$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: 8O8byrcU7ycsPXSLxvS1BViudPaBSCNFOGFDrf6y600= Subject key identifier: 22:33:07:09:62:73:52:E1:5F:92:30:30:13:0C:D5:F9:08:8D:1D:BE Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 4A4CB443B3B33F9C3B400089F137B659BC79A473 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: A2 Signing time: Fri 22 Nov 2024 04:21:28 +0000 Manifest this update: Fri 22 Nov 2024 04:16:28 +0000 Manifest next update: Mon 25 Nov 2024 15:38:28 +0000 Files and hashes: 1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: IHqcErbm/jh+8G9ITpkeHubYhwRm77oQuURliUYMdFs=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: qSzxrfqd29Pg9HOqmUjPO7crmnWP/zs2luJUdYRC76s=) 3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: ZseQmq+APpwrVyO4o8w5mAovBnZ4kX00D5rkABFT9cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4c:b4:43:b3:b3:3f:9c:3b:40:00:89:f1:37:b6:59:bc:79:a4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Nov 22 04:16:28 2024 GMT Not After : Nov 25 15:38:28 2024 GMT Subject: CN=22330709627352E15F923030130CD5F9088D1DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a3:e1:4c:eb:c4:fd:80:c6:ee:bf:64:e4:01: 1d:6d:a0:21:8f:81:8c:fb:f8:9a:65:74:83:74:75: 4f:2b:39:42:e5:1d:aa:d5:f9:a4:2f:30:94:ed:d9: 0d:7c:14:1a:54:c3:65:3f:7a:d0:cb:5a:7c:eb:67: 11:63:1a:50:4a:b2:5e:ea:b7:1f:94:3c:87:66:d6: 31:7b:4b:4e:26:bc:30:aa:37:a8:30:cb:84:cc:9b: 47:d7:89:9d:df:07:14:bc:bf:a7:0f:aa:9f:4f:8c: 95:0c:a1:78:d9:0d:2e:8f:4c:ea:00:2d:40:90:a7: b7:fb:5d:85:41:f8:97:1e:6b:1b:64:59:73:2a:19: 68:75:6c:08:09:6a:59:97:06:11:94:96:75:8c:13: 8a:2e:db:74:77:e5:7b:5c:d0:f0:60:4e:f3:70:9e: 3b:e3:4e:37:5d:9a:3e:d6:62:ee:49:00:64:d9:ab: d5:62:f9:86:8e:be:ff:ae:e2:59:3e:3a:d2:4a:a1: 58:b5:75:18:00:60:4b:e5:93:9b:a0:43:c6:77:2c: 55:7e:9c:d3:6d:2c:c0:1c:af:e6:b9:92:00:d7:04: 4d:4a:b4:8c:c4:a4:64:d7:d5:85:fd:21:e5:60:36: 76:bd:a5:e2:d4:84:e8:4c:17:33:b0:02:62:43:20: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:07:09:62:73:52:E1:5F:92:30:30:13:0C:D5:F9:08:8D:1D:BE X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b6:8a:ba:71:e0:4b:7c:aa:4f:2e:70:35:fd:da:b4:66:41: 59:13:ed:c0:62:14:3b:8a:ba:33:a9:4a:e8:26:ba:15:2d:b4: ee:be:a4:38:82:7c:58:3b:a6:8e:44:35:65:a3:3b:83:20:a4: fa:a6:e8:21:26:54:9f:ad:04:50:a4:25:23:36:27:90:a3:4a: 57:17:e8:b7:09:b2:3b:59:56:0a:3b:82:fb:27:82:ad:08:41: ff:96:00:3f:50:cb:d7:fd:5d:66:cd:a4:5f:aa:97:e9:4a:32: 90:b7:38:a7:fb:9e:8f:9f:d4:51:c2:91:95:2a:b7:72:6f:06: a0:52:be:91:de:93:d1:a3:46:da:c7:6e:3d:7d:cb:5a:a4:1c: df:1a:78:9e:54:44:39:4c:d1:15:79:83:d3:ca:e2:31:fa:3a: 6e:13:5c:68:f2:4e:74:1a:02:43:fe:30:7a:23:4a:8a:70:01: 8e:7d:f0:fe:6f:3b:6c:1d:d4:59:a6:93:7f:6d:ae:a9:d5:d1: 8b:1d:e5:14:12:39:59:12:c2:02:da:08:f5:dd:f1:9f:c3:7f: c4:62:ed:33:21:32:eb:b3:7f:77:86:26:e2:f9:17:69:2d:29: 13:6f:4e:04:6d:4e:e3:5a:2e:0f:5c:af:22:6d:8d:8a:23:a7: 33:5b:95:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSky0Q7OzP5w7QACJ8Te2Wbx5pHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNDExMjIwNDE2MjhaFw0yNDExMjUxNTM4MjhaMDMxMTAvBgNV BAMTKDIyMzMwNzA5NjI3MzUyRTE1RjkyMzAzMDEzMENENUY5MDg4RDFEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDko+FM68T9gMbuv2TkAR1toCGP gYz7+JpldIN0dU8rOULlHarV+aQvMJTt2Q18FBpUw2U/etDLWnzrZxFjGlBKsl7q tx+UPIdm1jF7S04mvDCqN6gwy4TMm0fXiZ3fBxS8v6cPqp9PjJUMoXjZDS6PTOoA LUCQp7f7XYVB+JceaxtkWXMqGWh1bAgJalmXBhGUlnWME4ou23R35Xtc0PBgTvNw njvjTjddmj7WYu5JAGTZq9Vi+YaOvv+u4lk+OtJKoVi1dRgAYEvlk5ugQ8Z3LFV+ nNNtLMAcr+a5kgDXBE1KtIzEpGTX1YX9IeVgNna9peLUhOhMFzOwAmJDIJe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIjMHCWJzUuFfkjAwEwzV+QiNHb4wHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGW2irpx4Et8qk8ucDX92rRmQVkT7cBiFDuK ujOpSugmuhUttO6+pDiCfFg7po5ENWWjO4MgpPqm6CEmVJ+tBFCkJSM2J5CjSlcX 6LcJsjtZVgo7gvsngq0IQf+WAD9Qy9f9XWbNpF+ql+lKMpC3OKf7no+f1FHCkZUq t3JvBqBSvpHek9GjRtrHbj19y1qkHN8aeJ5URDlM0RV5g9PK4jH6Om4TXGjyTnQa AkP+MHojSopwAY598P5vO2wd1Fmmk39trqnV0Ysd5RQSOVkSwgLaCPXd8Z/Df8Ri 7TMhMuuzf3eGJuL5F2ktKRNvTgRtTuNaLg9cryJtjYojpzNblYA= -----END CERTIFICATE-----Generated at Fri Nov 22 05:48:21 2024 by rpki-client on console-fra.rpki-client.org