$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: 3U8i9d/mb23OW1OD/5QsGdnWIYxAafG9l59OPhRPzPg= Subject key identifier: DA:A0:07:1B:9E:DF:C6:4B:2B:37:50:3D:20:AE:1F:86:40:41:E2:FB Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 5C0D622AB0A583BCAC0E20AC8D4DC36C4FF9F16D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: 58 Signing time: Sun 24 Nov 2024 03:01:29 +0000 Manifest this update: Sun 24 Nov 2024 02:56:29 +0000 Manifest next update: Wed 27 Nov 2024 13:38:29 +0000 Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: N4KyOi+yeRzkDJwDnVTE1QjxJ/oUMiuR8+Rt0FwE0Zo=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: mYajgYdfqfGIEkevHv+d3gbzHhbdWvFDW2nIXkKiX0E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0d:62:2a:b0:a5:83:bc:ac:0e:20:ac:8d:4d:c3:6c:4f:f9:f1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Nov 24 02:56:29 2024 GMT Not After : Nov 27 13:38:29 2024 GMT Subject: CN=DAA0071B9EDFC64B2B37503D20AE1F864041E2FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:8d:24:c7:33:0b:2e:36:26:f6:13:db:e2: 30:5a:2e:eb:9b:76:56:a2:41:a4:c2:23:0a:af:d6: fb:ad:a5:c5:c1:28:f0:e1:3b:87:a9:84:0e:ef:2b: 71:14:7a:50:0b:c1:83:dd:0b:53:61:0e:11:6c:26: d9:f2:a4:40:4e:50:9d:8e:82:ac:54:10:bd:9f:e1: b5:53:ac:de:7d:50:e6:e0:f3:7e:69:e2:40:7c:03: f8:ce:15:f6:c2:58:a1:f5:1b:80:63:f5:06:03:56: ac:af:cb:0f:45:35:d2:fc:98:e6:b2:dc:84:75:32: 68:93:6b:5c:9a:f3:19:3b:cd:20:32:a0:98:5e:8f: c3:7a:c2:c7:55:9d:52:65:5b:cd:2b:92:0e:c7:40: 87:db:d0:b0:12:fd:63:56:ae:a7:34:9d:46:01:f3: a8:1d:12:b5:32:d1:2a:f0:4b:3a:a5:41:fe:3f:cb: 8a:2c:e5:12:a0:20:09:ea:64:e8:da:e4:86:ac:ba: 99:bd:2b:04:e7:ac:b7:df:9a:55:23:7b:18:da:6b: 75:64:a5:aa:2b:0b:9e:3d:94:a1:a8:d3:2b:b8:8d: ed:65:30:7f:70:99:5f:3d:61:d2:2d:28:8d:6d:61: a3:0c:95:c9:c7:9b:94:20:ae:43:d3:54:ca:53:43: 42:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A0:07:1B:9E:DF:C6:4B:2B:37:50:3D:20:AE:1F:86:40:41:E2:FB X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1a:f6:7d:1e:60:5b:5c:ba:76:f8:d6:0d:29:15:63:12:76: 9a:0e:00:67:c7:13:65:33:d0:37:b1:e4:0d:59:a7:fc:9d:04: 45:32:e0:ac:54:24:b8:fe:45:ec:70:e2:30:a7:5f:30:36:6b: 2f:3e:a2:c2:7e:39:fc:d3:97:05:7c:be:4e:f3:e7:0f:b4:77: f5:7d:c8:1f:d9:a7:52:c6:41:29:9d:a0:66:ca:61:8a:e0:65: e0:51:ef:50:49:59:47:d2:1c:96:09:19:81:71:84:3c:f2:8b: 46:c9:90:2a:9f:93:ce:50:d6:a1:44:47:46:b9:6b:0c:5d:d8: ab:73:2b:11:d0:e5:54:2e:26:0c:53:d1:60:6a:fa:0e:ad:1e: 25:f2:d9:86:0c:43:42:2b:13:1c:d1:5c:6a:c9:db:fd:c8:30: d8:b2:9e:a3:22:57:89:3c:3a:48:1c:06:87:32:d8:c1:2f:a0: e7:67:af:1d:a0:aa:d2:0b:04:fd:36:fe:67:8c:76:44:9c:18: 8f:06:40:a9:c7:25:52:2b:cd:dc:2d:4a:88:3c:d6:52:4b:6c: 97:d1:56:6a:bc:d2:e8:6d:95:9a:fd:c6:03:1a:d3:23:61:bd: ae:d2:dc:52:51:ca:0e:3e:c6:16:47:52:38:82:f7:01:92:5b: d4:83:a1:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXA1iKrClg7ysDiCsjU3DbE/58W0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNDExMjQwMjU2MjlaFw0yNDExMjcxMzM4MjlaMDMxMTAvBgNV BAMTKERBQTAwNzFCOUVERkM2NEIyQjM3NTAzRDIwQUUxRjg2NDA0MUUyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2z40kxzMLLjYm9hPb4jBaLuub dlaiQaTCIwqv1vutpcXBKPDhO4ephA7vK3EUelALwYPdC1NhDhFsJtnypEBOUJ2O gqxUEL2f4bVTrN59UObg835p4kB8A/jOFfbCWKH1G4Bj9QYDVqyvyw9FNdL8mOay 3IR1MmiTa1ya8xk7zSAyoJhej8N6wsdVnVJlW80rkg7HQIfb0LAS/WNWrqc0nUYB 86gdErUy0SrwSzqlQf4/y4os5RKgIAnqZOja5Iasupm9KwTnrLffmlUjexjaa3Vk paorC549lKGo0yu4je1lMH9wmV89YdItKI1tYaMMlcnHm5QgrkPTVMpTQ0JVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2qAHG57fxksrN1A9IK4fhkBB4vswHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwa9n0eYFtcunb41g0pFWMSdpoOAGfHE2Uz 0Dex5A1Zp/ydBEUy4KxUJLj+Rexw4jCnXzA2ay8+osJ+OfzTlwV8vk7z5w+0d/V9 yB/Zp1LGQSmdoGbKYYrgZeBR71BJWUfSHJYJGYFxhDzyi0bJkCqfk85Q1qFER0a5 awxd2KtzKxHQ5VQuJgxT0WBq+g6tHiXy2YYMQ0IrExzRXGrJ2/3IMNiynqMiV4k8 OkgcBocy2MEvoOdnrx2gqtILBP02/meMdkScGI8GQKnHJVIrzdwtSog81lJLbJfR Vmq80uhtlZr9xgMa0yNhva7S3FJRyg4+xhZHUjiC9wGSW9SDof4= -----END CERTIFICATE-----Generated at Sun Nov 24 05:18:50 2024 by rpki-client on console-ams.rpki-client.org