$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: qETsSKFI2CkVTXgYD8T2oretEOut2nao9UotDRfLtA0= Subject key identifier: AD:95:43:F1:5A:2A:5A:B8:96:5A:BD:54:CE:E8:C9:0F:79:81:8B:BF Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 60726D381B4031828BA62D990CE77C0CD28B5F68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 0486 Signing time: Sat 23 Nov 2024 21:32:30 +0000 Manifest this update: Sat 23 Nov 2024 21:27:30 +0000 Manifest next update: Wed 27 Nov 2024 05:46:30 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: fhQ62vsf8ZcAvH/c+YSFg8z7/Yim6HDQTvFZuuMBzwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:72:6d:38:1b:40:31:82:8b:a6:2d:99:0c:e7:7c:0c:d2:8b:5f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Nov 23 21:27:30 2024 GMT Not After : Nov 27 05:46:30 2024 GMT Subject: CN=AD9543F15A2A5AB8965ABD54CEE8C90F79818BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:5e:91:36:6f:df:d1:42:15:f4:b6:0a:a3: b6:4f:72:ee:58:4f:e1:ef:9d:1d:0a:6a:30:fb:af: 93:50:d7:a9:cd:d6:80:6f:21:53:c2:ae:0c:19:6f: a4:b2:82:1c:c6:fd:90:c4:b9:da:81:7f:e9:34:12: 64:00:7c:1a:aa:1d:3c:ce:d9:99:ac:c6:b2:58:d1: 42:5a:77:09:83:b3:f4:9e:1c:05:26:1a:24:e9:93: 22:15:f0:71:38:68:c9:2e:4c:4c:f0:53:c4:6c:4f: 7c:3e:18:02:54:38:41:72:85:0e:98:47:5f:00:81: 6f:be:4d:de:82:09:61:51:e5:f9:04:a5:c2:df:aa: 84:5f:9d:3d:f3:1c:90:97:0e:4f:a3:dc:4e:53:66: 58:9b:d0:05:4a:39:98:06:ae:de:03:a4:2e:61:f2: 2e:7b:8c:8c:1b:67:24:ad:7d:04:42:2e:07:ae:1e: 7f:fc:b9:bb:f0:cd:c6:43:35:ec:c2:b0:c3:40:6a: 10:12:51:db:f4:dd:27:9c:9a:5c:cc:97:8a:6a:74: b4:be:e4:c6:3f:3f:12:7d:e7:24:76:35:1e:49:8a: 25:c6:72:b2:0a:3e:0d:26:49:0c:23:1e:13:54:83: 0f:22:1a:4c:71:30:fd:f8:fe:58:46:23:ed:88:35: e8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:95:43:F1:5A:2A:5A:B8:96:5A:BD:54:CE:E8:C9:0F:79:81:8B:BF X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:45:25:6f:06:22:70:cb:8a:d2:fd:c3:62:3e:c7:2f:0d:18: a8:be:ab:b0:58:cd:e6:8e:2e:b5:cc:a4:f5:92:a2:f6:6b:fa: 47:d3:68:63:fb:83:b7:dd:de:85:c6:78:e4:88:67:d9:ff:55: ce:28:3d:80:50:36:ce:3a:cf:9a:e6:71:5d:2b:ed:8b:80:2b: b6:52:81:0e:3b:82:0c:26:0d:18:e6:87:57:48:f7:59:f4:a8: 7f:0f:f6:b3:ba:30:c5:94:94:19:0a:8a:cc:e0:cc:c1:db:04: a3:56:4c:47:2b:7c:89:1b:12:75:f3:15:8f:fd:b7:a0:9a:13: d0:bf:da:b9:8b:22:53:44:f6:fb:19:81:a7:03:36:b1:31:78: 56:d4:5e:f3:40:02:29:f9:99:66:ad:b7:89:6a:43:d0:8b:1b: 1d:a7:0d:09:0a:65:6d:f8:20:24:05:c7:91:29:37:7f:45:91: 99:f7:aa:5b:71:3d:5f:c6:3f:be:54:b9:3d:ea:f8:56:9b:30: 2d:2e:dd:3e:f7:68:58:b3:bf:f8:a9:ce:39:4f:e5:f2:05:fa: 05:fc:65:66:24:58:c7:7f:29:b6:27:3f:12:37:4e:e7:a2:24: 69:89:9a:78:29:1e:88:a6:5c:9a:26:18:32:f2:ae:2a:a8:42: b1:63:f7:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHJtOBtAMYKLpi2ZDOd8DNKLX2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNDExMjMyMTI3MzBaFw0yNDExMjcwNTQ2MzBaMDMxMTAvBgNV BAMTKEFEOTU0M0YxNUEyQTVBQjg5NjVBQkQ1NENFRThDOTBGNzk4MThCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjsl6RNm/f0UIV9LYKo7ZPcu5Y T+HvnR0KajD7r5NQ16nN1oBvIVPCrgwZb6SyghzG/ZDEudqBf+k0EmQAfBqqHTzO 2ZmsxrJY0UJadwmDs/SeHAUmGiTpkyIV8HE4aMkuTEzwU8RsT3w+GAJUOEFyhQ6Y R18AgW++Td6CCWFR5fkEpcLfqoRfnT3zHJCXDk+j3E5TZlib0AVKOZgGrt4DpC5h 8i57jIwbZyStfQRCLgeuHn/8ubvwzcZDNezCsMNAahASUdv03SecmlzMl4pqdLS+ 5MY/PxJ95yR2NR5JiiXGcrIKPg0mSQwjHhNUgw8iGkxxMP34/lhGI+2INehfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZVD8VoqWriWWr1UzujJD3mBi78wHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNFJW8GInDLitL9w2I+xy8NGKi+q7BYzeaO LrXMpPWSovZr+kfTaGP7g7fd3oXGeOSIZ9n/Vc4oPYBQNs46z5rmcV0r7YuAK7ZS gQ47ggwmDRjmh1dI91n0qH8P9rO6MMWUlBkKiszgzMHbBKNWTEcrfIkbEnXzFY/9 t6CaE9C/2rmLIlNE9vsZgacDNrExeFbUXvNAAin5mWatt4lqQ9CLGx2nDQkKZW34 ICQFx5EpN39FkZn3qltxPV/GP75UuT3q+FabMC0u3T73aFizv/ipzjlP5fIF+gX8 ZWYkWMd/KbYnPxI3TueiJGmJmngpHoimXJomGDLyriqoQrFj91M= -----END CERTIFICATE-----Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org