$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: ZnxzgcKAOLYyZWTmkIoRMAVogvEKpBUN9Wh9yQePLRA= Subject key identifier: 65:98:AA:B4:05:09:1A:52:9D:EB:EF:BA:74:58:30:F9:89:7E:AE:D2 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 71AFCBD5A028D89B73449A92AC813626920B6488 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: 65 Signing time: Thu 21 Nov 2024 10:01:57 +0000 Manifest this update: Thu 21 Nov 2024 09:56:57 +0000 Manifest next update: Sun 24 Nov 2024 18:26:57 +0000 Files and hashes: 1: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: zjOiTzIqJDXKCQuX1y9UorIBXqgfhOw/J3DHo6wRg7Q=) 2: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: gRca+21F1oZ4V6wuKEkPHof1bYiR8BuqCfdoeBLbAPs=) 3: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: QCU/U4xg/9v57D9cmgDWzhWRAskhiglG08TQuaD6bic=) 4: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: R97ZMvJGq3wevnUFZa7iCAAm+25aeK+jt1k66UcmeGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:af:cb:d5:a0:28:d8:9b:73:44:9a:92:ac:81:36:26:92:0b:64:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Nov 21 09:56:57 2024 GMT Not After : Nov 24 18:26:57 2024 GMT Subject: CN=6598AAB405091A529DEBEFBA745830F9897EAED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d8:b5:d2:ed:95:33:f8:1c:a2:25:a8:f0:14: 38:47:28:75:30:2e:12:0f:ae:9f:fd:09:53:a9:e6: c4:9b:31:4d:1a:e8:ac:f2:c2:18:3a:0f:2f:1c:59: d1:aa:b4:40:ba:1c:df:fd:13:01:2b:12:bd:ee:1b: 85:7d:26:fe:31:69:43:42:e7:b5:bb:10:94:cb:f8: ee:0b:5c:c2:c9:3a:6c:de:d8:18:45:bf:ca:f4:56: 40:0f:6c:01:fa:88:01:d9:b0:ba:79:54:39:44:a6: 3a:db:f6:f2:b9:7e:bf:21:a8:2d:1c:36:0a:c2:8f: 95:ec:08:4a:84:8b:67:89:76:91:77:ee:90:9b:4a: f8:6e:84:32:3a:e9:62:a8:39:ac:ff:5b:86:f3:83: 77:d1:36:be:4b:f0:1d:a7:c1:c5:1a:4d:70:6f:0e: fa:23:d0:4a:db:c2:92:d9:9d:9e:d5:d0:15:79:6f: a7:2b:41:ab:d6:a4:d8:a0:48:26:6c:dc:16:6b:26: 9b:50:d0:16:c1:8d:85:05:62:be:bf:1d:b1:67:33: db:6a:19:20:12:b8:34:9b:00:5f:10:7a:ad:50:db: 97:83:13:52:80:59:90:a2:fa:fd:43:d5:71:78:bf: db:40:4b:1b:63:3d:cf:16:e5:fc:1e:73:bb:99:58: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:98:AA:B4:05:09:1A:52:9D:EB:EF:BA:74:58:30:F9:89:7E:AE:D2 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f6:cd:b5:08:99:75:24:ca:b5:8d:ec:dd:26:00:9e:d3:e8: b6:53:fe:89:72:54:a8:c8:0b:c8:18:48:06:25:ac:0f:fe:83: 41:d5:9d:96:92:3b:f8:12:83:16:98:72:4e:a6:44:80:67:88: cd:2b:8d:a1:19:d7:8a:3b:07:ca:55:27:87:93:6e:7f:d0:91: ba:82:3d:dc:9d:53:0d:56:c1:2e:76:02:c6:a5:b2:11:28:85: 82:ef:cc:a2:f6:10:1a:63:00:2e:91:85:ec:1f:5c:a7:59:29: 54:ed:97:6b:e5:62:8e:e5:fb:fc:d2:94:dd:85:98:98:4d:3a: fa:8c:72:19:98:94:59:9b:11:cf:30:22:6c:47:1d:c9:46:a3: 28:08:25:3f:de:dc:56:33:cc:4e:91:ef:10:ab:09:18:b5:d3: de:71:ec:a4:56:a2:48:ba:27:10:a0:26:94:89:84:ef:18:63: fa:a3:d5:27:85:7d:68:d6:ce:d7:c3:09:a4:39:9f:87:13:94: e0:1d:24:5b:44:29:18:8e:8c:e7:58:a7:01:20:c4:26:88:49: 6b:a0:0e:22:af:6d:0f:9f:44:63:8b:00:52:4d:10:1e:f4:9d: 73:f7:3b:16:22:ee:67:7a:72:37:03:67:ed:31:57:9a:10:e8: 26:1d:a5:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUca/L1aAo2JtzRJqSrIE2JpILZIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNDExMjEwOTU2NTdaFw0yNDExMjQxODI2NTdaMDMxMTAvBgNV BAMTKDY1OThBQUI0MDUwOTFBNTI5REVCRUZCQTc0NTgzMEY5ODk3RUFFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy2LXS7ZUz+ByiJajwFDhHKHUw LhIPrp/9CVOp5sSbMU0a6Kzywhg6Dy8cWdGqtEC6HN/9EwErEr3uG4V9Jv4xaUNC 57W7EJTL+O4LXMLJOmze2BhFv8r0VkAPbAH6iAHZsLp5VDlEpjrb9vK5fr8hqC0c NgrCj5XsCEqEi2eJdpF37pCbSvhuhDI66WKoOaz/W4bzg3fRNr5L8B2nwcUaTXBv Dvoj0ErbwpLZnZ7V0BV5b6crQavWpNigSCZs3BZrJptQ0BbBjYUFYr6/HbFnM9tq GSASuDSbAF8Qeq1Q25eDE1KAWZCi+v1D1XF4v9tASxtjPc8W5fwec7uZWCTbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZZiqtAUJGlKd6++6dFgw+Yl+rtIwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEL2zbUImXUkyrWN7N0mAJ7T6LZT/olyVKjI C8gYSAYlrA/+g0HVnZaSO/gSgxaYck6mRIBniM0rjaEZ14o7B8pVJ4eTbn/QkbqC PdydUw1WwS52AsalshEohYLvzKL2EBpjAC6RhewfXKdZKVTtl2vlYo7l+/zSlN2F mJhNOvqMchmYlFmbEc8wImxHHclGoygIJT/e3FYzzE6R7xCrCRi1095x7KRWoki6 JxCgJpSJhO8YY/qj1SeFfWjWztfDCaQ5n4cTlOAdJFtEKRiOjOdYpwEgxCaISWug DiKvbQ+fRGOLAFJNEB70nXP3OxYi7md6cjcDZ+0xV5oQ6CYdpSY= -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org