$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft File: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json) Hash identifier: +F555jpDWNZsjHRzEPLUsz9SnhqoaTx2nMVLj1VjA9I= Subject key identifier: 5B:11:B9:80:F8:F3:A6:E5:BC:44:77:06:93:7F:89:C5:F7:29:D2:E7 Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Certificate serial: 3AB8B06A514054010DC5D768648DCB5127B54FF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft Manifest number: 42 Signing time: Fri 27 Sep 2024 05:30:46 +0000 Manifest this update: Fri 27 Sep 2024 05:25:46 +0000 Manifest next update: Mon 30 Sep 2024 13:53:46 +0000 Files and hashes: 1: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: Q4bEPXGITMYlEUkogoBHUQw6aD1GENfQinOJ9BlkZrU=) 2: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: UdzlF3DFeRaQ63vzO60cAa/vqEjotO8aLRdntyRiQwk=) 3: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: 5Yt/WCOhHipQ3C773vHA0ujUlZHdqnjXIPyfowlLmdw=) 4: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: HgEHL4fzwet2r6zpLhQkK546szHxoFmfp4GXUYYhiCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 06:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b8:b0:6a:51:40:54:01:0d:c5:d7:68:64:8d:cb:51:27:b5:4f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Validity Not Before: Sep 27 05:25:46 2024 GMT Not After : Sep 30 13:53:46 2024 GMT Subject: CN=5B11B980F8F3A6E5BC447706937F89C5F729D2E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:db:67:eb:25:ce:21:1d:73:0d:4a:d7:c1: c7:ae:aa:dd:be:51:b1:06:cc:e4:17:3f:bc:bd:8f: f8:27:f1:e7:20:bd:f4:59:76:97:c4:85:ed:e6:b2: 0b:cd:d4:a4:bf:4b:01:20:ac:c0:ae:31:da:b8:e7: 94:74:86:d2:c6:db:ad:d7:b8:cc:a0:0e:a5:83:ca: aa:20:77:96:26:2a:48:f9:e1:f8:0d:59:24:15:fb: 4a:f6:9c:ba:4a:39:54:7d:49:14:71:4f:62:fa:7c: 93:97:e0:60:a7:63:01:57:86:ab:14:18:10:71:57: cb:a6:89:c0:94:2d:2d:75:cc:6f:99:2e:60:c9:79: 18:b1:be:3d:37:63:33:9c:9d:59:2a:99:4f:82:e8: 35:cc:c8:a1:ed:07:dd:46:29:c2:67:ef:7a:2b:6b: f8:e2:95:bd:7e:bd:1b:47:8f:76:cf:5e:9f:97:18: 80:4f:9a:37:00:7f:e7:d6:68:f4:94:08:00:89:a9: f7:67:48:08:20:78:fc:be:ad:74:87:38:05:a2:e6: d6:43:fc:79:c4:5e:ac:4f:41:4c:fb:64:be:62:e0: c9:bb:31:84:29:0c:e0:69:43:de:aa:0b:e0:88:f0: 32:69:7b:fa:75:03:c4:d5:85:ab:de:4a:75:30:55: c0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:11:B9:80:F8:F3:A6:E5:BC:44:77:06:93:7F:89:C5:F7:29:D2:E7 X509v3 Authority Key Identifier: keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a5:54:bd:d9:46:76:a2:c9:1d:66:76:93:d8:42:aa:72:44: f4:21:72:1e:3e:5d:f0:db:a9:cf:3b:f5:3d:d1:d8:4c:86:fb: c7:e9:42:43:39:6d:9a:c4:31:bf:78:fa:01:52:5c:63:45:fd: 67:bf:f2:7f:8a:22:b3:1e:ef:be:2f:f8:ea:2e:85:d0:f2:70: ca:b6:a9:c3:c2:11:94:a1:68:a5:65:cc:b2:cc:6c:fa:74:c4: 6b:93:f6:06:56:f1:92:2a:9a:3c:a7:7d:24:b3:ef:cb:9b:1f: 20:d5:6c:69:96:7a:39:5f:f1:d4:37:f9:dc:cc:42:50:db:ce: 80:d7:54:d4:11:d2:65:b1:da:54:dc:b7:aa:28:f8:66:84:ce: e5:6b:1f:02:bf:cc:09:2f:38:1e:31:5d:e2:79:6c:71:17:52: 3a:ca:73:64:0b:2a:f9:c8:f2:f3:99:75:64:af:d6:81:6c:1b: 2f:ce:a0:16:5e:4f:7f:2b:fb:bb:25:cc:e2:11:1b:28:ff:f7: ed:b6:64:fd:85:ff:69:09:aa:2d:45:a8:29:44:76:bd:63:34: 1b:f4:ac:e8:8f:19:94:56:6b:60:fa:ba:26:83:4b:d1:e3:2c: 4e:55:f8:e7:8f:3b:76:68:53:cc:f3:0c:18:1f:20:1d:a2:a4: cc:6e:42:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOriwalFAVAENxddoZI3LUSe1T/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD M0QwNUEyRjAeFw0yNDA5MjcwNTI1NDZaFw0yNDA5MzAxMzUzNDZaMDMxMTAvBgNV BAMTKDVCMTFCOTgwRjhGM0E2RTVCQzQ0NzcwNjkzN0Y4OUM1RjcyOUQyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCdtn6yXOIR1zDUrXwceuqt2+ UbEGzOQXP7y9j/gn8ecgvfRZdpfEhe3msgvN1KS/SwEgrMCuMdq455R0htLG263X uMygDqWDyqogd5YmKkj54fgNWSQV+0r2nLpKOVR9SRRxT2L6fJOX4GCnYwFXhqsU GBBxV8umicCULS11zG+ZLmDJeRixvj03YzOcnVkqmU+C6DXMyKHtB91GKcJn73or a/jilb1+vRtHj3bPXp+XGIBPmjcAf+fWaPSUCACJqfdnSAggePy+rXSHOAWi5tZD /HnEXqxPQUz7ZL5i4Mm7MYQpDOBpQ96qC+CI8DJpe/p1A8TVhaveSnUwVcDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWxG5gPjzpuW8RHcGk3+Jxfcp0ucwHwYDVR0j BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0 OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw NUEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3 MEJDM0QwNUEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOlVL3ZRnaiyR1mdpPYQqpyRPQhch4+XfDb qc879T3R2EyG+8fpQkM5bZrEMb94+gFSXGNF/We/8n+KIrMe774v+OouhdDycMq2 qcPCEZShaKVlzLLMbPp0xGuT9gZW8ZIqmjynfSSz78ubHyDVbGmWejlf8dQ3+dzM QlDbzoDXVNQR0mWx2lTct6oo+GaEzuVrHwK/zAkvOB4xXeJ5bHEXUjrKc2QLKvnI 8vOZdWSv1oFsGy/OoBZeT38r+7slzOIRGyj/9+22ZP2F/2kJqi1FqClEdr1jNBv0 rOiPGZRWa2D6uiaDS9HjLE5V+OePO3ZoU8zzDBgfIB2ipMxuQgI= -----END CERTIFICATE-----Generated at Fri Sep 27 06:20:05 2024 by rpki-client on console-ams.rpki-client.org