$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: mWuw2TpNm0WrKKIWfTmrQI5uZs+62QRRE3ORh8V7SIU= Subject key identifier: 45:20:15:52:DB:67:4C:DE:4D:55:75:80:1E:4A:4C:02:61:E1:2B:D1 Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 04BA364DE4454AEAF7F689A54EF36414D9B9123C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: FA Signing time: Fri 22 Nov 2024 07:21:26 +0000 Manifest this update: Fri 22 Nov 2024 07:16:26 +0000 Manifest next update: Mon 25 Nov 2024 11:48:26 +0000 Files and hashes: 1: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: y+PmnRwXAspcuyCeBxpBxMAUbPq+nHN3JTc40Vmc598=) 2: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: 73u/UlVzsQ+w8Dk2jP1BOl/DZ5/bJZ9QkwjpbF5Wm8k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ba:36:4d:e4:45:4a:ea:f7:f6:89:a5:4e:f3:64:14:d9:b9:12:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Nov 22 07:16:26 2024 GMT Not After : Nov 25 11:48:26 2024 GMT Subject: CN=45201552DB674CDE4D5575801E4A4C0261E12BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ae:bb:fb:8d:e6:c6:53:b6:fb:a8:6a:ce:08: 71:b3:2e:bf:35:06:43:40:36:ac:f5:75:23:52:ad: fc:b2:17:58:62:80:5c:5d:32:82:38:b2:32:96:9e: 3f:cd:24:e0:ad:b0:45:12:db:48:79:ff:a5:26:e8: c3:f1:f8:93:77:c3:98:0a:81:46:21:50:66:59:a8: ff:48:b7:20:33:c7:27:33:5c:6f:05:08:5f:28:df: 25:62:60:46:d6:47:37:11:c2:d2:81:f0:19:aa:1d: 13:09:fb:bf:74:da:c2:3e:2c:63:ce:ba:75:b8:49: 15:d1:11:6c:e1:16:bd:30:cb:ca:85:88:7e:2d:c7: 04:fd:6e:0c:7c:d1:cc:01:30:70:e3:51:bc:11:6e: 75:01:ed:53:75:0b:32:fa:8f:0b:36:82:58:e4:2b: 88:1a:3f:50:55:da:7e:24:5b:0f:c9:30:ae:d5:2e: 03:1e:fe:67:5d:6d:41:7c:a7:9b:d0:f5:01:1c:f7: 69:ef:67:bc:74:03:d6:d9:7d:68:86:ef:5a:f6:7b: b9:c9:5d:5a:8d:83:79:45:0f:5d:3c:5a:a9:79:9a: 18:de:cd:ee:72:5f:5d:f4:3d:7b:76:97:52:2f:dd: b8:3b:13:93:09:53:26:04:91:c0:dd:0e:73:98:f5: e2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:20:15:52:DB:67:4C:DE:4D:55:75:80:1E:4A:4C:02:61:E1:2B:D1 X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e9:87:d4:f6:b9:50:46:be:75:b2:d3:47:59:2a:6d:ba:ea: 4e:af:b4:be:81:b6:45:c9:ee:dc:6f:d4:bb:ac:7a:92:6b:49: da:5a:56:41:ea:10:20:89:ec:1c:f6:2e:38:7e:57:25:90:78: 25:61:9a:da:93:ef:6c:3f:30:69:d5:bd:4d:b2:48:e4:6e:d7: c4:f7:e7:b8:eb:86:c1:00:b8:ec:f5:16:3a:af:02:22:03:2b: 5b:cf:95:64:b1:b2:fc:c0:08:53:c3:c3:eb:ae:b7:8e:34:e5: 37:c7:59:5f:5b:fe:51:d2:42:a8:20:9b:3d:8c:72:55:0a:a6: fe:c0:30:8d:6c:59:cf:b2:d4:5d:75:7a:dc:7e:f3:4d:5b:54: 66:da:06:6a:6b:8b:1d:73:9b:22:59:9d:61:c0:c3:96:7a:f0: b0:c1:3c:7b:65:89:8c:dc:d6:03:41:3a:b1:12:51:79:c7:47: 19:e8:34:71:db:5f:de:c7:10:30:bf:9d:44:13:28:a9:e6:f6: 6f:77:43:f3:ee:9e:9b:d4:ef:32:8a:f0:7f:ed:3f:8a:8a:0c: 39:58:b5:8c:53:ae:46:9d:f8:ca:d6:82:c7:bf:c5:de:2a:23: 1d:48:0a:e0:a0:c6:55:df:23:6c:c5:d5:ac:85:8b:12:11:19: da:33:7f:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLo2TeRFSur39omlTvNkFNm5EjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNDExMjIwNzE2MjZaFw0yNDExMjUxMTQ4MjZaMDMxMTAvBgNV BAMTKDQ1MjAxNTUyREI2NzRDREU0RDU1NzU4MDFFNEE0QzAyNjFFMTJCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdrrv7jebGU7b7qGrOCHGzLr81 BkNANqz1dSNSrfyyF1higFxdMoI4sjKWnj/NJOCtsEUS20h5/6Um6MPx+JN3w5gK gUYhUGZZqP9ItyAzxyczXG8FCF8o3yViYEbWRzcRwtKB8BmqHRMJ+7902sI+LGPO unW4SRXREWzhFr0wy8qFiH4txwT9bgx80cwBMHDjUbwRbnUB7VN1CzL6jws2gljk K4gaP1BV2n4kWw/JMK7VLgMe/mddbUF8p5vQ9QEc92nvZ7x0A9bZfWiG71r2e7nJ XVqNg3lFD108Wql5mhjeze5yX130PXt2l1Iv3bg7E5MJUyYEkcDdDnOY9eL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURSAVUttnTN5NVXWAHkpMAmHhK9EwHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/ph9T2uVBGvnWy00dZKm266k6vtL6BtkXJ 7txv1LusepJrSdpaVkHqECCJ7Bz2Ljh+VyWQeCVhmtqT72w/MGnVvU2ySORu18T3 57jrhsEAuOz1FjqvAiIDK1vPlWSxsvzACFPDw+uut4405TfHWV9b/lHSQqggmz2M clUKpv7AMI1sWc+y1F11etx+801bVGbaBmprix1zmyJZnWHAw5Z68LDBPHtliYzc 1gNBOrESUXnHRxnoNHHbX97HEDC/nUQTKKnm9m93Q/PunpvU7zKK8H/tP4qKDDlY tYxTrkad+MrWgse/xd4qIx1ICuCgxlXfI2zF1ayFixIRGdozfxI= -----END CERTIFICATE-----Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org