$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: /GQEJeuZDY6dSgxATywqQiv17RNqgU3jdYib2BNSzOE= Subject key identifier: EE:2F:00:FA:A9:06:78:7E:45:F7:A5:05:E0:38:6B:AE:3D:2D:AF:FE Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 773E616DD93BF48AD00DF50C440FBCECFFE2B777 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 0153 Signing time: Sat 18 May 2024 04:11:10 +0000 Manifest this update: Sat 18 May 2024 04:06:10 +0000 Manifest next update: Tue 21 May 2024 07:48:10 +0000 Files and hashes: 1: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: zYuee0d5QGl7IPLffDCh2Ou7qnCgELRvRrFi1i12A7Y=) 2: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: yr/+ZUz2uQzuppUJebE78sjaadhaGShYUuKYZ1qcynM=) 3: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: +k+13Y0ylRt2Fg2OXXylJcSJL/mMUvqM8aLIqZK/fwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3e:61:6d:d9:3b:f4:8a:d0:0d:f5:0c:44:0f:bc:ec:ff:e2:b7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: May 18 04:06:10 2024 GMT Not After : May 21 07:48:10 2024 GMT Subject: CN=EE2F00FAA906787E45F7A505E0386BAE3D2DAFFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:f7:a2:e5:d9:71:1a:34:1b:3e:3f:43:3f: 97:52:ba:9c:c8:02:d9:9b:f9:14:00:39:76:8b:70: c5:f6:fb:ac:bb:c9:12:d9:2d:29:09:74:b3:25:d1: b4:bb:c2:bb:3d:30:e4:94:62:f2:91:2e:54:e6:40: 95:aa:ee:23:60:bf:08:4b:80:d5:a6:4e:37:2b:43: 85:30:4f:92:11:b3:3d:04:d6:32:53:49:26:ae:f3: 8f:55:a8:e8:14:84:e2:fe:95:a8:31:9e:b8:d7:74: f9:64:a9:c8:bf:2d:f1:a3:80:f5:0a:04:df:ba:16: 54:57:a6:db:f8:33:d8:25:e9:97:47:95:c6:73:9e: fa:9f:7b:2c:51:9e:0f:57:80:fc:39:21:f7:a2:7c: e7:83:f6:da:e3:b8:b3:84:96:50:13:02:62:30:5c: d1:43:2d:bf:4d:49:ef:9f:30:ef:49:65:56:de:55: 68:e6:10:89:b0:78:49:42:d5:91:e1:ed:8e:fb:a4: 45:90:3b:f7:d4:9f:41:9b:6d:13:2f:2a:05:c4:5f: 3b:a6:dc:5d:fb:2f:52:a9:8d:d5:76:83:a4:0f:a0: 20:6a:3c:96:cc:db:dc:a3:ec:3a:f5:4d:fe:91:90: de:59:6a:ab:1d:58:c6:15:c9:30:40:35:0b:b3:29: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2F:00:FA:A9:06:78:7E:45:F7:A5:05:E0:38:6B:AE:3D:2D:AF:FE X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:95:33:e6:07:40:7e:ee:37:8b:cb:14:ef:5f:05:d2:b5:58: af:4e:b4:51:32:3c:cf:e9:04:55:af:dc:9b:89:90:a5:42:a4: dd:0d:54:3d:5b:97:49:03:86:10:d3:52:5b:b2:7c:36:86:f3: 6d:d6:1f:49:8f:db:6c:59:49:3b:83:92:77:26:31:e0:dc:14: fe:e8:ca:58:1b:74:1d:2f:b1:db:b4:84:d5:5f:be:27:1e:7f: 47:15:4b:aa:7b:e5:a7:e9:69:17:32:88:d6:08:d3:64:31:5b: 38:1e:60:8e:ee:8e:90:99:98:11:04:04:39:50:3e:fd:01:23: 16:5c:39:0e:e0:dc:d8:f7:2e:76:37:c9:c8:6f:4a:dc:db:28: 93:9b:d3:e3:90:fc:35:04:b3:ea:83:59:e0:97:75:57:23:f6: f9:50:63:13:50:19:c9:ad:25:e6:10:61:ce:8e:9f:0f:69:5a: c2:d3:08:9a:4f:cf:34:9c:9b:e9:04:db:33:e3:a4:d0:d0:50: 01:f1:6e:0d:8b:78:51:04:06:a7:2d:81:1c:6c:86:5f:2a:07: 9f:cf:09:6c:5f:65:90:69:ec:e5:1d:7a:d3:5f:f7:85:91:ab: d4:d4:c4:f0:2b:19:4f:e4:00:12:70:da:e2:16:2b:36:98:31: f6:1f:86:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdz5hbdk79IrQDfUMRA+87P/it3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNDA1MTgwNDA2MTBaFw0yNDA1MjEwNzQ4MTBaMDMxMTAvBgNV BAMTKEVFMkYwMEZBQTkwNjc4N0U0NUY3QTUwNUUwMzg2QkFFM0QyREFGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqfei5dlxGjQbPj9DP5dSupzI Atmb+RQAOXaLcMX2+6y7yRLZLSkJdLMl0bS7wrs9MOSUYvKRLlTmQJWq7iNgvwhL gNWmTjcrQ4UwT5IRsz0E1jJTSSau849VqOgUhOL+lagxnrjXdPlkqci/LfGjgPUK BN+6FlRXptv4M9gl6ZdHlcZznvqfeyxRng9XgPw5IfeifOeD9trjuLOEllATAmIw XNFDLb9NSe+fMO9JZVbeVWjmEImweElC1ZHh7Y77pEWQO/fUn0GbbRMvKgXEXzum 3F37L1KpjdV2g6QPoCBqPJbM29yj7Dr1Tf6RkN5ZaqsdWMYVyTBANQuzKWJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7i8A+qkGeH5F96UF4Dhrrj0tr/4wHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuVM+YHQH7uN4vLFO9fBdK1WK9OtFEyPM/p BFWv3JuJkKVCpN0NVD1bl0kDhhDTUluyfDaG823WH0mP22xZSTuDkncmMeDcFP7o ylgbdB0vsdu0hNVfvicef0cVS6p75afpaRcyiNYI02QxWzgeYI7ujpCZmBEEBDlQ Pv0BIxZcOQ7g3Nj3LnY3ychvStzbKJOb0+OQ/DUEs+qDWeCXdVcj9vlQYxNQGcmt JeYQYc6Onw9pWsLTCJpPzzScm+kE2zPjpNDQUAHxbg2LeFEEBqctgRxshl8qB5/P CWxfZZBp7OUdetNf94WRq9TUxPArGU/kABJw2uIWKzaYMfYfhpk= -----END CERTIFICATE-----Generated at Sat May 18 04:39:31 2024 by rpki-client on console-fra.rpki-client.org