$ rpki-client -vvf repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft File: 277D3C0811B597BC22847329E543CCEE7E2449A0.mft (raw, json) Hash identifier: KSK2WX4IMveGQUQBxNPfKkUDwyHT6pmUWI/BMxkEjPI= Subject key identifier: CC:5A:86:62:15:DC:A3:DB:7A:FD:BE:09:C7:4B:68:48:CE:5F:DB:17 Authority key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 Certificate issuer: /CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Certificate serial: 534DA6A4EE72EB46BB5E7D9F4B64C252850476F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft Manifest number: 39 Signing time: Thu 21 Nov 2024 10:20:56 +0000 Manifest this update: Thu 21 Nov 2024 10:15:56 +0000 Manifest next update: Sun 24 Nov 2024 19:35:56 +0000 Files and hashes: 1: 277D3C0811B597BC22847329E543CCEE7E2449A0.crl (hash: Z79Eh4EcWdegr/DxLF7qz3xJ1CfvgeADUlwQ6/Wg9Gw=) 2: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: NmZXIgcKTkZtM5b0WZ83BTrIrXMCCDJKAphwFiNMMH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4d:a6:a4:ee:72:eb:46:bb:5e:7d:9f:4b:64:c2:52:85:04:76:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Validity Not Before: Nov 21 10:15:56 2024 GMT Not After : Nov 24 19:35:56 2024 GMT Subject: CN=CC5A866215DCA3DB7AFDBE09C74B6848CE5FDB17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:43:c6:0f:af:24:63:19:a4:da:17:59:58:88: 34:e1:ea:f7:cd:ca:90:e8:28:d2:ba:25:16:59:ff: 55:47:9d:d3:25:1d:b9:24:81:29:c6:79:38:11:f0: da:6b:e3:fd:e8:ed:27:75:6e:30:ae:a8:5b:ca:96: 91:9e:5f:9c:f6:78:8c:68:14:44:e8:e7:22:8a:0b: 3e:91:f8:38:51:95:79:04:c4:a4:16:c5:c2:55:02: bd:4f:ec:33:49:f9:a8:1b:e4:f1:79:2a:11:91:de: 0b:f7:84:22:0d:d4:af:9b:6e:28:b2:35:c9:d0:09: 1d:90:74:75:ee:c2:bf:0e:37:dd:15:31:22:0e:89: 41:2f:1b:61:6f:53:64:b3:02:ff:de:90:65:3d:95: 1f:e5:e1:50:c5:42:69:e3:b1:34:fe:21:e3:23:6c: b6:2e:41:8d:d4:86:26:17:7c:f5:e6:80:cb:bb:42: 2c:c9:1e:79:bb:b6:53:92:a4:6f:3e:9e:d5:9d:e1: f5:72:c4:c2:e5:6e:32:be:68:fd:be:0d:ca:af:9d: f2:d1:6b:a9:43:01:98:08:0a:b9:c1:4c:e5:a7:ce: a7:d6:1f:4b:19:f5:11:3e:41:1c:e9:14:94:25:2f: 91:2e:27:0a:51:0a:a0:ac:7b:c1:78:f2:68:55:0b: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5A:86:62:15:DC:A3:DB:7A:FD:BE:09:C7:4B:68:48:CE:5F:DB:17 X509v3 Authority Key Identifier: keyid:27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:44:3c:2c:fe:c5:d9:ed:7f:33:23:55:18:07:bd:03:45:ee: f9:20:90:f1:34:79:3b:75:92:5d:1f:ec:81:a1:29:38:bb:f2: 1f:14:35:9d:91:96:91:14:d8:96:53:77:2a:6d:44:84:9d:d5: 89:ed:93:4e:2f:9b:59:3f:08:d5:9a:66:ac:e6:82:2c:06:8f: 95:7c:61:b5:68:2a:3c:7e:9e:8b:7a:02:90:a4:91:37:ac:2c: 03:20:d4:c4:b8:64:3c:b5:37:a6:a2:26:a9:1d:61:c3:92:de: 4e:ef:7f:66:d6:66:1a:f8:25:07:28:bc:b1:13:7d:80:19:37: ed:a3:ea:46:2c:98:c5:da:75:de:ae:38:c6:90:de:61:36:bc: de:5b:cb:1c:d9:aa:b9:62:5a:d1:47:08:21:b6:6f:55:97:b3: a8:8c:6f:b7:b1:50:03:85:10:54:e2:4e:f8:be:a1:8b:da:4a: 2a:e6:5c:12:48:46:b7:ee:bf:f1:04:6a:22:a7:d9:21:e3:87: c0:63:22:a2:5e:72:a7:c6:6b:14:4e:6a:c9:05:c7:fa:d5:e5: 26:4a:11:a3:89:99:c9:c5:c5:90:65:4c:40:7e:93:04:62:ec: 75:be:15:07:54:13:4c:6e:49:13:9c:7a:23:0b:67:23:21:52: c4:5e:99:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU02mpO5y60a7Xn2fS2TCUoUEdvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3 RTI0NDlBMDAeFw0yNDExMjExMDE1NTZaFw0yNDExMjQxOTM1NTZaMDMxMTAvBgNV BAMTKENDNUE4NjYyMTVEQ0EzREI3QUZEQkUwOUM3NEI2ODQ4Q0U1RkRCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Q8YPryRjGaTaF1lYiDTh6vfN ypDoKNK6JRZZ/1VHndMlHbkkgSnGeTgR8Npr4/3o7Sd1bjCuqFvKlpGeX5z2eIxo FETo5yKKCz6R+DhRlXkExKQWxcJVAr1P7DNJ+agb5PF5KhGR3gv3hCIN1K+bbiiy NcnQCR2QdHXuwr8ON90VMSIOiUEvG2FvU2SzAv/ekGU9lR/l4VDFQmnjsTT+IeMj bLYuQY3UhiYXfPXmgMu7QizJHnm7tlOSpG8+ntWd4fVyxMLlbjK+aP2+DcqvnfLR a6lDAZgICrnBTOWnzqfWH0sZ9RE+QRzpFJQlL5EuJwpRCqCse8F48mhVC30JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzFqGYhXco9t6/b4Jx0toSM5f2xcwHwYDVR0j BBgwFoAUJ308CBG1l7wihHMp5UPM7n4kSaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzgyNTlkNi0yNjU1LTQ0MTctYmVjNC04M2VmNjY0NGY1N2UvMC8yNzdEM0MwODEx QjU5N0JDMjI4NDczMjlFNTQzQ0NFRTdFMjQ0OUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3RTI0 NDlBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0ND RUU3RTI0NDlBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdEPCz+xdntfzMjVRgHvQNF7vkgkPE0eTt1 kl0f7IGhKTi78h8UNZ2RlpEU2JZTdyptRISd1Yntk04vm1k/CNWaZqzmgiwGj5V8 YbVoKjx+not6ApCkkTesLAMg1MS4ZDy1N6aiJqkdYcOS3k7vf2bWZhr4JQcovLET fYAZN+2j6kYsmMXadd6uOMaQ3mE2vN5byxzZqrliWtFHCCG2b1WXs6iMb7exUAOF EFTiTvi+oYvaSirmXBJIRrfuv/EEaiKn2SHjh8BjIqJecqfGaxROaskFx/rV5SZK EaOJmcnFxZBlTEB+kwRi7HW+FQdUE0xuSROceiMLZyMhUsRemYU= -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org