$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: j/T4MMymBbsevT/ZrDHnztEEc8U3I8fG1BTJgt2vYhw= Subject key identifier: 99:F7:D6:B0:D7:E8:6C:A5:0A:87:7A:5A:F6:5A:B3:77:5F:8D:35:B5 Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 471B4983A2CBABB48EBD4E9466FD6C9C4D139559 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 0303 Signing time: Fri 22 Nov 2024 16:41:15 +0000 Manifest this update: Fri 22 Nov 2024 16:36:15 +0000 Manifest next update: Mon 25 Nov 2024 17:06:15 +0000 Files and hashes: 1: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: sV+6ElWjWm2UYz2bR++CLuxMFrPKUDovUkijGertRzg=) 2: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: +OfyUKd9ah3XpdJZgBKLIUwPhedhMt0DHdPOmM0Y/1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:1b:49:83:a2:cb:ab:b4:8e:bd:4e:94:66:fd:6c:9c:4d:13:95:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Nov 22 16:36:15 2024 GMT Not After : Nov 25 17:06:15 2024 GMT Subject: CN=99F7D6B0D7E86CA50A877A5AF65AB3775F8D35B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a2:9a:2c:c0:79:6b:ee:cd:37:d2:5f:3f:08: 50:2b:8f:37:93:1e:28:90:6a:06:64:3a:57:63:3c: ac:00:83:3c:a0:b3:fd:49:be:5b:90:ad:df:b7:dd: c0:49:f3:ca:76:c3:77:13:71:29:96:ee:03:bb:7a: f3:d1:da:03:e0:85:7f:e9:da:37:aa:96:a7:6b:c7: 73:9c:82:e7:ca:b9:c0:c5:53:13:d7:22:45:42:1e: 76:66:1c:2b:7c:5b:0f:07:50:53:af:07:db:c6:28: f8:d6:40:5d:b7:de:1b:62:e6:86:de:8b:86:f4:cf: ae:05:78:f7:bb:de:42:e2:60:b6:07:d3:b6:55:a2: 89:87:8b:4b:5b:20:d2:c2:6c:c0:80:96:96:3c:bb: cd:4e:98:40:d3:63:7d:b5:18:fc:47:19:e1:93:e7: 66:30:7c:24:fe:f2:09:d7:d6:ad:df:1b:7d:5f:c0: 40:4f:ef:ae:e0:fd:82:31:42:72:51:c6:5f:88:14: 06:61:19:a7:78:5e:06:2c:03:15:7c:9a:60:2f:25: 59:96:f0:42:48:fc:c6:73:55:41:fa:65:54:4b:0d: 68:7d:bf:08:eb:4e:14:3f:e0:e8:2a:79:c3:78:9e: 65:64:42:3f:4d:86:3a:71:fb:a4:a5:04:66:00:20: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F7:D6:B0:D7:E8:6C:A5:0A:87:7A:5A:F6:5A:B3:77:5F:8D:35:B5 X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9d:a0:d5:41:19:0b:17:57:0c:01:42:ba:58:5c:6d:0d:50: 6b:c0:96:34:12:2e:a0:3e:63:85:6f:c3:5c:4d:40:62:c0:7c: 46:b7:60:2f:92:d3:44:f1:cd:d1:d9:f1:74:f9:6e:c4:9f:96: 23:02:d3:de:a6:82:ac:63:49:82:5f:c9:72:28:5a:7c:da:8d: d4:ec:65:76:bc:08:61:c9:75:a0:de:e3:fd:99:3b:d1:a3:a6: ee:e6:89:a8:1c:67:73:34:27:74:7e:f9:30:14:21:25:94:4b: e0:01:1e:35:96:e3:63:5f:7e:16:21:d0:f2:15:1a:7b:53:b9: 27:14:ea:07:d2:ab:f8:4b:de:b3:38:08:12:31:62:ce:32:a2: 6e:2c:d3:c2:b2:d3:24:d4:0b:fc:b9:b2:7b:bb:28:c1:98:e3: a8:5e:a8:99:f5:e8:83:df:76:05:09:c3:c4:36:c5:f7:96:11: 30:8c:f1:28:88:c9:1b:53:4f:2f:a9:c3:96:e0:a0:0b:8e:28: 5c:c1:3a:59:47:57:ca:a1:a7:80:2f:2e:14:88:66:4d:6a:cc: d8:0f:46:b7:3f:ec:f5:34:e9:03:99:2c:3c:6c:07:27:7e:29: 16:8f:ac:bc:f9:eb:e6:f7:01:8d:80:82:82:0e:05:e7:92:35: 79:f4:a8:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxtJg6LLq7SOvU6UZv1snE0TlVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNDExMjIxNjM2MTVaFw0yNDExMjUxNzA2MTVaMDMxMTAvBgNV BAMTKDk5RjdENkIwRDdFODZDQTUwQTg3N0E1QUY2NUFCMzc3NUY4RDM1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVoposwHlr7s030l8/CFArjzeT HiiQagZkOldjPKwAgzygs/1JvluQrd+33cBJ88p2w3cTcSmW7gO7evPR2gPghX/p 2jeqlqdrx3OcgufKucDFUxPXIkVCHnZmHCt8Ww8HUFOvB9vGKPjWQF233hti5obe i4b0z64FePe73kLiYLYH07ZVoomHi0tbINLCbMCAlpY8u81OmEDTY321GPxHGeGT 52YwfCT+8gnX1q3fG31fwEBP767g/YIxQnJRxl+IFAZhGad4XgYsAxV8mmAvJVmW 8EJI/MZzVUH6ZVRLDWh9vwjrThQ/4OgqecN4nmVkQj9Nhjpx+6SlBGYAIKYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmffWsNfobKUKh3pa9lqzd1+NNbUwHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWdoNVBGQsXVwwBQrpYXG0NUGvAljQSLqA+ Y4Vvw1xNQGLAfEa3YC+S00TxzdHZ8XT5bsSfliMC096mgqxjSYJfyXIoWnzajdTs ZXa8CGHJdaDe4/2ZO9Gjpu7miagcZ3M0J3R++TAUISWUS+ABHjWW42NffhYh0PIV GntTuScU6gfSq/hL3rM4CBIxYs4yom4s08Ky0yTUC/y5snu7KMGY46heqJn16IPf dgUJw8Q2xfeWETCM8SiIyRtTTy+pw5bgoAuOKFzBOllHV8qhp4AvLhSIZk1qzNgP Rrc/7PU06QOZLDxsByd+KRaPrLz56+b3AY2AgoIOBeeSNXn0qJc= -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org