjpGYefmU1yxKBVwmciLLJGr0eDPu0l1t/OI9W6z3rxt4RBaYhszcay0GRQ Iu62p38aQqw1I1ePzUze2jvIKozcCcEDhJU6kpylL26vJ3h5QYbocHcyIFuhPXd+ YKHun0iGEyNOhHztlhzXTq7vT6K1qGvffAIyncOK/6aOntasWoBROghL890tkcpz v4YalE/N50MGkFBoWGrs5s2PR9kmU/eXKdQ2GmfJeO8iHYebCTg= -----END CERTIFICATE-----Generated at Sat May 11 07:49:47 2024 by rpki-client on console-ams.rpki-client.org