$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft File: E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft (raw, json) Hash identifier: zX4NfjUJjsyh89b7BT8i1992llnmd9kqWfbXHdXGNsU= Subject key identifier: 4A:B5:58:98:F1:01:14:D6:AF:5B:D0:F3:F6:46:E3:AF:64:A0:BB:C3 Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 Certificate issuer: /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Certificate serial: 19CAFC276DC5FB942E72CAE25276A23F0555A94D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft Manifest number: 017D Signing time: Wed 20 Nov 2024 21:11:01 +0000 Manifest this update: Wed 20 Nov 2024 21:06:01 +0000 Manifest next update: Sun 24 Nov 2024 02:59:01 +0000 Files and hashes: 1: E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl (hash: Z8f1pSNoQd9pRTRn2MjXaJPyARLTMNO7ZlaycI13guU=) 2: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (hash: 1lqYd7hkjX4+Jk0uKLziRcrfY2vX20m//NCQnspFZQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 02:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ca:fc:27:6d:c5:fb:94:2e:72:ca:e2:52:76:a2:3f:05:55:a9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Validity Not Before: Nov 20 21:06:01 2024 GMT Not After : Nov 24 02:59:01 2024 GMT Subject: CN=4AB55898F10114D6AF5BD0F3F646E3AF64A0BBC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:20:7d:a6:54:ea:cf:8b:ef:ca:8a:9d:8d:09: d1:32:81:0c:14:7e:b8:b1:d9:2d:fe:dd:f3:d3:5d: 84:8d:59:b6:40:b9:91:02:94:22:6b:2b:2f:b1:7c: ed:f6:9f:d8:96:76:c5:d0:2b:e9:08:d1:64:da:2f: cd:3d:33:be:c9:2c:d5:84:65:74:f0:dd:4d:9e:d9: 24:0f:80:7c:c2:3e:bd:6c:24:38:ce:81:24:66:86: 8f:7e:f4:92:c3:d2:d2:c7:ae:99:6d:c6:bc:03:cc: 88:19:50:10:42:e0:02:4c:a2:df:cb:93:01:db:05: ff:b3:d9:f4:22:8f:b7:23:7b:8c:45:f2:70:29:0e: 24:93:d0:ed:4c:92:f0:4e:af:28:68:f2:0a:80:15: 8c:6e:f0:c6:4a:f5:ea:b0:8c:e5:0a:81:1e:66:d9: a8:ef:d6:3f:15:39:34:11:84:64:30:37:5d:87:71: 55:aa:ca:00:39:22:5e:cd:74:ac:50:42:2e:a3:bc: 4d:fd:09:01:75:30:00:80:76:a5:4d:a1:63:a3:91: b2:09:1a:ea:cd:45:e1:ba:a8:28:c1:6a:f4:e9:13: e9:12:09:2f:64:44:ed:1a:13:de:01:5c:25:40:9b: 63:c5:d7:e7:f7:18:ff:65:68:f9:19:83:36:51:3d: de:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B5:58:98:F1:01:14:D6:AF:5B:D0:F3:F6:46:E3:AF:64:A0:BB:C3 X509v3 Authority Key Identifier: keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bb:80:9e:b9:ff:43:36:89:87:26:2c:6a:ad:ae:4d:66:79: ba:fd:ea:48:9a:f5:98:21:1d:e5:a5:d7:88:29:1d:be:73:d7: 46:fe:30:e4:db:d2:e5:fb:4b:22:53:61:79:13:48:b3:97:45: 2d:cd:96:6b:4f:53:74:4a:99:ec:bb:62:95:88:44:c0:1d:78: 63:e7:c7:7e:a1:67:40:27:8f:79:27:53:61:b5:6b:a3:93:b8: 5c:a7:ae:e8:4b:e9:60:6f:2c:8c:57:08:bf:33:6e:86:7d:99: 4e:27:80:dd:44:3f:63:8a:b6:7d:2e:33:80:22:22:09:50:66: 7a:e8:73:99:46:e6:87:a0:9e:4d:eb:bd:9b:58:72:7f:ab:0b: 96:5e:73:59:5e:0e:b4:a7:fd:e9:b0:92:68:58:f0:9e:5a:73: 2e:90:1f:b6:b4:54:38:0d:32:66:ad:6f:98:76:ea:fa:58:46: 64:45:f1:94:79:68:17:db:e8:d9:7b:78:bf:f0:f0:dd:fa:9c: 18:39:81:1c:30:12:42:de:84:b4:54:dd:ed:50:8c:fa:6a:7b: c5:07:af:11:f5:e5:5d:54:1d:46:fc:da:7b:1b:b0:65:78:09: 16:0e:3c:7e:1f:81:0e:66:ea:6c:b4:3d:ee:91:27:a0:d6:de: a5:a0:cb:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcr8J23F+5QucsriUnaiPwVVqU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG MTU2MDRENTAeFw0yNDExMjAyMTA2MDFaFw0yNDExMjQwMjU5MDFaMDMxMTAvBgNV BAMTKDRBQjU1ODk4RjEwMTE0RDZBRjVCRDBGM0Y2NDZFM0FGNjRBMEJCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnIH2mVOrPi+/Kip2NCdEygQwU frix2S3+3fPTXYSNWbZAuZEClCJrKy+xfO32n9iWdsXQK+kI0WTaL809M77JLNWE ZXTw3U2e2SQPgHzCPr1sJDjOgSRmho9+9JLD0tLHrpltxrwDzIgZUBBC4AJMot/L kwHbBf+z2fQij7cje4xF8nApDiST0O1MkvBOryho8gqAFYxu8MZK9eqwjOUKgR5m 2ajv1j8VOTQRhGQwN12HcVWqygA5Il7NdKxQQi6jvE39CQF1MACAdqVNoWOjkbIJ GurNReG6qCjBavTpE+kSCS9kRO0aE94BXCVAm2PF1+f3GP9laPkZgzZRPd6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSrVYmPEBFNavW9Dz9kbjr2Sgu8MwHwYDVR0j BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2 MDRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmZmI0M2ItZjhiNS00ZjFmLTli OGYtNWIwMmRkYmI2ZmNmLzAvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3 NDdGMTU2MDRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC7gJ65/0M2iYcmLGqtrk1mebr96kia9Zgh HeWl14gpHb5z10b+MOTb0uX7SyJTYXkTSLOXRS3NlmtPU3RKmey7YpWIRMAdeGPn x36hZ0Anj3knU2G1a6OTuFynruhL6WBvLIxXCL8zboZ9mU4ngN1EP2OKtn0uM4Ai IglQZnroc5lG5oegnk3rvZtYcn+rC5Zec1leDrSn/emwkmhY8J5acy6QH7a0VDgN Mmatb5h26vpYRmRF8ZR5aBfb6Nl7eL/w8N36nBg5gRwwEkLehLRU3e1QjPpqe8UH rxH15V1UHUb82nsbsGV4CRYOPH4fgQ5m6my0Pe6RJ6DW3qWgy68= -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org