$ rpki-client -vvf repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft File: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft (raw, json) Hash identifier: gIkycgAF7xbZDtOeun58/XbjplHWQs1mgrlH0AsvVlU= Subject key identifier: DC:4F:A9:A3:E1:52:E4:8C:C5:65:DC:42:DD:A9:E7:DB:C0:32:05:35 Authority key identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 Certificate issuer: /CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Certificate serial: 5F5F587A16A29379ABBB392E2518376C107C0A0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft Manifest number: 0429 Signing time: Wed 01 May 2024 16:01:46 +0000 Manifest this update: Wed 01 May 2024 15:56:46 +0000 Manifest next update: Sat 04 May 2024 20:05:46 +0000 Files and hashes: 1: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: +3guWGbL0kTWZxMoWABBSF3mVK/ffFvwFajJmSYEEcA=) 2: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: Pa4d5DRT+Z2qzEntNYDFq6d4yDn9TS5byEHJUUm5uYc=) 3: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: XcBjcZy0p8TxBZrS2TlS6e6MAgHjo+EAz20bGzRADcU=) 4: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: meK9UPSwIRMuipjtbgcuzGV+cj84sTnXn/vqXnCE+eM=) 5: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: EE/0v4WfFcBEGSUNLrjNAiGzdpFIqVIrqfTwOoiNBAE=) 6: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: JyDjX/EBqIVGtmzdCihVWXBFxFGBLzAjkX6WYDsSnlU=) 7: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: kqAp6pv1eHKNb8P40keUlm1IVxrErqUL8wb5wmptx+E=) 8: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl (hash: qZb3sJDzTrS5+SSzVLQZ8qYanCFInAiqNMy8U/8aMOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5f:58:7a:16:a2:93:79:ab:bb:39:2e:25:18:37:6c:10:7c:0a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Validity Not Before: May 1 15:56:46 2024 GMT Not After : May 4 20:05:46 2024 GMT Subject: CN=DC4FA9A3E152E48CC565DC42DDA9E7DBC0320535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:4b:fd:b4:76:d6:fb:00:42:4d:16:83:77: 36:8d:72:37:34:5b:2e:23:00:01:e5:88:11:bb:76: 70:de:3d:ee:df:0d:b4:64:37:ef:6d:af:cd:28:f2: f8:9b:8c:2d:a3:3b:cb:13:4b:d9:0d:a1:64:ce:e0: 39:5c:ec:88:28:d7:44:eb:47:20:3b:ee:5a:e7:30: 8a:96:c1:9c:aa:33:e1:5f:55:32:29:2a:02:16:bc: fa:3a:f0:dc:c4:74:85:07:aa:0b:04:a4:b1:8c:84: 45:18:8f:f7:a7:f0:28:fa:41:e4:2a:60:17:ba:6c: 9b:d3:1f:2e:27:b9:2d:02:87:fe:ad:95:bd:2b:58: 9b:63:61:b7:2b:bb:a1:0c:df:63:11:48:75:65:f1: 2c:ae:b9:1a:5f:5c:6e:73:32:bc:c8:ef:04:79:a6: f2:5b:8e:a1:d5:d2:9f:c1:5a:7d:6a:03:41:c9:ed: 10:a9:79:55:95:55:b2:e8:03:d0:f3:d3:66:dd:c2: d3:74:e8:d8:aa:72:c6:2a:88:7b:ce:1a:d0:80:76: 9a:b2:e6:52:1e:b2:5f:08:af:84:5c:f1:8d:e3:bb: 9a:48:8f:29:cf:30:99:ed:4b:67:b9:7b:b5:fc:7d: 7d:aa:15:72:9e:2a:57:86:0a:6b:bf:d6:23:d6:19: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:A9:A3:E1:52:E4:8C:C5:65:DC:42:DD:A9:E7:DB:C0:32:05:35 X509v3 Authority Key Identifier: keyid:42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:3f:35:19:09:9d:33:7b:90:09:f4:ef:82:05:01:5c:18:5b: 43:74:42:28:a3:87:4a:24:d7:3a:c9:02:65:ce:1e:9a:b3:2e: 73:a8:d5:98:4a:bc:e6:aa:ca:1b:41:07:60:5e:a5:47:29:e4: e2:3a:76:35:a1:6f:0f:64:3e:c7:a6:89:76:a2:87:14:cd:4c: 75:7d:4e:04:ec:fc:3c:36:16:cf:c7:a9:62:b4:84:12:37:7e: 88:55:6a:a2:08:f3:84:c6:74:5a:fd:e9:b9:eb:3e:a1:9e:37: 2c:a2:54:14:cf:74:ce:93:90:e2:53:38:d2:2b:9e:3d:b0:39: 25:e8:a1:bb:72:fa:bc:af:96:92:fe:c9:83:a3:85:f6:1e:30: a0:af:e0:34:c3:2d:45:cb:6a:d5:af:21:ad:8f:b6:32:fc:f2: 09:dc:c5:78:24:6f:6d:fb:65:c1:14:1a:bf:e5:d8:7a:0e:32: 18:d5:76:0d:79:22:e6:71:e1:c3:ef:29:10:97:27:93:25:80: d2:98:47:4d:a8:3d:c1:97:1a:d7:69:5f:1e:dc:ad:e6:d5:40: e5:b5:c6:83:cf:0b:a3:8f:6a:02:1b:1d:bb:15:08:ac:c6:28: 7e:07:69:ec:62:23:24:4c:42:ba:ed:67:46:e6:0d:ae:43:00: 81:a1:b9:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX19Yehaik3mruzkuJRg3bBB8CgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVGMEFF Q0M3RkU5NjAeFw0yNDA1MDExNTU2NDZaFw0yNDA1MDQyMDA1NDZaMDMxMTAvBgNV BAMTKERDNEZBOUEzRTE1MkU0OENDNTY1REM0MkREQTlFN0RCQzAzMjA1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdkv9tHbW+wBCTRaDdzaNcjc0 Wy4jAAHliBG7dnDePe7fDbRkN+9tr80o8vibjC2jO8sTS9kNoWTO4Dlc7Igo10Tr RyA77lrnMIqWwZyqM+FfVTIpKgIWvPo68NzEdIUHqgsEpLGMhEUYj/en8Cj6QeQq YBe6bJvTHy4nuS0Ch/6tlb0rWJtjYbcru6EM32MRSHVl8SyuuRpfXG5zMrzI7wR5 pvJbjqHV0p/BWn1qA0HJ7RCpeVWVVbLoA9Dz02bdwtN06NiqcsYqiHvOGtCAdpqy 5lIesl8Ir4Rc8Y3ju5pIjynPMJntS2e5e7X8fX2qFXKeKleGCmu/1iPWGaQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3E+po+FS5IzFZdxC3ann28AyBTUwHwYDVR0j BBgwFoAUQoqkJA50Hyfjoh78KdRfCuzH/pYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDNlMmU2Ny1hMTcxLTRkOWUtYTkzNS00MDY5MDJiMWUxM2IvMC80MjhBQTQyNDBF NzQxRjI3RTNBMjFFRkMyOUQ0NUYwQUVDQzdGRTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVGMEFFQ0M3 RkU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVG MEFFQ0M3RkU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALw/NRkJnTN7kAn074IFAVwYW0N0Qiijh0ok 1zrJAmXOHpqzLnOo1ZhKvOaqyhtBB2BepUcp5OI6djWhbw9kPsemiXaihxTNTHV9 TgTs/Dw2Fs/HqWK0hBI3fohVaqII84TGdFr96bnrPqGeNyyiVBTPdM6TkOJTONIr nj2wOSXoobty+ryvlpL+yYOjhfYeMKCv4DTDLUXLatWvIa2PtjL88gncxXgkb237 ZcEUGr/l2HoOMhjVdg15IuZx4cPvKRCXJ5MlgNKYR02oPcGXGtdpXx7crebVQOW1 xoPPC6OPagIbHbsVCKzGKH4HaexiIyRMQrrtZ0bmDa5DAIGhuQY= -----END CERTIFICATE-----Generated at Wed May 1 19:11:09 2024 by rpki-client on console-fra.rpki-client.org