$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: 7Z92BfmI4nBH+QldhtDCZFvHBKa4+vUwMVukqYa31Ns= Subject key identifier: C1:08:EF:41:34:E5:AD:C4:E7:34:8F:11:CC:B2:D2:83:34:FA:26:C3 Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 272C2C35EA3FCC6CAF5A9A9580669F131A7C225B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: 53 Signing time: Tue 28 May 2024 21:11:15 +0000 Manifest this update: Tue 28 May 2024 21:06:15 +0000 Manifest next update: Sat 01 Jun 2024 03:32:15 +0000 Files and hashes: 1: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: PHT88DWoMT2vXrWz6gv0XYYjPXhaHgBK0umIvm7DKYk=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: nivlln4BvcUQFcD7BF/izT17g+6SnXn+FIqel4yD4Bg=) 3: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: XFCvlFTzfd84QoQOCPB8UaGzxhI52P4gAFH9ZF7iHKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 03:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2c:2c:35:ea:3f:cc:6c:af:5a:9a:95:80:66:9f:13:1a:7c:22:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: May 28 21:06:15 2024 GMT Not After : Jun 1 03:32:15 2024 GMT Subject: CN=C108EF4134E5ADC4E7348F11CCB2D28334FA26C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:e6:d9:74:5f:22:cd:63:5e:08:97:67:28: 1f:cd:3a:8d:6f:5e:b8:02:9c:a1:9a:10:3f:39:03: e6:61:8e:a5:e0:45:8a:f1:01:3b:e0:77:97:85:eb: 15:24:7f:cf:17:38:40:c6:d2:d4:74:02:c9:2f:3d: bb:89:13:43:06:37:d1:05:43:6b:dc:69:34:a5:55: c7:fe:9f:12:56:5e:90:74:eb:72:a4:04:dc:2c:3e: 0e:97:3c:00:6b:81:ac:98:10:77:af:3e:00:2e:2d: 78:7b:27:6a:f6:14:84:74:79:27:0a:1d:63:34:55: 35:a0:a1:bb:cd:79:a7:30:a8:b0:84:17:7e:27:a0: d5:e1:96:2a:7d:5c:51:d5:8f:71:b0:04:db:2b:27: 2e:db:d3:19:ef:38:28:72:a1:79:c8:41:1c:14:6d: 50:cc:14:ce:44:32:1b:da:45:2f:e1:92:91:62:26: d0:b9:93:36:73:22:71:41:2a:43:19:61:f3:f6:dc: 41:41:36:27:ac:02:ee:3b:c0:54:6e:00:7f:04:94: 1e:37:2b:83:89:08:a1:8d:c1:7a:9b:b2:5d:01:37: 2d:88:d5:44:11:3c:d8:93:fe:b8:8b:03:72:bc:3c: 1c:8b:8c:2b:7d:90:f2:ac:54:7d:07:15:86:0a:19: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:08:EF:41:34:E5:AD:C4:E7:34:8F:11:CC:B2:D2:83:34:FA:26:C3 X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5e:e4:35:24:74:ac:c9:93:73:8f:5c:4b:20:aa:c2:cd:b8: 45:0d:b5:a3:02:52:22:73:23:21:aa:3d:2c:07:25:21:18:e0: 22:18:17:55:2c:67:f9:cf:35:5f:83:e4:48:66:f1:e9:9f:3d: 89:2a:e7:b7:f6:aa:89:f9:70:c4:64:7b:4e:6d:17:4b:f0:92: da:bc:32:47:f5:60:d3:fe:7c:01:09:7f:4c:6a:b4:a8:b3:83: 4f:95:be:21:36:fe:88:3e:9e:d0:62:2c:29:d8:04:d0:d0:89: e0:22:54:dc:58:b4:8b:f8:83:84:1e:ab:9d:77:4d:30:7e:b6: ae:ed:45:b4:39:44:9f:c5:82:5a:ca:fb:4a:49:c4:35:8e:a0: b3:6e:b5:19:90:ad:95:1a:f1:9a:c7:b8:f8:c3:3f:ca:10:b6: f5:4a:2d:67:12:9f:ed:a2:66:58:1c:82:2e:23:b7:b1:34:e4: b4:8e:8e:70:4d:bb:38:65:c5:33:38:75:50:61:08:32:eb:fe: ff:db:ed:8b:b2:73:3f:3a:ab:e1:c0:64:bb:78:8e:ef:bb:ea: 21:b4:42:a7:59:06:20:c8:b3:46:51:ea:a3:a5:cd:48:bd:4c: 9f:79:93:93:37:9f:fe:63:e8:b0:48:66:fc:b9:49:a1:02:40: 5f:d4:03:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJywsNeo/zGyvWpqVgGafExp8IlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNDA1MjgyMTA2MTVaFw0yNDA2MDEwMzMyMTVaMDMxMTAvBgNV BAMTKEMxMDhFRjQxMzRFNUFEQzRFNzM0OEYxMUNDQjJEMjgzMzRGQTI2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0+bZdF8izWNeCJdnKB/NOo1v XrgCnKGaED85A+ZhjqXgRYrxATvgd5eF6xUkf88XOEDG0tR0AskvPbuJE0MGN9EF Q2vcaTSlVcf+nxJWXpB063KkBNwsPg6XPABrgayYEHevPgAuLXh7J2r2FIR0eScK HWM0VTWgobvNeacwqLCEF34noNXhlip9XFHVj3GwBNsrJy7b0xnvOChyoXnIQRwU bVDMFM5EMhvaRS/hkpFiJtC5kzZzInFBKkMZYfP23EFBNiesAu47wFRuAH8ElB43 K4OJCKGNwXqbsl0BNy2I1UQRPNiT/riLA3K8PByLjCt9kPKsVH0HFYYKGdsxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwQjvQTTlrcTnNI8RzLLSgzT6JsMwHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADde5DUkdKzJk3OPXEsgqsLNuEUNtaMCUiJz IyGqPSwHJSEY4CIYF1UsZ/nPNV+D5Ehm8emfPYkq57f2qon5cMRke05tF0vwktq8 Mkf1YNP+fAEJf0xqtKizg0+VviE2/og+ntBiLCnYBNDQieAiVNxYtIv4g4Qeq513 TTB+tq7tRbQ5RJ/FglrK+0pJxDWOoLNutRmQrZUa8ZrHuPjDP8oQtvVKLWcSn+2i Zlgcgi4jt7E05LSOjnBNuzhlxTM4dVBhCDLr/v/b7Yuycz86q+HAZLt4ju+76iG0 QqdZBiDIs0ZR6qOlzUi9TJ95k5M3n/5j6LBIZvy5SaECQF/UA3c= -----END CERTIFICATE-----Generated at Tue May 28 22:49:02 2024 by rpki-client on console-ams.rpki-client.org