$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft File: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft (raw, json) Hash identifier: YcWZyBnl/IrHuhP6OWK5ZGJXQI8JkPPiX2+IYxZ9E+g= Subject key identifier: D1:56:43:38:D7:4D:64:B6:FB:6D:26:77:DD:37:05:DD:C7:F8:F6:9C Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 17E15F1F9EB1D780D9669E067AB49E8727C47D52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft Manifest number: 0171 Signing time: Mon 25 Nov 2024 08:02:10 +0000 Manifest this update: Mon 25 Nov 2024 07:57:10 +0000 Manifest next update: Thu 28 Nov 2024 18:23:10 +0000 Files and hashes: 1: 3130332e3139312e3135322e302f32342d3234203d3e203338353234.roa (hash: WAM8LzXIJx5krdWc3hy1Oy3kMn09ylHcJLe1/WPk6IA=) 2: 28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl (hash: lfsHXSTxuMwu2+vSgiJIg+82LYgMPO62ZTUY9+bhevA=) 3: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (hash: JLi68jT6JyJ1AmvdN71cfeboNGR1+/XmSkJ6kzPhUrY=) 4: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (hash: 3q/CQB6AAqmbKR7BJ9ieGoRqrYEVNBUK4VjLkCeS2sQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e1:5f:1f:9e:b1:d7:80:d9:66:9e:06:7a:b4:9e:87:27:c4:7d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Nov 25 07:57:10 2024 GMT Not After : Nov 28 18:23:10 2024 GMT Subject: CN=D1564338D74D64B6FB6D2677DD3705DDC7F8F69C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:e8:3b:44:6f:8a:8f:16:35:93:24:7b:43: f3:20:2d:0d:af:4f:08:7c:1e:d1:c4:b8:1a:7a:af: 3b:ac:0a:f1:85:f5:08:45:35:6c:8e:0c:91:b2:65: f6:bb:dc:8d:79:c5:95:ba:55:65:8a:34:a1:11:30: 56:7d:f8:ad:f8:6c:a5:f8:79:f2:43:69:21:66:fc: c7:21:28:ad:04:4b:d6:35:5c:33:4d:35:bf:f8:15: 65:e8:dc:25:c7:c6:10:a0:cd:e9:27:ae:21:80:c7: 5b:69:43:23:87:d0:2a:23:23:69:52:3a:92:57:2e: 83:29:b9:fc:57:f5:8e:55:62:57:a1:85:a1:e3:8b: 98:ac:8a:0b:4e:37:c5:ef:5f:f5:c0:a8:ab:26:9f: e4:7b:06:8f:7e:da:34:12:fd:eb:92:a0:95:fd:57: b4:0d:e6:c7:29:ed:59:87:ea:4c:28:8f:0d:5f:e0: f5:e2:6b:6e:c7:df:94:e4:b4:54:72:44:89:45:27: 53:c6:f6:e0:5a:46:8d:17:62:bf:32:d4:b7:14:96: ca:39:6f:5b:42:29:56:af:67:f2:0e:d0:25:23:bc: 24:51:d4:65:74:05:15:6e:03:bb:cb:0d:cc:37:c3: 9e:ab:5d:81:5a:39:b2:02:fb:b6:2e:f4:52:1e:53: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:43:38:D7:4D:64:B6:FB:6D:26:77:DD:37:05:DD:C7:F8:F6:9C X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ac:bc:df:da:76:b0:b8:e2:8b:93:f7:71:7f:9d:cb:f4:e2: 7a:9e:04:c6:92:88:c3:52:1c:5d:3d:44:cb:fc:1d:9a:bd:a7: 35:ad:04:fe:d5:2a:df:73:01:75:69:cb:4b:0b:fd:d7:1e:b1: 01:94:a9:d0:63:fc:8b:81:28:34:d5:d8:97:66:76:b9:f9:cb: 53:33:3f:19:42:7a:0b:b3:52:26:35:ea:b5:ac:ab:c9:3a:08: 4e:96:48:83:11:be:ba:0c:e5:27:e3:6d:fc:e4:2b:ae:30:2f: dc:f5:88:1c:d0:2d:c4:23:28:5b:60:60:38:fe:fb:3f:75:fc: 17:08:fd:f7:79:2b:2e:5f:75:af:19:82:b3:94:7c:91:04:29: 63:e3:c1:98:f4:ef:1d:eb:43:36:db:e0:35:1f:d0:e0:d1:d1: e1:4b:d8:c2:8b:4c:28:f2:0c:6f:de:52:af:90:4e:bd:6b:ca: c6:93:b9:32:93:c4:1b:e1:6c:b4:d5:73:0d:bf:f8:fa:50:d7: 34:7a:13:b9:29:dd:6a:04:cf:8f:3a:49:2f:12:c5:32:c7:49: 9a:e5:c6:c6:d5:24:4f:4f:49:13:3f:53:ee:6f:6f:41:bd:b4: c7:4a:01:62:94:cd:e8:1e:b8:90:a7:bb:14:d0:65:6c:3d:a6: 18:cc:91:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+FfH56x14DZZp4GerSehyfEfVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNDExMjUwNzU3MTBaFw0yNDExMjgxODIzMTBaMDMxMTAvBgNV BAMTKEQxNTY0MzM4RDc0RDY0QjZGQjZEMjY3N0REMzcwNUREQzdGOEY2OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1B+g7RG+KjxY1kyR7Q/MgLQ2v Twh8HtHEuBp6rzusCvGF9QhFNWyODJGyZfa73I15xZW6VWWKNKERMFZ9+K34bKX4 efJDaSFm/MchKK0ES9Y1XDNNNb/4FWXo3CXHxhCgzeknriGAx1tpQyOH0CojI2lS OpJXLoMpufxX9Y5VYlehhaHji5isigtON8XvX/XAqKsmn+R7Bo9+2jQS/euSoJX9 V7QN5scp7VmH6kwojw1f4PXia27H35TktFRyRIlFJ1PG9uBaRo0XYr8y1LcUlso5 b1tCKVavZ/IO0CUjvCRR1GV0BRVuA7vLDcw3w56rXYFaObIC+7Yu9FIeUwpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0VZDONdNZLb7bSZ33TcF3cf49pwwHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZhNmNhMTItYjI4Ny00YWM3LTg3 YjgtNmNkNzMzNTNlNjdmLzAvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNF NTA0MzFGMEY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6svN/adrC44ouT93F/ncv04nqeBMaSiMNS HF09RMv8HZq9pzWtBP7VKt9zAXVpy0sL/dcesQGUqdBj/IuBKDTV2Jdmdrn5y1Mz PxlCeguzUiY16rWsq8k6CE6WSIMRvroM5SfjbfzkK64wL9z1iBzQLcQjKFtgYDj+ +z91/BcI/fd5Ky5fda8ZgrOUfJEEKWPjwZj07x3rQzbb4DUf0ODR0eFL2MKLTCjy DG/eUq+QTr1rysaTuTKTxBvhbLTVcw2/+PpQ1zR6E7kp3WoEz486SS8SxTLHSZrl xsbVJE9PSRM/U+5vb0G9tMdKAWKUzegeuJCnuxTQZWw9phjMkc4= -----END CERTIFICATE-----Generated at Mon Nov 25 09:00:38 2024 by rpki-client on console-fra.rpki-client.org