$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: aou9QF7/W3BocAJrLaeraMVXuMhRu8IoJ1ZhUI1kSnw= Subject key identifier: 3F:0D:79:5F:B5:43:DB:FD:71:D5:FD:6F:5C:9C:9C:0A:87:BB:10:35 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 07A7F06A623A1A37AF4D065FAE2A94EBAD62FC80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 0482 Signing time: Thu 21 Nov 2024 18:32:15 +0000 Manifest this update: Thu 21 Nov 2024 18:27:15 +0000 Manifest next update: Sun 24 Nov 2024 21:37:15 +0000 Files and hashes: 1: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: KEI56K2u3NEnRDvHwfwup/lXLtIuuqQa4o+pfORoJU4=) 2: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: C1HlnOYNkbj9dYN+GVNsy5Ocwp8L1tuS754SnYYyHlE=) 3: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: UPqZTtFOgF+jDRv2CvFxqECXCbrw1aEaPzgtFmgsijs=) 4: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: dghjU1zZ9kGjcMRT5/T9O0//sXRfgHxldxyPdO36eG8=) 5: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: 68KXNk0lhKRrmnztJMjBe1RoaQJYfIP2RqvIHS7Xvp8=) 6: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: hMJmJ4dw/81IwDHXcdYCEbx1mMe88CEi44Qr1Pj1eBk=) 7: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: 4L2FKCQFOJ6ZvWKgXal0nfrZkHMJOZOY4pyCilWNqJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a7:f0:6a:62:3a:1a:37:af:4d:06:5f:ae:2a:94:eb:ad:62:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Nov 21 18:27:15 2024 GMT Not After : Nov 24 21:37:15 2024 GMT Subject: CN=3F0D795FB543DBFD71D5FD6F5C9C9C0A87BB1035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:cc:7f:53:69:ef:2e:5a:95:30:04:7c:0b: 60:de:7e:ae:f6:45:91:34:2e:09:bc:16:87:64:48: 7d:71:ea:56:75:a0:70:3c:99:b1:99:07:e8:43:15: 9e:f3:f3:84:54:68:6e:4f:bf:b5:b9:8e:19:6a:84: 8b:51:9a:3d:47:3c:09:98:e6:04:cc:24:f3:a7:b4: 85:f2:d4:28:ef:70:96:86:32:ff:51:24:6c:14:98: 70:37:81:61:09:0e:8a:37:9b:46:4d:de:bf:fb:63: f5:d4:68:1f:0c:52:c1:39:70:aa:4f:68:c5:03:90: 5f:27:f8:f2:7f:6d:aa:47:1b:d2:08:34:c9:a6:a7: 9d:d2:17:36:1f:6f:1c:9f:01:4f:69:44:6b:50:72: 29:81:37:b5:4c:13:07:82:cd:8d:a5:60:17:ec:06: eb:d7:81:75:07:8a:f6:c0:fa:59:1c:d7:9c:51:86: dd:12:88:57:34:46:7e:86:18:7d:e7:81:ef:ec:56: 82:9b:14:04:d9:1b:32:e4:b9:9a:60:5d:16:fc:64: e6:b1:93:eb:5d:1c:32:3b:e5:be:e7:76:38:f0:49: 31:8d:21:a1:e9:d7:69:74:d7:db:03:9c:12:71:a7: 43:91:6c:27:ec:77:dd:c1:77:d0:58:06:74:fc:e8: 9b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0D:79:5F:B5:43:DB:FD:71:D5:FD:6F:5C:9C:9C:0A:87:BB:10:35 X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:76:f7:c6:3a:17:d4:ff:75:c9:09:d5:62:7f:34:e7:d7:ed: db:32:ab:75:9d:c1:9e:13:ec:a1:44:56:51:c8:45:8f:0a:56: 7d:f3:ae:11:9f:09:01:5a:22:43:2c:6a:1f:69:6f:09:e9:0f: 00:de:e4:b8:ce:cc:04:5c:ac:51:ea:24:e0:c4:6e:e1:70:34: f9:1d:b4:38:99:89:96:cc:5f:cd:44:ed:f8:36:df:be:08:3e: 84:60:55:5d:7b:c9:42:cf:44:9f:f0:98:87:cb:91:12:42:8a: 99:b5:f2:64:2d:4b:f6:37:17:85:57:69:89:e5:c1:5a:81:b7: b8:3b:cb:8c:b0:90:92:6c:ce:53:40:38:e7:be:8f:f0:0e:ff: 5d:a2:97:e8:6e:ef:a8:5b:07:4f:9b:ff:72:d1:3c:48:ec:d3: 07:a9:ef:d5:7e:4d:f5:a0:56:3a:8a:77:7d:80:8e:d3:ff:00: bb:3f:8e:24:fc:16:38:24:29:8b:bd:79:d5:77:ee:72:68:71: 76:a6:51:2f:4a:c0:83:0d:17:c6:fd:4d:3a:e1:13:a1:29:f5: c3:94:0f:50:ae:91:91:92:5f:ad:de:e4:91:eb:f3:96:a9:c2: 6b:6f:22:af:8a:b1:fd:b1:ce:17:cd:50:b2:aa:ae:f2:16:db: e9:7c:4f:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB6fwamI6GjevTQZfriqU661i/IAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNDExMjExODI3MTVaFw0yNDExMjQyMTM3MTVaMDMxMTAvBgNV BAMTKDNGMEQ3OTVGQjU0M0RCRkQ3MUQ1RkQ2RjVDOUM5QzBBODdCQjEwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnsx/U2nvLlqVMAR8C2Defq72 RZE0Lgm8FodkSH1x6lZ1oHA8mbGZB+hDFZ7z84RUaG5Pv7W5jhlqhItRmj1HPAmY 5gTMJPOntIXy1CjvcJaGMv9RJGwUmHA3gWEJDoo3m0ZN3r/7Y/XUaB8MUsE5cKpP aMUDkF8n+PJ/bapHG9IINMmmp53SFzYfbxyfAU9pRGtQcimBN7VMEweCzY2lYBfs BuvXgXUHivbA+lkc15xRht0SiFc0Rn6GGH3nge/sVoKbFATZGzLkuZpgXRb8ZOax k+tdHDI75b7ndjjwSTGNIaHp12l019sDnBJxp0ORbCfsd93Bd9BYBnT86JvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPw15X7VD2/1x1f1vXJycCoe7EDUwHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZ298Y6F9T/dckJ1WJ/NOfX7dsyq3WdwZ4T 7KFEVlHIRY8KVn3zrhGfCQFaIkMsah9pbwnpDwDe5LjOzARcrFHqJODEbuFwNPkd tDiZiZbMX81E7fg2374IPoRgVV17yULPRJ/wmIfLkRJCipm18mQtS/Y3F4VXaYnl wVqBt7g7y4ywkJJszlNAOOe+j/AO/12il+hu76hbB0+b/3LRPEjs0wep79V+TfWg VjqKd32AjtP/ALs/jiT8FjgkKYu9edV37nJocXamUS9KwIMNF8b9TTrhE6Ep9cOU D1CukZGSX63e5JHr85apwmtvIq+Ksf2xzhfNULKqrvIW2+l8T4w= -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org