$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json) Hash identifier: URjkuLsjSMlnBvtAL48f9AiazvfoeRu3Zk+WrYsoyUs= Subject key identifier: 9B:AE:A1:45:72:CB:72:95:9B:B9:01:E6:4C:D6:83:C7:76:B1:42:22 Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Certificate serial: 59F41E2E5795DADB2B122F5DF94CCF0DA05527CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft Manifest number: 0435 Signing time: Wed 29 May 2024 01:11:00 +0000 Manifest this update: Wed 29 May 2024 01:06:00 +0000 Manifest next update: Sat 01 Jun 2024 12:31:00 +0000 Files and hashes: 1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: dsz+Uz1QUCheGKdAMCajeoKpi4e8k4v8bo4TTY5XYZ4=) 2: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: DZ6R8BdNvBWpHGMs6kN2EPn3mEYbsW5KI9dhoiStBNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f4:1e:2e:57:95:da:db:2b:12:2f:5d:f9:4c:cf:0d:a0:55:27:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Validity Not Before: May 29 01:06:00 2024 GMT Not After : Jun 1 12:31:00 2024 GMT Subject: CN=9BAEA14572CB72959BB901E64CD683C776B14222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:40:54:ca:20:7e:1f:d1:fe:11:ab:6e:6a: e0:ce:2a:64:67:d1:76:fb:31:1e:6c:d9:fe:dc:50: a3:8e:6f:f6:fa:67:d3:28:a3:20:43:19:f5:dd:5e: 5a:6f:d0:53:3c:0a:43:35:ed:9d:1e:8c:4e:55:ef: 2b:01:4f:a2:f3:63:6b:0a:0a:05:f4:8b:b3:1e:30: 1b:1c:7f:1e:8b:6a:2d:7d:07:a8:bc:18:c2:d6:9d: 44:6c:1a:45:af:4d:54:b6:62:38:df:fd:cf:49:21: bb:83:a3:c1:6f:86:b1:d4:a2:f3:ed:9a:cf:7b:32: 73:21:19:9e:a8:26:19:bb:7e:73:cf:2e:b8:2f:14: 53:b7:4d:c0:8c:c9:bd:eb:c3:cd:7d:c6:0b:35:af: 7d:6b:e6:40:fc:e6:e5:e0:6d:33:2e:85:24:e9:ca: be:74:15:d5:43:bf:26:5e:d1:92:52:c0:11:30:3a: eb:58:6f:c3:f1:c8:f2:f7:47:3f:a4:ed:f5:f6:bf: 84:32:3d:9c:07:3b:62:ef:ee:f3:1e:21:2e:9a:1f: c5:f4:17:64:67:fa:8c:82:d0:94:db:c7:eb:8f:4f: af:9d:da:4b:37:56:88:39:8d:bf:d7:d1:6d:2b:1d: 28:9c:b2:79:2e:a2:21:08:fa:d9:67:e7:fc:4a:3d: 50:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AE:A1:45:72:CB:72:95:9B:B9:01:E6:4C:D6:83:C7:76:B1:42:22 X509v3 Authority Key Identifier: keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f8:0d:1f:bc:31:d4:44:f7:3d:fc:ac:2e:30:19:af:52:a3:4a: 24:b2:1a:d2:f6:50:1e:5f:23:3a:a8:32:93:cd:03:94:d5:e5: ed:d9:f9:94:59:c2:41:df:71:78:2a:f7:32:91:bc:bd:37:95: f9:0c:3f:9a:e8:d3:de:9b:a4:ac:ed:2f:7f:df:9d:32:9e:d5: b5:f9:35:82:dc:0d:8e:5e:6c:df:26:2e:e4:65:7e:3e:63:32: cc:4b:9d:8e:b3:d3:fa:31:f4:dc:72:04:6d:b0:33:ad:59:95: 06:25:95:e3:08:ef:93:38:7e:31:dc:bb:3a:7b:c0:e8:79:fe: f6:00:bd:94:96:60:57:5f:fb:4f:26:ea:56:9a:50:28:5b:d4: 42:fa:89:cb:ab:d8:2e:81:60:d9:27:49:5c:10:90:61:82:a6: 10:dc:fd:52:44:e3:4b:e1:5f:bd:49:e4:63:aa:00:31:2f:c9: ec:42:c6:89:67:ba:b3:e2:f8:de:c0:dd:5c:b3:58:58:23:73: 57:09:bd:48:f5:9e:9a:97:a1:aa:61:98:0a:66:bc:be:c3:69: 3e:d7:c6:7a:46:90:34:0f:78:75:5d:68:67:ed:39:db:b9:ee: 79:a6:56:fd:f7:30:4f:da:0e:78:59:21:fe:8f:d6:d4:34:e9: 03:8f:08:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfQeLleV2tsrEi9d+UzPDaBVJ8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5 NkQzREVCQTAeFw0yNDA1MjkwMTA2MDBaFw0yNDA2MDExMjMxMDBaMDMxMTAvBgNV BAMTKDlCQUVBMTQ1NzJDQjcyOTU5QkI5MDFFNjRDRDY4M0M3NzZCMTQyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEkBUyiB+H9H+EatuauDOKmRn 0Xb7MR5s2f7cUKOOb/b6Z9MooyBDGfXdXlpv0FM8CkM17Z0ejE5V7ysBT6LzY2sK CgX0i7MeMBscfx6Lai19B6i8GMLWnURsGkWvTVS2Yjjf/c9JIbuDo8FvhrHUovPt ms97MnMhGZ6oJhm7fnPPLrgvFFO3TcCMyb3rw819xgs1r31r5kD85uXgbTMuhSTp yr50FdVDvyZe0ZJSwBEwOutYb8PxyPL3Rz+k7fX2v4QyPZwHO2Lv7vMeIS6aH8X0 F2Rn+oyC0JTbx+uPT6+d2ks3Vog5jb/X0W0rHSicsnkuoiEI+tln5/xKPVB1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm66hRXLLcpWbuQHmTNaDx3axQiIwHwYDVR0j BBgwFoAUl36lEYVR6YrqqLsRydmdcZbT3rowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTg4YzBmMi0yODAwLTQ4ZGEtYTgzZS1hYjU0ZGY2NWM1NzQvMC85NzdFQTUxMTg1 NTFFOThBRUFBOEJCMTFDOUQ5OUQ3MTk2RDNERUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5NkQz REVCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlE NzE5NkQzREVCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPgNH7wx1ET3PfysLjAZr1KjSiSyGtL2UB5f IzqoMpPNA5TV5e3Z+ZRZwkHfcXgq9zKRvL03lfkMP5ro096bpKztL3/fnTKe1bX5 NYLcDY5ebN8mLuRlfj5jMsxLnY6z0/ox9NxyBG2wM61ZlQYlleMI75M4fjHcuzp7 wOh5/vYAvZSWYFdf+08m6laaUChb1EL6icur2C6BYNknSVwQkGGCphDc/VJE40vh X71J5GOqADEvyexCxolnurPi+N7A3VyzWFgjc1cJvUj1npqXoaphmApmvL7DaT7X xnpGkDQPeHVdaGftOdu57nmmVv33ME/aDnhZIf6P1tQ06QOPCPs= -----END CERTIFICATE-----Generated at Wed May 29 02:48:29 2024 by rpki-client on console-fra.rpki-client.org