$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: FoRMVEZ3HUB9CuXBLJWH7QgOPn2CoMXVpfAcWFu7sHA= Subject key identifier: D6:E7:CD:E6:D5:36:E9:2D:2F:19:97:DE:4F:F6:2C:91:C9:D2:B1:59 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 6569D8267C7118EB1E9AEEE26D0FEA5C132C7C4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: BA Signing time: Mon 25 Nov 2024 16:01:46 +0000 Manifest this update: Mon 25 Nov 2024 15:56:46 +0000 Manifest next update: Thu 28 Nov 2024 22:55:46 +0000 Files and hashes: 1: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: gpL6qnRxLPgeiV+PlG3hB+cnGTmStZNiAx19SwL8f6w=) 2: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: VNEl4PKtKCdxvoFK90TPMzSfcrx1GdpdGQLNKCqdMfg=) 3: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: m+tur8s5hF36P9KEnTMPMVDInU7+4/3lGLQOQpvofQk=) 4: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: bUy4CZmFBklHDVwaxUEZUZiNt8d1i/3iKLLtmboWyaU=) 5: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: matLkK/0RKOzJ5T6ShVJ+TeIBVCHsHv7ufNKNv6zW+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:69:d8:26:7c:71:18:eb:1e:9a:ee:e2:6d:0f:ea:5c:13:2c:7c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Nov 25 15:56:46 2024 GMT Not After : Nov 28 22:55:46 2024 GMT Subject: CN=D6E7CDE6D536E92D2F1997DE4FF62C91C9D2B159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:f0:9e:33:d2:6d:2c:3f:fd:10:a9:5c:12: 0c:8d:b1:2c:de:b0:da:fe:04:98:7a:2e:2a:25:98: df:e8:e5:14:0f:79:e4:9d:14:05:42:2e:d2:74:c4: fd:d5:4d:3c:6f:0f:94:2d:10:76:cd:9c:5b:59:27: 15:86:56:89:61:4a:12:d7:7d:4b:c0:2b:4f:9e:ae: f5:ee:38:a5:74:eb:ea:9e:08:7d:50:2e:3c:12:cb: 37:f1:89:ea:8f:68:12:c6:e7:b0:17:94:da:c7:e1: 9c:c8:af:94:1c:d8:22:3c:88:11:24:94:24:0d:b4: 8c:25:19:9c:63:c9:34:ab:3f:21:30:ae:0b:b6:54: 5a:9d:69:72:1e:b4:ad:a1:73:0c:8f:8c:24:3c:a9: 01:e7:92:fe:7c:1d:f6:f0:1c:89:0b:cf:af:33:35: 04:4e:eb:4d:02:5b:05:bd:67:2b:e2:62:2f:97:b5: a1:2d:b6:83:23:4e:32:6c:21:58:2e:94:1f:1f:28: 08:a6:2d:d9:37:dd:b9:77:4c:ac:01:1e:dc:0c:c0: 88:f5:f0:5a:b0:78:76:24:8a:e6:1b:6b:0a:78:43: 67:a6:91:08:6d:d3:a4:8e:59:a6:6a:aa:40:4a:0b: 05:05:10:cf:59:a6:cc:75:e4:9c:c2:d8:0a:b0:60: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E7:CD:E6:D5:36:E9:2D:2F:19:97:DE:4F:F6:2C:91:C9:D2:B1:59 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5d:47:c9:91:0c:64:0f:57:61:9d:2e:77:88:28:2e:97:a7: 35:16:c6:9b:de:94:99:a1:14:12:15:4d:fc:35:4b:a0:0c:ec: 38:63:45:13:71:02:0d:6f:21:ee:cf:32:af:9e:d7:ad:32:4b: e1:4b:00:af:2d:8b:b0:88:47:f4:bf:a8:a2:6e:e8:8a:ec:f0: 49:44:d1:c4:28:73:dc:e9:72:ee:3a:6c:b2:ca:74:a7:a9:c2: 39:91:7e:c3:d8:71:ba:0e:cd:ef:27:60:12:4e:21:2a:5d:32: 30:3b:49:ce:2f:68:0a:c4:6e:a7:5a:f2:5f:58:ae:0a:14:28: 79:e5:8d:6a:68:89:ab:58:62:75:fe:a8:49:a4:86:32:0a:7e: 52:87:70:0a:fe:2f:42:b0:19:6a:81:7f:d1:6e:18:ca:c0:b0: 11:b9:4f:52:0e:31:0b:3a:fa:c5:3c:67:88:90:24:14:ea:b8: bc:6c:58:23:cb:00:7a:8f:36:d4:05:b3:45:33:66:e4:5f:a4: 65:2c:f1:d0:85:8a:d0:31:74:4c:1c:a5:d1:9c:82:91:64:2d: 90:1a:41:75:cf:b0:58:50:59:e8:0b:5e:aa:ee:7e:b5:f5:16: 75:26:f7:bb:f3:84:b2:f3:43:ce:3e:a0:43:c5:8b:3a:73:c3: 0e:a9:94:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWnYJnxxGOsemu7ibQ/qXBMsfE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNDExMjUxNTU2NDZaFw0yNDExMjgyMjU1NDZaMDMxMTAvBgNV BAMTKEQ2RTdDREU2RDUzNkU5MkQyRjE5OTdERTRGRjYyQzkxQzlEMkIxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBfCeM9JtLD/9EKlcEgyNsSze sNr+BJh6LiolmN/o5RQPeeSdFAVCLtJ0xP3VTTxvD5QtEHbNnFtZJxWGVolhShLX fUvAK0+ervXuOKV06+qeCH1QLjwSyzfxieqPaBLG57AXlNrH4ZzIr5Qc2CI8iBEk lCQNtIwlGZxjyTSrPyEwrgu2VFqdaXIetK2hcwyPjCQ8qQHnkv58HfbwHIkLz68z NQRO600CWwW9ZyviYi+XtaEttoMjTjJsIVgulB8fKAimLdk33bl3TKwBHtwMwIj1 8FqweHYkiuYbawp4Q2emkQht06SOWaZqqkBKCwUFEM9Zpsx15JzC2AqwYJttAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ufN5tU26S0vGZfeT/YskcnSsVkwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBdR8mRDGQPV2GdLneIKC6XpzUWxpvelJmh FBIVTfw1S6AM7DhjRRNxAg1vIe7PMq+e160yS+FLAK8ti7CIR/S/qKJu6Irs8ElE 0cQoc9zpcu46bLLKdKepwjmRfsPYcboOze8nYBJOISpdMjA7Sc4vaArEbqda8l9Y rgoUKHnljWpoiatYYnX+qEmkhjIKflKHcAr+L0KwGWqBf9FuGMrAsBG5T1IOMQs6 +sU8Z4iQJBTquLxsWCPLAHqPNtQFs0UzZuRfpGUs8dCFitAxdEwcpdGcgpFkLZAa QXXPsFhQWegLXqrufrX1FnUm97vzhLLzQ84+oEPFizpzww6plHE= -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:03 2024 by rpki-client on console-ams.rpki-client.org