$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft File: 28351380A86044778274FC7CEC0F116CF3B3CA39.mft (raw, json) Hash identifier: 9qY+1nf9FQzyBkHhtwR3MJyWMjCuyywTYI1f+UebTzQ= Subject key identifier: AB:5D:2F:7E:36:8E:C7:B7:18:E8:F9:CC:6D:6B:E3:23:07:B8:18:9D Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39 Certificate issuer: /CN=28351380A86044778274FC7CEC0F116CF3B3CA39 Certificate serial: 0F2A2ECB4731AE352C5DD01A92F9E9D240856C6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft Manifest number: 0431 Signing time: Sat 18 May 2024 00:40:40 +0000 Manifest this update: Sat 18 May 2024 00:35:40 +0000 Manifest next update: Tue 21 May 2024 05:07:40 +0000 Files and hashes: 1: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: TBL+YzOnMtt+icdLvdAKPf5E0nlulonDhr9ktWp19LI=) 2: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: lwY8Iqj/L+MqVioOcHjo2IEQQXALXrJw1VDgfhmmmvs=) 3: 28351380A86044778274FC7CEC0F116CF3B3CA39.crl (hash: mFpHK/pRC/8tyBrDUqBHlAgObrb8gLzNEW196CAxT4A=) 4: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: TjxBZprK+4c1VdoLERulYDZI7f7CTinOUgTlqvOLgCI=) 5: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: QOCflxZFA0rwjrdjdOCUJWfHarPw0t346vF4PldIHrk=) 6: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: 3fTI/WxA7kYpZmfRx97Qf7vsJ99FuhNt9oBu679sNYI=) 7: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: YX7tOEVArEOdkiA4C7zme7PmlOS4ADJILeAE/TxulXc=) 8: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: PTeJT+Kt8t7dXnSCV0a4HydjL1Wn61QCXBrXZBU3xos=) 9: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: IH72DTP1OUOtU5wqW1xVvXj/E0hd99j6kGl6PQ2vQro=) 10: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: 8TSAFwAwazBqhy+GPHIR6ftOiuCtYAP9k8BxJqKNcD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2a:2e:cb:47:31:ae:35:2c:5d:d0:1a:92:f9:e9:d2:40:85:6c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39 Validity Not Before: May 18 00:35:40 2024 GMT Not After : May 21 05:07:40 2024 GMT Subject: CN=AB5D2F7E368EC7B718E8F9CC6D6BE32307B8189D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:f0:06:a9:16:54:e0:21:27:00:90:67:f1: ff:83:ec:7f:51:cb:11:6d:1a:eb:e3:91:1f:dc:e8: c4:13:96:61:63:24:29:7c:04:33:a5:f4:66:56:ea: 75:68:c6:b8:2b:34:74:4a:42:ba:ae:a8:87:ef:d2: 49:9c:77:2a:12:7f:d5:97:93:92:ba:a9:4e:a5:f2: 79:f4:55:af:59:7b:cd:69:0e:1b:a0:1a:3c:49:a0: af:b0:29:8d:a3:06:2f:59:95:2e:23:b5:9a:f7:03: e7:cf:d4:d8:7c:c6:79:c3:4a:5f:36:32:af:ab:39: 89:a4:c4:ab:14:53:f4:5d:22:9e:56:04:25:00:3e: 28:fe:c6:ee:35:3f:f9:19:7c:a9:92:86:0b:f3:40: 7d:74:36:fa:e3:61:f2:8a:c5:8f:99:e2:1f:56:1f: 0c:d8:bb:12:06:c0:bc:6e:04:3d:84:13:f6:bc:38: f1:d7:c7:5d:21:b4:5e:85:a6:9b:79:28:52:5f:d6: bb:81:f8:1f:e8:2c:15:2a:2c:27:ff:07:73:a1:0b: f1:1e:fe:15:ad:37:31:80:b3:2e:02:6f:1d:a5:ae: 09:d4:db:ca:f4:2e:0f:8e:34:82:7f:03:dd:71:9a: dd:b2:12:6d:6b:a3:40:69:f6:3d:d0:96:30:0e:3f: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5D:2F:7E:36:8E:C7:B7:18:E8:F9:CC:6D:6B:E3:23:07:B8:18:9D X509v3 Authority Key Identifier: keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b0:52:c9:2a:f4:6b:dd:39:e8:3e:fe:8b:26:8a:2b:db:1d: 85:b3:55:24:0a:8e:39:b0:54:c9:f9:9e:39:2d:9f:39:3b:96: 8b:54:15:70:71:ef:6e:da:18:b9:e6:67:53:00:14:94:3e:f5: b8:68:2f:90:31:bd:61:2b:b4:b0:21:51:3b:15:8d:50:61:d3: 39:b9:7a:1d:25:56:2c:b3:37:10:85:12:62:5a:83:60:7a:f6: e3:99:59:88:1b:5d:fd:46:07:c5:9d:d7:07:07:29:9d:07:55: ef:8b:d9:fd:f6:71:f2:1e:00:a2:63:9e:20:aa:bf:7d:9c:b7: 77:c5:aa:d7:73:b5:6e:ef:67:7d:06:86:26:50:34:c9:f7:80: e0:cc:a2:84:54:a6:98:91:4c:6c:58:3a:75:d0:17:ef:a9:8e: f5:60:6c:e3:b0:61:6c:20:bd:4a:f4:ae:07:92:50:bd:bb:52: cd:8d:fb:3e:6a:73:ee:33:74:65:37:36:45:68:7b:39:4a:62: 76:e2:fe:fb:0e:f0:9a:5a:90:4b:e2:ad:8b:33:0d:38:d1:1f: 35:0a:1f:f3:38:81:ba:86:8c:a1:20:17:b5:40:13:ed:3e:9a: 4b:01:7f:c8:8d:c0:a0:0c:fc:94:2b:64:0c:a3:09:d9:f9:8e: d2:b8:19:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDyouy0cxrjUsXdAakvnp0kCFbG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNTEzODBBODYwNDQ3NzgyNzRGQzdDRUMwRjExNkNG M0IzQ0EzOTAeFw0yNDA1MTgwMDM1NDBaFw0yNDA1MjEwNTA3NDBaMDMxMTAvBgNV BAMTKEFCNUQyRjdFMzY4RUM3QjcxOEU4RjlDQzZENkJFMzIzMDdCODE4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpPAGqRZU4CEnAJBn8f+D7H9R yxFtGuvjkR/c6MQTlmFjJCl8BDOl9GZW6nVoxrgrNHRKQrquqIfv0kmcdyoSf9WX k5K6qU6l8nn0Va9Ze81pDhugGjxJoK+wKY2jBi9ZlS4jtZr3A+fP1Nh8xnnDSl82 Mq+rOYmkxKsUU/RdIp5WBCUAPij+xu41P/kZfKmShgvzQH10NvrjYfKKxY+Z4h9W HwzYuxIGwLxuBD2EE/a8OPHXx10htF6Fppt5KFJf1ruB+B/oLBUqLCf/B3OhC/Ee /hWtNzGAsy4Cbx2lrgnU28r0Lg+ONIJ/A91xmt2yEm1ro0Bp9j3QljAOP0BBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq10vfjaOx7cY6PnMbWvjIwe4GJ0wHwYDVR0j BBgwFoAUKDUTgKhgRHeCdPx87A8RbPOzyjkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjRhOTEwNS04ZDJhLTRiMzgtYTZhZS0wNWVhZDY5NzE5YTMvMC8yODM1MTM4MEE4 NjA0NDc3ODI3NEZDN0NFQzBGMTE2Q0YzQjNDQTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNTEzODBBODYwNDQ3NzgyNzRGQzdDRUMwRjExNkNGM0Iz Q0EzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2 YWUtMDVlYWQ2OTcxOWEzLzAvMjgzNTEzODBBODYwNDQ3NzgyNzRGQzdDRUMwRjEx NkNGM0IzQ0EzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+wUskq9GvdOeg+/osmiivbHYWzVSQKjjmw VMn5njktnzk7lotUFXBx727aGLnmZ1MAFJQ+9bhoL5AxvWErtLAhUTsVjVBh0zm5 eh0lViyzNxCFEmJag2B69uOZWYgbXf1GB8Wd1wcHKZ0HVe+L2f32cfIeAKJjniCq v32ct3fFqtdztW7vZ30GhiZQNMn3gODMooRUppiRTGxYOnXQF++pjvVgbOOwYWwg vUr0rgeSUL27Us2N+z5qc+4zdGU3NkVoezlKYnbi/vsO8JpakEvirYszDTjRHzUK H/M4gbqGjKEgF7VAE+0+mksBf8iNwKAM/JQrZAyjCdn5jtK4GXQ= -----END CERTIFICATE-----Generated at Sat May 18 01:42:23 2024 by rpki-client on console-ams.rpki-client.org