$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: HsbRdjATfEAl5jsuHUrKD6VPUXSev5AyDdkCyjQmZAU= Subject key identifier: 10:AD:50:A9:D2:97:DA:49:78:4C:8A:24:18:64:96:5F:D0:69:9D:EE Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 77D3BEDDB193F086CDE7202AD132E5E50E4EFE56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 0214 Signing time: Wed 29 May 2024 20:20:00 +0000 Manifest this update: Wed 29 May 2024 20:15:00 +0000 Manifest next update: Sun 02 Jun 2024 03:10:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: m9rXx27LqlRkd8HzQNYmzWusCVzIL3giO69mltFWtjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d3:be:dd:b1:93:f0:86:cd:e7:20:2a:d1:32:e5:e5:0e:4e:fe:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: May 29 20:15:00 2024 GMT Not After : Jun 2 03:10:00 2024 GMT Subject: CN=10AD50A9D297DA49784C8A241864965FD0699DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:74:ce:2c:9e:35:d2:cf:f1:c7:2c:a6:86: 65:ee:73:4f:0a:a2:99:19:00:e2:5f:c0:15:6a:a8: f5:ce:a5:ec:95:22:3e:df:4a:02:d4:89:82:e5:14: 50:3a:44:58:11:92:9d:76:d8:92:94:69:dc:0d:77: 28:c1:f7:b4:ce:30:1c:35:cc:fe:1d:1e:9c:b8:fc: 83:75:c5:8b:15:5a:3d:21:ca:65:19:39:77:ed:4d: 36:72:06:86:f8:c7:3c:f6:2b:94:9d:ec:69:f6:30: 09:37:e8:aa:50:9c:9c:77:3c:2f:91:19:94:1d:c0: 14:ed:a5:50:b6:bc:53:ac:55:ae:67:51:13:20:1d: 23:0e:e8:37:29:39:b7:77:41:0e:75:73:90:cc:a8: b5:28:7b:00:62:d1:94:da:bc:4f:ff:2c:76:0c:06: 94:49:78:f9:af:3a:6b:67:00:8b:be:86:ac:b4:b0: c9:d5:7d:c7:9d:5d:32:05:db:c4:a3:84:a9:eb:2e: 3f:c7:48:b3:6f:87:5c:33:6e:ee:e3:ff:a8:67:5f: b7:41:9c:03:2c:79:e1:e1:1c:8b:a0:5a:d8:87:ac: a2:d0:c0:32:e3:26:f9:09:96:fc:9e:59:6a:22:3c: 7f:d0:06:18:af:38:f6:20:79:dd:d0:99:26:36:87: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AD:50:A9:D2:97:DA:49:78:4C:8A:24:18:64:96:5F:D0:69:9D:EE X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:37:85:d5:86:76:71:ea:4d:18:83:d2:af:a8:0c:ad:c2:26: 48:0f:c2:65:0b:a8:b0:e0:84:d5:c6:cc:e8:10:b3:7e:f4:7a: 3c:5f:39:70:6d:75:62:bc:b9:5f:13:be:3f:9e:c3:c5:8c:a7: e0:45:12:41:ef:e5:5d:ca:14:9d:08:1c:3b:f4:51:f4:c9:ca: 57:38:b3:ce:a0:d0:b8:89:0d:ed:5d:bb:ba:59:fe:fb:06:d6: 0f:14:63:0e:18:85:a9:1d:71:1e:e1:98:de:94:85:e7:d7:36: 0e:60:37:59:08:38:50:3a:4a:c6:cd:e0:54:ca:a2:c6:20:58: 3a:d0:d7:fb:a1:fd:f4:aa:20:bf:22:61:33:6c:e5:9b:59:49: c2:6f:8b:89:5c:6a:38:b1:04:8a:85:a0:8b:9a:30:eb:7d:53: cb:06:7b:80:ce:91:86:d4:16:2e:b0:c9:2a:c7:06:71:0e:5b: 72:24:c3:f3:f2:c9:51:18:2d:c1:62:90:e1:32:cd:b2:9e:6b: fd:a6:de:c7:d1:54:d6:76:1b:53:23:23:8f:43:81:c9:b6:eb: 7c:40:b6:c1:97:b1:44:9c:d9:16:71:0d:dc:22:f1:15:8e:42: 66:65:a8:77:e7:68:b0:bc:85:27:d0:8c:40:64:8b:a5:10:da: a0:18:29:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9O+3bGT8IbN5yAq0TLl5Q5O/lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNDA1MjkyMDE1MDBaFw0yNDA2MDIwMzEwMDBaMDMxMTAvBgNV BAMTKDEwQUQ1MEE5RDI5N0RBNDk3ODRDOEEyNDE4NjQ5NjVGRDA2OTlERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+3TOLJ410s/xxyymhmXuc08K opkZAOJfwBVqqPXOpeyVIj7fSgLUiYLlFFA6RFgRkp122JKUadwNdyjB97TOMBw1 zP4dHpy4/IN1xYsVWj0hymUZOXftTTZyBob4xzz2K5Sd7Gn2MAk36KpQnJx3PC+R GZQdwBTtpVC2vFOsVa5nURMgHSMO6DcpObd3QQ51c5DMqLUoewBi0ZTavE//LHYM BpRJePmvOmtnAIu+hqy0sMnVfcedXTIF28SjhKnrLj/HSLNvh1wzbu7j/6hnX7dB nAMseeHhHIugWtiHrKLQwDLjJvkJlvyeWWoiPH/QBhivOPYged3QmSY2hxL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEK1QqdKX2kl4TIokGGSWX9Bpne4wHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC43hdWGdnHqTRiD0q+oDK3CJkgPwmULqLDg hNXGzOgQs370ejxfOXBtdWK8uV8Tvj+ew8WMp+BFEkHv5V3KFJ0IHDv0UfTJylc4 s86g0LiJDe1du7pZ/vsG1g8UYw4YhakdcR7hmN6UhefXNg5gN1kIOFA6SsbN4FTK osYgWDrQ1/uh/fSqIL8iYTNs5ZtZScJvi4lcajixBIqFoIuaMOt9U8sGe4DOkYbU Fi6wySrHBnEOW3Ikw/PyyVEYLcFikOEyzbKea/2m3sfRVNZ2G1MjI49Dgcm263xA tsGXsUSc2RZxDdwi8RWOQmZlqHfnaLC8hSfQjEBki6UQ2qAYKUc= -----END CERTIFICATE-----Generated at Wed May 29 20:52:56 2024 by rpki-client on console-fra.rpki-client.org