$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: gkhi541kYhk5RSATJQpGmYzeR/wNtISKCekS1NAbdrg= Subject key identifier: B9:A2:C6:D4:89:84:74:D9:AB:0F:02:67:BB:47:A4:1E:07:59:61:4B Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 749E6388FCDB7F24CA18DFA837C3F2BA09E872F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: 7D Signing time: Fri 22 Nov 2024 15:01:13 +0000 Manifest this update: Fri 22 Nov 2024 14:56:13 +0000 Manifest next update: Tue 26 Nov 2024 02:10:13 +0000 Files and hashes: 1: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: +nVjF5rDMGN6GQO5kbnVGx8HKrpIshvz0VxBevj3Unw=) 2: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: HP8zdr2q+BvL5z9CGprhKSHjAlbTbd52ta4wmPaQ7gE=) 3: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: Np/t8IuGG6aQddkGmruvdeMxBiMsTkW8puQwaVRjg24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:9e:63:88:fc:db:7f:24:ca:18:df:a8:37:c3:f2:ba:09:e8:72:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Nov 22 14:56:13 2024 GMT Not After : Nov 26 02:10:13 2024 GMT Subject: CN=B9A2C6D4898474D9AB0F0267BB47A41E0759614B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:ea:da:60:44:48:e1:07:95:a1:a6:b3:d7: 93:31:18:82:70:95:59:52:3a:3d:76:1f:9c:b6:77: ce:a6:e8:5e:f2:c7:d9:a6:ed:7b:16:1b:61:67:73: 0c:37:b0:62:ed:97:b2:a5:25:da:b3:a3:16:55:58: 01:ac:cc:c7:d1:17:e7:15:16:f1:0c:9a:22:5e:23: 17:26:ed:81:33:4c:69:f7:43:e8:0e:1e:3d:e9:bc: 1f:05:2d:0e:4d:be:22:ed:4b:38:ba:d1:f6:1e:2a: e6:10:11:d5:61:96:b2:2a:24:70:ef:4e:35:99:83: a2:f4:bd:d0:5b:44:80:4e:96:78:79:5f:b5:6b:0c: 47:88:eb:51:d6:8e:4b:5a:7f:a6:0e:d3:57:0b:a5: 20:c7:80:a7:2d:0f:86:d2:c4:11:f3:52:bc:ea:53: c7:c8:59:24:b7:ce:50:d1:bc:1e:ea:26:cf:4d:d0: 44:4d:e1:02:db:9a:d7:0a:d1:5a:7a:6e:d4:6f:7b: 0d:bf:e2:0f:07:06:7b:4f:43:dc:b2:d2:8d:d2:2a: 4f:e4:c2:4b:1f:2e:d5:e6:b6:b8:bb:57:77:87:b6: 6b:f7:51:c1:d7:e5:10:b3:64:ec:b8:18:ac:ec:27: 07:8f:e5:af:ca:62:f1:e5:27:c8:65:fa:c4:ee:86: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A2:C6:D4:89:84:74:D9:AB:0F:02:67:BB:47:A4:1E:07:59:61:4B X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:f0:aa:f3:40:a5:61:d9:e5:a5:41:76:f5:7d:79:4d:81:93: 92:e5:f7:9b:41:c9:bf:72:1e:04:2c:45:cc:3a:c2:5d:62:5a: ec:3f:67:c5:83:ec:a6:f8:05:23:67:4a:69:f2:c8:9e:5a:62: 85:56:5e:d0:ee:1f:fc:cf:18:08:76:7c:12:b0:62:d2:8c:78: 51:15:ba:4f:21:67:fe:5b:77:fc:04:e0:96:d6:a9:4d:b5:a3: 8e:9d:4d:af:f4:e1:65:f6:64:b8:65:26:21:ce:1a:43:23:18: d6:c7:4e:a6:53:b3:be:ee:fe:7d:a8:ad:8e:1c:79:67:9e:3c: 93:4a:ec:db:d0:24:cc:c7:b9:34:fb:31:b3:ad:61:e0:c7:73: e8:fd:aa:88:37:25:6a:b3:96:89:59:b8:62:85:62:70:bf:ee: f8:31:f8:2b:85:1c:a7:e5:2e:87:99:fa:cc:41:48:e7:ff:e0: 8f:31:72:77:aa:4d:6c:12:58:17:d9:7d:b3:26:5c:53:55:34: c4:94:d7:a1:bd:67:e3:c1:4a:6e:28:e0:bb:d0:41:d4:78:b7: 8c:76:8c:1b:7a:7a:00:ae:b8:eb:34:3f:0d:ce:7c:82:4f:31: f2:f4:30:4a:8a:3a:1c:af:dd:cc:f7:dd:3c:4d:c0:60:88:8e: 05:db:1d:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJ5jiPzbfyTKGN+oN8PyugnocvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNDExMjIxNDU2MTNaFw0yNDExMjYwMjEwMTNaMDMxMTAvBgNV BAMTKEI5QTJDNkQ0ODk4NDc0RDlBQjBGMDI2N0JCNDdBNDFFMDc1OTYxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1+raYERI4QeVoaaz15MxGIJw lVlSOj12H5y2d86m6F7yx9mm7XsWG2Fncww3sGLtl7KlJdqzoxZVWAGszMfRF+cV FvEMmiJeIxcm7YEzTGn3Q+gOHj3pvB8FLQ5NviLtSzi60fYeKuYQEdVhlrIqJHDv TjWZg6L0vdBbRIBOlnh5X7VrDEeI61HWjktaf6YO01cLpSDHgKctD4bSxBHzUrzq U8fIWSS3zlDRvB7qJs9N0ERN4QLbmtcK0Vp6btRvew2/4g8HBntPQ9yy0o3SKk/k wksfLtXmtri7V3eHtmv3UcHX5RCzZOy4GKzsJweP5a/KYvHlJ8hl+sTuhph/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuaLG1ImEdNmrDwJnu0ekHgdZYUswHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM7wqvNApWHZ5aVBdvV9eU2Bk5Ll95tByb9y HgQsRcw6wl1iWuw/Z8WD7Kb4BSNnSmnyyJ5aYoVWXtDuH/zPGAh2fBKwYtKMeFEV uk8hZ/5bd/wE4JbWqU21o46dTa/04WX2ZLhlJiHOGkMjGNbHTqZTs77u/n2orY4c eWeePJNK7NvQJMzHuTT7MbOtYeDHc+j9qog3JWqzlolZuGKFYnC/7vgx+CuFHKfl LoeZ+sxBSOf/4I8xcneqTWwSWBfZfbMmXFNVNMSU16G9Z+PBSm4o4LvQQdR4t4x2 jBt6egCuuOs0Pw3OfIJPMfL0MEqKOhyv3cz33TxNwGCIjgXbHYU= -----END CERTIFICATE-----Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org