$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: xIcq/PTWQoIAeuL5FEDRa5ApkkUxPX/XJxl6UlVZ6o4= Subject key identifier: 5A:3F:79:DE:DD:39:EC:49:A8:26:06:B3:51:78:57:6C:00:2F:9F:3E Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 218883BEC2BF928943B776A4BE57A9B556A85641 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: 0153 Signing time: Fri 22 Nov 2024 14:11:24 +0000 Manifest this update: Fri 22 Nov 2024 14:06:24 +0000 Manifest next update: Mon 25 Nov 2024 18:35:24 +0000 Files and hashes: 1: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: 2eZReKxoWiqw15MwiLMpFmsr1Ax2kE3sD2eDpawCLD8=) 2: 3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa (hash: tDryOwBTBVZxPeCJINJ19f1hs1r6uQY2drXPiyvQ7m8=) 3: 32372e3132342e38372e302f32342d3234203d3e203338353237.roa (hash: UcmU8aB4eGLwy3uk7kl62Yz0rtXFjCU+HO9XmOHngFE=) 4: 3131392e34372e39302e302f32342d3234203d3e20313338303839.roa (hash: 5aw/2xBP6tqiurEQdQQvhEuzVTQaLC2QP/uo4lVPxYg=) 5: 32372e3132342e38332e302f32342d3234203d3e20313338303839.roa (hash: Nk9nfDWsxIJywmYhHNIEOyLCZi5H+xbwJBnaNxBmKiM=) 6: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: nVBQut9cLfqGgtbiyks5zEITKa9iT1MH4ntzbKpfbZ8=) 7: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: qNHc6aw3RgUmG2ISmtrXdC24D4mddWYbCDMSSOJPsns=) 8: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gXtAKsat10piv34P6t4y8Tc8WIx9/KwM7U5XBGfjT58=) 9: 3132342e3130392e32322e302f32342d3234203d3e20313339393439.roa (hash: nFcoITtIiJ8OFT6DwBHGCFY6SRcCiphSoQyOwQxbdew=) 10: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: iikxiNkTJKaYC4VLYjN4A5ypFehw5xOUrg7BMWrFLp0=) 11: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: gwWH5/zjPpKM0Bs9idh8PyMtdQszwWp6yG8gRRgpdUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:88:83:be:c2:bf:92:89:43:b7:76:a4:be:57:a9:b5:56:a8:56:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Nov 22 14:06:24 2024 GMT Not After : Nov 25 18:35:24 2024 GMT Subject: CN=5A3F79DEDD39EC49A82606B35178576C002F9F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:d2:40:07:d5:c2:41:91:9c:f7:75:88:51: 22:ce:a1:ee:4e:8f:26:f9:36:34:51:21:b8:c8:8a: bf:1b:a3:11:ce:cf:08:17:c3:dc:e6:cd:12:18:44: 22:0a:0f:87:76:6a:80:f8:c0:64:27:c3:40:02:18: 9e:65:dd:a7:62:5a:67:19:f6:e7:c8:3b:06:d2:ec: a8:89:bf:b9:cf:b8:98:81:8d:a9:a7:81:86:6a:43: 20:09:09:27:03:25:eb:bb:91:ca:c4:4b:6a:6a:fc: 11:68:ad:b3:5c:04:01:0a:93:8c:ae:87:e4:48:5b: 83:f1:cf:88:0f:8d:28:7b:fe:66:34:e1:cf:11:21: 41:60:a4:43:b2:9e:3f:1c:9d:09:f0:a2:05:fd:7e: 24:e4:8e:0f:e6:01:52:42:f5:4c:4c:50:b6:24:e8: 3f:29:dc:d0:0d:12:76:71:d1:1e:64:f6:ed:2a:e1: 3e:db:78:e3:6d:f8:7a:46:77:83:41:5e:8c:a6:49: c6:20:bc:84:80:d3:cf:3e:fd:92:fe:0b:cb:dc:ab: 0a:c6:7e:ea:e4:84:8f:c8:07:2d:cf:71:3f:ef:ab: c6:f4:3b:af:98:c7:f3:5f:59:45:b8:78:e6:1a:24: 3d:9c:41:a1:d7:e5:bf:ea:ad:91:a2:83:aa:1a:d9: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3F:79:DE:DD:39:EC:49:A8:26:06:B3:51:78:57:6C:00:2F:9F:3E X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:78:97:78:48:12:a4:87:99:44:39:f2:3b:d1:d9:25:93:b1: 58:f5:b2:f7:63:6d:fe:00:a8:55:bb:32:9d:1a:25:b5:8d:e7: fb:3c:1d:a6:5e:ef:94:6b:c0:ea:0b:cd:1e:79:ed:60:80:aa: b6:fa:27:44:9b:8a:3c:96:74:64:08:59:f8:f0:fb:c6:44:d8: 06:11:bc:4c:d1:76:6c:6c:36:de:a8:11:d3:23:4b:0f:b3:74: 9c:39:0b:89:49:91:8e:96:8a:ad:98:c5:ba:9e:a0:6f:8a:37: 15:5e:8a:34:73:f3:a5:5d:58:fc:3d:17:ff:7a:50:d4:17:af: 35:c1:b0:0b:b3:ca:2d:5b:30:09:58:03:1c:48:2a:98:77:50: 4d:49:41:57:5c:c1:bc:05:ab:84:d7:c3:60:13:38:94:77:df: 43:63:5f:73:d7:75:70:74:9a:f1:e0:ad:17:ee:4f:a8:e7:60: 7a:5e:a0:72:99:5e:86:c9:9e:2f:ea:47:a4:10:ed:34:03:ce: 20:fb:7d:45:99:3a:35:48:9b:46:46:79:b4:67:36:a7:36:9a: f0:c6:82:14:29:77:b1:93:2c:31:f7:ad:13:a0:a8:d8:87:5b: 28:da:06:ac:99:c0:ba:6f:a2:69:de:90:f4:9e:18:fc:64:ce: 26:19:6e:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYiDvsK/kolDt3akvleptVaoVkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNDExMjIxNDA2MjRaFw0yNDExMjUxODM1MjRaMDMxMTAvBgNV BAMTKDVBM0Y3OURFREQzOUVDNDlBODI2MDZCMzUxNzg1NzZDMDAyRjlGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxtJAB9XCQZGc93WIUSLOoe5O jyb5NjRRIbjIir8boxHOzwgXw9zmzRIYRCIKD4d2aoD4wGQnw0ACGJ5l3adiWmcZ 9ufIOwbS7KiJv7nPuJiBjamngYZqQyAJCScDJeu7kcrES2pq/BForbNcBAEKk4yu h+RIW4Pxz4gPjSh7/mY04c8RIUFgpEOynj8cnQnwogX9fiTkjg/mAVJC9UxMULYk 6D8p3NANEnZx0R5k9u0q4T7beONt+HpGd4NBXoymScYgvISA088+/ZL+C8vcqwrG furkhI/IBy3PcT/vq8b0O6+Yx/NfWUW4eOYaJD2cQaHX5b/qrZGig6oa2c7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWj953t057EmoJgazUXhXbAAvnz4wHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh4l3hIEqSHmUQ58jvR2SWTsVj1svdjbf4A qFW7Mp0aJbWN5/s8HaZe75RrwOoLzR557WCAqrb6J0SbijyWdGQIWfjw+8ZE2AYR vEzRdmxsNt6oEdMjSw+zdJw5C4lJkY6Wiq2YxbqeoG+KNxVeijRz86VdWPw9F/96 UNQXrzXBsAuzyi1bMAlYAxxIKph3UE1JQVdcwbwFq4TXw2ATOJR330NjX3PXdXB0 mvHgrRfuT6jnYHpeoHKZXobJni/qR6QQ7TQDziD7fUWZOjVIm0ZGebRnNqc2mvDG ghQpd7GTLDH3rROgqNiHWyjaBqyZwLpvomnekPSeGPxkziYZbvA= -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org