$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: FyJCJO6g2k4rFGuwSt0Kp8GHpSfiYHfYOYLXIccLi1o= Subject key identifier: C8:10:07:C2:62:46:94:55:5D:F6:50:16:1A:28:23:31:6B:43:3B:B5 Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 6B1B3C995AA746EB628C6A939458EE4DE81EA2EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 042C Signing time: Tue 07 May 2024 20:40:54 +0000 Manifest this update: Tue 07 May 2024 20:35:54 +0000 Manifest next update: Sat 11 May 2024 07:37:54 +0000 Files and hashes: 1: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: YFeLZG1Xzwe463J9GbgRAUWAxDgHyERXh024fiZXzV8=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: sNVSyyId+pKhRU7SCXz++K/1q6I0WmlzRqnk37T/knM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1b:3c:99:5a:a7:46:eb:62:8c:6a:93:94:58:ee:4d:e8:1e:a2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: May 7 20:35:54 2024 GMT Not After : May 11 07:37:54 2024 GMT Subject: CN=C81007C2624694555DF650161A2823316B433BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:f1:51:de:a1:6e:a5:2c:52:85:17:24:b6:cd: d7:7a:af:6b:4f:4e:14:db:de:fa:f4:b7:ac:2f:8b: 3b:1f:be:a5:9f:e0:7d:f6:78:0f:57:05:78:d8:7b: d4:c6:81:bc:07:c8:e7:0f:8e:e5:4b:9d:3d:c1:df: 63:35:00:90:33:78:5c:04:6e:91:c6:65:89:ae:75: 97:e6:14:ea:f7:5e:c9:69:cb:e3:51:72:60:00:48: 59:c3:b8:1e:01:06:3e:da:fd:78:89:25:e6:a7:7b: a9:5c:d0:e7:99:3d:0d:2e:b2:0f:ee:86:d8:1d:94: 82:60:dd:eb:0d:93:ef:d0:2f:c4:0a:cb:b4:39:55: 54:78:00:46:12:3a:95:6e:92:e9:73:d6:71:9f:fb: 4f:12:ad:0b:ac:81:bb:b9:61:22:40:4b:79:e1:d8: f7:d0:2b:7f:7b:43:e0:f0:9b:cd:f0:65:5c:e0:b9: 24:2f:19:73:2b:8c:62:3f:4a:ae:d9:96:7d:44:26: fb:c6:d0:1a:f3:80:53:0b:f9:c2:c6:f0:90:83:c2: 2c:bd:1a:2d:18:5c:a3:f7:34:42:a4:76:e0:3b:85: 6a:45:b1:50:c0:bf:35:63:6e:2e:c1:a2:ea:20:18: bf:40:08:51:47:de:36:89:54:80:6b:72:96:0a:a3: 5e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:10:07:C2:62:46:94:55:5D:F6:50:16:1A:28:23:31:6B:43:3B:B5 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:35:d1:30:aa:d6:ab:d1:67:b8:a4:cf:4f:a2:74:76:ee:38: 9e:6d:a3:16:df:4d:53:49:6d:da:01:51:47:1e:33:0b:6f:91: c3:ab:ac:3c:01:b5:bc:5c:e4:f4:da:22:46:a5:00:eb:7f:b6: 5c:ca:16:21:ec:53:83:44:cf:7b:d5:14:06:39:de:42:2c:fa: 55:85:b6:7d:4a:14:09:df:59:30:4e:82:cd:88:18:2b:3b:3b: 23:68:5d:40:ec:ec:be:da:ed:77:3a:9f:0a:e3:fa:8b:a8:86: a2:78:f4:85:da:5f:c9:99:3c:75:46:cf:45:cd:0e:19:b9:e3: 5a:99:ac:e5:e7:3a:a9:53:43:6d:5b:40:1d:20:49:db:6d:b3: e0:4f:79:bb:35:2d:cd:ef:ac:94:f8:b2:c1:07:37:eb:0b:61: 4b:0b:5e:7f:4b:6b:c5:5c:62:14:b3:c6:83:ab:9e:7d:9e:0e: 00:e4:40:60:2a:1b:ee:6c:1a:f0:a3:86:9b:c9:b6:e1:a4:52: 29:42:d9:bf:82:24:57:19:40:79:bf:68:91:66:8c:63:17:98: 7b:78:98:7b:8d:28:28:03:12:2c:35:d0:92:7d:ce:7a:67:5f: 4a:97:db:ec:fd:ce:93:e8:0d:22:65:42:28:a9:5d:57:25:f5: 15:0d:eb:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxs8mVqnRutijGqTlFjuTegeouowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNDA1MDcyMDM1NTRaFw0yNDA1MTEwNzM3NTRaMDMxMTAvBgNV BAMTKEM4MTAwN0MyNjI0Njk0NTU1REY2NTAxNjFBMjgyMzMxNkI0MzNCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD98VHeoW6lLFKFFyS2zdd6r2tP ThTb3vr0t6wvizsfvqWf4H32eA9XBXjYe9TGgbwHyOcPjuVLnT3B32M1AJAzeFwE bpHGZYmudZfmFOr3Xslpy+NRcmAASFnDuB4BBj7a/XiJJeane6lc0OeZPQ0usg/u htgdlIJg3esNk+/QL8QKy7Q5VVR4AEYSOpVukulz1nGf+08SrQusgbu5YSJAS3nh 2PfQK397Q+Dwm83wZVzguSQvGXMrjGI/Sq7Zln1EJvvG0BrzgFML+cLG8JCDwiy9 Gi0YXKP3NEKkduA7hWpFsVDAvzVjbi7BouogGL9ACFFH3jaJVIBrcpYKo17JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyBAHwmJGlFVd9lAWGigjMWtDO7UwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI10TCq1qvRZ7ikz0+idHbuOJ5toxbfTVNJ bdoBUUceMwtvkcOrrDwBtbxc5PTaIkalAOt/tlzKFiHsU4NEz3vVFAY53kIs+lWF tn1KFAnfWTBOgs2IGCs7OyNoXUDs7L7a7Xc6nwrj+ouohqJ49IXaX8mZPHVGz0XN Dhm541qZrOXnOqlTQ21bQB0gSdtts+BPebs1Lc3vrJT4ssEHN+sLYUsLXn9La8Vc YhSzxoOrnn2eDgDkQGAqG+5sGvCjhpvJtuGkUilC2b+CJFcZQHm/aJFmjGMXmHt4 mHuNKCgDEiw10JJ9znpnX0qX2+z9zpPoDSJlQiipXVcl9RUN64Q= -----END CERTIFICATE-----Generated at Tue May 7 21:41:02 2024 by rpki-client on console-fra.rpki-client.org