$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: U8y2vz9FYVzt2HiDt/95YEIvWKEOipcJokzPMkhZkX0= Subject key identifier: 44:F5:F2:64:02:14:8C:E7:04:4B:3E:CE:E5:81:DF:09:77:58:7A:E7 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 40FC0B6F6EF215FE4D64D9A19C46FFEB5248AB06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: A9 Signing time: Wed 20 Nov 2024 14:01:39 +0000 Manifest this update: Wed 20 Nov 2024 13:56:39 +0000 Manifest next update: Sun 24 Nov 2024 01:05:39 +0000 Files and hashes: 1: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: q71VZMkHYR/jrmXSyW/PQjNtLOj+pg8vLSA4wEcrXe8=) 2: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: opk7aan09qy3QlBxcjAyFVGiSKuKVJ+4ZHBKxr+dGfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fc:0b:6f:6e:f2:15:fe:4d:64:d9:a1:9c:46:ff:eb:52:48:ab:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Nov 20 13:56:39 2024 GMT Not After : Nov 24 01:05:39 2024 GMT Subject: CN=44F5F26402148CE7044B3ECEE581DF0977587AE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:9f:46:0f:af:9f:eb:f4:98:82:0e:2b:96: 22:19:4e:c4:0e:f2:1c:9b:41:fd:15:9e:b2:df:e3: ae:e8:dc:d3:d2:4d:d8:30:1e:e4:8d:fc:3a:1b:4d: ee:36:21:5b:3d:c1:02:03:52:ba:23:e5:26:79:f4: c2:06:a6:c7:3c:4f:ff:19:04:e4:8c:ad:bf:d0:e8: a8:f8:6d:fd:b8:ad:45:78:ed:26:e3:41:d4:d1:3b: 55:ea:15:40:b2:b9:20:a9:96:15:e8:fe:6d:e1:36: 35:d5:6f:ed:4f:3a:06:73:75:f0:4e:99:cc:47:97: 29:60:a3:00:08:90:b6:2f:6f:ad:ad:14:c4:96:c4: b3:dc:ad:d7:02:29:83:4d:fa:4f:7e:14:83:4d:ea: e0:69:d0:7b:66:b6:1c:b2:65:f6:03:e8:ee:ce:72: 39:a0:8a:8d:10:11:e9:b8:3f:e1:0f:07:97:e6:9d: 4c:74:b4:76:65:d2:02:e9:08:18:2d:ec:60:be:e9: 98:ce:13:b1:ab:37:2b:03:3e:a1:e8:df:8e:75:88: cf:ce:ff:ae:28:e0:bd:37:99:15:b4:28:86:c0:5c: cb:da:a5:6a:03:cb:8e:41:05:d0:1e:4a:d6:bc:3b: 94:90:6a:85:db:41:9d:47:95:4e:aa:98:53:70:d9: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F5:F2:64:02:14:8C:E7:04:4B:3E:CE:E5:81:DF:09:77:58:7A:E7 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ff:d2:71:b0:2b:79:81:4c:57:27:3c:c7:6e:82:42:5e:c8: 5a:09:58:68:fe:fd:76:39:c5:f2:5f:fb:d3:37:f1:d9:64:08: ef:e6:92:d4:1d:bb:8a:36:fc:da:9a:a8:0f:1e:ba:11:26:29: d8:b7:9a:bd:0d:86:23:73:5b:69:e2:52:80:46:c4:bb:9a:aa: 1f:93:e4:eb:95:b8:27:4d:bd:58:af:e7:4f:1e:71:be:a5:5a: 93:2b:0b:1e:7b:10:60:40:ac:47:c8:12:45:39:2f:8e:d8:15: e9:a9:70:02:ff:c5:33:1e:19:c4:47:ab:99:9c:38:c9:8f:2d: 57:57:55:bd:d7:94:69:e9:17:e7:0b:7f:f4:fc:46:e5:f7:92: cc:1b:f5:05:6d:8f:79:33:fa:21:7d:97:72:9b:49:62:13:49: e3:40:48:d3:e0:27:f6:6b:c9:3b:9e:1b:9d:35:6c:a7:08:e8: 6c:0c:d2:10:c0:e1:00:2c:c0:13:38:18:54:e3:10:61:7d:fe: a1:3a:da:9d:d6:ca:01:18:bb:e8:75:7d:36:79:26:46:9b:ad: c1:9b:3c:02:53:2e:9c:13:70:33:52:d5:20:1b:73:05:24:ad: b1:f8:27:f7:d8:e4:9e:a4:a4:5e:86:81:45:e2:6f:40:e4:dd: ca:51:56:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPwLb27yFf5NZNmhnEb/61JIqwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNDExMjAxMzU2MzlaFw0yNDExMjQwMTA1MzlaMDMxMTAvBgNV BAMTKDQ0RjVGMjY0MDIxNDhDRTcwNDRCM0VDRUU1ODFERjA5Nzc1ODdBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8p9GD6+f6/SYgg4rliIZTsQO 8hybQf0VnrLf467o3NPSTdgwHuSN/DobTe42IVs9wQIDUroj5SZ59MIGpsc8T/8Z BOSMrb/Q6Kj4bf24rUV47SbjQdTRO1XqFUCyuSCplhXo/m3hNjXVb+1POgZzdfBO mcxHlylgowAIkLYvb62tFMSWxLPcrdcCKYNN+k9+FINN6uBp0HtmthyyZfYD6O7O cjmgio0QEem4P+EPB5fmnUx0tHZl0gLpCBgt7GC+6ZjOE7GrNysDPqHo3451iM/O /64o4L03mRW0KIbAXMvapWoDy45BBdAeSta8O5SQaoXbQZ1HlU6qmFNw2bfRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPXyZAIUjOcESz7O5YHfCXdYeucwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3/0nGwK3mBTFcnPMdugkJeyFoJWGj+/XY5 xfJf+9M38dlkCO/mktQdu4o2/NqaqA8euhEmKdi3mr0NhiNzW2niUoBGxLuaqh+T 5OuVuCdNvViv508ecb6lWpMrCx57EGBArEfIEkU5L47YFempcAL/xTMeGcRHq5mc OMmPLVdXVb3XlGnpF+cLf/T8RuX3kswb9QVtj3kz+iF9l3KbSWITSeNASNPgJ/Zr yTueG501bKcI6GwM0hDA4QAswBM4GFTjEGF9/qE62p3WygEYu+h1fTZ5JkabrcGb PAJTLpwTcDNS1SAbcwUkrbH4J/fY5J6kpF6GgUXib0Dk3cpRVi8= -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org