$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: ieR20N4eW6nDLU93+D6inw+Txoe0PdsZVJSWLrSK/HI= Subject key identifier: 88:73:7E:34:FF:50:25:BE:05:F7:38:55:90:30:24:B0:18:79:CF:23 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 4E36B272078B1FE25E67D743A97C0CD1ADEAE4A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: 1B Signing time: Mon 27 May 2024 18:12:03 +0000 Manifest this update: Mon 27 May 2024 18:07:03 +0000 Manifest next update: Fri 31 May 2024 01:07:03 +0000 Files and hashes: 1: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: wDBXfWzSZ/NBMUND+3i97emgD44mwj/8C2Uzeqo/uiI=) 2: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: D0QSrTbbajLK0QqFhX3VKJcPiGrWSQpUK9CmIM7tZNk=) 3: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: KInUFnj0jPB4qW0Nl3+0rFWCjJGhb0SIgpknAKis5IA=) 4: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: s1OmxYSF70umYzo+PzpvKZUI3/QCdF0LRMd2Mr5i2zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 10:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:36:b2:72:07:8b:1f:e2:5e:67:d7:43:a9:7c:0c:d1:ad:ea:e4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: May 27 18:07:03 2024 GMT Not After : May 31 01:07:03 2024 GMT Subject: CN=88737E34FF5025BE05F73855903024B01879CF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:be:df:4d:83:03:5c:72:79:00:d9:b6:8d: 1c:27:67:d7:16:da:b1:e9:e7:da:6d:c8:3c:07:1a: b9:57:e9:46:a5:96:1f:16:50:16:90:96:a6:45:b5: 44:55:f6:50:87:ee:71:a2:c0:ea:96:ab:5f:72:96: a5:47:a4:76:c0:bd:73:1b:92:14:5a:38:b1:57:59: 5a:91:60:93:20:09:19:24:d4:9e:9e:df:0e:44:10: 8f:3e:2e:85:3c:6f:75:c8:d7:f8:55:ea:e7:34:c6: a9:b7:8c:9e:57:54:ff:73:24:d1:c0:77:0d:72:77: a3:37:3b:01:58:c4:b0:a4:9c:eb:57:c6:9b:fc:69: e8:82:ed:2e:5a:68:52:19:57:f3:80:47:45:d7:32: 40:d7:3d:1c:d1:f6:5c:29:08:d0:63:5d:37:2d:c0: 6b:59:44:66:8a:78:0e:3a:95:11:02:88:fe:43:62: 95:18:de:57:9f:d6:ce:17:a0:d3:a5:bc:02:2f:99: 63:04:c0:e5:50:b8:13:88:1f:ba:ff:c4:94:b6:c4: 7e:79:00:b4:81:05:04:3e:27:38:03:bc:9c:2b:33: 1b:53:6b:3b:c5:4d:78:d6:b5:be:65:eb:63:0a:6b: 2b:26:3d:e4:86:f6:85:77:7d:18:99:4a:2d:d3:dd: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:73:7E:34:FF:50:25:BE:05:F7:38:55:90:30:24:B0:18:79:CF:23 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c7:b7:21:60:6e:e9:2c:4a:04:59:17:f1:a5:6d:80:ea:02: be:d5:bc:b2:77:92:2d:70:c1:25:05:82:90:07:07:d7:4f:f4: bb:47:e7:1d:91:3d:06:9c:c1:fb:4d:13:12:de:ca:7b:ce:c1: c4:2a:52:e9:02:1e:18:69:bd:35:2a:2b:88:82:93:52:18:ad: 61:2b:7b:53:60:01:14:d3:6c:6f:62:36:b4:73:44:c9:5b:b6: 5f:17:1e:5c:40:fe:9e:98:c6:3a:02:3b:4d:d2:37:76:74:b7: 9f:c1:17:24:72:3a:1f:fb:77:75:cc:6b:62:91:9a:10:b7:ae: 5a:e4:b6:4e:a7:94:5c:14:71:2b:bf:85:1a:d2:3e:0e:4f:06: d1:09:4a:f2:bc:67:aa:a3:c3:0b:b1:ab:6e:34:dc:0b:7e:79: a5:38:02:b4:d6:08:7f:43:9d:e3:f4:80:7d:0c:4e:ce:8e:57: ca:79:d0:eb:66:e5:fd:d5:a2:4b:0e:b0:cc:1f:8b:49:f2:60: 97:dc:88:d2:fa:bd:ce:77:21:7a:f7:17:8c:b2:01:de:a5:c0: 8b:66:d9:9b:3e:8e:6a:f8:65:aa:0a:e0:36:c3:09:41:a0:b0: 88:55:08:76:3a:70:41:f7:4d:8b:40:2a:aa:a5:76:89:ff:81: bd:cf:7d:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjaycgeLH+JeZ9dDqXwM0a3q5KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNDA1MjcxODA3MDNaFw0yNDA1MzEwMTA3MDNaMDMxMTAvBgNV BAMTKDg4NzM3RTM0RkY1MDI1QkUwNUY3Mzg1NTkwMzAyNEIwMTg3OUNGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPpr7fTYMDXHJ5ANm2jRwnZ9cW 2rHp59ptyDwHGrlX6Uallh8WUBaQlqZFtURV9lCH7nGiwOqWq19ylqVHpHbAvXMb khRaOLFXWVqRYJMgCRkk1J6e3w5EEI8+LoU8b3XI1/hV6uc0xqm3jJ5XVP9zJNHA dw1yd6M3OwFYxLCknOtXxpv8aeiC7S5aaFIZV/OAR0XXMkDXPRzR9lwpCNBjXTct wGtZRGaKeA46lRECiP5DYpUY3lef1s4XoNOlvAIvmWMEwOVQuBOIH7r/xJS2xH55 ALSBBQQ+JzgDvJwrMxtTazvFTXjWtb5l62MKaysmPeSG9oV3fRiZSi3T3S7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiHN+NP9QJb4F9zhVkDAksBh5zyMwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnHtyFgbuksSgRZF/GlbYDqAr7VvLJ3ki1w wSUFgpAHB9dP9LtH5x2RPQacwftNExLeynvOwcQqUukCHhhpvTUqK4iCk1IYrWEr e1NgARTTbG9iNrRzRMlbtl8XHlxA/p6YxjoCO03SN3Z0t5/BFyRyOh/7d3XMa2KR mhC3rlrktk6nlFwUcSu/hRrSPg5PBtEJSvK8Z6qjwwuxq2403At+eaU4ArTWCH9D neP0gH0MTs6OV8p50Otm5f3VoksOsMwfi0nyYJfciNL6vc53IXr3F4yyAd6lwItm 2Zs+jmr4ZaoK4DbDCUGgsIhVCHY6cEH3TYtAKqqldon/gb3Pfbc= -----END CERTIFICATE-----Generated at Mon May 27 19:33:08 2024 by rpki-client on console-fra.rpki-client.org