$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: chSEq7VOyM45AJok7i6HI56zmpOagoTKWeQNBum2gDk= Subject key identifier: C8:95:5E:7F:47:F0:49:8C:B8:2C:39:E6:02:6C:57:9D:18:CF:88:53 Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 126BAB54DCCB71475B85DE15B73A3092B4C4D96A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: 33 Signing time: Fri 27 Sep 2024 19:50:41 +0000 Manifest this update: Fri 27 Sep 2024 19:45:41 +0000 Manifest next update: Mon 30 Sep 2024 21:57:41 +0000 Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: pUX9oUckLxQ7+nA9jTCbaJ+1yovM3swODy5P/0jicyI=) 2: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: dmvKmtFkXfLVdLIoPQGLIfWBwtkjK+H16j5D6F09Q9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 21:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6b:ab:54:dc:cb:71:47:5b:85:de:15:b7:3a:30:92:b4:c4:d9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Sep 27 19:45:41 2024 GMT Not After : Sep 30 21:57:41 2024 GMT Subject: CN=C8955E7F47F0498CB82C39E6026C579D18CF8853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:c8:84:d5:6b:4b:10:71:c5:9b:b0:a6:ad: a2:e7:b4:49:3d:0f:95:3f:62:12:d7:cc:b5:2f:86: a6:f1:eb:8b:bc:8e:04:69:7e:3f:d2:c0:3d:5e:c6: d2:f8:66:a0:1b:a0:d2:bc:64:58:17:46:75:24:3f: 46:8b:49:48:d3:46:c0:04:f1:3c:1b:32:4e:e6:09: c1:ee:48:18:3d:05:37:e2:02:13:8f:b9:f6:96:b5: 04:99:a1:7c:46:93:e9:aa:44:49:37:f8:ad:2d:87: 10:7f:36:da:1e:4f:5d:36:3f:d3:1a:f5:40:a6:7c: c1:16:a4:7d:3a:5c:b1:ca:e0:7f:2b:8d:76:99:5a: e9:fa:db:d8:bc:40:14:6a:e0:50:a1:88:61:82:f7: 0b:58:90:ee:c5:53:6a:5f:7e:20:61:47:5b:d4:aa: 74:06:9a:fa:3b:50:df:04:19:6a:fe:48:b0:ab:f1: a9:73:79:2a:77:37:78:0e:0b:5b:3e:b4:9d:1d:02: 7c:48:b8:87:e1:5c:6d:31:47:2f:2c:78:a1:5e:3d: 85:49:dc:4f:aa:3c:fb:65:d7:e3:72:b0:f9:7d:9e: 8f:8f:84:29:94:50:28:4c:1a:e8:28:23:dd:38:3c: 81:42:ca:a6:5c:49:dd:3b:d3:fd:77:15:27:50:20: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:95:5E:7F:47:F0:49:8C:B8:2C:39:E6:02:6C:57:9D:18:CF:88:53 X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:4b:78:12:d2:9c:f8:4e:ec:ae:92:f3:fa:13:80:2d:86:6f: 83:9a:93:da:fe:31:2c:95:c2:d5:b0:5a:72:c6:7d:31:1d:eb: b4:5d:01:e7:54:15:d0:9e:e7:a9:2e:13:37:4f:15:b7:df:4e: 59:dc:e7:84:99:14:6c:5c:56:5c:c6:2c:03:bf:60:52:ce:0b: 59:52:32:a0:ad:5c:5b:af:01:62:7b:a5:4a:26:de:a7:05:7e: d4:9f:14:a9:30:23:14:81:c7:c7:65:8e:81:a3:4b:fe:4b:1d: f0:b4:1b:cd:fb:27:6d:0f:51:cb:54:43:a4:65:fb:96:23:5f: 7b:40:ad:68:77:8d:4d:cb:8e:a8:a0:b2:9d:31:9a:22:5a:b1: 6a:d9:c1:d4:c0:12:89:77:1a:74:de:89:41:de:e4:ea:b4:fd: 44:96:d1:73:18:31:d4:0a:62:df:ee:82:2b:12:2b:6c:93:15: 90:dd:86:74:17:89:c0:69:d7:65:ec:39:d9:67:ab:01:fe:0e: ae:12:13:28:de:a0:68:67:b6:a3:f5:d7:34:d3:f3:e3:ee:1b: bd:69:38:5c:0a:fc:85:ca:20:76:6d:87:13:28:5f:a9:e7:d2: d7:14:6e:f0:e6:10:1f:1e:57:0b:83:43:6d:f6:48:35:fd:63: cb:4c:ac:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmurVNzLcUdbhd4VtzowkrTE2WowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNDA5MjcxOTQ1NDFaFw0yNDA5MzAyMTU3NDFaMDMxMTAvBgNV BAMTKEM4OTU1RTdGNDdGMDQ5OENCODJDMzlFNjAyNkM1NzlEMThDRjg4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqsiE1WtLEHHFm7CmraLntEk9 D5U/YhLXzLUvhqbx64u8jgRpfj/SwD1extL4ZqAboNK8ZFgXRnUkP0aLSUjTRsAE 8TwbMk7mCcHuSBg9BTfiAhOPufaWtQSZoXxGk+mqREk3+K0thxB/NtoeT102P9Ma 9UCmfMEWpH06XLHK4H8rjXaZWun629i8QBRq4FChiGGC9wtYkO7FU2pffiBhR1vU qnQGmvo7UN8EGWr+SLCr8alzeSp3N3gOC1s+tJ0dAnxIuIfhXG0xRy8seKFePYVJ 3E+qPPtl1+NysPl9no+PhCmUUChMGugoI904PIFCyqZcSd070/13FSdQINp/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyJVef0fwSYy4LDnmAmxXnRjPiFMwHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5LeBLSnPhO7K6S8/oTgC2Gb4Oak9r+MSyV wtWwWnLGfTEd67RdAedUFdCe56kuEzdPFbffTlnc54SZFGxcVlzGLAO/YFLOC1lS MqCtXFuvAWJ7pUom3qcFftSfFKkwIxSBx8dljoGjS/5LHfC0G837J20PUctUQ6Rl +5YjX3tArWh3jU3Ljqigsp0xmiJasWrZwdTAEol3GnTeiUHe5Oq0/USW0XMYMdQK Yt/ugisSK2yTFZDdhnQXicBp12XsOdlnqwH+Dq4SEyjeoGhntqP11zTT8+PuG71p OFwK/IXKIHZthxMoX6nn0tcUbvDmEB8eVwuDQ232SDX9Y8tMrMw= -----END CERTIFICATE-----Generated at Fri Sep 27 21:26:38 2024 by rpki-client on console-fra.rpki-client.org