$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: RXS2SAOftA9FVlUlSXbajCPQGktceYKHA4sZxC21fsg= Subject key identifier: 7C:79:04:10:30:A2:27:34:55:5D:66:CC:95:C3:9E:A2:B8:2F:BD:90 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 4C3360EF341CDACDCA88D53478837A4D056B1F9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 011A Signing time: Sun 19 May 2024 12:41:46 +0000 Manifest this update: Sun 19 May 2024 12:36:46 +0000 Manifest next update: Wed 22 May 2024 17:11:46 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: F5km74yqNEQtz/Dw6HPCw3Ve9FnNbkAiq5FafDL8Uno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:33:60:ef:34:1c:da:cd:ca:88:d5:34:78:83:7a:4d:05:6b:1f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: May 19 12:36:46 2024 GMT Not After : May 22 17:11:46 2024 GMT Subject: CN=7C79041030A22734555D66CC95C39EA2B82FBD90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:80:f1:9f:6f:d8:21:45:0a:fc:9e:ce:9b: e8:35:99:03:f4:69:ad:a7:bd:c4:26:50:ff:b4:41: 96:9a:16:61:b7:82:cc:36:d3:99:d8:c4:32:00:61: 71:72:5b:49:64:fd:82:df:3a:03:da:9c:83:c6:2c: b4:71:63:0d:30:c2:eb:04:a6:23:7c:11:0f:bd:bb: 6d:0f:ac:5a:dc:e0:1b:1f:59:fc:96:a3:db:33:4a: b5:5c:21:ca:00:67:a1:7d:e4:0c:1a:9d:19:32:19: 31:17:77:11:10:08:b0:6a:48:55:78:55:14:41:55: e7:12:eb:d1:98:70:c0:1d:ec:db:d9:7f:5a:99:05: cb:a7:06:44:3d:fd:a4:81:60:30:4d:3c:af:aa:7b: cb:57:78:b7:e0:67:59:dc:48:38:03:3d:b7:34:e3: 95:ef:25:b2:b0:f1:9a:44:1d:c0:6a:ca:80:3c:dd: 03:b1:c7:3d:b3:e0:7d:df:d3:32:6e:c5:53:c8:9a: 2d:51:fc:5e:32:1c:f0:df:8e:49:d8:00:10:fb:db: 8a:44:b3:eb:19:3a:45:bb:55:20:5d:22:2a:7e:e5: 54:03:ab:e5:ff:08:1f:aa:e6:9d:27:a4:ed:02:3a: e0:8d:74:39:88:21:95:fe:e5:a5:d8:10:49:e5:06: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:79:04:10:30:A2:27:34:55:5D:66:CC:95:C3:9E:A2:B8:2F:BD:90 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e0:76:48:fc:00:73:52:2c:aa:f6:3a:ff:e2:e3:70:22:0d: 55:34:88:fd:fe:ca:d6:2f:79:6b:26:aa:33:23:64:ca:a6:d6: 5a:f7:77:85:a4:9f:1c:75:37:d0:08:8a:35:dd:63:9d:d1:61: cb:96:86:cc:fd:02:43:e3:b1:36:23:37:3b:f9:82:79:6a:fb: c6:38:c5:b4:c8:3e:6e:0b:93:3c:32:a5:1c:cd:00:4a:1e:e7: b1:d1:29:d2:b5:26:20:5c:96:22:72:2f:8f:05:32:15:a7:46: 30:c5:06:70:0a:0f:58:c5:34:c5:cb:03:7f:63:af:79:41:c6: 28:6f:9e:7b:1b:d0:fe:b3:8a:2c:e6:22:c2:d1:68:14:4c:d3: d7:d1:3d:fc:cb:db:d6:46:1a:d1:8d:ed:8e:ed:5c:2e:7e:d8: 29:aa:b7:85:4a:87:9c:7f:01:14:e3:ba:d6:ab:11:4b:be:9e: 9a:d4:31:dd:1f:f0:02:a4:a8:69:81:5f:e8:63:7c:bb:d0:45: 01:9c:85:ee:ba:25:a7:54:38:20:76:2a:8c:c9:8e:13:fb:ae: bf:65:02:a5:66:aa:ed:ae:ae:17:af:5f:a9:b8:81:67:03:e6: 27:30:07:5b:0d:7e:2b:ed:29:48:92:2d:c1:1c:6c:26:0e:db: 5c:dd:91:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDNg7zQc2s3KiNU0eIN6TQVrH50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNDA1MTkxMjM2NDZaFw0yNDA1MjIxNzExNDZaMDMxMTAvBgNV BAMTKDdDNzkwNDEwMzBBMjI3MzQ1NTVENjZDQzk1QzM5RUEyQjgyRkJEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ioDxn2/YIUUK/J7Om+g1mQP0 aa2nvcQmUP+0QZaaFmG3gsw205nYxDIAYXFyW0lk/YLfOgPanIPGLLRxYw0wwusE piN8EQ+9u20PrFrc4BsfWfyWo9szSrVcIcoAZ6F95AwanRkyGTEXdxEQCLBqSFV4 VRRBVecS69GYcMAd7NvZf1qZBcunBkQ9/aSBYDBNPK+qe8tXeLfgZ1ncSDgDPbc0 45XvJbKw8ZpEHcBqyoA83QOxxz2z4H3f0zJuxVPImi1R/F4yHPDfjknYABD724pE s+sZOkW7VSBdIip+5VQDq+X/CB+q5p0npO0COuCNdDmIIZX+5aXYEEnlBpyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfHkEEDCiJzRVXWbMlcOeorgvvZAwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHgdkj8AHNSLKr2Ov/i43AiDVU0iP3+ytYv eWsmqjMjZMqm1lr3d4Wknxx1N9AIijXdY53RYcuWhsz9AkPjsTYjNzv5gnlq+8Y4 xbTIPm4LkzwypRzNAEoe57HRKdK1JiBcliJyL48FMhWnRjDFBnAKD1jFNMXLA39j r3lBxihvnnsb0P6ziizmIsLRaBRM09fRPfzL29ZGGtGN7Y7tXC5+2Cmqt4VKh5x/ ARTjutarEUu+nprUMd0f8AKkqGmBX+hjfLvQRQGche66JadUOCB2KozJjhP7rr9l AqVmqu2urhevX6m4gWcD5icwB1sNfivtKUiSLcEcbCYO21zdkSE= -----END CERTIFICATE-----Generated at Sun May 19 13:35:05 2024 by rpki-client on console-ams.rpki-client.org