$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: abagd7L9E1bPcBmgQrP3fIvzMbCZYs0LUdQ6Nr562Kc= Subject key identifier: 94:DF:B2:E8:6D:2E:F3:BD:5D:FD:64:BB:55:AA:99:FE:F0:B5:81:9F Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 7B7CCDB74410DA63B11E95FF2A63FFA1FF6C3B7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 042A Signing time: Wed 01 May 2024 03:30:02 +0000 Manifest this update: Wed 01 May 2024 03:25:02 +0000 Manifest next update: Sat 04 May 2024 07:53:02 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: GziPHWs2igv+EHFGz8lMDZ0jPPKAYTtUWjuJ3c7ZuIs=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: 0OIUFPX3AlhPdYKpUASMOWukW2X+pv4HaPnnscETuLA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 07:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7c:cd:b7:44:10:da:63:b1:1e:95:ff:2a:63:ff:a1:ff:6c:3b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: May 1 03:25:02 2024 GMT Not After : May 4 07:53:02 2024 GMT Subject: CN=94DFB2E86D2EF3BD5DFD64BB55AA99FEF0B5819F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:79:15:1e:4d:22:e1:2d:c6:42:7e:c7:a8: 57:5d:5c:4d:f5:59:ae:3e:ef:a4:cc:40:f9:94:b9: d2:6a:a7:67:27:63:cb:41:19:b7:f6:e3:bb:f9:fc: 5d:88:e9:4e:1f:00:c0:c5:90:ba:b9:10:87:4a:9b: d5:db:9e:dc:ce:32:5c:4a:c4:6b:a3:e6:9e:c4:53: b9:7d:a8:f4:d8:09:04:f6:bb:cb:20:52:21:1f:de: 73:63:ba:2c:e7:b6:59:59:ad:18:99:31:ca:74:53: fd:23:b8:25:00:c6:b7:4b:d0:1e:38:a2:53:bf:13: 4f:3b:5f:e4:eb:cb:9f:ce:cc:ac:be:40:8d:dc:fa: cb:d2:59:94:2f:7f:e3:0b:51:79:1b:e4:54:f6:5c: 7e:6f:51:a7:73:53:27:b7:ee:42:70:74:ae:46:3c: 82:1a:ac:03:90:fa:58:97:fa:5a:97:17:07:2d:dd: f2:ef:54:8e:63:52:32:b8:06:65:19:0c:d7:8b:7f: a6:68:5f:c3:53:5e:8f:f1:a0:e2:ca:71:6a:d0:e9: 75:be:e0:68:e6:e2:29:d1:64:b6:62:97:6d:3d:ee: 9a:37:e1:ec:f4:c5:02:e6:72:06:c2:11:fa:67:dd: 7b:f5:2a:00:23:7f:32:53:63:46:a9:22:c6:ec:0f: 19:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DF:B2:E8:6D:2E:F3:BD:5D:FD:64:BB:55:AA:99:FE:F0:B5:81:9F X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1e:d3:8d:90:3b:cb:3a:02:fb:36:29:32:eb:c7:c2:4d:83: 9b:0c:32:b8:17:eb:98:72:23:24:93:de:d5:06:b9:68:02:b5: 13:c9:ee:fe:15:8e:79:c4:ee:23:3b:d1:0c:e2:55:6e:92:7d: b6:55:4e:21:1a:cf:e7:7b:51:74:a5:cb:9c:1a:4c:a3:50:ec: b5:85:fd:2b:17:78:69:e3:5f:71:3b:dd:42:9b:0f:61:db:2b: 1c:cb:20:25:23:48:aa:49:24:56:fb:9e:cd:28:1e:dd:24:33: fe:4a:c3:0a:62:8c:e8:d9:06:5b:38:de:5b:dc:46:57:e4:52: 07:64:60:3d:d4:c1:d7:aa:8e:41:8b:75:74:b5:6b:37:f0:00: 0c:74:2c:0c:5d:65:9e:bc:73:36:83:29:27:c4:5f:fe:b9:c0: 31:fe:24:b3:f7:ab:dc:58:2c:ef:04:4d:9d:48:a3:7c:7f:e8: 17:8d:08:57:c6:04:1f:f2:71:3b:03:e0:9d:11:b5:bd:d7:87: 82:36:ca:39:bc:63:4f:26:95:67:56:ab:f3:d6:77:79:39:eb: de:75:d0:ca:01:af:2c:44:96:c8:6a:20:67:72:40:e2:46:95: c0:b5:f1:aa:5e:b5:c4:e7:9f:50:c6:4c:fe:83:9c:2c:3a:90: ae:6c:df:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3zNt0QQ2mOxHpX/KmP/of9sO3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNDA1MDEwMzI1MDJaFw0yNDA1MDQwNzUzMDJaMDMxMTAvBgNV BAMTKDk0REZCMkU4NkQyRUYzQkQ1REZENjRCQjU1QUE5OUZFRjBCNTgxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYOHkVHk0i4S3GQn7HqFddXE31 Wa4+76TMQPmUudJqp2cnY8tBGbf247v5/F2I6U4fAMDFkLq5EIdKm9XbntzOMlxK xGuj5p7EU7l9qPTYCQT2u8sgUiEf3nNjuizntllZrRiZMcp0U/0juCUAxrdL0B44 olO/E087X+Try5/OzKy+QI3c+svSWZQvf+MLUXkb5FT2XH5vUadzUye37kJwdK5G PIIarAOQ+liX+lqXFwct3fLvVI5jUjK4BmUZDNeLf6ZoX8NTXo/xoOLKcWrQ6XW+ 4Gjm4inRZLZil2097po34ez0xQLmcgbCEfpn3Xv1KgAjfzJTY0apIsbsDxlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlN+y6G0u871d/WS7VaqZ/vC1gZ8wHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEe042QO8s6Avs2KTLrx8JNg5sMMrgX65hy IyST3tUGuWgCtRPJ7v4VjnnE7iM70QziVW6SfbZVTiEaz+d7UXSly5waTKNQ7LWF /SsXeGnjX3E73UKbD2HbKxzLICUjSKpJJFb7ns0oHt0kM/5KwwpijOjZBls43lvc RlfkUgdkYD3UwdeqjkGLdXS1azfwAAx0LAxdZZ68czaDKSfEX/65wDH+JLP3q9xY LO8ETZ1Io3x/6BeNCFfGBB/ycTsD4J0Rtb3Xh4I2yjm8Y08mlWdWq/PWd3k56951 0MoBryxElshqIGdyQOJGlcC18apetcTnn1DGTP6DnCw6kK5s31M= -----END CERTIFICATE-----Generated at Wed May 1 04:48:05 2024 by rpki-client on console-ams.rpki-client.org