$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: a6ZCP8PcsnYYpayEbHjOrIr5Amj1/N3KR1JTVX0fzeg= Subject key identifier: 28:BF:B4:70:47:37:4A:A2:93:70:7C:54:66:FB:4A:91:4B:E1:B3:53 Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 25262B1E64484E0599FAD4BDD22F419A42DB27ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 0190 Signing time: Sat 18 May 2024 08:22:03 +0000 Manifest this update: Sat 18 May 2024 08:17:03 +0000 Manifest next update: Tue 21 May 2024 19:31:03 +0000 Files and hashes: 1: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: tL+KWBsU0hXi5gvFIEemp7m9JYgXHsSa3SKSF/Ibzoc=) 2: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: P05+Srznk+5sPzg/WhElzS0fL5fLBI4jXJpN+eSJciA=) 3: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: 4UrGIyJ7HRJn8L/PSH95YW21wovmd0HdKUpMTu/bFuA=) 4: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: 3zgRhIpA0CWdIfK2QBDHNC8bybzba5xoslWGjoel+h4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:26:2b:1e:64:48:4e:05:99:fa:d4:bd:d2:2f:41:9a:42:db:27:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: May 18 08:17:03 2024 GMT Not After : May 21 19:31:03 2024 GMT Subject: CN=28BFB47047374AA293707C5466FB4A914BE1B353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:a1:9c:5e:3a:ad:e5:79:04:73:d2:e1:a9: 02:e3:12:d6:d5:7d:9b:f7:6e:ec:01:e9:85:22:b9: e8:1c:92:e8:c8:3b:54:a7:96:c6:43:56:1f:d5:11: fb:18:30:76:0f:e5:9e:0d:9a:d3:54:38:74:e0:f0: e2:e3:57:83:f9:aa:4d:96:7e:da:cd:60:64:e8:67: af:5c:fb:30:03:aa:2a:48:ef:d8:da:43:10:0f:ab: 5b:f2:eb:df:26:de:e2:01:75:ac:c0:d8:5e:74:83: 92:a0:c1:b1:f8:1a:b8:f0:ac:2f:8b:e8:3f:64:7a: 58:12:ff:3d:ea:fd:ac:08:ad:a0:49:1c:33:54:5e: 75:75:de:3c:7f:5e:db:9f:16:3f:0f:7e:6a:30:03: a5:10:77:95:d1:37:e1:8c:07:1d:4a:d9:95:a8:7d: 46:3f:13:69:ea:5b:24:7f:2f:72:c4:48:9e:78:79: 4a:28:d0:e9:be:2f:16:f2:ff:5e:0d:6b:65:0d:ea: 24:83:77:cf:08:7b:0b:ef:d5:2e:9c:ab:64:c0:f6: 75:0f:a5:91:d3:48:80:74:e3:71:d0:c1:23:ab:3b: 1c:ad:b3:f6:ea:41:6e:4d:8d:ee:b1:62:49:55:54: de:cb:91:1d:29:b5:3b:00:20:bd:7f:4e:16:a9:4b: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BF:B4:70:47:37:4A:A2:93:70:7C:54:66:FB:4A:91:4B:E1:B3:53 X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:36:6d:59:1f:b4:2a:76:a3:73:37:6a:16:e8:7e:b0:f5:71: ed:8f:ec:dd:ef:50:59:77:6d:a0:8a:34:3e:b5:86:db:ef:31: 31:31:e6:6d:b1:07:dc:da:ae:e3:db:a8:b4:ef:8a:d4:66:4e: f8:23:22:94:56:10:06:58:fd:da:34:86:5c:30:9b:56:7f:b1: d2:09:93:19:65:7b:64:f3:e2:db:de:03:32:24:c1:d8:a6:8f: de:c5:05:0c:e2:09:d5:5b:e1:5d:8b:e0:6c:6f:c3:aa:7d:86: 2d:e3:e6:60:b1:fd:83:65:fb:0d:35:c7:7a:38:49:8d:8f:22: e7:08:f6:5e:e1:8f:57:c6:fb:1f:24:40:5b:9c:82:5e:f8:95: d8:8e:13:4d:50:03:8a:e1:59:fe:f5:80:e1:0b:ff:3b:9f:1c: 76:c4:47:76:6e:6b:33:b0:a1:f7:5d:d0:18:c9:3d:99:46:6b: f7:84:61:19:90:44:b4:a2:ca:16:68:7c:8b:06:2d:3d:5b:79: 19:f4:e8:20:5f:24:02:09:c5:53:dc:1a:ee:a4:1a:94:75:e6: ad:e0:06:9e:b3:03:71:1d:49:ac:40:3f:37:59:53:89:5e:7b: 1b:df:14:22:b0:2f:71:35:86:fb:27:0b:39:a9:48:4a:db:9d: ee:74:ef:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSYrHmRITgWZ+tS90i9BmkLbJ+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNDA1MTgwODE3MDNaFw0yNDA1MjExOTMxMDNaMDMxMTAvBgNV BAMTKDI4QkZCNDcwNDczNzRBQTI5MzcwN0M1NDY2RkI0QTkxNEJFMUIzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEKGcXjqt5XkEc9LhqQLjEtbV fZv3buwB6YUiuegckujIO1SnlsZDVh/VEfsYMHYP5Z4NmtNUOHTg8OLjV4P5qk2W ftrNYGToZ69c+zADqipI79jaQxAPq1vy698m3uIBdazA2F50g5KgwbH4GrjwrC+L 6D9kelgS/z3q/awIraBJHDNUXnV13jx/XtufFj8PfmowA6UQd5XRN+GMBx1K2ZWo fUY/E2nqWyR/L3LESJ54eUoo0Om+Lxby/14Na2UN6iSDd88Iewvv1S6cq2TA9nUP pZHTSIB043HQwSOrOxyts/bqQW5Nje6xYklVVN7LkR0ptTsAIL1/ThapS/JzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKL+0cEc3SqKTcHxUZvtKkUvhs1MwHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQ2bVkftCp2o3M3ahbofrD1ce2P7N3vUFl3 baCKND61htvvMTEx5m2xB9zaruPbqLTvitRmTvgjIpRWEAZY/do0hlwwm1Z/sdIJ kxlle2Tz4tveAzIkwdimj97FBQziCdVb4V2L4Gxvw6p9hi3j5mCx/YNl+w01x3o4 SY2PIucI9l7hj1fG+x8kQFucgl74ldiOE01QA4rhWf71gOEL/zufHHbER3ZuazOw ofdd0BjJPZlGa/eEYRmQRLSiyhZofIsGLT1beRn06CBfJAIJxVPcGu6kGpR15q3g Bp6zA3EdSaxAPzdZU4leexvfFCKwL3E1hvsnCzmpSErbne5078g= -----END CERTIFICATE-----Generated at Sat May 18 08:46:49 2024 by rpki-client on console-fra.rpki-client.org