$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft File: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json) Hash identifier: rji/qmaJRTjF3esDWP7u9gzkCQvK8XdEoi5YwVec1mQ= Subject key identifier: E6:C1:4B:EC:66:F4:2F:49:27:B8:AB:5B:34:34:55:27:0E:D5:C7:55 Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Certificate serial: 57BDE85C651A0E2753888508B7A997674CFFF7B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft Manifest number: 0432 Signing time: Sat 18 May 2024 05:31:51 +0000 Manifest this update: Sat 18 May 2024 05:26:51 +0000 Manifest next update: Tue 21 May 2024 11:43:51 +0000 Files and hashes: 1: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: qa6SWYQ3z7tubsYGKVAhbTn4KZFDnx+c4xy/e1J05DI=) 2: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: be+hrtHr5V1tSQeaKLNVm4SZ+dTaEFPRXbaHn+csWAc=) 3: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: WeYEoZ2koY/4zzYA0lWOUta5TkOdwoQ08rtPMK1KVzg=) 4: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: pm2oEmlVpFE6opundKNDZiI0bRhTNjojD+xX76GUbuk=) 5: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: jmfim6MW4TZdz4Zxkr09uizlIIh1MND9PgvzotfXUew=) 6: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: FIN6+nGIkSiIrcV086SH0K+rB5B/J+yZXF/Or4Gzx/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 11:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bd:e8:5c:65:1a:0e:27:53:88:85:08:b7:a9:97:67:4c:ff:f7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Validity Not Before: May 18 05:26:51 2024 GMT Not After : May 21 11:43:51 2024 GMT Subject: CN=E6C14BEC66F42F4927B8AB5B343455270ED5C755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:11:2a:02:f0:61:b0:aa:30:77:cb:c3:ed:21: cb:85:29:c7:ef:76:ac:75:21:d9:2e:a0:94:79:b4: d2:fe:66:94:f2:9e:5b:0c:6f:63:a5:ef:c9:1c:af: ec:7c:8e:e0:3c:c3:67:59:44:e2:6b:c9:71:3a:19: ff:31:63:dc:4b:b7:f3:54:5a:32:96:7d:74:3b:e9: 05:f3:94:dd:da:9c:43:93:ae:6b:e6:12:6a:65:b7: 62:03:93:ff:b8:40:95:5b:52:55:03:68:b2:83:fc: 99:ae:ae:60:95:3f:51:fe:0b:7a:61:76:f7:54:7a: fc:86:3d:64:2c:2e:61:91:93:10:80:5e:ea:ac:4e: da:3a:55:d7:46:eb:c0:fe:2e:42:7a:c3:ea:39:2b: bd:0a:8d:84:3c:11:52:61:e3:08:04:f3:ae:17:03: 23:c0:d6:12:8b:35:c6:a1:b6:ad:cd:d3:3e:8d:73: 3a:1b:b2:a4:33:29:e7:05:1d:8e:2c:72:a5:6c:34: dc:bf:bc:32:da:ba:1b:bd:df:fc:3f:c2:39:f0:47: 67:8f:70:87:1c:14:c2:13:9d:cd:29:76:95:56:9c: 42:5c:56:4a:99:ee:d1:ee:78:53:76:89:ae:9a:fd: 98:25:be:b0:bd:61:e0:72:e7:c6:d5:9b:d0:d2:04: 83:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C1:4B:EC:66:F4:2F:49:27:B8:AB:5B:34:34:55:27:0E:D5:C7:55 X509v3 Authority Key Identifier: keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:01:a5:45:9d:1b:05:74:67:57:8c:e5:a4:20:d5:ef:95:27: 32:a1:53:66:48:59:e0:c7:56:09:3f:76:6a:d2:c4:a6:dd:93: f9:7f:7b:24:61:c7:74:5c:9b:40:36:96:e9:ba:f6:1a:99:ea: 1d:f8:7f:35:6b:5d:51:27:21:e4:e2:6b:e0:58:3d:f3:59:0b: 2f:9e:9e:af:a6:b4:1a:e6:83:89:1e:26:ae:dd:b2:9d:e0:73: 79:43:03:a2:41:97:84:c4:6a:a0:1a:e6:09:68:ae:05:cc:8e: 25:fa:9f:82:36:14:a0:be:7f:03:86:7e:e9:b5:4d:97:4f:20: d0:8d:60:6a:b0:14:06:6b:21:5b:69:86:59:30:02:f1:ac:1e: 86:14:c3:2c:40:b1:eb:ec:e4:34:0e:26:9b:ca:fb:e5:d3:10: 76:22:4d:7d:08:7d:38:50:a2:0f:71:d0:1f:27:ab:34:dd:f8: ea:fe:ef:b3:82:24:6b:95:ca:aa:9d:d0:bc:6b:32:ae:45:02: af:3e:02:68:e9:56:a0:db:99:77:29:71:2e:43:8d:43:23:47: 4e:9b:92:c7:78:29:ed:be:34:0c:5e:58:ed:c2:6d:b4:1c:a3: 21:8b:b9:63:4a:0c:76:6f:3e:ca:45:bf:fb:f9:8a:cd:7e:e1: b0:0c:61:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV73oXGUaDidTiIUIt6mXZ0z/97UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw MTI1MkE1QzAeFw0yNDA1MTgwNTI2NTFaFw0yNDA1MjExMTQzNTFaMDMxMTAvBgNV BAMTKEU2QzE0QkVDNjZGNDJGNDkyN0I4QUI1QjM0MzQ1NTI3MEVENUM3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbESoC8GGwqjB3y8PtIcuFKcfv dqx1IdkuoJR5tNL+ZpTynlsMb2Ol78kcr+x8juA8w2dZROJryXE6Gf8xY9xLt/NU WjKWfXQ76QXzlN3anEOTrmvmEmplt2IDk/+4QJVbUlUDaLKD/JmurmCVP1H+C3ph dvdUevyGPWQsLmGRkxCAXuqsTto6VddG68D+LkJ6w+o5K70KjYQ8EVJh4wgE864X AyPA1hKLNcahtq3N0z6NczobsqQzKecFHY4scqVsNNy/vDLauhu93/w/wjnwR2eP cIccFMITnc0pdpVWnEJcVkqZ7tHueFN2ia6a/ZglvrC9YeBy58bVm9DSBIODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5sFL7Gb0L0knuKtbNDRVJw7Vx1UwHwYDVR0j BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1 MkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3 OTQwMTI1MkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsBpUWdGwV0Z1eM5aQg1e+VJzKhU2ZIWeDH Vgk/dmrSxKbdk/l/eyRhx3Rcm0A2lum69hqZ6h34fzVrXVEnIeTia+BYPfNZCy+e nq+mtBrmg4keJq7dsp3gc3lDA6JBl4TEaqAa5glorgXMjiX6n4I2FKC+fwOGfum1 TZdPINCNYGqwFAZrIVtphlkwAvGsHoYUwyxAsevs5DQOJpvK++XTEHYiTX0IfThQ og9x0B8nqzTd+Or+77OCJGuVyqqd0LxrMq5FAq8+AmjpVqDbmXcpcS5DjUMjR06b ksd4Ke2+NAxeWO3CbbQcoyGLuWNKDHZvPspFv/v5is1+4bAMYTI= -----END CERTIFICATE-----Generated at Sat May 18 07:18:46 2024 by rpki-client on console-fra.rpki-client.org