$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: 68NVEvYraCCKLnqQEZdL+hQWAOn9m1Mm2yQDBIOmIz4= Subject key identifier: 68:07:8E:06:4A:05:EA:DE:2F:03:3C:C8:41:17:98:84:5B:6F:80:A8 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 5FA8FB635A652F5695984AB5809C45C7B03389BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 0151 Signing time: Thu 21 Nov 2024 18:10:47 +0000 Manifest this update: Thu 21 Nov 2024 18:05:47 +0000 Manifest next update: Mon 25 Nov 2024 04:56:47 +0000 Files and hashes: 1: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: nU+kB+NyHUbVoehF82OX5jrQgK7DFWejShKduq8TLqc=) 2: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: X0XLAhvGZfiRvCVCUyNsPxOOwPw6McDgsETmSQQOHuM=) 3: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: VkkcM1AqEwXsS/hQawzqHg+YyvXNA8/GMbHDz4dyi9o=) 4: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: qNqg5iQR5XWc4UPzOVVre8nZdukofdT493U496VpI6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a8:fb:63:5a:65:2f:56:95:98:4a:b5:80:9c:45:c7:b0:33:89:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Nov 21 18:05:47 2024 GMT Not After : Nov 25 04:56:47 2024 GMT Subject: CN=68078E064A05EADE2F033CC8411798845B6F80A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:5a:45:10:e0:36:fe:6a:a5:f3:40:1c:7d: 5f:ac:b0:30:d2:e5:51:c3:e1:e8:8c:78:8a:93:51: 6a:7f:1a:0c:3e:9d:11:eb:27:f9:9b:a7:9b:97:66: 02:c6:15:4b:d9:54:3e:b5:0b:be:e3:da:4b:54:d3: db:d2:51:67:04:e2:fd:cd:66:80:44:e5:c0:ab:a9: 42:2d:76:7e:08:de:a6:b5:fc:b2:d4:eb:b6:32:45: 1e:60:27:84:e5:a1:43:6c:5c:e7:b0:23:93:5c:68: b6:c3:80:ef:ad:1e:60:4b:31:2b:29:24:95:51:00: d5:c6:b4:08:da:30:d5:c5:43:73:7d:ad:1c:5f:0b: b1:6a:0d:e8:ef:5b:1d:6c:7e:95:92:84:99:8b:0b: 7b:98:34:d8:ba:86:f5:23:25:15:46:80:34:39:a1: 2b:d6:52:71:73:de:52:3e:fe:14:91:26:63:0d:80: 91:71:60:65:7c:f6:61:9d:6f:32:3b:1e:11:2d:86: cb:cc:2e:cf:65:20:84:63:d5:39:cc:6d:bc:db:4c: 1f:4f:56:12:0b:b9:57:3e:f0:12:97:99:22:04:80: 1e:31:73:e7:db:3d:a8:45:bc:db:43:bd:1e:8d:31: 95:8d:02:94:14:88:7f:65:28:0a:88:16:30:af:35: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:07:8E:06:4A:05:EA:DE:2F:03:3C:C8:41:17:98:84:5B:6F:80:A8 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b0:27:29:9c:56:0e:b1:e9:04:74:78:d5:bc:29:a1:54:22: ea:af:9c:e9:4b:4a:9b:cb:f4:29:93:32:b8:d7:d5:ff:eb:9b: 3a:73:de:9f:4c:7c:e8:03:bc:7a:d7:45:f2:78:79:9b:80:a2: 22:ce:62:7d:89:e3:a0:24:aa:2d:b0:81:a2:3b:b0:1d:a5:9a: 5e:0c:4b:d7:fe:ea:a4:4b:03:ac:21:57:5b:f7:9c:e9:fd:ee: f9:fb:e5:45:57:42:61:40:39:5f:d4:5c:d5:1d:91:6e:71:63: 7e:0a:50:77:13:2f:66:69:c6:ac:9d:a8:02:78:78:9f:b7:85: be:aa:bd:ee:f6:de:16:ef:ef:ad:a3:5d:d4:b8:fd:e3:55:1c: 5d:06:8d:a1:a3:45:34:b5:e0:ad:4d:93:ed:60:c0:ce:e7:45: 37:cd:37:7f:4a:05:05:21:99:31:45:8e:9c:5b:69:10:ae:42: a8:98:ac:60:35:60:6e:eb:f0:b5:8f:93:6d:f8:1e:d4:66:fd: 0a:54:50:e6:e9:99:9e:8d:f7:3c:2f:cb:ac:ca:78:08:11:9d: b6:38:a1:5f:a2:79:1c:a8:88:52:a7:d6:f1:79:92:55:c2:7a: b4:a2:75:8b:9e:6b:d9:5c:ec:f9:06:95:99:99:5d:db:d6:31: 96:53:e6:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6j7Y1plL1aVmEq1gJxFx7AzibowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNDExMjExODA1NDdaFw0yNDExMjUwNDU2NDdaMDMxMTAvBgNV BAMTKDY4MDc4RTA2NEEwNUVBREUyRjAzM0NDODQxMTc5ODg0NUI2RjgwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvn1pFEOA2/mql80AcfV+ssDDS 5VHD4eiMeIqTUWp/Ggw+nRHrJ/mbp5uXZgLGFUvZVD61C77j2ktU09vSUWcE4v3N ZoBE5cCrqUItdn4I3qa1/LLU67YyRR5gJ4TloUNsXOewI5NcaLbDgO+tHmBLMSsp JJVRANXGtAjaMNXFQ3N9rRxfC7FqDejvWx1sfpWShJmLC3uYNNi6hvUjJRVGgDQ5 oSvWUnFz3lI+/hSRJmMNgJFxYGV89mGdbzI7HhEthsvMLs9lIIRj1TnMbbzbTB9P VhILuVc+8BKXmSIEgB4xc+fbPahFvNtDvR6NMZWNApQUiH9lKAqIFjCvNRhbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaAeOBkoF6t4vAzzIQReYhFtvgKgwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABywJymcVg6x6QR0eNW8KaFUIuqvnOlLSpvL 9CmTMrjX1f/rmzpz3p9MfOgDvHrXRfJ4eZuAoiLOYn2J46Akqi2wgaI7sB2lml4M S9f+6qRLA6whV1v3nOn97vn75UVXQmFAOV/UXNUdkW5xY34KUHcTL2ZpxqydqAJ4 eJ+3hb6qve723hbv762jXdS4/eNVHF0GjaGjRTS14K1Nk+1gwM7nRTfNN39KBQUh mTFFjpxbaRCuQqiYrGA1YG7r8LWPk234HtRm/QpUUObpmZ6N9zwvy6zKeAgRnbY4 oV+ieRyoiFKn1vF5klXCerSidYuea9lc7PkGlZmZXdvWMZZT5oo= -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org