$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: YDrfNusC5prtNo1vOJNRlDt96fCFF8fb7EmNh+kUlp0= Subject key identifier: 73:5F:42:A2:61:8F:98:BA:07:23:FD:20:9A:07:21:1C:39:BF:88:FA Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 2A22A5329ADAF1BAD4E73D0B12C2E98EB625C688 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 0489 Signing time: Mon 25 Nov 2024 00:51:45 +0000 Manifest this update: Mon 25 Nov 2024 00:46:45 +0000 Manifest next update: Thu 28 Nov 2024 02:08:45 +0000 Files and hashes: 1: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: U1le6HmfhNXh3uDoBprzUB/GbdiVtl5syDPCsFAVER0=) 2: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: r+uGiwsImTVUZ3QvTZDGW1NOEwKlVahMGqRpmWRyXsA=) 3: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: FLTD+2Jpp1mp5koYThGmMrPDSpfNY8z0qn+l8hTwOQ8=) 4: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: mVNrzG20qa0eCoI99rW1aiWH+6G8WyyK2ntWMeca7/I=) 5: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: 35E4UlqdBUYnnMY7Jpoh0Eg3oe/ZchB5ctSGR7BqZWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:22:a5:32:9a:da:f1:ba:d4:e7:3d:0b:12:c2:e9:8e:b6:25:c6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Nov 25 00:46:45 2024 GMT Not After : Nov 28 02:08:45 2024 GMT Subject: CN=735F42A2618F98BA0723FD209A07211C39BF88FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:ec:78:b6:3e:01:ac:c1:c6:4d:2f:5f:83: bf:0a:56:9b:0a:d7:5c:7e:52:bf:07:58:20:b5:b2: 51:1e:b6:17:7f:6c:e9:aa:a7:0c:82:7e:cf:fd:43: 53:da:8f:ba:31:a1:74:f1:af:57:1a:66:c9:24:e7: 86:2f:95:e2:7c:da:a1:42:15:3f:b8:6e:c3:df:68: cd:6f:a2:b2:9b:3e:99:8c:3f:60:2c:49:cc:c6:68: d7:92:36:c0:c6:ce:56:ec:74:a4:d1:d6:50:48:4d: ab:55:81:34:48:be:86:89:87:f4:33:93:5b:d8:17: 1b:a4:07:b6:cd:7e:3e:83:be:db:87:4f:49:20:a9: 0b:95:d3:d5:ec:5e:b7:8d:9e:f9:29:f3:20:91:78: ec:cb:8d:b2:d8:fb:e4:d7:88:3f:64:cc:9f:38:cc: 36:c8:00:b5:b5:2d:75:31:cd:97:2a:2a:a1:10:c0: 06:04:98:10:c6:cb:11:24:c0:19:a8:f3:7e:52:d3: 40:89:d9:52:d6:81:d8:f0:8c:99:14:fd:e7:67:06: 17:56:e3:d8:ea:c8:0b:dc:89:90:e8:d3:ef:20:48: 56:db:15:cd:75:e5:ad:fc:d0:98:3b:01:74:bc:57: ba:cf:17:57:97:77:79:ea:61:50:54:24:24:14:79: d9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5F:42:A2:61:8F:98:BA:07:23:FD:20:9A:07:21:1C:39:BF:88:FA X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:84:ed:17:b8:11:ae:c1:b5:5f:d0:a2:04:7f:50:0c:f5:58: 48:2e:85:15:85:fe:0b:bf:2c:19:88:e9:1a:1d:a3:60:bc:4c: 01:ff:ac:e2:30:07:ad:ee:16:c1:91:ab:0a:4f:6d:fd:b8:9a: 2a:37:6f:73:2a:60:04:9e:13:89:9a:9c:f9:5c:2a:56:a3:d0: ed:48:9b:b7:bc:b5:ab:5b:af:31:75:35:68:46:4a:08:cd:fe: ed:e2:85:c2:1e:66:83:e1:d4:7f:87:64:73:62:2a:5b:21:8e: 31:0a:cf:e2:21:31:5a:77:92:d9:31:6c:51:b2:e5:c5:14:8d: d3:22:b2:77:a1:aa:29:5c:e6:3d:28:3b:d9:85:4b:81:5a:56: d9:e1:20:2f:26:49:67:d0:37:90:36:67:df:fe:33:4c:37:84: 1d:92:62:5a:03:77:af:d2:7c:bd:a1:a6:b9:8b:9f:4b:6e:ab: bb:c7:b1:21:aa:60:9d:2b:c2:86:79:93:6b:91:87:58:96:1b: 97:93:88:aa:07:42:af:c5:21:1a:4f:c0:62:35:39:c0:21:60: 79:ed:40:36:3d:f2:4d:27:d9:ab:62:84:a9:a9:d5:06:f6:f8: 22:03:fc:c7:eb:09:25:ca:43:a9:bd:2a:fc:41:be:e9:4a:c2: 05:6d:9b:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiKlMpra8brU5z0LEsLpjrYlxogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNDExMjUwMDQ2NDVaFw0yNDExMjgwMjA4NDVaMDMxMTAvBgNV BAMTKDczNUY0MkEyNjE4Rjk4QkEwNzIzRkQyMDlBMDcyMTFDMzlCRjg4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSF+x4tj4BrMHGTS9fg78KVpsK 11x+Ur8HWCC1slEethd/bOmqpwyCfs/9Q1Paj7oxoXTxr1caZskk54YvleJ82qFC FT+4bsPfaM1vorKbPpmMP2AsSczGaNeSNsDGzlbsdKTR1lBITatVgTRIvoaJh/Qz k1vYFxukB7bNfj6DvtuHT0kgqQuV09XsXreNnvkp8yCReOzLjbLY++TXiD9kzJ84 zDbIALW1LXUxzZcqKqEQwAYEmBDGyxEkwBmo835S00CJ2VLWgdjwjJkU/ednBhdW 49jqyAvciZDo0+8gSFbbFc115a380Jg7AXS8V7rPF1eXd3nqYVBUJCQUedmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc19ComGPmLoHI/0gmgchHDm/iPowHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECE7Re4Ea7BtV/QogR/UAz1WEguhRWF/gu/ LBmI6Rodo2C8TAH/rOIwB63uFsGRqwpPbf24mio3b3MqYASeE4manPlcKlaj0O1I m7e8tatbrzF1NWhGSgjN/u3ihcIeZoPh1H+HZHNiKlshjjEKz+IhMVp3ktkxbFGy 5cUUjdMisnehqilc5j0oO9mFS4FaVtnhIC8mSWfQN5A2Z9/+M0w3hB2SYloDd6/S fL2hprmLn0tuq7vHsSGqYJ0rwoZ5k2uRh1iWG5eTiKoHQq/FIRpPwGI1OcAhYHnt QDY98k0n2atihKmp1Qb2+CID/MfrCSXKQ6m9KvxBvulKwgVtm/4= -----END CERTIFICATE-----Generated at Mon Nov 25 02:45:36 2024 by rpki-client on console-ams.rpki-client.org