$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: PiRLmGqXAbqIuT5HEYu0z4lBN1/CqWnsdNFnDWI6cFs= Subject key identifier: 52:16:87:D9:AA:27:D4:FC:E4:42:5B:76:F1:6B:35:BF:5E:B4:A2:FE Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 604BC44F9C25E5BBABAE57608EFF2EB1282CF875 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: 0D Signing time: Thu 21 Nov 2024 12:34:22 +0000 Manifest this update: Thu 21 Nov 2024 12:29:22 +0000 Manifest next update: Sun 24 Nov 2024 13:03:22 +0000 Files and hashes: 1: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: JENEpsaygQnZfGVyo5B3YcYBAcWsk2wulHjqbKHp5Ko=) 2: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: 4RAp4F/7XGUDJWluz8ukd4JUDTUiL5R6CUgISPZWwHM=) 3: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: YHAiLGhk7A6ZE4X7obU+oz12qWeh7X0M2hlk6hYX8jU=) 4: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: jkkTOO2aN41yNi5rP8Y+WHLzCL2rZAJe6Cryt5qcHOs=) 5: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: QbAeIT3Ks6znT3hg7T+AnddPc66+/tThEc2QldGCSpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4b:c4:4f:9c:25:e5:bb:ab:ae:57:60:8e:ff:2e:b1:28:2c:f8:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Nov 21 12:29:22 2024 GMT Not After : Nov 24 13:03:22 2024 GMT Subject: CN=521687D9AA27D4FCE4425B76F16B35BF5EB4A2FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:32:e6:03:f0:e1:b0:11:22:ec:11:8d:7e:a9: 69:c5:aa:45:55:43:a5:30:5e:ef:fc:85:11:c9:e5: af:d2:2a:66:39:00:19:c6:e6:14:67:69:d8:c9:c6: 41:c3:b2:95:44:bf:9c:fb:dd:96:46:c1:39:aa:77: b6:e2:e9:b2:8b:f9:3b:bb:5d:2b:64:4c:25:b7:ad: 57:c1:5b:31:ec:db:2b:86:7a:6c:78:93:5e:3d:0b: 3b:49:9b:17:f1:51:6b:3b:b2:6a:d2:bd:27:68:13: a8:11:ee:3e:74:44:75:c9:42:81:14:4a:b5:fd:2b: e4:95:a9:4b:16:d4:1a:57:39:00:81:e1:2b:0c:86: f6:fc:44:37:97:df:49:33:1f:27:e1:0a:b9:49:9b: b5:ad:ee:06:15:24:09:59:94:98:67:28:9b:76:33: a6:13:c0:14:cf:21:cb:5b:a3:e4:eb:21:9a:00:d1: 19:b6:84:d8:28:08:64:42:58:e1:d7:73:c5:34:e1: c5:6d:16:31:2f:30:f0:71:ab:80:9e:9c:b1:be:24: 71:8b:51:2e:c8:74:2e:eb:71:6e:96:56:c0:85:d4: cb:3e:db:14:28:9d:98:5c:9d:1c:a5:8b:82:71:97: 21:23:06:29:92:c6:7e:f1:23:ad:b1:8b:a9:32:8a: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:16:87:D9:AA:27:D4:FC:E4:42:5B:76:F1:6B:35:BF:5E:B4:A2:FE X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8f:19:4f:4c:4f:8b:47:c5:47:40:57:01:60:48:62:81:48: e8:15:dd:f0:7d:af:63:4b:79:f2:4d:a8:8a:a7:6d:f4:0c:1a: 34:89:43:10:d8:33:a3:e1:66:b3:a8:27:18:df:fa:e9:56:3b: 48:dc:ad:82:60:b7:05:2d:d4:d5:e0:51:5d:63:b2:4e:ce:c8: 9e:05:3e:d9:d8:dd:98:83:00:b9:81:e3:85:34:c4:30:03:bf: 2b:99:60:ae:c1:2c:cb:ec:d9:49:3d:a4:dc:8f:9e:84:ed:4c: 72:1a:82:7a:e6:55:33:8d:84:6b:e6:d5:69:96:2e:0e:49:c3: 0c:9c:02:e4:b8:9e:21:d2:0a:6b:8d:36:61:13:4d:04:5d:68: cf:8a:5f:be:ae:48:f2:6b:f7:1d:0b:db:a7:14:64:b6:7d:26: 50:d4:cc:85:77:64:c3:c7:08:04:33:9f:b9:2d:96:3c:69:bf: 53:27:7e:6a:df:12:f4:fd:8a:1f:77:59:7d:5b:48:e9:1d:94: 07:22:28:b9:24:be:a3:ea:2d:ae:81:55:17:7c:65:02:f4:26: fb:3e:88:25:4d:58:de:3d:18:4a:34:22:ad:9c:41:05:ab:7d: ae:da:99:ba:c1:cf:f6:b6:10:54:68:94:4e:7f:fa:1e:b7:c3: c7:86:12:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYEvET5wl5burrldgjv8usSgs+HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNDExMjExMjI5MjJaFw0yNDExMjQxMzAzMjJaMDMxMTAvBgNV BAMTKDUyMTY4N0Q5QUEyN0Q0RkNFNDQyNUI3NkYxNkIzNUJGNUVCNEEyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkMuYD8OGwESLsEY1+qWnFqkVV Q6UwXu/8hRHJ5a/SKmY5ABnG5hRnadjJxkHDspVEv5z73ZZGwTmqd7bi6bKL+Tu7 XStkTCW3rVfBWzHs2yuGemx4k149CztJmxfxUWs7smrSvSdoE6gR7j50RHXJQoEU SrX9K+SVqUsW1BpXOQCB4SsMhvb8RDeX30kzHyfhCrlJm7Wt7gYVJAlZlJhnKJt2 M6YTwBTPIctbo+TrIZoA0Rm2hNgoCGRCWOHXc8U04cVtFjEvMPBxq4CenLG+JHGL US7IdC7rcW6WVsCF1Ms+2xQonZhcnRyli4JxlyEjBimSxn7xI62xi6kyioCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUhaH2aon1PzkQlt28Ws1v160ov4wHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiPGU9MT4tHxUdAVwFgSGKBSOgV3fB9r2NL efJNqIqnbfQMGjSJQxDYM6PhZrOoJxjf+ulWO0jcrYJgtwUt1NXgUV1jsk7OyJ4F PtnY3ZiDALmB44U0xDADvyuZYK7BLMvs2Uk9pNyPnoTtTHIagnrmVTONhGvm1WmW Lg5JwwycAuS4niHSCmuNNmETTQRdaM+KX76uSPJr9x0L26cUZLZ9JlDUzIV3ZMPH CAQzn7ktljxpv1MnfmrfEvT9ih93WX1bSOkdlAciKLkkvqPqLa6BVRd8ZQL0Jvs+ iCVNWN49GEo0Iq2cQQWrfa7ambrBz/a2EFRolE5/+h63w8eGEvs= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org