$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: h2FWaBsh06xt8U7L2Tzo6hh2w76AEaG/7OU0aFmnteA= Subject key identifier: 10:FF:22:87:4C:57:7B:A1:FE:BB:7C:1A:54:62:52:5B:E6:0F:89:55 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 59F3A1BA55F7A81758696F0EEEDC62BF4854B812 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: 16 Signing time: Thu 16 May 2024 07:32:07 +0000 Manifest this update: Thu 16 May 2024 07:27:07 +0000 Manifest next update: Sun 19 May 2024 14:03:07 +0000 Files and hashes: 1: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: s1OmxYSF70umYzo+PzpvKZUI3/QCdF0LRMd2Mr5i2zE=) 2: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: jZBJsXOy+zU/S8CTbKgFUM4E0orSqnkH3sOusNWQB/s=) 3: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: D0QSrTbbajLK0QqFhX3VKJcPiGrWSQpUK9CmIM7tZNk=) 4: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: wDBXfWzSZ/NBMUND+3i97emgD44mwj/8C2Uzeqo/uiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 04:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f3:a1:ba:55:f7:a8:17:58:69:6f:0e:ee:dc:62:bf:48:54:b8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: May 16 07:27:07 2024 GMT Not After : May 19 14:03:07 2024 GMT Subject: CN=10FF22874C577BA1FEBB7C1A5462525BE60F8955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:a3:0e:e6:3d:1f:2c:1b:06:4d:29:57:3f: cf:52:e5:ab:d9:8b:a2:72:03:ff:db:e7:f6:43:18: 76:91:78:54:9b:f1:3d:37:01:ee:f5:80:9b:b4:62: 93:6c:b7:1e:65:0c:c2:2f:40:5c:c2:7f:5e:82:f7: 0f:4f:ed:e6:c4:60:86:ef:72:d7:15:3b:ca:14:94: 2f:e2:9d:d7:c8:fc:cf:a5:8e:48:92:89:ff:a8:a4: 4b:e7:a3:c0:c4:9f:b0:9f:dc:94:ee:14:55:30:7f: 74:67:69:13:cc:4d:03:8a:0d:19:e0:7a:d3:4d:fd: 23:93:38:7f:1f:55:26:f1:62:56:46:b6:aa:04:b6: cb:50:9a:a9:4a:2d:4b:48:91:b1:53:a7:6f:76:78: c7:96:07:9f:61:a4:70:4f:8e:78:f5:4b:e1:96:cc: a8:9d:5a:63:de:84:92:0e:a7:10:ad:a4:34:b4:b6: bc:60:06:e7:f4:08:15:eb:69:53:e0:7a:f5:16:7c: 4d:03:37:ef:c8:75:29:ea:50:d7:6d:ed:91:35:75: 2e:d6:ae:c3:a7:31:59:b5:29:29:6d:61:96:e3:bc: d9:f0:3a:c5:25:be:49:c6:9f:04:69:cb:6b:aa:71: c0:47:ec:34:f5:6c:89:25:ef:e1:05:f9:52:d1:a6: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FF:22:87:4C:57:7B:A1:FE:BB:7C:1A:54:62:52:5B:E6:0F:89:55 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ac:cc:0f:50:b2:2e:d9:86:fb:b8:d1:a5:18:99:8b:27:5f: cb:21:60:6f:50:a3:53:19:74:d0:d4:3e:23:28:fa:75:d8:e7: 41:e9:78:ac:8d:ff:3e:08:99:b1:f0:ed:b4:8e:50:a0:e0:ef: fd:5c:39:0b:a2:fb:bd:3b:f3:a9:e0:61:b4:22:a8:d8:60:84: 34:0b:df:87:f9:e0:0d:93:b7:ae:02:42:b0:81:a1:ec:85:ec: 22:16:76:c9:d7:86:ca:88:04:64:1c:22:21:bd:77:d6:83:6f: 6f:e9:e7:53:17:01:44:b0:46:01:8b:1f:a4:b7:7a:3e:b8:f0: 4a:4e:7b:cc:23:a3:90:c9:23:2a:3e:0f:03:19:96:16:30:3f: 67:66:16:01:83:60:50:b5:78:c0:26:10:86:b8:1d:47:a1:37: 77:62:c9:75:af:52:c3:0d:4e:af:0d:56:00:98:41:97:a3:ac: 9e:0d:22:8e:99:3f:e6:2c:f4:5b:0e:7c:92:7f:4a:06:bc:5f: 7f:fa:bd:69:42:db:33:cf:fa:60:d0:d6:79:74:98:b4:ed:4f: 11:33:a5:31:f6:91:4e:4c:f7:a2:a9:d0:3b:e3:4a:5a:08:45: 8a:7a:25:58:24:3d:bc:af:12:ad:b9:b8:9c:80:99:56:cf:f7: 8b:de:47:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfOhulX3qBdYaW8O7txiv0hUuBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNDA1MTYwNzI3MDdaFw0yNDA1MTkxNDAzMDdaMDMxMTAvBgNV BAMTKDEwRkYyMjg3NEM1NzdCQTFGRUJCN0MxQTU0NjI1MjVCRTYwRjg5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGaMO5j0fLBsGTSlXP89S5avZ i6JyA//b5/ZDGHaReFSb8T03Ae71gJu0YpNstx5lDMIvQFzCf16C9w9P7ebEYIbv ctcVO8oUlC/indfI/M+ljkiSif+opEvno8DEn7Cf3JTuFFUwf3RnaRPMTQOKDRng etNN/SOTOH8fVSbxYlZGtqoEtstQmqlKLUtIkbFTp292eMeWB59hpHBPjnj1S+GW zKidWmPehJIOpxCtpDS0trxgBuf0CBXraVPgevUWfE0DN+/IdSnqUNdt7ZE1dS7W rsOnMVm1KSltYZbjvNnwOsUlvknGnwRpy2uqccBH7DT1bIkl7+EF+VLRpmbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEP8ih0xXe6H+u3waVGJSW+YPiVUwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaszA9Qsi7Zhvu40aUYmYsnX8shYG9Qo1MZ dNDUPiMo+nXY50HpeKyN/z4ImbHw7bSOUKDg7/1cOQui+70786ngYbQiqNhghDQL 34f54A2Tt64CQrCBoeyF7CIWdsnXhsqIBGQcIiG9d9aDb2/p51MXAUSwRgGLH6S3 ej648EpOe8wjo5DJIyo+DwMZlhYwP2dmFgGDYFC1eMAmEIa4HUehN3diyXWvUsMN Tq8NVgCYQZejrJ4NIo6ZP+Ys9FsOfJJ/Sga8X3/6vWlC2zPP+mDQ1nl0mLTtTxEz pTH2kU5M96Kp0DvjSloIRYp6JVgkPbyvEq25uJyAmVbP94veR+g= -----END CERTIFICATE-----Generated at Thu May 16 08:33:12 2024 by rpki-client on console-ams.rpki-client.org