$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft File: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json) Hash identifier: +sR3CKpG4rh+woK4PFuNQxSKekZogqrGKHtkK3SHwc8= Subject key identifier: 6A:80:B4:9D:C3:A5:BE:00:EF:22:50:CB:9C:F6:4E:4F:56:01:9D:00 Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 6EB98F7E12A55E1FA7CA39FFAE0EFB88B2C4D719 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft Manifest number: 0483 Signing time: Fri 22 Nov 2024 07:41:47 +0000 Manifest this update: Fri 22 Nov 2024 07:36:47 +0000 Manifest next update: Mon 25 Nov 2024 17:23:47 +0000 Files and hashes: 1: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: +WolOPPxoBlnW9FtWbIHr/dJobVWYYHYbREbXPxM6wk=) 2: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: WsDliuQbW03SwQN24y9FuY0ZkLEdakFBBqX9AL604CY=) 3: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: 02zgKyUTsccL2Q9ZIvopxV1I8Ugx5h8lvOQuN6DckIs=) 4: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: KZ+dMbMngyjNkiVQHGwkHq6WXsYaomH9L2FMdMfZoVM=) 5: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: QV0OMSv5p4Bp6GHcowx6nYWRELs5eo5fWVyu/lnK22I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b9:8f:7e:12:a5:5e:1f:a7:ca:39:ff:ae:0e:fb:88:b2:c4:d7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: Nov 22 07:36:47 2024 GMT Not After : Nov 25 17:23:47 2024 GMT Subject: CN=6A80B49DC3A5BE00EF2250CB9CF64E4F56019D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:2d:91:5b:45:f0:a6:9e:d5:99:ab:6c:30: f5:ac:3a:64:a6:2a:7e:3f:09:81:a7:2a:67:4e:4b: dc:25:d0:82:14:37:9d:60:76:ac:cb:f5:33:26:80: c3:f0:78:ea:7d:7d:c7:61:40:47:87:8f:8d:88:af: 20:c8:61:1c:75:5a:d6:9c:e6:02:b9:37:ed:c3:a9: d8:9c:00:30:42:49:bb:ea:d9:6d:89:1a:c0:58:d2: 72:96:b4:68:78:e8:84:8c:5a:16:48:29:31:21:f4: 60:ac:4f:cf:11:7e:d1:f7:1d:b0:d3:81:c9:b4:83: 95:ae:92:a2:4f:2a:6c:45:03:63:ae:f2:70:b0:b3: 8d:a1:fb:6c:06:76:9f:c6:73:cc:70:1c:a4:08:7e: 47:1c:51:34:84:41:2e:41:00:f7:17:03:db:63:02: e2:2b:b2:4f:a7:32:7d:9c:1e:d5:9b:8e:e5:29:da: 4e:ac:43:ab:1b:7e:31:7d:a8:6b:cf:f6:96:34:11: f6:9b:ab:57:54:90:76:46:b3:08:d7:0d:a4:99:97: 6e:8b:4b:dc:b0:2d:08:20:eb:db:e7:64:de:fc:b8: b9:b1:c0:0f:f6:07:9c:12:28:11:a6:54:a2:e9:ab: b5:67:b9:21:e7:e4:99:7e:60:93:c8:30:bb:2c:21: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:80:B4:9D:C3:A5:BE:00:EF:22:50:CB:9C:F6:4E:4F:56:01:9D:00 X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:30:ba:64:2a:b0:ae:8f:d1:a8:9f:f2:11:0b:6f:a4:17:c3: da:fb:8a:2d:a3:21:74:8e:ef:ac:85:b5:ca:6d:41:ca:de:76: 9f:98:8f:8d:c3:d8:dc:70:4c:12:17:03:d8:e8:8d:88:c3:35: 56:56:63:e0:e3:73:3f:ec:5d:13:93:7c:47:db:31:52:ec:41: 31:4a:0b:cd:45:7f:a5:d1:42:f0:2a:17:03:e0:2a:63:1f:25: e1:cf:5b:a5:7f:73:7e:82:18:eb:b6:ba:eb:f3:92:00:d1:cd: e9:b0:af:29:93:11:b1:6b:59:8d:d9:dd:97:4e:85:7c:7a:bf: c8:77:c9:08:92:13:5c:b6:1e:2f:7f:92:08:0a:48:91:59:8c: 3b:cc:61:04:f7:88:ac:c8:14:77:21:ff:a2:21:0b:9f:d6:ed: db:e5:07:66:af:73:96:b4:ce:0e:eb:f8:76:9a:78:91:ed:83: 99:88:cc:f5:4f:87:f0:2c:10:49:7e:c4:ad:e5:6e:f6:3f:2b: 86:05:e1:f1:a0:ab:9a:5a:c4:95:82:03:58:60:95:69:97:58: d5:d2:96:bd:20:aa:49:16:46:f8:bd:a7:a3:35:3b:bc:26:05: bb:53:50:fd:7a:b5:de:4b:41:e7:3f:0b:f3:26:14:44:4f:89: b6:96:38:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrmPfhKlXh+nyjn/rg77iLLE1xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yNDExMjIwNzM2NDdaFw0yNDExMjUxNzIzNDdaMDMxMTAvBgNV BAMTKDZBODBCNDlEQzNBNUJFMDBFRjIyNTBDQjlDRjY0RTRGNTYwMTlEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfC2RW0Xwpp7VmatsMPWsOmSm Kn4/CYGnKmdOS9wl0IIUN51gdqzL9TMmgMPweOp9fcdhQEeHj42IryDIYRx1Wtac 5gK5N+3DqdicADBCSbvq2W2JGsBY0nKWtGh46ISMWhZIKTEh9GCsT88RftH3HbDT gcm0g5WukqJPKmxFA2Ou8nCws42h+2wGdp/Gc8xwHKQIfkccUTSEQS5BAPcXA9tj AuIrsk+nMn2cHtWbjuUp2k6sQ6sbfjF9qGvP9pY0Efabq1dUkHZGswjXDaSZl26L S9ywLQgg69vnZN78uLmxwA/2B5wSKBGmVKLpq7VnuSHn5Jl+YJPIMLssIXPxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaoC0ncOlvgDvIlDLnPZOT1YBnQAwHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0 QTAwNEFCMkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMwumQqsK6P0aif8hELb6QXw9r7ii2jIXSO 76yFtcptQcredp+Yj43D2NxwTBIXA9jojYjDNVZWY+Djcz/sXROTfEfbMVLsQTFK C81Ff6XRQvAqFwPgKmMfJeHPW6V/c36CGOu2uuvzkgDRzemwrymTEbFrWY3Z3ZdO hXx6v8h3yQiSE1y2Hi9/kggKSJFZjDvMYQT3iKzIFHch/6IhC5/W7dvlB2avc5a0 zg7r+HaaeJHtg5mIzPVPh/AsEEl+xK3lbvY/K4YF4fGgq5paxJWCA1hglWmXWNXS lr0gqkkWRvi9p6M1O7wmBbtTUP16td5LQec/C/MmFERPibaWOK0= -----END CERTIFICATE-----Generated at Fri Nov 22 09:38:56 2024 by rpki-client on console-ams.rpki-client.org