$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: M9lA1PBj29Jy3JZdTopiS7c5X+mRoDOOaaacYMX/wnQ= Subject key identifier: 63:E0:41:34:B2:4B:99:53:0C:D0:99:DD:D7:94:5D:65:41:A4:D5:C6 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 103057F117F09A3AE4C7CED91EE8C97796452328 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: AB Signing time: Tue 21 May 2024 15:50:48 +0000 Manifest this update: Tue 21 May 2024 15:45:48 +0000 Manifest next update: Fri 24 May 2024 21:41:48 +0000 Files and hashes: 1: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: mY9nGHKi7YFpk7+fwd7/qH+h6ARI4z2zuLTwZFPNXjI=) 2: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: GkqP1tBJ/9agxHYe5ncZgwuG8VITyEYL/kjDUwj5Bhk=) 3: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: StKm/EBjyCtOBBqyOJASJhUXfaj5Ik+i6XQwhkj3F9Y=) 4: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: iTOGXrpbMeNc55/3DoD+VDgZo5uJSgIixPQ4Fa5DV8c=) 5: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: 8F7fiU7vGe9Vc51zIc4bJZmRh9Cp4cIynPTyrqXxjiA=) 6: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: 8P/eniB3l+x8N8PXkhr5dd2R7MKU8RlkgmGQ0mNXw4I=) 7: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: rMCEoNf1wNtL9Xq0GiwFXvxNeoAWHkOBKr6mSPuhUTo=) 8: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: Aee1Gbvr0vnI5GFSyf+LnZ8/t7rv6DOLKw6Sm7B4cvg=) 9: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: y4CphY2Eja4IBmaWSAMBzGabm9Rl4RkxNrghgS2laKY=) 10: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: q1fdKnTRqStAT3YE15vq79E+QpTxFHgvWmiz6yZ6fcY=) 11: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: PNswnDB59dy0WIKijBxTcNq2tOLHRD7Xyj3sC7yk3sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 21:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:30:57:f1:17:f0:9a:3a:e4:c7:ce:d9:1e:e8:c9:77:96:45:23:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: May 21 15:45:48 2024 GMT Not After : May 24 21:41:48 2024 GMT Subject: CN=63E04134B24B99530CD099DDD7945D6541A4D5C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:dd:58:07:be:6b:2f:40:b9:61:90:c0:d5: 6b:fe:02:bc:2f:5d:b2:d9:d6:39:94:ce:91:a9:08: 1b:3f:22:0d:10:0a:74:df:53:bb:28:0d:19:8c:16: 7e:10:75:5e:79:fc:b2:0f:88:a2:5b:f7:cd:9b:0b: 50:ae:93:82:77:7f:72:43:cb:da:85:8c:e6:cb:16: 44:d5:bc:1a:fc:1d:29:92:c9:9c:cc:82:56:c0:dd: 8c:b7:d8:72:a8:dd:83:29:70:d2:5d:42:3c:dd:1e: 46:50:02:54:ee:65:f9:dc:e9:82:f0:a2:0e:d6:58: 54:79:cd:66:dc:9f:6c:80:df:92:b3:31:3f:8b:cf: 81:77:d8:4c:d3:36:9f:50:00:63:72:e4:98:1e:77: 94:f3:4f:cd:09:ff:68:2b:c1:f9:16:ac:ad:6a:28: 42:37:ef:16:af:6a:bc:3e:db:65:17:58:a0:3b:d8: a9:39:2c:93:5a:38:50:16:bc:49:cc:1a:3b:e2:1d: 99:cd:95:31:2e:5b:b9:7a:34:e6:70:b5:7e:92:b3: cc:93:f9:f6:c6:00:d7:b5:ca:80:67:26:0d:3f:21: 7a:19:a3:2b:75:d4:c7:46:3b:5e:90:cb:04:ce:62: 93:a3:8e:26:3f:c0:f5:e2:49:b3:3a:80:c2:57:16: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E0:41:34:B2:4B:99:53:0C:D0:99:DD:D7:94:5D:65:41:A4:D5:C6 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a0:5e:37:db:68:1e:bf:68:26:9d:9d:6f:4c:e0:60:a6:e0: f7:df:3c:48:a2:a2:ec:e7:02:0a:9e:04:7a:bd:01:f8:6d:df: 3d:0b:bb:10:9b:84:b9:75:3e:83:92:50:ae:da:84:5a:f8:34: aa:16:37:18:a5:17:bf:2d:9e:9b:1f:81:8b:48:c6:2e:92:57: 34:77:d4:fe:26:2c:9c:b0:75:72:7e:21:4f:9f:2b:bf:2e:f0: 47:6f:ec:b3:d7:27:73:4c:16:7d:30:e8:2b:e4:f8:73:75:6e: 4c:bb:69:82:51:c8:92:77:d4:30:af:a8:ee:3e:1a:18:08:8e: 7c:10:ab:d0:90:58:24:21:f4:b5:16:3e:ae:20:15:9c:89:c0: df:8c:2d:5b:11:50:e9:54:b1:8e:f7:99:43:54:f2:d4:15:dd: bd:29:3b:61:15:f0:0f:57:89:ee:90:66:4b:8f:0b:38:be:c7: 2c:12:da:96:31:f8:db:08:e4:c2:ee:ee:ce:80:b5:97:85:fb: d3:e2:91:09:16:c6:fb:17:66:20:bf:7e:07:d2:4a:f9:dd:eb: cb:71:7c:b7:13:2b:1e:bc:70:a2:88:c9:14:b5:a4:9e:30:76: e3:00:89:7e:45:b9:01:20:f1:ce:ea:05:9d:c1:16:5e:4c:de: da:40:68:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDBX8Rfwmjrkx87ZHujJd5ZFIygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNDA1MjExNTQ1NDhaFw0yNDA1MjQyMTQxNDhaMDMxMTAvBgNV BAMTKDYzRTA0MTM0QjI0Qjk5NTMwQ0QwOTlEREQ3OTQ1RDY1NDFBNEQ1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGm91YB75rL0C5YZDA1Wv+Arwv XbLZ1jmUzpGpCBs/Ig0QCnTfU7soDRmMFn4QdV55/LIPiKJb982bC1Cuk4J3f3JD y9qFjObLFkTVvBr8HSmSyZzMglbA3Yy32HKo3YMpcNJdQjzdHkZQAlTuZfnc6YLw og7WWFR5zWbcn2yA35KzMT+Lz4F32EzTNp9QAGNy5Jged5TzT80J/2grwfkWrK1q KEI37xavarw+22UXWKA72Kk5LJNaOFAWvEnMGjviHZnNlTEuW7l6NOZwtX6Ss8yT +fbGANe1yoBnJg0/IXoZoyt11MdGO16QywTOYpOjjiY/wPXiSbM6gMJXFluxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY+BBNLJLmVMM0Jnd15RdZUGk1cYwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHegXjfbaB6/aCadnW9M4GCm4PffPEiiouzn AgqeBHq9Afht3z0LuxCbhLl1PoOSUK7ahFr4NKoWNxilF78tnpsfgYtIxi6SVzR3 1P4mLJywdXJ+IU+fK78u8Edv7LPXJ3NMFn0w6Cvk+HN1bky7aYJRyJJ31DCvqO4+ GhgIjnwQq9CQWCQh9LUWPq4gFZyJwN+MLVsRUOlUsY73mUNU8tQV3b0pO2EV8A9X ie6QZkuPCzi+xywS2pYx+NsI5MLu7s6AtZeF+9PikQkWxvsXZiC/fgfSSvnd68tx fLcTKx68cKKIyRS1pJ4wduMAiX5FuQEg8c7qBZ3BFl5M3tpAaGE= -----END CERTIFICATE-----Generated at Tue May 21 20:05:06 2024 by rpki-client on console-ams.rpki-client.org