$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft File: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json) Hash identifier: 1tWKKjehT/SIJiG6frMdqMFb0mQEYcQMCxPji6w9s5c= Subject key identifier: FA:EE:05:B7:36:7A:67:1F:EF:F8:EF:D6:72:85:73:AD:8F:C5:3C:97 Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Certificate serial: 5A8FF28D3055755B4A24FE793B35F40EEF4159B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft Manifest number: 042C Signing time: Sat 04 May 2024 13:41:50 +0000 Manifest this update: Sat 04 May 2024 13:36:50 +0000 Manifest next update: Tue 07 May 2024 23:49:50 +0000 Files and hashes: 1: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: be+hrtHr5V1tSQeaKLNVm4SZ+dTaEFPRXbaHn+csWAc=) 2: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: NC7UQzMzehzvcQop5/nkPbqWPhAEvNMpbzoQLjlmcp4=) 3: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: FIN6+nGIkSiIrcV086SH0K+rB5B/J+yZXF/Or4Gzx/A=) 4: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: WeYEoZ2koY/4zzYA0lWOUta5TkOdwoQ08rtPMK1KVzg=) 5: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: qa6SWYQ3z7tubsYGKVAhbTn4KZFDnx+c4xy/e1J05DI=) 6: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: pm2oEmlVpFE6opundKNDZiI0bRhTNjojD+xX76GUbuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:8f:f2:8d:30:55:75:5b:4a:24:fe:79:3b:35:f4:0e:ef:41:59:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Validity Not Before: May 4 13:36:50 2024 GMT Not After : May 7 23:49:50 2024 GMT Subject: CN=FAEE05B7367A671FEFF8EFD6728573AD8FC53C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:fc:c2:d8:01:d8:e5:6c:fb:18:68:db:66: ed:dc:1d:93:39:90:a7:32:64:2b:99:47:af:99:1c: 58:5d:ff:b4:51:fb:a1:c4:04:6b:04:2a:eb:c6:41: 09:e6:4c:df:18:07:38:14:b8:da:e5:03:a1:cb:dd: 16:e3:8b:f2:c9:b9:ca:60:64:5a:09:c9:43:27:fd: 23:86:b6:97:ec:4b:27:d8:20:de:99:f5:c9:1f:63: e6:74:72:cb:b3:25:a0:b4:28:d0:e0:e9:be:98:c2: 5c:a8:e5:2f:aa:dc:a5:22:31:08:2c:be:0b:5b:04: e3:b2:b9:c8:75:c2:30:09:27:09:1f:94:00:d7:53: 93:6c:db:94:dd:2d:78:a4:c1:7a:d5:e5:f8:26:17: 73:da:12:d4:77:00:7a:09:6a:63:84:f0:e0:38:2a: 7a:63:8a:55:eb:df:50:3b:4e:95:2f:09:66:e0:99: 6f:3c:17:52:bf:21:d6:5d:0f:71:13:9b:3b:c1:78: c6:fb:6e:f9:3a:b7:c1:f0:d4:91:2b:bd:b9:b1:15: 3d:2f:ab:ed:52:10:8c:51:3b:79:91:ed:8b:b7:1c: 02:58:9e:10:fb:b1:5c:d9:b6:f1:a3:be:4d:32:6f: e7:aa:59:90:4b:c0:58:cf:01:a8:31:73:71:64:79: 5b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EE:05:B7:36:7A:67:1F:EF:F8:EF:D6:72:85:73:AD:8F:C5:3C:97 X509v3 Authority Key Identifier: keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b9:59:96:68:83:a4:2b:bd:71:56:e2:0e:e8:c5:d6:43:d8: ac:53:f7:7a:d2:74:ae:4c:72:93:7a:26:4a:1e:c4:3b:5b:42: f0:90:0b:ac:78:6b:7f:67:76:2e:1c:7d:25:73:c5:d9:c7:e4: 5c:f4:6d:57:8d:04:8d:e6:18:08:3e:c3:0f:b0:65:2d:16:cc: 39:fd:22:df:b8:67:df:21:8e:de:47:d0:46:4d:5a:73:c4:e0: f8:87:41:ef:cc:ba:9d:ac:90:4a:ed:1c:01:7e:b8:6c:98:33: 1c:e4:a7:1a:97:85:67:31:52:7a:57:f7:21:d2:cd:67:35:ae: 95:9e:22:fe:e7:e0:d8:a0:c3:ab:39:44:1f:33:aa:20:93:9b: 70:09:f2:fd:37:48:de:4c:f3:3a:92:96:cd:41:01:96:6d:4a: b4:d6:8e:ae:8e:98:f6:4e:1a:44:0b:31:bf:69:de:5b:a9:99: 7e:c3:95:aa:37:2f:f4:3a:2e:a5:37:80:98:06:d5:c2:c8:05: a4:fd:1c:5d:c2:47:4f:11:99:2e:cc:c7:91:64:36:25:9e:0f: 71:1d:e7:94:98:da:9e:f8:e5:91:d4:65:99:89:a7:c2:2b:61: 9a:5f:08:64:28:9c:7d:82:92:a8:23:48:b0:7d:91:b3:56:df: 0d:0a:cb:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWo/yjTBVdVtKJP55OzX0Du9BWbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw MTI1MkE1QzAeFw0yNDA1MDQxMzM2NTBaFw0yNDA1MDcyMzQ5NTBaMDMxMTAvBgNV BAMTKEZBRUUwNUI3MzY3QTY3MUZFRkY4RUZENjcyODU3M0FEOEZDNTNDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+evzC2AHY5Wz7GGjbZu3cHZM5 kKcyZCuZR6+ZHFhd/7RR+6HEBGsEKuvGQQnmTN8YBzgUuNrlA6HL3Rbji/LJucpg ZFoJyUMn/SOGtpfsSyfYIN6Z9ckfY+Z0csuzJaC0KNDg6b6Ywlyo5S+q3KUiMQgs vgtbBOOyuch1wjAJJwkflADXU5Ns25TdLXikwXrV5fgmF3PaEtR3AHoJamOE8OA4 KnpjilXr31A7TpUvCWbgmW88F1K/IdZdD3ETmzvBeMb7bvk6t8Hw1JErvbmxFT0v q+1SEIxRO3mR7Yu3HAJYnhD7sVzZtvGjvk0yb+eqWZBLwFjPAagxc3FkeVtFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+u4FtzZ6Zx/v+O/WcoVzrY/FPJcwHwYDVR0j BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1 MkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3 OTQwMTI1MkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHm5WZZog6QrvXFW4g7oxdZD2KxT93rSdK5M cpN6JkoexDtbQvCQC6x4a39ndi4cfSVzxdnH5Fz0bVeNBI3mGAg+ww+wZS0WzDn9 It+4Z98hjt5H0EZNWnPE4PiHQe/Mup2skErtHAF+uGyYMxzkpxqXhWcxUnpX9yHS zWc1rpWeIv7n4Nigw6s5RB8zqiCTm3AJ8v03SN5M8zqSls1BAZZtSrTWjq6OmPZO GkQLMb9p3lupmX7Dlao3L/Q6LqU3gJgG1cLIBaT9HF3CR08RmS7Mx5FkNiWeD3Ed 55SY2p745ZHUZZmJp8IrYZpfCGQonH2CkqgjSLB9kbNW3w0KyzQ= -----END CERTIFICATE-----Generated at Sat May 4 14:44:41 2024 by rpki-client on console-ams.rpki-client.org