$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: 23oUc527ZJovXoOdyrTxkWPvZrmeoklK/CTzQ0aJnAQ= Subject key identifier: ED:24:DD:65:C8:50:61:2F:46:B2:F5:81:F9:F9:ED:00:AA:04:42:DD Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 7336298C5149F46DE4F0EBA70407D495764C2F23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 01A4 Signing time: Thu 21 Nov 2024 18:11:46 +0000 Manifest this update: Thu 21 Nov 2024 18:06:46 +0000 Manifest next update: Sun 24 Nov 2024 23:25:46 +0000 Files and hashes: 1: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: kXYGmWIXkb6SAGm6uUaz8ZaVXB06kcXZ9GNT+FMBaic=) 2: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: dBdAEMMIZQBHG9D050LJZcl9yacI+k3OYS4/Q2exWpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:36:29:8c:51:49:f4:6d:e4:f0:eb:a7:04:07:d4:95:76:4c:2f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Nov 21 18:06:46 2024 GMT Not After : Nov 24 23:25:46 2024 GMT Subject: CN=ED24DD65C850612F46B2F581F9F9ED00AA0442DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:61:2e:95:4a:4e:51:b4:da:9b:00:e5:f9: 65:ca:26:69:82:f7:43:b2:bc:0b:e3:6c:bf:46:b6: cf:77:68:2d:08:06:0f:38:61:61:f3:17:0b:0f:86: 9f:b1:8d:6a:5c:ff:7c:e7:ea:c6:96:85:cf:91:b3: aa:22:73:4f:19:ed:a1:d8:4b:71:17:11:d6:97:78: 44:93:9b:07:a7:aa:3c:da:50:12:11:a2:87:f3:ca: da:c0:9f:d3:1a:6b:cf:86:9e:41:c4:4b:ec:f2:cc: 1e:7c:f7:a9:b1:f4:1b:8f:68:d1:ee:7b:0b:8d:87: 07:d9:70:df:c5:30:fd:d5:33:17:1a:ed:7b:36:66: 4b:92:62:ea:dd:37:62:24:d7:10:20:54:a9:69:ff: 59:e9:61:ad:3a:48:7b:85:99:3f:21:a5:5f:69:98: f7:ed:01:5a:8e:01:b5:45:21:40:fc:26:74:af:56: bd:f1:f3:cb:c2:bb:40:2a:66:d5:a3:19:f0:89:30: c0:a0:7b:46:5d:05:43:c0:61:d8:cb:9d:57:bc:16: 74:8f:48:92:0e:05:60:ab:fc:31:71:22:e0:0e:3c: bd:2c:4a:a3:74:80:7a:65:32:fb:24:4c:6f:b6:db: 01:71:1e:e6:b6:0d:71:3b:81:c4:4b:83:d0:0d:30: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:24:DD:65:C8:50:61:2F:46:B2:F5:81:F9:F9:ED:00:AA:04:42:DD X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e0:94:17:3b:18:31:3a:93:0f:d7:77:00:ef:a4:f2:20:fc: 98:77:5c:3a:fb:f3:8d:f0:00:9e:4a:29:6a:cf:68:38:ff:90: a9:f7:92:e2:32:4e:c2:a7:52:7b:99:48:cb:fa:77:96:fb:00: c2:33:b3:16:cd:d9:a6:c8:f1:56:bd:27:9c:91:51:4c:f4:b8: 0f:86:36:7e:e5:19:88:40:db:88:b6:00:9f:d7:b8:b2:4a:0f: 54:7b:39:ea:e5:fb:19:5c:99:26:d7:3f:9a:d8:7a:98:06:11: 61:81:0f:85:eb:11:1d:80:e1:7b:13:63:af:3b:e2:47:e9:bd: fa:c7:97:69:78:13:67:bc:4f:6d:d1:a4:46:02:7e:e8:6c:7f: b3:4e:d2:43:66:b3:cd:c2:69:48:56:61:1a:19:69:85:97:38: 06:d0:87:9d:7a:c6:dc:89:7e:fc:71:6d:2f:7b:0d:7c:a3:9f: 46:a2:82:81:29:b2:8a:52:24:c6:3e:cc:54:16:ce:7c:0b:53: aa:4c:6c:52:c1:63:d3:54:0a:21:87:27:27:fc:25:ac:0b:46: c4:cc:0a:6b:8b:a1:97:4a:a5:e1:10:21:43:d8:f9:a9:a0:ba: 15:66:e5:0b:ca:0e:7e:4a:7c:ca:d7:36:36:89:de:c8:4b:a0: f6:66:39:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczYpjFFJ9G3k8OunBAfUlXZMLyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNDExMjExODA2NDZaFw0yNDExMjQyMzI1NDZaMDMxMTAvBgNV BAMTKEVEMjRERDY1Qzg1MDYxMkY0NkIyRjU4MUY5RjlFRDAwQUEwNDQyREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwk2EulUpOUbTamwDl+WXKJmmC 90OyvAvjbL9Gts93aC0IBg84YWHzFwsPhp+xjWpc/3zn6saWhc+Rs6oic08Z7aHY S3EXEdaXeESTmwenqjzaUBIRoofzytrAn9Maa8+GnkHES+zyzB5896mx9BuPaNHu ewuNhwfZcN/FMP3VMxca7Xs2ZkuSYurdN2Ik1xAgVKlp/1npYa06SHuFmT8hpV9p mPftAVqOAbVFIUD8JnSvVr3x88vCu0AqZtWjGfCJMMCge0ZdBUPAYdjLnVe8FnSP SJIOBWCr/DFxIuAOPL0sSqN0gHplMvskTG+22wFxHua2DXE7gcRLg9ANMIrtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7STdZchQYS9GsvWB+fntAKoEQt0wHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzglBc7GDE6kw/XdwDvpPIg/Jh3XDr7843w AJ5KKWrPaDj/kKn3kuIyTsKnUnuZSMv6d5b7AMIzsxbN2abI8Va9J5yRUUz0uA+G Nn7lGYhA24i2AJ/XuLJKD1R7Oerl+xlcmSbXP5rYepgGEWGBD4XrER2A4XsTY687 4kfpvfrHl2l4E2e8T23RpEYCfuhsf7NO0kNms83CaUhWYRoZaYWXOAbQh516xtyJ fvxxbS97DXyjn0aigoEpsopSJMY+zFQWznwLU6pMbFLBY9NUCiGHJyf8JawLRsTM CmuLoZdKpeEQIUPY+amguhVm5QvKDn5KfMrXNjaJ3shLoPZmOXM= -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org