$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: qCcDIcLYoodYFttwe7mBxVHN+kjz+/eimCrG/vlyWCc= Subject key identifier: AA:6B:A2:F5:EF:DA:C3:A5:33:0A:D9:EA:73:6F:17:93:2F:03:A9:DA Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 54A6DD1C07CD6428D2947E96580EF4BE11FFEB93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: BD Signing time: Fri 22 Nov 2024 02:01:11 +0000 Manifest this update: Fri 22 Nov 2024 01:56:11 +0000 Manifest next update: Mon 25 Nov 2024 13:00:11 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: nA9l/qEipVfIEIe1umepDag8NvfqeSfq9JSpO2D/fuI=) 2: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: z4BeSk+gRKk6M4z7F7+D4+oTS8E9IbV3rV7rrPGM6js=) 3: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: KNLXOHyL9sAPtm7y/F2ArXFUXRcSI9cQVQO/Ghl0/8U=) 4: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: eZG8iudQFcgRUtHuXJAuzY7ooTKLq0KNHMVdg0w4Klc=) 5: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: c3RjMW+CIXpYsyzS75W7NviafJ4jFuqxYaUgJgR1RjY=) 6: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: rnpAKtCbX8txVuD150fh3r3wLM+En4ZSoI9OjRhxuAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a6:dd:1c:07:cd:64:28:d2:94:7e:96:58:0e:f4:be:11:ff:eb:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Nov 22 01:56:11 2024 GMT Not After : Nov 25 13:00:11 2024 GMT Subject: CN=AA6BA2F5EFDAC3A5330AD9EA736F17932F03A9DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1b:16:d6:d6:4f:53:bc:55:b2:ca:26:fc:4b: eb:e5:54:07:16:e3:ec:08:d2:33:9c:11:9a:76:ee: 7e:dd:f9:e8:d3:ae:30:e9:4d:19:58:9b:90:46:69: bc:1d:1a:4b:7a:35:20:25:d9:ff:46:65:79:ea:91: bc:50:8b:1a:3c:64:e6:53:6d:7e:29:d6:71:2b:92: 3c:48:cc:13:64:cb:bc:d2:06:a0:8d:1e:51:f3:e2: f0:1b:19:5e:ec:92:ec:ed:c8:c5:71:22:c9:53:af: db:0b:ab:5e:80:0b:6b:f8:07:bb:15:19:56:78:03: 8f:7e:33:3c:02:a1:98:28:8f:56:90:0e:19:db:cc: 9d:53:7b:ae:d4:f0:8b:b4:d0:3a:84:40:5c:56:e6: 9c:05:9a:ff:20:a3:e0:ef:02:5f:56:77:9a:cf:a6: 1d:6b:ea:14:85:dc:69:f7:53:bc:df:87:27:74:b2: bf:fd:45:b3:1a:49:db:30:f5:c5:1c:6e:f7:c9:45: 77:3f:9d:d7:be:eb:a6:98:59:fa:bb:c9:c8:60:a9: 2a:ec:96:0b:40:e6:58:0c:f5:46:c1:fc:a6:22:02: a2:5c:01:37:9a:aa:46:e9:7b:f3:10:9c:71:96:d8: c4:22:3c:04:d4:d9:8b:a1:07:99:17:b5:91:8e:18: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6B:A2:F5:EF:DA:C3:A5:33:0A:D9:EA:73:6F:17:93:2F:03:A9:DA X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:c4:b6:0b:eb:4e:8b:17:2a:2d:d2:3d:6d:ff:99:22:90:c7: 91:3a:19:97:10:88:b8:54:81:1f:ba:02:20:e1:c5:15:46:cb: c5:40:fe:be:98:9c:27:56:2d:0e:df:97:55:af:36:f1:3a:b4: d1:99:ba:49:b3:a3:24:3f:94:bd:72:be:5f:67:c5:13:bc:c6: 59:71:67:61:6c:16:1e:9f:63:9f:dd:d8:92:77:0b:8d:9f:15: 0c:92:aa:4f:e0:82:a0:9b:2d:30:ce:3e:d0:a5:51:94:04:b4: c2:8d:95:28:18:ea:da:43:01:44:8b:df:f9:4a:e3:1c:24:3e: cd:c5:52:09:f6:fa:57:f6:62:04:e7:6c:f3:67:99:88:44:a2: 16:33:40:34:26:21:a6:4b:9a:e0:5e:6a:c2:f1:ab:2c:e2:b3: 09:cc:85:0b:82:56:3a:9c:78:04:5e:40:63:d6:3b:67:74:d5: 47:18:68:75:c1:e2:70:26:95:3a:19:6e:5e:f2:a0:32:79:ae: 7e:65:a7:dd:1f:4e:86:c3:8a:40:b3:81:73:8f:52:af:cc:07: aa:42:17:0a:38:ca:bf:71:02:a7:fe:e7:6e:ca:57:8f:85:64: 64:6b:49:89:91:04:5b:64:d0:3e:2e:64:a3:07:4d:95:33:66: a0:ea:c9:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKbdHAfNZCjSlH6WWA70vhH/65MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNDExMjIwMTU2MTFaFw0yNDExMjUxMzAwMTFaMDMxMTAvBgNV BAMTKEFBNkJBMkY1RUZEQUMzQTUzMzBBRDlFQTczNkYxNzkzMkYwM0E5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGxbW1k9TvFWyyib8S+vlVAcW 4+wI0jOcEZp27n7d+ejTrjDpTRlYm5BGabwdGkt6NSAl2f9GZXnqkbxQixo8ZOZT bX4p1nErkjxIzBNky7zSBqCNHlHz4vAbGV7skuztyMVxIslTr9sLq16AC2v4B7sV GVZ4A49+MzwCoZgoj1aQDhnbzJ1Te67U8Iu00DqEQFxW5pwFmv8go+DvAl9Wd5rP ph1r6hSF3Gn3U7zfhyd0sr/9RbMaSdsw9cUcbvfJRXc/nde+66aYWfq7ychgqSrs lgtA5lgM9UbB/KYiAqJcATeaqkbpe/MQnHGW2MQiPATU2YuhB5kXtZGOGLaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqmui9e/aw6UzCtnqc28Xky8DqdowHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMHEtgvrTosXKi3SPW3/mSKQx5E6GZcQiLhU gR+6AiDhxRVGy8VA/r6YnCdWLQ7fl1WvNvE6tNGZukmzoyQ/lL1yvl9nxRO8xllx Z2FsFh6fY5/d2JJ3C42fFQySqk/ggqCbLTDOPtClUZQEtMKNlSgY6tpDAUSL3/lK 4xwkPs3FUgn2+lf2YgTnbPNnmYhEohYzQDQmIaZLmuBeasLxqyziswnMhQuCVjqc eAReQGPWO2d01UcYaHXB4nAmlToZbl7yoDJ5rn5lp90fTobDikCzgXOPUq/MB6pC Fwo4yr9xAqf+527KV4+FZGRrSYmRBFtk0D4uZKMHTZUzZqDqyVQ= -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org