$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: DNEhzXw4aOTNMq+eT+Us1BXPZP/pcxRyzzX50Q5RNnM= Subject key identifier: DC:81:2D:D3:81:E7:AF:C0:DE:26:73:95:83:D1:7C:F5:91:A3:C1:33 Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 24E5A5CE35DC0BDAA06E1D5B4413BE06DF296275 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 0437 Signing time: Thu 30 May 2024 00:00:55 +0000 Manifest this update: Wed 29 May 2024 23:55:55 +0000 Manifest next update: Sun 02 Jun 2024 08:00:55 +0000 Files and hashes: 1: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: oMAibsF/HSF01HB9Mc9eDrDFN2BAhTYv/0qePxd7r6o=) 2: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: J7MQTstBwyeP13Rlq4oMsCLZzuwncBzITQBRIKTy4b0=) 3: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: eb7haQ80VO6GiMtqcegs9ObpRWuup+b23vRuFcKC+WU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 01:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e5:a5:ce:35:dc:0b:da:a0:6e:1d:5b:44:13:be:06:df:29:62:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: May 29 23:55:55 2024 GMT Not After : Jun 2 08:00:55 2024 GMT Subject: CN=DC812DD381E7AFC0DE26739583D17CF591A3C133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:5c:60:c4:e0:e5:94:e2:82:1d:4c:1c:17: 20:dc:f1:37:7d:1a:4e:31:42:15:db:02:69:6b:b5: 00:35:9c:b4:36:4e:8c:7a:80:0c:19:f9:a9:a8:d2: 3d:bd:5a:45:90:53:5c:3e:1f:d3:b7:9c:4a:20:3a: 4d:74:2e:22:f9:f2:87:58:44:5f:37:ff:f2:c0:6d: 04:46:34:db:2a:8a:86:21:bf:6a:b5:73:29:3c:3c: b7:a0:79:90:fb:c6:81:6d:bc:d3:3f:3e:0d:70:62: 22:22:a9:5a:6e:35:0b:11:5d:04:10:b8:ca:34:a5: 01:17:bc:ad:8b:d6:25:67:f6:a6:90:a4:17:a3:9b: 5c:9d:f7:ef:a3:61:7d:75:14:4a:d1:3e:ed:21:14: 20:48:0d:7f:13:f3:36:31:2f:c0:c3:04:80:3d:a6: 1a:83:15:d4:ba:12:f5:b1:fa:37:80:95:89:35:ef: 60:f9:a8:3d:09:98:40:e5:a4:76:62:85:f9:92:69: e4:97:1d:b3:cf:b3:e5:9a:14:aa:77:0d:a0:99:72: 58:ca:0c:f8:f5:45:96:78:c6:f6:4e:5b:90:55:eb: f2:f5:58:0c:ed:fc:7a:62:c8:dd:c9:38:b9:d8:44: 5e:ba:96:9e:c5:3f:19:86:d9:bc:d5:15:65:1c:8c: 19:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:81:2D:D3:81:E7:AF:C0:DE:26:73:95:83:D1:7C:F5:91:A3:C1:33 X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c3:2a:55:b6:b5:31:2c:30:72:04:d1:48:22:7e:5e:d1:a3: a3:c1:b1:01:c7:96:a7:08:99:48:79:94:46:69:50:f7:51:2a: 4f:eb:6a:3c:4b:34:9c:0a:1b:e9:9e:8d:bd:cc:98:68:c8:e4: cd:07:a9:29:3a:75:7d:ae:a7:bc:dd:f3:4b:0e:f6:e6:07:a1: 84:57:3e:41:bd:c1:93:81:66:73:d2:74:62:22:3e:4c:96:8a: 1c:fb:e8:d1:f5:4b:cb:d1:38:8b:32:46:6a:54:7a:21:59:b5: 2d:b7:6e:3a:53:7f:fc:fe:94:32:10:52:e4:81:e1:7e:48:67: 04:12:89:8f:72:58:5c:e9:eb:d4:ca:15:00:27:09:55:9a:0c: 3b:e7:9d:92:34:41:08:45:82:1a:48:dc:19:fa:f6:7a:43:e8: 45:22:e2:9c:c9:6c:48:61:e6:2f:c4:06:be:94:aa:4f:49:33: 08:7c:4d:d3:75:27:a8:98:21:bb:09:a2:b0:c5:39:b6:e2:ff: bf:95:55:5e:20:66:32:30:42:25:9e:c1:0a:40:5e:81:be:3e: e5:28:60:67:5f:42:39:4c:17:de:36:17:80:96:ef:cf:58:ac: 06:73:93:6d:9b:c1:9f:80:7a:b8:9f:18:40:f1:d5:8e:b6:36: 7f:51:0b:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOWlzjXcC9qgbh1bRBO+Bt8pYnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNDA1MjkyMzU1NTVaFw0yNDA2MDIwODAwNTVaMDMxMTAvBgNV BAMTKERDODEyREQzODFFN0FGQzBERTI2NzM5NTgzRDE3Q0Y1OTFBM0MxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE61xgxODllOKCHUwcFyDc8Td9 Gk4xQhXbAmlrtQA1nLQ2Tox6gAwZ+amo0j29WkWQU1w+H9O3nEogOk10LiL58odY RF83//LAbQRGNNsqioYhv2q1cyk8PLegeZD7xoFtvNM/Pg1wYiIiqVpuNQsRXQQQ uMo0pQEXvK2L1iVn9qaQpBejm1yd9++jYX11FErRPu0hFCBIDX8T8zYxL8DDBIA9 phqDFdS6EvWx+jeAlYk172D5qD0JmEDlpHZihfmSaeSXHbPPs+WaFKp3DaCZcljK DPj1RZZ4xvZOW5BV6/L1WAzt/HpiyN3JOLnYRF66lp7FPxmG2bzVFWUcjBmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3IEt04Hnr8DeJnOVg9F89ZGjwTMwHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnDKlW2tTEsMHIE0Ugifl7Ro6PBsQHHlqcI mUh5lEZpUPdRKk/rajxLNJwKG+mejb3MmGjI5M0HqSk6dX2up7zd80sO9uYHoYRX PkG9wZOBZnPSdGIiPkyWihz76NH1S8vROIsyRmpUeiFZtS23bjpTf/z+lDIQUuSB 4X5IZwQSiY9yWFzp69TKFQAnCVWaDDvnnZI0QQhFghpI3Bn69npD6EUi4pzJbEhh 5i/EBr6Uqk9JMwh8TdN1J6iYIbsJorDFObbi/7+VVV4gZjIwQiWewQpAXoG+PuUo YGdfQjlMF942F4CW789YrAZzk22bwZ+AerifGEDx1Y62Nn9RC0k= -----END CERTIFICATE-----Generated at Thu May 30 00:39:44 2024 by rpki-client on console-fra.rpki-client.org