$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft File: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft (raw, json) Hash identifier: CeqYAFSevWBYJkTdCKHQkiHegoX0n/nIJKdwO7qCgTY= Subject key identifier: 99:0C:CF:D8:BB:35:E5:CC:09:3C:44:EA:B9:E0:85:F8:7A:0B:B5:6B Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Certificate serial: 6B5060B0D14FCB8B70A9568511363678B577CA2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft Manifest number: 014A Signing time: Mon 25 Nov 2024 18:20:01 +0000 Manifest this update: Mon 25 Nov 2024 18:15:01 +0000 Manifest next update: Fri 29 Nov 2024 00:48:01 +0000 Files and hashes: 1: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: BCXvxmyioKQvXTQ7T8iVRvqkwhqhpqQP5I9ID9+agWk=) 2: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl (hash: +6UAmm/8LqOBKWQUoOPhADOBRviZ8Ld8/jMPggKidqk=) 3: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: KmwxYNBof+9d1bN3iAjGOYXY8SVr0+E+UsBOHaijDGU=) 4: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: LZnbIIsLDElVInIW5qq+Xdda/Rypkb/0FARs3D1/0Rk=) 5: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: hDiPHgG6pnFjAwZiLnb6ef4keBf/i47WPM6YZu2zsYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:50:60:b0:d1:4f:cb:8b:70:a9:56:85:11:36:36:78:b5:77:ca:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Validity Not Before: Nov 25 18:15:01 2024 GMT Not After : Nov 29 00:48:01 2024 GMT Subject: CN=990CCFD8BB35E5CC093C44EAB9E085F87A0BB56B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:71:ba:77:4d:58:5b:6e:e5:ee:c7:75:02:9e: 0e:d1:c7:2f:1e:c5:85:58:61:f9:88:fa:3f:58:68: ce:c8:8c:7f:ef:55:9f:13:ad:c3:9b:b1:98:22:7b: f1:5c:4d:83:cc:b0:66:b4:f4:b0:94:45:7f:bb:c4: fb:24:6e:87:11:b5:0b:9a:45:e8:ac:1a:fc:cd:2f: c7:3b:23:5d:63:d0:1b:52:a0:bb:c9:86:f5:64:c1: c3:24:b1:60:24:30:4f:eb:0e:c1:e0:8e:b5:ba:58: e8:79:4c:3c:71:b6:d1:73:f1:7c:8a:79:5a:01:4b: a1:80:49:57:74:df:03:6d:ca:13:31:7f:42:7e:84: e9:c8:b7:10:e6:f5:ec:35:35:b9:81:a8:54:55:06: f8:5c:bf:95:8b:de:7a:03:5c:96:63:49:4d:e2:06: c7:37:88:d9:e0:23:b6:78:70:bd:06:e4:bb:55:fe: d3:0e:d0:03:64:42:76:8d:8b:cb:12:39:bf:34:ea: 72:9c:84:b4:d1:e5:fe:2f:b0:07:c8:a4:66:f5:36: 2a:67:74:d4:96:74:50:a4:cb:a2:68:09:e3:6b:a2: 87:77:86:90:03:ab:3a:6d:11:d6:9e:76:22:ae:50: c7:07:91:cd:02:f1:da:26:58:07:b1:d4:31:df:65: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0C:CF:D8:BB:35:E5:CC:09:3C:44:EA:B9:E0:85:F8:7A:0B:B5:6B X509v3 Authority Key Identifier: keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:31:41:b5:92:73:64:41:1f:6b:e6:c4:e0:1a:66:1f:5f:ed: 22:d4:d4:ee:be:9a:e3:76:34:e9:86:e6:59:f6:5f:83:07:9a: 6c:a2:f6:8d:a6:c7:54:6b:4f:ed:05:19:e8:b5:f1:75:27:f3: e8:58:89:ff:33:c9:bb:b2:de:27:35:f7:62:e5:b7:51:b6:9c: a6:e1:fa:c1:d4:6b:84:0a:12:dc:74:3f:eb:6e:b7:06:4b:d6: c7:0a:27:85:05:df:20:e9:4f:e0:60:b2:dc:a5:14:fd:e4:4a: 8f:7b:b9:7f:32:11:3e:e0:8a:18:01:48:8e:9a:4b:ed:a2:1c: df:04:5e:f6:2e:2e:ba:ea:13:a7:ec:dc:53:78:36:d1:e1:fc: 30:ca:66:d1:08:b2:43:8a:c1:91:2c:4f:ec:89:2a:fd:0a:ee: 84:21:c4:16:42:a4:ca:02:45:7d:e8:a7:36:19:92:d1:0c:e2: ee:55:d7:8c:fe:01:43:a9:2e:f9:db:51:df:1f:99:5b:4e:72: dd:3b:5d:e9:f0:b3:dc:40:89:6d:54:5d:41:45:fe:e4:90:0b: 0f:7c:f1:77:11:a5:4d:49:39:03:22:2e:d9:48:a4:14:01:cf: 95:f9:1d:3d:fc:16:42:f1:e9:fd:03:76:9e:02:46:5a:b7:96: d4:2c:c4:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1BgsNFPy4twqVaFETY2eLV3yiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE NkY3M0ZBRjAeFw0yNDExMjUxODE1MDFaFw0yNDExMjkwMDQ4MDFaMDMxMTAvBgNV BAMTKDk5MENDRkQ4QkIzNUU1Q0MwOTNDNDRFQUI5RTA4NUY4N0EwQkI1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7cbp3TVhbbuXux3UCng7Rxy8e xYVYYfmI+j9YaM7IjH/vVZ8TrcObsZgie/FcTYPMsGa09LCURX+7xPskbocRtQua ReisGvzNL8c7I11j0BtSoLvJhvVkwcMksWAkME/rDsHgjrW6WOh5TDxxttFz8XyK eVoBS6GASVd03wNtyhMxf0J+hOnItxDm9ew1NbmBqFRVBvhcv5WL3noDXJZjSU3i Bsc3iNngI7Z4cL0G5LtV/tMO0ANkQnaNi8sSOb806nKchLTR5f4vsAfIpGb1Nipn dNSWdFCky6JoCeNrood3hpADqzptEdaediKuUMcHkc0C8domWAex1DHfZXiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmQzP2Ls15cwJPETqueCF+HoLtWswHwYDVR0j BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3 M0ZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVE NDhENkY3M0ZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQxQbWSc2RBH2vmxOAaZh9f7SLU1O6+muN2 NOmG5ln2X4MHmmyi9o2mx1RrT+0FGei18XUn8+hYif8zybuy3ic192Llt1G2nKbh +sHUa4QKEtx0P+tutwZL1scKJ4UF3yDpT+BgstylFP3kSo97uX8yET7gihgBSI6a S+2iHN8EXvYuLrrqE6fs3FN4NtHh/DDKZtEIskOKwZEsT+yJKv0K7oQhxBZCpMoC RX3opzYZktEM4u5V14z+AUOpLvnbUd8fmVtOct07Xenws9xAiW1UXUFF/uSQCw98 8XcRpU1JOQMiLtlIpBQBz5X5HT38FkLx6f0Ddp4CRlq3ltQsxGI= -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:14 2024 by rpki-client on console-fra.rpki-client.org