$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: 69aeiIlaVVy2SQFlEiRHzwSTjeKnwymmlXZUJbZLSyo= Subject key identifier: 47:F6:E8:BD:A2:19:5E:B2:B2:18:CD:45:00:C5:27:1F:79:29:B1:A0 Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 0C258350D85B0318D42868505AC82A687B9E8E6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 02BD Signing time: Thu 30 May 2024 09:31:12 +0000 Manifest this update: Thu 30 May 2024 09:26:12 +0000 Manifest next update: Sun 02 Jun 2024 12:10:12 +0000 Files and hashes: 1: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: FIo9uMkOPoPJcgLl/QoPFtsL6L0MSiwGovakuhSmDBY=) 2: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: IW8bQszHsJQaspCBHwRuV25Qt9b0hSoRJR3AAA3IqeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 10:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:25:83:50:d8:5b:03:18:d4:28:68:50:5a:c8:2a:68:7b:9e:8e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: May 30 09:26:12 2024 GMT Not After : Jun 2 12:10:12 2024 GMT Subject: CN=47F6E8BDA2195EB2B218CD4500C5271F7929B1A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:6c:ae:9d:84:3f:96:5e:a6:b8:36:e6:41: 09:a4:73:1c:23:33:0e:ba:8d:ec:51:99:a6:ce:2e: b5:b8:92:f2:05:80:22:5c:e5:8e:a3:a7:38:62:80: 2d:f0:f3:59:4f:fc:fa:b8:8f:a7:ca:b7:c7:56:ca: b5:e3:c8:0b:46:0f:13:8a:d2:17:08:f2:92:a5:c2: 39:7f:45:2b:13:be:ae:5f:84:50:b7:0d:69:e0:0b: f3:24:d1:4e:c4:2e:fe:4e:af:94:0c:4e:50:ea:b6: f1:2a:b1:c0:37:be:27:b2:eb:e4:24:99:10:36:6b: 33:62:d5:fd:02:8b:6e:6a:68:68:fc:cc:6a:10:f6: fe:9b:df:3d:e7:f3:83:b5:9a:e8:8a:c5:7b:7f:61: 9e:98:3b:ac:74:cb:60:77:b9:bd:57:57:50:1b:0d: 8c:63:11:a5:2c:ec:8c:c0:ce:63:2f:e1:ef:33:ba: 9b:71:d4:f7:df:cc:b3:eb:24:5d:9b:f4:21:64:34: 67:bb:90:43:f0:73:ca:04:df:dd:c6:ce:4f:7a:c7: e9:00:d8:62:91:2f:35:6b:09:62:99:0c:30:2f:50: be:c0:48:9d:36:a2:9c:3b:37:56:c7:5c:d5:2b:8d: ba:22:b1:f1:6a:1c:ea:ca:50:22:a9:f3:bc:13:43: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F6:E8:BD:A2:19:5E:B2:B2:18:CD:45:00:C5:27:1F:79:29:B1:A0 X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:79:53:56:38:7a:1c:b0:50:88:fc:3b:3b:b9:19:db:b6:9c: bc:a9:36:f7:47:99:82:19:e7:a2:a9:c1:d3:6e:8a:cd:e2:bb: 4a:18:e4:0e:d1:1d:26:48:b0:50:0e:aa:4e:59:64:d6:24:58: 41:53:d7:d0:c8:f7:8a:6c:f5:82:2c:fb:44:47:e1:f1:eb:5b: 4b:9e:bd:e5:45:17:da:e5:26:e2:33:a5:7d:b4:4f:ea:9f:48: 0d:d8:3d:2b:e2:d5:43:61:17:47:9a:55:1f:0a:ec:e7:f0:72: 79:06:83:0c:17:7a:0d:65:a4:ea:ce:28:65:e9:df:a7:7e:33: eb:a2:3c:ef:cc:da:19:c5:8c:92:f9:c6:fe:78:d8:0d:9c:2a: 98:06:c9:05:03:37:00:09:be:bc:fd:97:1f:5c:11:80:15:c0: ec:de:43:88:39:07:4a:28:e5:2d:e4:9d:d1:1c:1d:b7:a7:53: ec:04:e9:da:b3:5a:aa:88:ad:b6:07:95:10:c2:94:c3:2f:42: ca:ca:be:22:40:b1:35:82:2a:49:8c:8d:c6:18:a1:d9:1f:c1: c5:6c:4e:98:55:f7:35:79:9b:8d:8e:e1:44:a0:dd:a6:23:40: 0f:44:23:6b:06:85:33:c7:6a:a1:ab:e1:09:c7:13:11:21:4e: d9:ea:ec:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCWDUNhbAxjUKGhQWsgqaHuejmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNDA1MzAwOTI2MTJaFw0yNDA2MDIxMjEwMTJaMDMxMTAvBgNV BAMTKDQ3RjZFOEJEQTIxOTVFQjJCMjE4Q0Q0NTAwQzUyNzFGNzkyOUIxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHumyunYQ/ll6muDbmQQmkcxwj Mw66jexRmabOLrW4kvIFgCJc5Y6jpzhigC3w81lP/Pq4j6fKt8dWyrXjyAtGDxOK 0hcI8pKlwjl/RSsTvq5fhFC3DWngC/Mk0U7ELv5Or5QMTlDqtvEqscA3viey6+Qk mRA2azNi1f0Ci25qaGj8zGoQ9v6b3z3n84O1muiKxXt/YZ6YO6x0y2B3ub1XV1Ab DYxjEaUs7IzAzmMv4e8zuptx1PffzLPrJF2b9CFkNGe7kEPwc8oE393Gzk96x+kA 2GKRLzVrCWKZDDAvUL7ASJ02opw7N1bHXNUrjboisfFqHOrKUCKp87wTQ9afAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR/bovaIZXrKyGM1FAMUnH3kpsaAwHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIV5U1Y4ehywUIj8Ozu5Gdu2nLypNvdHmYIZ 56KpwdNuis3iu0oY5A7RHSZIsFAOqk5ZZNYkWEFT19DI94ps9YIs+0RH4fHrW0ue veVFF9rlJuIzpX20T+qfSA3YPSvi1UNhF0eaVR8K7OfwcnkGgwwXeg1lpOrOKGXp 36d+M+uiPO/M2hnFjJL5xv542A2cKpgGyQUDNwAJvrz9lx9cEYAVwOzeQ4g5B0oo 5S3kndEcHbenU+wE6dqzWqqIrbYHlRDClMMvQsrKviJAsTWCKkmMjcYYodkfwcVs TphV9zV5m42O4USg3aYjQA9EI2sGhTPHaqGr4QnHExEhTtnq7Ks= -----END CERTIFICATE-----Generated at Thu May 30 11:34:45 2024 by rpki-client on console-fra.rpki-client.org