$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: UVWf6kNCy1FjUKe64yHRTdO1TQ7OI3ImloRCUEOWlk8= Subject key identifier: 91:DF:72:87:62:E6:ED:FE:68:DB:A1:47:BA:5B:4E:30:4F:01:F6:81 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 243BB1A2E6FD208900E953D54CDB3C559EC1B034 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 98 Signing time: Wed 20 Nov 2024 16:30:38 +0000 Manifest this update: Wed 20 Nov 2024 16:25:38 +0000 Manifest next update: Sun 24 Nov 2024 02:06:38 +0000 Files and hashes: 1: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: 3Tf67Q3SmMgqt6fs8JAIsUlRV93pGdA1ekQhD/EOrWo=) 2: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: T696t09s1lEHX3xDzPeEBd35lBqL8WLXsYL+YPqRb3I=) 3: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: qhUR8TNfngHwuTvKXMF1UmhhCK8NR9wMrSddEXTgHz4=) 4: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: kFyEKKbpyZ34L4IuJ/wKVEC7KX8y6xAWQkFrbY0RuEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3b:b1:a2:e6:fd:20:89:00:e9:53:d5:4c:db:3c:55:9e:c1:b0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Nov 20 16:25:38 2024 GMT Not After : Nov 24 02:06:38 2024 GMT Subject: CN=91DF728762E6EDFE68DBA147BA5B4E304F01F681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:1e:eb:5a:f4:a0:58:28:15:4b:7d:c1:92: a7:b1:f6:13:b7:ee:91:6d:1e:dd:2c:b0:7c:ea:e8: 0f:3f:74:ad:cd:cc:e5:21:b0:47:70:5c:da:a3:bd: 7b:32:45:6c:81:17:d2:88:0b:4e:cb:62:38:3a:4b: d6:f5:af:2d:fb:f6:12:e8:bb:ff:ae:6f:8c:fb:1d: 92:de:39:75:d0:b5:3a:12:76:42:f1:76:7c:90:f6: ce:6f:f4:db:3a:01:bc:0c:ae:91:6e:18:32:2d:a1: de:67:55:79:5b:c8:a1:62:e0:68:f9:20:61:ad:95: c1:5f:21:35:4e:25:9e:40:13:5a:27:d7:54:25:bc: 66:f7:2a:08:63:94:9e:53:70:80:5a:f6:dc:49:97: f4:2a:40:70:99:5a:fb:8c:96:01:47:93:8e:02:23: d8:27:45:03:2c:a5:8f:2a:ef:1c:a2:22:68:84:47: 05:e3:cc:e6:64:27:9d:37:59:69:07:70:ba:88:64: 80:59:c3:24:6a:e3:5f:36:21:e3:27:63:46:01:77: 91:89:64:3a:0f:00:80:ac:46:4e:41:27:bd:3b:ee: 6b:2e:7e:26:ac:28:0e:55:d9:64:14:b8:ed:31:f1: 68:55:f9:ed:4f:6f:d8:8d:b7:c6:c6:65:7e:5b:15: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DF:72:87:62:E6:ED:FE:68:DB:A1:47:BA:5B:4E:30:4F:01:F6:81 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c2:75:f7:dc:65:31:45:35:e9:9f:b5:0a:f8:0f:36:f0:5b: 5e:2e:0d:e4:f2:f2:cf:4a:b7:d6:99:4c:64:69:03:04:cc:be: 4c:b5:a3:36:f4:0a:d1:f1:7c:6a:1d:f1:34:7a:17:db:5a:a3: c0:b7:c5:01:c3:06:68:a5:13:aa:f2:84:e7:c4:60:65:d4:8b: 78:a6:52:3b:b6:8f:21:c5:a2:71:a2:14:53:ec:15:45:df:bf: 34:bf:8c:3b:8d:c3:6c:09:8b:15:b4:74:4c:fa:c2:da:a1:59: f0:66:82:6e:b0:c3:ec:41:7d:ea:b9:e5:eb:18:81:ba:7e:c8: 7e:df:92:89:2b:9a:08:be:71:c3:87:09:ac:6e:f9:3b:3c:01: d2:8e:7e:08:4f:69:25:43:e3:b7:14:f9:34:b8:d3:01:80:82: b0:58:8a:d3:1e:84:be:71:ac:b0:b2:78:bf:28:e7:b5:2c:c1: 10:01:94:0a:5e:cf:29:3b:49:b4:03:51:bd:38:f7:06:5c:12: cf:b5:19:f8:99:17:93:97:e2:7d:84:36:37:13:29:de:0c:8a: 0c:f7:7c:ea:ba:c7:70:1a:3f:a9:21:32:59:17:c7:a6:72:6a: 52:ae:e2:df:0c:b6:9a:34:db:60:45:05:b3:8e:23:a7:20:96: 7d:b2:8a:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDuxoub9IIkA6VPVTNs8VZ7BsDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNDExMjAxNjI1MzhaFw0yNDExMjQwMjA2MzhaMDMxMTAvBgNV BAMTKDkxREY3Mjg3NjJFNkVERkU2OERCQTE0N0JBNUI0RTMwNEYwMUY2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Lx7rWvSgWCgVS33Bkqex9hO3 7pFtHt0ssHzq6A8/dK3NzOUhsEdwXNqjvXsyRWyBF9KIC07LYjg6S9b1ry379hLo u/+ub4z7HZLeOXXQtToSdkLxdnyQ9s5v9Ns6AbwMrpFuGDItod5nVXlbyKFi4Gj5 IGGtlcFfITVOJZ5AE1on11QlvGb3KghjlJ5TcIBa9txJl/QqQHCZWvuMlgFHk44C I9gnRQMspY8q7xyiImiERwXjzOZkJ503WWkHcLqIZIBZwyRq4182IeMnY0YBd5GJ ZDoPAICsRk5BJ7077msufiasKA5V2WQUuO0x8WhV+e1Pb9iNt8bGZX5bFdmPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkd9yh2Lm7f5o26FHultOME8B9oEwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7CdffcZTFFNemftQr4DzbwW14uDeTy8s9K t9aZTGRpAwTMvky1ozb0CtHxfGod8TR6F9tao8C3xQHDBmilE6ryhOfEYGXUi3im Uju2jyHFonGiFFPsFUXfvzS/jDuNw2wJixW0dEz6wtqhWfBmgm6ww+xBfeq55esY gbp+yH7fkokrmgi+ccOHCaxu+Ts8AdKOfghPaSVD47cU+TS40wGAgrBYitMehL5x rLCyeL8o57UswRABlApezyk7SbQDUb049wZcEs+1GfiZF5OX4n2ENjcTKd4Migz3 fOq6x3AaP6khMlkXx6ZyalKu4t8Mtpo022BFBbOOI6cgln2yiok= -----END CERTIFICATE-----Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org