$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: H+KGAkI2jftfibvJMHJlDmV+eLwOfVfGbSNvMb5V62c= Subject key identifier: FA:6B:70:61:44:63:18:72:16:AA:0F:66:34:3D:A5:71:5A:DD:3B:8B Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 4266C191B03472B8F21B92E687200B4DC7F90FEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 0110 Signing time: Thu 21 Nov 2024 15:51:49 +0000 Manifest this update: Thu 21 Nov 2024 15:46:49 +0000 Manifest next update: Sun 24 Nov 2024 16:09:49 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: pzeYu7m3oqEiosPuT2rAW6c+XdZv1EMs29wXONsBOVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:66:c1:91:b0:34:72:b8:f2:1b:92:e6:87:20:0b:4d:c7:f9:0f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Nov 21 15:46:49 2024 GMT Not After : Nov 24 16:09:49 2024 GMT Subject: CN=FA6B70614463187216AA0F66343DA5715ADD3B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:c9:60:fe:a2:6e:87:89:2d:d7:be:14:1e: 54:0e:dc:12:59:d8:8c:cd:8c:fb:0f:8b:7a:7e:bd: 8d:17:69:6b:1e:01:29:00:af:51:4a:9a:b4:b6:51: a5:17:6e:57:51:40:22:ac:c2:5e:34:c9:03:3c:76: 62:84:4b:75:f3:87:9f:b8:a7:6b:70:c3:5b:0d:98: 96:c1:ec:45:4a:ec:6e:1d:1d:68:6a:4c:17:60:a5: e1:8b:e1:a8:bb:bd:e0:e5:50:85:73:5b:fe:cf:a1: 6e:e3:33:57:2e:8a:91:5b:45:83:fb:6c:b7:20:af: aa:a4:8e:2c:20:23:c6:32:32:5b:f8:c7:6d:63:1c: 0f:ce:95:f4:20:21:fc:6a:01:74:bc:89:cd:99:af: d4:9d:10:73:3b:59:c6:a4:16:29:fc:28:db:bc:1c: 6c:18:43:eb:09:c7:37:de:ef:d5:d6:07:b1:4f:9d: 2d:12:50:b1:d0:62:a0:1b:88:2b:ff:b2:b5:1d:04: 99:13:0c:08:1d:f9:38:25:f3:79:2c:21:9f:0b:23: 6c:05:58:37:2a:74:f7:82:82:33:d4:93:0e:ce:b9: 05:28:05:f6:00:09:63:cd:8a:6f:a5:6a:f7:e8:ad: e4:ad:1a:63:74:99:e3:35:02:65:41:3b:b4:c1:e8: d3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6B:70:61:44:63:18:72:16:AA:0F:66:34:3D:A5:71:5A:DD:3B:8B X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3d:90:5e:f0:06:b4:08:8a:8e:84:dd:5e:fa:3a:c2:37:cd: 34:27:f6:1f:7d:cf:cc:0f:26:ea:48:ce:59:5e:20:d7:c6:0e: ee:60:c0:35:32:c2:28:95:68:cb:27:08:94:36:92:41:68:86: 01:d8:5f:9e:38:90:78:0d:fd:b1:59:1d:44:f8:d1:85:f7:4e: f4:76:1a:63:f3:07:53:31:e6:39:89:8e:fb:37:32:6d:2f:c2: ab:d4:fb:24:a8:5e:46:0f:fa:01:f8:08:2b:e0:54:bc:cd:53: 95:de:b6:fd:ef:d5:4f:3b:a1:f9:7b:25:58:df:09:a8:c0:0f: 41:26:c2:23:6e:9f:e6:07:22:f1:d0:88:0e:04:de:7e:3b:f8: e0:b0:7b:10:17:28:94:2b:bc:6f:4e:e5:79:c3:a4:21:48:29: cd:3e:83:b2:69:99:3c:31:4e:7d:83:04:fa:8d:11:9a:cf:c8: 3d:7e:cd:8e:10:42:79:9d:f5:9e:00:05:f3:f1:41:82:72:41: 60:c1:29:03:41:c8:38:65:d0:b6:01:9a:df:9f:69:cc:ad:df: b2:3e:10:69:0c:97:60:f6:6a:6d:be:49:0e:fe:1d:10:91:73: cc:13:6d:49:49:08:33:e8:f9:fe:5d:bb:dd:19:6c:43:05:90: 72:0e:1b:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmbBkbA0crjyG5LmhyALTcf5D+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNDExMjExNTQ2NDlaFw0yNDExMjQxNjA5NDlaMDMxMTAvBgNV BAMTKEZBNkI3MDYxNDQ2MzE4NzIxNkFBMEY2NjM0M0RBNTcxNUFERDNCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPMlg/qJuh4kt174UHlQO3BJZ 2IzNjPsPi3p+vY0XaWseASkAr1FKmrS2UaUXbldRQCKswl40yQM8dmKES3Xzh5+4 p2tww1sNmJbB7EVK7G4dHWhqTBdgpeGL4ai7veDlUIVzW/7PoW7jM1cuipFbRYP7 bLcgr6qkjiwgI8YyMlv4x21jHA/OlfQgIfxqAXS8ic2Zr9SdEHM7WcakFin8KNu8 HGwYQ+sJxzfe79XWB7FPnS0SULHQYqAbiCv/srUdBJkTDAgd+Tgl83ksIZ8LI2wF WDcqdPeCgjPUkw7OuQUoBfYACWPNim+lavforeStGmN0meM1AmVBO7TB6NPbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+mtwYURjGHIWqg9mND2lcVrdO4swHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAII9kF7wBrQIio6E3V76OsI3zTQn9h99z8wP JupIzlleINfGDu5gwDUywiiVaMsnCJQ2kkFohgHYX544kHgN/bFZHUT40YX3TvR2 GmPzB1Mx5jmJjvs3Mm0vwqvU+ySoXkYP+gH4CCvgVLzNU5Xetv3v1U87ofl7JVjf CajAD0EmwiNun+YHIvHQiA4E3n47+OCwexAXKJQrvG9O5XnDpCFIKc0+g7JpmTwx Tn2DBPqNEZrPyD1+zY4QQnmd9Z4ABfPxQYJyQWDBKQNByDhl0LYBmt+facyt37I+ EGkMl2D2am2+SQ7+HRCRc8wTbUlJCDPo+f5du90ZbEMFkHIOG4A= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org