$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: 3KGcD7QgCr94gYyEYnUdO8Ikdw1flyuuXmHSrGWbVfM= Subject key identifier: 33:7C:97:FA:1D:B5:65:7E:E5:E1:FA:AF:82:31:85:74:2D:6B:25:96 Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 49D3AE5CA665F6DE1C92EE374C618D050E3A7D9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 013B Signing time: Thu 21 Nov 2024 20:21:31 +0000 Manifest this update: Thu 21 Nov 2024 20:16:31 +0000 Manifest next update: Sun 24 Nov 2024 21:53:31 +0000 Files and hashes: 1: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: 3oRl4FLRpqbW8xFTv+6cj6QVd2OEB0Ox6NTFkqNqehI=) 2: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: dWWKX60Ul9mr6Mo409ol9Ky+eWDIk5O1scSI7ckdGfs=) 3: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: Qay85z2tBE2gSsJ1As2R1DyRPFo67yuecJZbDwWzf5g=) 4: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: Qa9xNMpYcP+9pVUvEHAtgK4Z1jgnm3adWlqql9bkWPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 21:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d3:ae:5c:a6:65:f6:de:1c:92:ee:37:4c:61:8d:05:0e:3a:7d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Nov 21 20:16:31 2024 GMT Not After : Nov 24 21:53:31 2024 GMT Subject: CN=337C97FA1DB5657EE5E1FAAF823185742D6B2596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:6c:46:4b:37:6e:96:64:e9:d6:2e:b7:e0: 54:8b:e7:f3:f8:2f:cd:8d:6e:cc:c2:1c:aa:2e:9a: c2:3d:df:38:99:63:75:af:86:4c:94:82:f9:8b:9f: 64:cf:ec:57:1e:2f:7a:c9:63:6c:16:8a:56:a5:5f: 4a:98:07:3d:c9:f8:41:1d:57:5e:6f:f5:3a:29:6d: 13:ad:df:5a:61:d1:75:f8:c3:56:5b:3e:77:ac:c1: cd:22:e8:fd:18:ec:d9:78:8e:4f:13:19:f8:ee:57: 6c:cb:93:57:99:ce:40:97:bc:3c:e4:15:ac:5e:d3: 40:ae:f6:bf:ca:a4:ae:7d:e1:e3:f9:59:1c:af:f0: 75:da:8d:b1:2e:e6:98:cc:91:a2:d0:3d:ed:41:f3: 39:f1:8f:91:90:aa:7b:57:dc:19:a2:a0:ba:81:7a: f3:b0:39:cd:81:a5:98:49:21:44:0f:b4:70:2d:c6: fb:34:dc:1f:02:ef:0c:76:60:df:e0:54:64:b4:db: 33:33:2c:9f:a3:d3:f6:91:9e:25:0f:d9:3a:43:59: cd:dc:33:2b:61:3d:38:f6:2b:43:a5:a0:f9:37:d3: 3c:41:f7:1d:a8:c1:42:19:7c:a3:ae:2d:07:ea:65: 04:1f:9f:4c:af:ee:4c:dd:53:4c:0f:f2:48:91:79: 32:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7C:97:FA:1D:B5:65:7E:E5:E1:FA:AF:82:31:85:74:2D:6B:25:96 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:72:de:a2:d8:43:45:2e:17:80:18:21:d2:cf:4d:c2:17:86: e3:42:c5:6c:32:35:cd:13:c9:c8:d2:ed:f0:fa:8b:f6:df:1c: 0a:51:5b:35:c0:d6:f8:47:9e:95:29:c5:8a:a5:83:e0:ca:91: 84:c5:91:58:c2:8d:b6:0c:76:b0:61:ec:f6:dc:e3:81:99:ac: e9:7e:97:d1:61:e1:5c:b0:a7:33:07:72:d9:7d:52:77:78:e7: 30:40:aa:bf:cd:55:41:2e:ec:d5:8b:8c:40:0b:1c:ec:67:69: 5d:13:9c:e8:8c:77:11:b4:7c:77:85:80:80:41:c9:e3:be:b5: 8b:cd:06:f5:a8:f3:e2:56:fc:ec:0e:05:fc:7e:f9:f9:b9:bb: e1:58:13:55:54:f6:ae:e8:80:27:03:ad:9f:77:8f:07:19:59: 3c:03:18:9b:9f:2a:e3:09:3f:da:14:d4:6a:95:0d:39:19:f4: 7e:ce:2e:e7:30:1f:47:90:e1:9c:88:47:c5:e1:6a:a5:f7:d0: 97:d9:52:57:23:17:ce:a2:d3:59:91:5f:98:e9:8e:78:ab:b9: a7:1f:a7:ae:d2:0e:06:49:4c:8f:24:07:6b:12:ee:4d:e7:a0: 3f:3e:1e:6a:69:48:e4:82:99:ef:c7:4f:d4:f1:aa:8e:08:3e: 6e:64:ca:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdOuXKZl9t4cku43TGGNBQ46fZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNDExMjEyMDE2MzFaFw0yNDExMjQyMTUzMzFaMDMxMTAvBgNV BAMTKDMzN0M5N0ZBMURCNTY1N0VFNUUxRkFBRjgyMzE4NTc0MkQ2QjI1OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+mxGSzdulmTp1i634FSL5/P4 L82NbszCHKoumsI93ziZY3WvhkyUgvmLn2TP7FceL3rJY2wWilalX0qYBz3J+EEd V15v9TopbROt31ph0XX4w1ZbPneswc0i6P0Y7Nl4jk8TGfjuV2zLk1eZzkCXvDzk Faxe00Cu9r/KpK594eP5WRyv8HXajbEu5pjMkaLQPe1B8znxj5GQqntX3BmioLqB evOwOc2BpZhJIUQPtHAtxvs03B8C7wx2YN/gVGS02zMzLJ+j0/aRniUP2TpDWc3c MythPTj2K0OloPk30zxB9x2owUIZfKOuLQfqZQQfn0yv7kzdU0wP8kiReTIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM3yX+h21ZX7l4fqvgjGFdC1rJZYwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVy3qLYQ0UuF4AYIdLPTcIXhuNCxWwyNc0T ycjS7fD6i/bfHApRWzXA1vhHnpUpxYqlg+DKkYTFkVjCjbYMdrBh7Pbc44GZrOl+ l9Fh4VywpzMHctl9Und45zBAqr/NVUEu7NWLjEALHOxnaV0TnOiMdxG0fHeFgIBB yeO+tYvNBvWo8+JW/OwOBfx++fm5u+FYE1VU9q7ogCcDrZ93jwcZWTwDGJufKuMJ P9oU1GqVDTkZ9H7OLucwH0eQ4ZyIR8XhaqX30JfZUlcjF86i01mRX5jpjniruacf p67SDgZJTI8kB2sS7k3noD8+HmppSOSCme/HT9Txqo4IPm5kysk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org