$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: tmN+3MOQKHlklGncO6hDDdYQF1EtnTmySlm2az3P/wE= Subject key identifier: A3:DF:C8:20:03:29:76:13:19:21:8F:49:0B:62:25:72:45:E5:ED:E7 Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 462161C03A85C830A7B97D46AC577B6FE115419C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: A0 Signing time: Wed 29 May 2024 12:51:35 +0000 Manifest this update: Wed 29 May 2024 12:46:35 +0000 Manifest next update: Sat 01 Jun 2024 15:45:35 +0000 Files and hashes: 1: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: D4YE3uwZGEsBl7Rd/krICslWW39wv5ITXS8tnVvrFJk=) 2: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: eoiqESJfyAflmuyxAiqbZbjAB8pFlV4NBTXMBJ5PgaM=) 3: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: YwTP6biL0vWcLoh9MoLz1Uo2jrp+zMTivqpB+PZ6AqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 14:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:21:61:c0:3a:85:c8:30:a7:b9:7d:46:ac:57:7b:6f:e1:15:41:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: May 29 12:46:35 2024 GMT Not After : Jun 1 15:45:35 2024 GMT Subject: CN=A3DFC8200329761319218F490B62257245E5EDE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5e:fe:1e:2d:22:45:f7:af:16:c1:cc:88:56: a4:aa:60:ea:94:2b:a6:91:ff:20:09:88:54:ac:c8: 56:c4:2f:4a:95:d5:7e:09:1c:2d:68:8a:26:3b:cd: a6:98:99:a6:3e:9f:e4:22:a1:7e:43:3b:4d:0a:0a: e4:37:a4:c0:eb:4d:19:b5:37:5f:8c:69:bf:c9:d0: e2:dd:95:a1:f5:83:68:49:87:3e:07:40:18:d9:e4: f2:d0:a9:b9:76:b4:7b:df:86:73:bc:7e:14:45:31: f7:2f:2b:3b:cc:06:14:70:2a:36:e9:c2:ef:a8:b0: b5:5f:b7:81:ba:12:88:06:e7:c3:f8:9b:f0:12:39: f5:94:5f:9e:95:5c:1f:b6:88:36:6c:2e:55:93:e2: 57:81:b6:ce:2f:ca:9d:05:d7:10:83:45:3f:99:9a: 41:b5:b4:06:1c:fe:30:a3:d1:1a:4a:39:cd:e9:82: a9:db:bc:36:72:17:6b:10:85:b4:c5:16:aa:70:c3: 03:fa:3d:fd:5d:1e:3e:94:a9:43:c9:0a:39:88:62: ad:bf:16:2f:86:07:c0:da:e5:2d:5e:1a:15:01:89: 00:e8:f1:8e:5b:07:16:23:8b:b7:98:8a:a7:db:52: 4d:c5:8f:2b:55:f8:ab:42:47:da:56:da:2b:5f:03: 65:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DF:C8:20:03:29:76:13:19:21:8F:49:0B:62:25:72:45:E5:ED:E7 X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:09:b9:74:da:cd:f4:7b:12:75:4f:e0:33:5b:26:42:4c:b3: 43:aa:84:97:c6:66:d5:9b:38:bc:3f:11:75:07:9f:ee:de:c5: 52:07:ba:ff:c2:a5:4c:96:67:fa:40:74:a0:1a:b1:ab:4a:c5: a7:d4:c8:2f:85:3d:5b:1c:c6:13:44:64:0e:63:3d:72:d1:bd: 39:cc:cd:72:00:75:9c:d7:87:5b:2b:20:f1:46:a6:8c:8c:be: f8:57:73:73:e9:79:0c:d7:a1:48:1b:bc:9c:46:8e:00:e5:5a: d6:3a:7a:a1:7d:81:48:44:70:2a:a4:50:2f:28:0c:50:e9:f6: 29:97:34:24:09:52:76:26:8c:08:66:30:c6:e6:f7:41:ea:eb: 21:f8:08:70:14:7f:01:f6:00:87:03:b8:f8:3d:14:ff:c7:d3: 1d:7a:3a:f1:aa:97:83:4b:65:4a:7b:1e:80:bd:0e:69:25:9d: 99:1c:95:46:4a:01:21:a4:c2:a3:40:43:39:d5:70:39:7c:c6: e7:c3:ea:1a:92:89:ef:ff:40:3a:42:a8:68:9b:05:21:11:3d: 1f:25:7e:03:90:fe:6c:9a:84:ad:55:61:ea:7d:cc:ab:7c:18: ab:55:ee:ac:21:6c:3f:43:4b:0e:06:45:07:54:14:cf:a0:bf: 88:cf:7a:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURiFhwDqFyDCnuX1GrFd7b+EVQZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNDA1MjkxMjQ2MzVaFw0yNDA2MDExNTQ1MzVaMDMxMTAvBgNV BAMTKEEzREZDODIwMDMyOTc2MTMxOTIxOEY0OTBCNjIyNTcyNDVFNUVERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXv4eLSJF968WwcyIVqSqYOqU K6aR/yAJiFSsyFbEL0qV1X4JHC1oiiY7zaaYmaY+n+QioX5DO00KCuQ3pMDrTRm1 N1+Mab/J0OLdlaH1g2hJhz4HQBjZ5PLQqbl2tHvfhnO8fhRFMfcvKzvMBhRwKjbp wu+osLVft4G6EogG58P4m/ASOfWUX56VXB+2iDZsLlWT4leBts4vyp0F1xCDRT+Z mkG1tAYc/jCj0RpKOc3pgqnbvDZyF2sQhbTFFqpwwwP6Pf1dHj6UqUPJCjmIYq2/ Fi+GB8Da5S1eGhUBiQDo8Y5bBxYji7eYiqfbUk3FjytV+KtCR9pW2itfA2VvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo9/IIAMpdhMZIY9JC2IlckXl7ecwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM4JuXTazfR7EnVP4DNbJkJMs0OqhJfGZtWb OLw/EXUHn+7exVIHuv/CpUyWZ/pAdKAasatKxafUyC+FPVscxhNEZA5jPXLRvTnM zXIAdZzXh1srIPFGpoyMvvhXc3PpeQzXoUgbvJxGjgDlWtY6eqF9gUhEcCqkUC8o DFDp9imXNCQJUnYmjAhmMMbm90Hq6yH4CHAUfwH2AIcDuPg9FP/H0x16OvGql4NL ZUp7HoC9DmklnZkclUZKASGkwqNAQznVcDl8xufD6hqSie//QDpCqGibBSERPR8l fgOQ/myahK1VYep9zKt8GKtV7qwhbD9DSw4GRQdUFM+gv4jPemM= -----END CERTIFICATE-----Generated at Wed May 29 13:39:46 2024 by rpki-client on console-fra.rpki-client.org