$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: fK65jYC1UGO4GF2XjoySXBOdKmFj1sO2exxbEL+sa8c= Subject key identifier: F0:A2:F1:EA:2A:D8:BA:CA:46:4F:AD:01:B5:C0:E8:35:A0:8C:55:46 Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 3EE7C3B1FAAD0F33D71E0D58732650D7940FE4B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: FE Signing time: Wed 22 May 2024 01:01:11 +0000 Manifest this update: Wed 22 May 2024 00:56:11 +0000 Manifest next update: Sat 25 May 2024 04:16:11 +0000 Files and hashes: 1: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: qNHc6aw3RgUmG2ISmtrXdC24D4mddWYbCDMSSOJPsns=) 2: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: iikxiNkTJKaYC4VLYjN4A5ypFehw5xOUrg7BMWrFLp0=) 3: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gXtAKsat10piv34P6t4y8Tc8WIx9/KwM7U5XBGfjT58=) 4: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: edAA/nN0GmKRzRtmCO8eaYhRiLGRK7B7QStL+JNnwmU=) 5: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: 2eZReKxoWiqw15MwiLMpFmsr1Ax2kE3sD2eDpawCLD8=) 6: 3132342e3130392e32322e302f32342d3234203d3e203338353237.roa (hash: radLee8jKyOqtTKA/5KUI0z20EAw6UagbI424s1rKQQ=) 7: 32372e3132342e38332e302f32342d3234203d3e20313338303839.roa (hash: Nk9nfDWsxIJywmYhHNIEOyLCZi5H+xbwJBnaNxBmKiM=) 8: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: nVBQut9cLfqGgtbiyks5zEITKa9iT1MH4ntzbKpfbZ8=) 9: 3130332e32352e3130382e302f32342d3234203d3e203338353237.roa (hash: Bv8+N1YZfCOW9Mp7ZexXKugvyjYari83w80CY0qHyeM=) 10: 32372e3132342e38372e302f32342d3234203d3e203338353237.roa (hash: UcmU8aB4eGLwy3uk7kl62Yz0rtXFjCU+HO9XmOHngFE=) 11: 3131392e34372e39302e302f32342d3234203d3e20313338303839.roa (hash: 0DnYU2jr7QxjixoSztZEMdXjq3UixntmcvFZ+jIl2KU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 00:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e7:c3:b1:fa:ad:0f:33:d7:1e:0d:58:73:26:50:d7:94:0f:e4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: May 22 00:56:11 2024 GMT Not After : May 25 04:16:11 2024 GMT Subject: CN=F0A2F1EA2AD8BACA464FAD01B5C0E835A08C5546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:d5:00:ca:b0:1b:6a:80:cc:60:ae:3b:c6: 2c:f9:6b:e4:73:21:49:b0:fc:b4:11:3b:93:8c:be: c5:01:fb:a7:88:7d:f4:1c:94:ba:c2:2c:8b:73:b6: 9a:24:7c:03:ce:21:b6:95:8d:f1:31:b0:09:59:73: 44:54:f0:98:ff:a0:27:c1:00:30:d2:ac:2e:01:32: 0c:fa:51:e7:f0:fe:18:76:9d:28:1d:93:f4:7b:69: 58:05:6f:f6:fb:ac:70:8b:be:02:a9:25:22:84:d0: 1a:ea:ca:9b:8a:12:81:a1:1a:91:a2:70:25:7c:52: 81:9d:65:be:a4:e0:96:f4:58:41:d3:0f:7e:d1:1f: 98:db:56:33:7e:01:5a:6a:87:90:92:28:bc:a6:74: 4b:b6:f1:2d:cc:a6:83:e1:13:e3:78:8e:f8:44:ae: 85:c0:ee:90:71:18:a2:a3:e3:f8:77:99:d7:fd:e1: 3d:36:c2:55:10:3d:55:2e:8f:ef:f8:ba:d6:f3:71: 54:e9:c5:4f:f6:cb:b9:17:9b:7f:fb:63:57:96:04: 6b:77:55:6c:0e:bf:70:30:cb:c7:f2:70:7d:15:12: 78:8a:ec:54:7b:19:c7:76:40:db:18:c7:72:eb:3c: e3:1d:e9:11:70:08:da:fd:13:1c:af:0e:cc:a6:47: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A2:F1:EA:2A:D8:BA:CA:46:4F:AD:01:B5:C0:E8:35:A0:8C:55:46 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a6:e9:ce:e9:60:8f:30:e1:68:e8:5a:a8:f0:00:01:73:b0: c0:3f:1d:31:20:7a:f9:7f:f1:ea:df:80:2f:ca:7a:a8:9a:61: e6:ce:08:0d:7d:b6:51:df:24:c8:7e:4b:6d:5d:b5:cd:cb:90: 5d:d1:32:5f:dd:cc:56:e2:49:cc:f0:37:4e:60:59:6b:11:f3: 89:27:b6:50:bd:07:9c:2c:93:6f:86:27:34:1d:d5:d1:30:21: eb:29:d7:a7:1c:fc:26:45:7b:7f:8d:41:0f:d9:f8:25:4f:d3: d9:3e:8a:41:a2:b8:63:39:6e:d0:74:57:fb:b1:3e:a7:63:a6: ed:54:fb:8f:e1:34:99:43:ba:a2:10:50:e3:89:0c:4a:eb:f0: 6c:fb:0c:92:60:db:36:c0:26:ec:3a:6c:be:1f:25:ab:5f:54: 33:ae:18:10:4c:51:7f:e7:33:f5:8e:93:70:dd:bd:9f:96:bd: bc:d9:03:bf:5c:a6:93:91:17:ed:53:82:78:15:e1:2a:2e:42: ce:64:3b:52:19:aa:88:88:61:23:bc:04:c7:f2:5a:24:a6:4a: cb:47:c0:c9:60:a7:4c:4a:ba:83:ed:7e:a4:02:b7:6c:37:71: bc:0a:a0:62:58:85:24:fd:af:35:e1:58:51:dd:0d:82:8c:19: 60:a9:8b:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPufDsfqtDzPXHg1YcyZQ15QP5LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNDA1MjIwMDU2MTFaFw0yNDA1MjUwNDE2MTFaMDMxMTAvBgNV BAMTKEYwQTJGMUVBMkFEOEJBQ0E0NjRGQUQwMUI1QzBFODM1QTA4QzU1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TNUAyrAbaoDMYK47xiz5a+Rz IUmw/LQRO5OMvsUB+6eIffQclLrCLItztpokfAPOIbaVjfExsAlZc0RU8Jj/oCfB ADDSrC4BMgz6Uefw/hh2nSgdk/R7aVgFb/b7rHCLvgKpJSKE0BrqypuKEoGhGpGi cCV8UoGdZb6k4Jb0WEHTD37RH5jbVjN+AVpqh5CSKLymdEu28S3MpoPhE+N4jvhE roXA7pBxGKKj4/h3mdf94T02wlUQPVUuj+/4utbzcVTpxU/2y7kXm3/7Y1eWBGt3 VWwOv3Awy8fycH0VEniK7FR7Gcd2QNsYx3LrPOMd6RFwCNr9ExyvDsymR4E9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8KLx6irYuspGT60BtcDoNaCMVUYwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEam6c7pYI8w4WjoWqjwAAFzsMA/HTEgevl/ 8erfgC/KeqiaYebOCA19tlHfJMh+S21dtc3LkF3RMl/dzFbiSczwN05gWWsR84kn tlC9B5wsk2+GJzQd1dEwIesp16cc/CZFe3+NQQ/Z+CVP09k+ikGiuGM5btB0V/ux Pqdjpu1U+4/hNJlDuqIQUOOJDErr8Gz7DJJg2zbAJuw6bL4fJatfVDOuGBBMUX/n M/WOk3DdvZ+WvbzZA79cppORF+1TgngV4SouQs5kO1IZqoiIYSO8BMfyWiSmSstH wMlgp0xKuoPtfqQCt2w3cbwKoGJYhST9rzXhWFHdDYKMGWCpi0g= -----END CERTIFICATE-----Generated at Wed May 22 01:45:30 2024 by rpki-client on console-fra.rpki-client.org