$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: JDnyZxcfp58NrpeyVAHYmiWNBIMCFuDLldJMvlkgFqI= Subject key identifier: CD:60:BD:EE:BF:9D:94:F3:C8:C7:C3:18:83:74:0A:4E:43:94:25:57 Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 720AA64F3F6C9C987B9066F2B362658CC3E87E61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: DA Signing time: Sun 19 May 2024 18:10:01 +0000 Manifest this update: Sun 19 May 2024 18:05:01 +0000 Manifest next update: Thu 23 May 2024 02:22:01 +0000 Files and hashes: 1: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: 6Xr4wSJVliR3epQl62rp+3cDrmnDAiY4BLD8xvnV9vs=) 2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: 0olFR77pZ1O0z24Mfc37kkrspgW3foc9wOjSMcrRPz0=) 3: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: TqsQk2lDu1Ru04O6QBtKDetDUq4Hw6i2oH3oCjjDzYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:0a:a6:4f:3f:6c:9c:98:7b:90:66:f2:b3:62:65:8c:c3:e8:7e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: May 19 18:05:01 2024 GMT Not After : May 23 02:22:01 2024 GMT Subject: CN=CD60BDEEBF9D94F3C8C7C31883740A4E43942557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:9a:30:19:11:a9:a6:30:24:87:0f:4e:2f: 02:f2:7a:46:92:2c:70:5e:40:81:06:e1:49:69:8e: 52:6f:fb:67:a9:08:ab:f6:97:96:42:2e:f8:e6:f5: a2:e1:4f:04:86:10:69:d1:7a:44:be:68:b8:4e:fe: b8:70:7a:ea:c0:f2:a5:c0:f5:da:b8:6b:da:60:6f: a9:18:78:8f:da:22:38:e1:06:a6:11:b4:0d:13:ea: 0f:d8:67:78:66:c8:2b:dc:3d:57:f5:e1:62:4a:82: d2:a9:1f:bf:35:ce:26:61:da:ab:a7:5d:3d:bb:cf: 16:82:85:f5:25:20:8d:63:d3:be:a2:bd:9b:e0:2f: ab:d1:a6:00:17:91:e5:ff:40:32:aa:a7:84:90:54: 5e:e7:bf:24:8c:68:fc:29:bb:83:ea:4e:2f:b9:e0: c2:74:2e:38:8f:59:ac:82:1d:3a:40:ca:f5:16:07: e7:87:09:b9:fc:4c:09:b0:94:62:f9:ae:fa:52:53: e7:57:ce:8b:9f:35:53:b6:c0:8e:b3:60:71:14:81: 8b:3d:61:60:3a:98:6c:74:79:cc:c4:05:39:13:1a: 1c:1c:68:a5:51:37:d5:50:0d:5e:96:26:92:db:2c: a7:25:eb:6f:c4:0d:4b:5b:ce:92:08:00:b5:6f:61: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:60:BD:EE:BF:9D:94:F3:C8:C7:C3:18:83:74:0A:4E:43:94:25:57 X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fb:28:5d:47:fd:c5:b5:c6:7c:44:c7:ce:32:ff:e5:77:c6: d4:ac:db:0e:4c:32:5d:70:35:55:2a:9b:3a:08:b7:ce:8e:dc: 72:ca:84:4f:04:24:81:99:cc:4d:31:57:84:16:c7:a6:16:0a: 5e:00:d3:25:97:82:23:1f:c0:49:6c:b9:fa:7b:a2:56:c0:00: 75:38:dd:25:24:07:7c:6d:28:a0:a4:e8:fc:d5:78:03:ad:a9: fe:04:a4:b9:8b:6b:3d:ae:94:22:b3:28:78:95:72:e4:d3:7e: 9f:24:39:f3:68:fb:e7:b0:f1:d7:e2:73:ce:09:11:2b:48:28: fc:73:dc:0b:25:2d:a9:ba:f4:e9:e7:63:2f:8d:59:e6:af:e0: f6:8d:fb:63:d6:a5:cd:6c:b2:59:bd:b3:3b:64:86:c0:b1:e6: 1c:c1:9b:9c:c6:04:87:39:f8:dc:cf:bd:03:83:ac:93:ca:97: c3:89:1c:a6:80:39:b2:09:b2:20:a8:9e:02:0f:93:80:d6:18: 34:48:09:c8:ac:76:bf:a2:cf:af:57:50:61:df:9d:fd:f3:39: c6:2f:5a:84:43:da:cb:28:55:90:4a:d1:39:3a:1f:12:cc:35: a2:ee:00:bd:11:e7:07:b3:67:bc:ad:14:8f:eb:0b:0c:7c:a2: 26:bf:ed:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgqmTz9snJh7kGbys2JljMPofmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNDA1MTkxODA1MDFaFw0yNDA1MjMwMjIyMDFaMDMxMTAvBgNV BAMTKENENjBCREVFQkY5RDk0RjNDOEM3QzMxODgzNzQwQTRFNDM5NDI1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRZowGRGppjAkhw9OLwLyekaS LHBeQIEG4UlpjlJv+2epCKv2l5ZCLvjm9aLhTwSGEGnRekS+aLhO/rhweurA8qXA 9dq4a9pgb6kYeI/aIjjhBqYRtA0T6g/YZ3hmyCvcPVf14WJKgtKpH781ziZh2qun XT27zxaChfUlII1j076ivZvgL6vRpgAXkeX/QDKqp4SQVF7nvySMaPwpu4PqTi+5 4MJ0LjiPWayCHTpAyvUWB+eHCbn8TAmwlGL5rvpSU+dXzoufNVO2wI6zYHEUgYs9 YWA6mGx0eczEBTkTGhwcaKVRN9VQDV6WJpLbLKcl62/EDUtbzpIIALVvYUKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWC97r+dlPPIx8MYg3QKTkOUJVcwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD7KF1H/cW1xnxEx84y/+V3xtSs2w5MMl1w NVUqmzoIt86O3HLKhE8EJIGZzE0xV4QWx6YWCl4A0yWXgiMfwElsufp7olbAAHU4 3SUkB3xtKKCk6PzVeAOtqf4EpLmLaz2ulCKzKHiVcuTTfp8kOfNo++ew8dfic84J EStIKPxz3AslLam69OnnYy+NWeav4PaN+2PWpc1sslm9sztkhsCx5hzBm5zGBIc5 +NzPvQODrJPKl8OJHKaAObIJsiCongIPk4DWGDRICcisdr+iz69XUGHfnf3zOcYv WoRD2ssoVZBK0Tk6HxLMNaLuAL0R5wezZ7ytFI/rCwx8oia/7eM= -----END CERTIFICATE-----Generated at Sun May 19 18:31:47 2024 by rpki-client on console-fra.rpki-client.org