$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: om7zqqofNnuK8Xm78XWG1IbGHYiM4ooyGeh37zdAGXM= Subject key identifier: 0E:41:2E:C5:DC:6D:66:6B:2E:D4:F6:C0:D7:61:75:52:8E:DC:BA:50 Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 3D0DEFF730EBDCBF163F1B79BDF1290B19A6DFD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 01A9 Signing time: Mon 25 Nov 2024 18:10:55 +0000 Manifest this update: Mon 25 Nov 2024 18:05:55 +0000 Manifest next update: Fri 29 Nov 2024 05:58:55 +0000 Files and hashes: 1: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: xYxxyrQkuQeP1ZXr19Z8s6G5oCtciWVbaGSbTT9Dbxg=) 2: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: /dFCSgZpync0uxuKRTzVovy891g5ZroLRLwIG2NA9U8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0d:ef:f7:30:eb:dc:bf:16:3f:1b:79:bd:f1:29:0b:19:a6:df:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Nov 25 18:05:55 2024 GMT Not After : Nov 29 05:58:55 2024 GMT Subject: CN=0E412EC5DC6D666B2ED4F6C0D76175528EDCBA50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:e4:4d:d6:8b:80:d9:60:2c:32:f4:b6:58: c1:20:a9:67:38:4d:4c:8f:ae:ca:00:4f:bf:a0:93: d5:03:f4:e3:82:a8:c3:49:3a:ab:6d:93:fc:45:a5: 34:07:25:b8:2b:2f:a0:d4:a1:55:ca:be:c3:b2:18: de:e9:0e:09:ca:21:a2:8c:68:32:05:7b:ee:06:53: 11:74:c8:db:45:52:f7:61:37:a4:80:5a:0e:f2:c8: 6d:a3:9b:01:9c:5c:f4:51:b4:77:21:9f:72:47:b3: 23:cc:88:8b:59:9d:d9:f6:8c:1e:20:01:43:6d:ea: 49:f9:30:3c:69:5c:d5:9a:62:f1:14:8a:36:f5:7e: 3e:f8:6c:1b:73:40:93:a3:8f:11:cf:73:50:1d:98: de:60:5f:16:7c:52:bc:61:de:9f:eb:cd:e0:17:ea: b1:b1:a6:7b:96:00:f7:56:ae:5f:e5:6e:81:cf:27: 73:70:6c:43:f5:22:2d:7e:08:1f:cf:78:73:1a:c4: ac:d9:82:da:38:a8:59:c4:87:40:7e:5b:98:cd:67: 6a:93:35:1e:a2:70:5f:02:3f:7b:d4:d6:21:0a:de: 2c:6e:eb:7d:ff:ef:74:3f:52:54:d7:d2:f9:2a:72: 9f:ca:1c:f7:d8:44:dc:1d:63:38:5e:57:06:b5:9b: 25:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:41:2E:C5:DC:6D:66:6B:2E:D4:F6:C0:D7:61:75:52:8E:DC:BA:50 X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:24:6f:e3:5b:b5:5a:01:b8:d8:63:ea:db:27:38:a9:aa:25: a1:c5:ac:dd:a1:ff:24:54:80:0a:ce:59:51:ee:66:45:be:1f: c4:92:78:17:e1:49:75:ff:74:c2:62:3b:0d:44:05:ff:89:ce: 01:97:21:f0:c7:7d:37:53:5e:20:17:fd:41:2b:96:7e:bf:56: 09:fd:62:1c:8d:b5:66:27:93:72:c7:dc:e9:c0:9a:44:86:5c: 64:5c:06:86:59:00:d6:94:ed:b8:ff:48:de:aa:0d:d8:ec:79: 0c:5d:9d:8f:fa:dd:70:b3:3b:1a:41:5c:e1:bf:86:b9:b0:91: 1f:a7:35:57:59:bf:cb:9c:f4:25:17:8a:a7:2e:d9:a8:6b:c6: 7f:0d:8a:9b:f6:51:55:84:73:83:c4:d6:75:31:76:8b:f4:41: 66:99:c7:5f:dd:83:f2:28:90:d9:07:f2:4c:bb:bb:73:cc:fa: 4f:44:4f:6a:1a:b3:84:47:40:25:7b:46:95:f8:b3:91:00:44: ae:66:99:f8:50:9f:ab:9a:c6:20:08:2d:80:85:5d:3b:a5:ee: ba:cd:38:1a:93:a1:22:bd:3a:fa:7f:9a:69:1b:93:65:22:3e: 13:48:23:35:f3:c6:a0:28:06:fe:17:c4:be:18:26:22:34:ed: 29:4f:b6:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQ3v9zDr3L8WPxt5vfEpCxmm39QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNDExMjUxODA1NTVaFw0yNDExMjkwNTU4NTVaMDMxMTAvBgNV BAMTKDBFNDEyRUM1REM2RDY2NkIyRUQ0RjZDMEQ3NjE3NTUyOEVEQ0JBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijeRN1ouA2WAsMvS2WMEgqWc4 TUyPrsoAT7+gk9UD9OOCqMNJOqttk/xFpTQHJbgrL6DUoVXKvsOyGN7pDgnKIaKM aDIFe+4GUxF0yNtFUvdhN6SAWg7yyG2jmwGcXPRRtHchn3JHsyPMiItZndn2jB4g AUNt6kn5MDxpXNWaYvEUijb1fj74bBtzQJOjjxHPc1AdmN5gXxZ8Urxh3p/rzeAX 6rGxpnuWAPdWrl/lboHPJ3NwbEP1Ii1+CB/PeHMaxKzZgto4qFnEh0B+W5jNZ2qT NR6icF8CP3vU1iEK3ixu633/73Q/UlTX0vkqcp/KHPfYRNwdYzheVwa1myVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkEuxdxtZmsu1PbA12F1Uo7culAwHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAkb+NbtVoBuNhj6tsnOKmqJaHFrN2h/yRU gArOWVHuZkW+H8SSeBfhSXX/dMJiOw1EBf+JzgGXIfDHfTdTXiAX/UErln6/Vgn9 YhyNtWYnk3LH3OnAmkSGXGRcBoZZANaU7bj/SN6qDdjseQxdnY/63XCzOxpBXOG/ hrmwkR+nNVdZv8uc9CUXiqcu2ahrxn8Nipv2UVWEc4PE1nUxdov0QWaZx1/dg/Io kNkH8ky7u3PM+k9ET2oas4RHQCV7RpX4s5EARK5mmfhQn6uaxiAILYCFXTul7rrN OBqToSK9Ovp/mmkbk2UiPhNIIzXzxqAoBv4XxL4YJiI07SlPtq4= -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:15 2024 by rpki-client on console-fra.rpki-client.org