$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: 45yMlFYuGrWDtYaw4yO1oVoxGolG1BGViWS0HpE9Y+8= Subject key identifier: 90:16:30:F8:92:F7:B5:FB:8B:9E:35:30:B2:49:9E:B7:AA:CF:80:03 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 5B40D7252ADA1D1463B6CC6BA2F8757C785B0FD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 01A7 Signing time: Sun 24 Nov 2024 02:41:26 +0000 Manifest this update: Sun 24 Nov 2024 02:36:26 +0000 Manifest next update: Wed 27 Nov 2024 10:55:26 +0000 Files and hashes: 1: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: xSl5S79BfyBgOXzpCa2+vFeAMzKVXM9pSMn5k0NLon8=) 2: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: OG7BwuVnNkIVzUIZdNlRUTLYux4slvkGYQL5eOuQftw=) 3: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: zYuee0d5QGl7IPLffDCh2Ou7qnCgELRvRrFi1i12A7Y=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: +k+13Y0ylRt2Fg2OXXylJcSJL/mMUvqM8aLIqZK/fwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:40:d7:25:2a:da:1d:14:63:b6:cc:6b:a2:f8:75:7c:78:5b:0f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Nov 24 02:36:26 2024 GMT Not After : Nov 27 10:55:26 2024 GMT Subject: CN=901630F892F7B5FB8B9E3530B2499EB7AACF8003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:98:53:38:ac:4a:80:a6:4d:21:a9:62:a8:bc: 41:56:db:8f:ca:e4:11:75:b9:a1:a9:0f:15:b6:6d: 31:b0:10:2f:cd:a0:89:63:d6:38:bb:2d:05:9f:b3: 17:2b:71:77:0f:3b:44:ba:b0:60:66:5e:9c:06:74: e4:57:e8:ce:ed:fe:9c:be:e5:c0:8b:6b:01:76:f2: e4:c7:19:7c:37:f2:e6:ad:8e:c7:ab:fb:3d:02:ab: f9:88:d0:d4:f8:9f:be:20:19:44:ce:96:4b:36:9e: fd:02:74:39:68:51:bb:6d:d7:14:69:88:33:42:85: 82:bc:10:e2:5a:49:d6:9f:a6:0f:e2:b1:eb:25:ae: 70:d2:f2:8f:62:55:90:d5:0e:03:30:18:6a:50:30: 8e:44:48:d4:39:b5:e7:71:47:db:e5:36:a7:b5:36: a6:b6:8d:61:d7:9a:b3:cb:ee:c1:81:3c:79:cf:a7: ac:0d:11:09:1b:23:7c:67:ee:a2:85:8a:fc:46:61: f3:2b:b1:71:44:7f:79:e6:12:fe:19:85:e5:8f:89: 51:1a:73:c0:aa:9e:5f:9d:90:78:ab:d9:9b:7d:8b: e3:ef:3c:e6:53:d4:4a:52:ef:e2:fa:35:46:0c:8f: fa:9f:78:f0:a8:55:af:41:7a:46:18:8e:47:7e:ce: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:16:30:F8:92:F7:B5:FB:8B:9E:35:30:B2:49:9E:B7:AA:CF:80:03 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:42:16:51:d9:f9:e1:e7:99:5e:14:9d:1c:0e:e7:2f:00:f3: 6c:75:05:03:a4:bd:48:18:42:ba:f5:cc:54:ad:80:4c:99:bb: 00:fd:f3:26:3f:2d:66:4e:53:25:7a:e6:d4:dc:78:85:13:f0: 08:06:a1:2d:1c:15:8c:18:e5:b7:29:df:8f:5e:5c:88:88:88: ab:35:0a:0d:4a:5b:7f:45:ea:cc:31:20:c8:4e:ca:0a:30:0c: d0:5c:2b:11:3a:65:57:ee:17:55:83:8b:2c:85:5b:bc:1b:ab: 71:50:0f:8e:40:16:a6:2d:87:b4:28:a6:da:6e:c8:6f:23:3e: 3a:48:38:47:c1:4c:fe:66:43:35:20:c9:4e:5d:eb:78:8e:d5: 7c:b0:9a:0e:54:5d:86:17:3b:dd:56:a4:22:3d:57:c3:90:01: 6c:3f:8f:b8:bb:80:a1:7b:d5:25:3e:c4:4e:d7:f2:27:29:02: 34:52:3a:1e:57:98:8d:e9:45:40:8e:d4:40:16:3e:b5:35:1d: 27:14:53:2f:e1:66:28:e3:9a:4b:1e:65:b5:05:05:c1:25:78: 12:04:ca:35:d8:33:cf:e3:b0:4a:e6:8f:db:5c:a2:c3:4b:90: f5:e0:8f:43:b5:7d:7a:e1:2f:70:81:b7:f6:aa:01:86:34:20: b1:dc:2b:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0DXJSraHRRjtsxrovh1fHhbD9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNDExMjQwMjM2MjZaFw0yNDExMjcxMDU1MjZaMDMxMTAvBgNV BAMTKDkwMTYzMEY4OTJGN0I1RkI4QjlFMzUzMEIyNDk5RUI3QUFDRjgwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1mFM4rEqApk0hqWKovEFW24/K 5BF1uaGpDxW2bTGwEC/NoIlj1ji7LQWfsxcrcXcPO0S6sGBmXpwGdORX6M7t/py+ 5cCLawF28uTHGXw38uatjser+z0Cq/mI0NT4n74gGUTOlks2nv0CdDloUbtt1xRp iDNChYK8EOJaSdafpg/iseslrnDS8o9iVZDVDgMwGGpQMI5ESNQ5tedxR9vlNqe1 Nqa2jWHXmrPL7sGBPHnPp6wNEQkbI3xn7qKFivxGYfMrsXFEf3nmEv4ZheWPiVEa c8Cqnl+dkHir2Zt9i+PvPOZT1EpS7+L6NUYMj/qfePCoVa9BekYYjkd+zj5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkBYw+JL3tfuLnjUwskmet6rPgAMwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRCFlHZ+eHnmV4UnRwO5y8A82x1BQOkvUgY Qrr1zFStgEyZuwD98yY/LWZOUyV65tTceIUT8AgGoS0cFYwY5bcp349eXIiIiKs1 Cg1KW39F6swxIMhOygowDNBcKxE6ZVfuF1WDiyyFW7wbq3FQD45AFqYth7Qoptpu yG8jPjpIOEfBTP5mQzUgyU5d63iO1Xywmg5UXYYXO91WpCI9V8OQAWw/j7i7gKF7 1SU+xE7X8icpAjRSOh5XmI3pRUCO1EAWPrU1HScUUy/hZijjmkseZbUFBcEleBIE yjXYM8/jsErmj9tcosNLkPXgj0O1fXrhL3CBt/aqAYY0ILHcK78= -----END CERTIFICATE-----Generated at Sun Nov 24 04:28:52 2024 by rpki-client on console-fra.rpki-client.org