$ rpki-client -vvf repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft File: 285A5330FE006D3660B306BEE40EC7FEABA96574.mft (raw, json) Hash identifier: TO5oJwyty8tX9cukQ1Pq1BR6sGk8PeLfu2kOfNrYhog= Subject key identifier: F9:89:05:37:EA:1D:F0:A5:4B:B7:71:C8:4F:62:30:20:C0:5F:F4:47 Authority key identifier: 28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 Certificate issuer: /CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Certificate serial: 3A2CB4AB6D161C22B70419FA499A093C14CCC507 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft Manifest number: 0130 Signing time: Tue 28 May 2024 18:40:45 +0000 Manifest this update: Tue 28 May 2024 18:35:45 +0000 Manifest next update: Sat 01 Jun 2024 05:53:45 +0000 Files and hashes: 1: 285A5330FE006D3660B306BEE40EC7FEABA96574.crl (hash: VanzLqv7Q22eYZ4fQ+qNIuYWupvMm1wdX86+XTQwRfA=) 2: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: KQ3p9CiCu1QeSKAF7Qynno9v6emmU/LNSMNOOshbQ5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2c:b4:ab:6d:16:1c:22:b7:04:19:fa:49:9a:09:3c:14:cc:c5:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Validity Not Before: May 28 18:35:45 2024 GMT Not After : Jun 1 05:53:45 2024 GMT Subject: CN=F9890537EA1DF0A54BB771C84F623020C05FF447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:db:2e:82:6d:23:7a:40:1c:a2:4d:c5:57: 01:95:a0:34:f1:d0:d5:b1:23:05:1e:64:c7:fa:c5: af:ed:64:2d:ba:dd:fe:da:0b:7f:d2:5a:f5:cd:3b: 9a:85:8d:12:50:25:0a:02:68:2c:4e:3d:3d:73:fa: 96:46:4b:b7:b7:2c:cf:fd:07:2e:6f:b4:d9:89:cf: 4f:de:20:6d:e4:00:c7:85:1b:fb:e9:a3:4e:ff:f4: 98:2c:5e:a0:92:db:81:a9:7b:01:ae:35:cd:5e:a3: 37:87:6c:0b:28:39:bb:36:7c:5d:a8:2d:01:59:61: ac:70:2a:b2:2b:6b:6c:0a:1c:fc:8c:ee:86:f9:07: 1d:2c:05:27:e0:25:50:91:91:46:69:f4:2c:ef:a2: c8:a3:40:51:66:d6:61:5f:a5:44:98:1e:34:7c:8a: 48:9b:ec:ec:0e:13:68:1f:7d:40:69:8f:8e:3a:3b: aa:f2:2b:dc:e2:27:cf:25:01:16:0b:a2:2d:f1:7b: 79:5c:51:8e:c6:25:dc:24:22:a5:b6:f3:7e:48:0a: cc:b5:b5:d6:75:68:f3:f5:de:21:b0:88:a9:f2:1a: ab:aa:ab:02:aa:99:5e:51:06:75:1e:23:39:b0:6c: 40:5a:27:e9:4f:a0:0c:9c:d9:d4:b4:dd:0f:fe:a9: 79:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:89:05:37:EA:1D:F0:A5:4B:B7:71:C8:4F:62:30:20:C0:5F:F4:47 X509v3 Authority Key Identifier: keyid:28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fa:bd:1a:85:fa:16:89:15:f6:6e:1b:cc:8c:95:dd:a9:3a: 48:c8:cd:e8:3e:34:56:11:0f:55:1f:06:5c:07:eb:56:9a:32: d6:d4:ba:94:16:03:cd:c0:ad:d5:bf:a2:92:ab:b0:e6:15:43: 45:e5:48:90:a4:71:b0:9d:14:03:60:fb:a4:74:b5:fb:1c:34: 38:ae:d0:9c:93:f9:19:8c:2a:d7:d5:2e:d0:ce:49:04:de:a6: 3b:15:df:2d:f8:d8:fc:9a:07:a8:1e:66:6f:30:fe:fb:04:24: 1e:de:a2:03:43:1e:86:fb:2a:ed:41:b9:69:cc:32:8b:c1:4a: 1b:7f:d6:9c:20:33:d4:92:59:92:c6:8c:c0:27:85:34:f0:f7: 14:3d:25:d5:5a:e2:05:9f:f0:96:d4:6a:5f:aa:59:9c:c4:48: c8:75:65:c1:05:01:4b:3e:b7:0a:d1:f7:1d:34:ce:a2:9f:75: 2c:e0:bf:09:db:59:bd:80:a3:b1:88:54:b1:4b:dc:fe:d7:d4: 10:68:80:c1:b2:2a:78:a2:eb:2f:53:14:72:b8:eb:cd:f8:f9: d5:bb:29:22:81:f7:81:5f:58:06:cc:f8:e6:fc:a3:24:02:0b: 94:ab:16:37:bb:10:f4:72:1e:a3:de:93:ab:95:6b:38:63:97: 31:fb:6a:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOiy0q20WHCK3BBn6SZoJPBTMxQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVB QkE5NjU3NDAeFw0yNDA1MjgxODM1NDVaFw0yNDA2MDEwNTUzNDVaMDMxMTAvBgNV BAMTKEY5ODkwNTM3RUExREYwQTU0QkI3NzFDODRGNjIzMDIwQzA1RkY0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YNsugm0jekAcok3FVwGVoDTx 0NWxIwUeZMf6xa/tZC263f7aC3/SWvXNO5qFjRJQJQoCaCxOPT1z+pZGS7e3LM/9 By5vtNmJz0/eIG3kAMeFG/vpo07/9JgsXqCS24GpewGuNc1eozeHbAsoObs2fF2o LQFZYaxwKrIra2wKHPyM7ob5Bx0sBSfgJVCRkUZp9CzvosijQFFm1mFfpUSYHjR8 ikib7OwOE2gffUBpj446O6ryK9ziJ88lARYLoi3xe3lcUY7GJdwkIqW2835ICsy1 tdZ1aPP13iGwiKnyGquqqwKqmV5RBnUeIzmwbEBaJ+lPoAyc2dS03Q/+qXlVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+YkFN+od8KVLt3HIT2IwIMBf9EcwHwYDVR0j BBgwFoAUKFpTMP4AbTZgswa+5A7H/qupZXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWQzMzc3MC1mMTUxLTQzZjMtOTU2OS02YTI3ZDc1MDQyNDAvMC8yODVBNTMzMEZF MDA2RDM2NjBCMzA2QkVFNDBFQzdGRUFCQTk2NTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVBQkE5 NjU3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFkMzM3NzAtZjE1MS00M2YzLTk1 NjktNmEyN2Q3NTA0MjQwLzAvMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3 RkVBQkE5NjU3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJz6vRqF+haJFfZuG8yMld2pOkjIzeg+NFYR D1UfBlwH61aaMtbUupQWA83ArdW/opKrsOYVQ0XlSJCkcbCdFANg+6R0tfscNDiu 0JyT+RmMKtfVLtDOSQTepjsV3y342PyaB6geZm8w/vsEJB7eogNDHob7Ku1BuWnM MovBSht/1pwgM9SSWZLGjMAnhTTw9xQ9JdVa4gWf8JbUal+qWZzESMh1ZcEFAUs+ twrR9x00zqKfdSzgvwnbWb2Ao7GIVLFL3P7X1BBogMGyKnii6y9TFHK46834+dW7 KSKB94FfWAbM+Ob8oyQCC5SrFje7EPRyHqPek6uVazhjlzH7avY= -----END CERTIFICATE-----Generated at Tue May 28 19:49:43 2024 by rpki-client on console-fra.rpki-client.org