$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json) Hash identifier: fxkbh7zeFSsAvFkjWxkm8lVeYy54qBYe+cDEDElF6Fk= Subject key identifier: 30:A9:CF:0A:3A:24:6E:A5:49:8D:B1:B5:BD:5A:BE:6D:77:9B:D6:D2 Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Certificate serial: 58011224544DCBA6AD04A6DA0819C0178C10CCFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft Manifest number: 01AC Signing time: Mon 25 Nov 2024 07:52:25 +0000 Manifest this update: Mon 25 Nov 2024 07:47:25 +0000 Manifest next update: Thu 28 Nov 2024 10:50:25 +0000 Files and hashes: 1: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: J4kYK8TKzth7hwhVnNm5fIpNIVrpeqef11wEccn3v1I=) 2: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: mz1qeZDwtOVVywo+EN/ZBm9tnt37w7SrdUpnhW+NY7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 10:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:01:12:24:54:4d:cb:a6:ad:04:a6:da:08:19:c0:17:8c:10:cc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Validity Not Before: Nov 25 07:47:25 2024 GMT Not After : Nov 28 10:50:25 2024 GMT Subject: CN=30A9CF0A3A246EA5498DB1B5BD5ABE6D779BD6D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b2:fb:ef:65:26:ab:cf:93:39:23:b5:38:7d: 3a:65:51:ca:e1:75:11:07:4e:30:ed:1d:5c:5f:19: b7:c5:d3:85:03:04:2e:58:da:a9:a7:49:31:1f:b7: b1:bd:ae:11:e8:28:23:ac:c9:9a:05:ab:fe:bc:38: 82:31:d5:f4:c8:d4:eb:0f:2b:2b:fc:87:aa:b1:42: b7:5e:5f:4a:a7:26:91:5a:49:6a:3a:1d:a2:e0:d4: ea:ef:fe:7a:44:3b:1c:0a:53:54:bc:7d:58:e3:47: 68:9b:51:a3:af:c5:15:4e:0e:40:82:54:68:3d:9d: dd:ae:d4:1e:a7:be:1a:3c:b3:1a:46:2f:79:df:8f: 9c:08:e5:39:ce:b0:79:bd:59:15:4c:4b:e9:eb:6c: 79:c1:e7:32:23:5b:47:9a:48:4f:11:59:ed:37:1c: 37:d6:9f:ce:75:17:03:e1:ab:81:85:e9:b2:a8:1d: 98:24:42:bd:9a:6e:be:e1:62:76:70:ab:dd:19:ac: 31:54:ac:6f:6e:1f:c2:aa:0c:9c:74:55:65:4a:8b: 36:78:30:c5:18:4e:15:36:29:64:4b:a9:a0:63:1d: 7f:8a:c6:1a:b1:20:7b:12:13:1d:da:15:4c:29:d9: 78:ec:21:17:89:7f:18:21:a3:b5:ec:b3:89:f5:4d: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A9:CF:0A:3A:24:6E:A5:49:8D:B1:B5:BD:5A:BE:6D:77:9B:D6:D2 X509v3 Authority Key Identifier: keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:75:21:ca:1b:67:53:3b:f2:0d:c4:bc:ac:39:35:e6:71:5b: bd:30:40:62:57:f8:15:50:03:99:90:40:70:d6:7d:32:b9:73: b5:58:a2:3e:f0:25:99:21:da:99:cf:c1:6b:fe:d2:dc:69:09: 53:1e:95:c9:ec:a7:9c:8c:3c:97:9d:47:b0:b0:5d:10:54:58: 45:c1:20:d3:67:9f:bb:b8:9a:e0:a9:69:5b:41:6c:2b:0d:c1: 96:40:2b:97:8e:c5:b7:b2:e1:e9:5e:65:8b:a2:0e:81:94:6f: 50:41:dc:9b:58:e4:de:99:c7:e6:6d:11:a0:2b:c3:22:52:a8: 62:45:26:41:d0:0e:04:f4:1b:0f:3b:ce:18:f8:19:66:df:69: 41:19:40:2b:df:cf:4a:71:f2:1e:12:ff:70:2f:bf:7e:57:39: 72:b8:b9:66:ae:7e:8a:95:b1:c5:61:ac:f3:78:d1:bb:66:b8: 25:f3:5e:fb:07:f1:9c:34:10:d1:eb:a4:48:d9:3e:ce:cc:03: 64:95:4d:14:ba:78:9b:cf:c4:04:3e:61:25:32:85:ed:e8:6b: 7a:ac:89:88:3a:c8:30:4d:ed:7f:66:42:92:3d:7c:be:76:13: fe:1d:28:43:50:a5:3b:12:df:22:92:cf:fe:a0:41:3f:2d:6d: 32:a9:22:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAESJFRNy6atBKbaCBnAF4wQzPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1 OTI1MzVFNjAeFw0yNDExMjUwNzQ3MjVaFw0yNDExMjgxMDUwMjVaMDMxMTAvBgNV BAMTKDMwQTlDRjBBM0EyNDZFQTU0OThEQjFCNUJENUFCRTZENzc5QkQ2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpsvvvZSarz5M5I7U4fTplUcrh dREHTjDtHVxfGbfF04UDBC5Y2qmnSTEft7G9rhHoKCOsyZoFq/68OIIx1fTI1OsP Kyv8h6qxQrdeX0qnJpFaSWo6HaLg1Orv/npEOxwKU1S8fVjjR2ibUaOvxRVODkCC VGg9nd2u1B6nvho8sxpGL3nfj5wI5TnOsHm9WRVMS+nrbHnB5zIjW0eaSE8RWe03 HDfWn851FwPhq4GF6bKoHZgkQr2abr7hYnZwq90ZrDFUrG9uH8KqDJx0VWVKizZ4 MMUYThU2KWRLqaBjHX+KxhqxIHsSEx3aFUwp2XjsIReJfxgho7Xss4n1TZxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMKnPCjokbqVJjbG1vVq+bXeb1tIwHwYDVR0j BBgwFoAU6fx68/+6AJhj0QTt4bRdoFklNeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjRjNzBhMS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9FOUZDN0FGM0ZG QkEwMDk4NjNEMTA0RURFMUI0NURBMDU5MjUzNUU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1OTI1 MzVFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVE QTA1OTI1MzVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt1IcobZ1M78g3EvKw5NeZxW70wQGJX+BVQ A5mQQHDWfTK5c7VYoj7wJZkh2pnPwWv+0txpCVMelcnsp5yMPJedR7CwXRBUWEXB INNnn7u4muCpaVtBbCsNwZZAK5eOxbey4eleZYuiDoGUb1BB3JtY5N6Zx+ZtEaAr wyJSqGJFJkHQDgT0Gw87zhj4GWbfaUEZQCvfz0px8h4S/3Avv35XOXK4uWaufoqV scVhrPN40btmuCXzXvsH8Zw0ENHrpEjZPs7MA2SVTRS6eJvPxAQ+YSUyhe3oa3qs iYg6yDBN7X9mQpI9fL52E/4dKENQpTsS3yKSz/6gQT8tbTKpIvg= -----END CERTIFICATE-----Generated at Mon Nov 25 09:01:49 2024 by rpki-client on console-ams.rpki-client.org