$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: FM4aud2idTalU+wjPlJ3SYEuDkLYk7XaKyh0NljiAT8= Subject key identifier: FD:44:99:86:01:B9:4D:F2:5E:6C:06:2D:36:7C:DA:49:C8:B1:06:5F Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 10FB0EA0E109B8E623FA7BD38AA00C84E5E9B868 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: 34 Signing time: Mon 25 Nov 2024 20:20:43 +0000 Manifest this update: Mon 25 Nov 2024 20:15:43 +0000 Manifest next update: Fri 29 Nov 2024 08:04:43 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: 0bVYDLHeMQ3eiqXfZfU7kmw2brhN+c4nvfkyzoO2Fus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:fb:0e:a0:e1:09:b8:e6:23:fa:7b:d3:8a:a0:0c:84:e5:e9:b8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Nov 25 20:15:43 2024 GMT Not After : Nov 29 08:04:43 2024 GMT Subject: CN=FD44998601B94DF25E6C062D367CDA49C8B1065F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:d0:00:fd:9d:48:a0:64:75:71:71:4c:20: 07:c5:90:50:e3:97:f8:bd:bd:d2:21:fd:50:d4:71: 9c:43:44:56:7d:93:23:e0:51:3a:3b:d9:2e:ea:b5: c4:05:8b:cc:79:6c:cb:9f:91:50:de:be:a6:30:98: 04:29:4b:5d:6a:66:3e:c7:51:5f:c6:09:2e:6d:24: 00:86:a5:8b:d3:03:31:bb:88:82:53:8e:87:76:9f: 94:b8:37:86:14:0d:0a:ba:3a:8c:d1:b1:5b:d1:96: 76:5c:4e:80:47:f1:14:1b:14:97:23:1e:2e:a3:98: 93:fd:82:50:bb:76:04:a8:dd:a8:e4:c0:8b:10:73: a7:83:52:e2:ee:c5:cd:9b:77:75:ca:b8:5a:99:ac: 69:64:21:41:c4:b1:97:52:7b:db:dd:f2:26:01:c5: e6:cd:13:66:25:1b:f4:45:85:77:f5:4e:9e:44:41: 46:43:15:7f:3c:af:bc:de:89:20:2d:40:c0:ed:cb: 56:f3:ff:85:81:27:96:d3:ff:42:b0:9d:9d:16:2f: c6:90:ae:8e:4e:6e:26:66:9d:67:f1:1d:8c:7c:94: 74:4a:16:b9:15:4b:23:5d:87:7f:0f:b6:42:23:6e: 97:9b:7c:31:bc:f9:24:8d:58:eb:87:77:a5:3e:0d: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:44:99:86:01:B9:4D:F2:5E:6C:06:2D:36:7C:DA:49:C8:B1:06:5F X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d0:0f:cf:97:ba:b8:bc:90:8f:92:79:4a:00:60:45:27:8f: f3:d6:c6:a1:3d:b6:40:b5:e1:0a:b9:9a:a3:ff:1f:af:e7:ca: 56:58:4c:e8:19:9c:98:73:be:70:63:4b:46:0c:de:57:d0:d3: ac:4f:c8:1d:23:5e:7e:9f:2c:93:1d:00:56:27:ac:54:13:64: 41:f8:36:d2:44:84:c4:08:3a:82:6e:b9:74:e4:71:34:d8:25: ce:04:83:0a:9f:7d:09:22:da:e1:00:cd:ab:f5:c6:18:db:a5: b2:df:5c:39:e1:23:54:97:68:ec:bf:f1:de:cb:88:6c:5a:9f: fa:9e:6d:4f:d6:1d:ef:aa:26:35:93:a6:66:82:3d:72:8c:1b: d0:0b:09:0b:37:1f:47:ad:23:9c:91:a5:f6:ae:95:7f:80:0b: eb:84:dc:38:7e:16:b5:7d:9a:09:74:35:77:02:ec:e7:ee:aa: e5:81:8f:ae:c6:50:8c:f5:11:df:2c:4e:02:7f:6f:bc:7e:20: 10:a8:60:31:7a:dd:13:59:a2:de:7b:29:85:e2:38:67:17:a6: 82:f2:41:c2:6c:e1:f4:8f:51:7c:75:14:a7:c7:18:d4:fc:3e: d1:56:5e:f7:44:04:fa:1d:0b:84:87:59:69:a3:53:44:93:18: 93:8b:a7:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPsOoOEJuOYj+nvTiqAMhOXpuGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNDExMjUyMDE1NDNaFw0yNDExMjkwODA0NDNaMDMxMTAvBgNV BAMTKEZENDQ5OTg2MDFCOTRERjI1RTZDMDYyRDM2N0NEQTQ5QzhCMTA2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGdAA/Z1IoGR1cXFMIAfFkFDj l/i9vdIh/VDUcZxDRFZ9kyPgUTo72S7qtcQFi8x5bMufkVDevqYwmAQpS11qZj7H UV/GCS5tJACGpYvTAzG7iIJTjod2n5S4N4YUDQq6OozRsVvRlnZcToBH8RQbFJcj Hi6jmJP9glC7dgSo3ajkwIsQc6eDUuLuxc2bd3XKuFqZrGlkIUHEsZdSe9vd8iYB xebNE2YlG/RFhXf1Tp5EQUZDFX88r7zeiSAtQMDty1bz/4WBJ5bT/0KwnZ0WL8aQ ro5ObiZmnWfxHYx8lHRKFrkVSyNdh38PtkIjbpebfDG8+SSNWOuHd6U+DXLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/USZhgG5TfJebAYtNnzaScixBl8wHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrQD8+Xuri8kI+SeUoAYEUnj/PWxqE9tkC1 4Qq5mqP/H6/nylZYTOgZnJhzvnBjS0YM3lfQ06xPyB0jXn6fLJMdAFYnrFQTZEH4 NtJEhMQIOoJuuXTkcTTYJc4EgwqffQki2uEAzav1xhjbpbLfXDnhI1SXaOy/8d7L iGxan/qebU/WHe+qJjWTpmaCPXKMG9ALCQs3H0etI5yRpfaulX+AC+uE3Dh+FrV9 mgl0NXcC7OfuquWBj67GUIz1Ed8sTgJ/b7x+IBCoYDF63RNZot57KYXiOGcXpoLy QcJs4fSPUXx1FKfHGNT8PtFWXvdEBPodC4SHWWmjU0STGJOLp14= -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:13 2024 by rpki-client on console-ams.rpki-client.org