$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: 8/U29ljT3NWSHoHi2Avbm0Z134aFQhuzFaC0+ugvO64= Subject key identifier: 47:34:ED:8D:8C:0F:84:AF:5E:DC:57:F1:2A:97:A1:47:AF:DA:74:8A Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 0F7DC0369E8F735C74A97AF51173A40C193401E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: 4C Signing time: Sat 23 Nov 2024 23:00:46 +0000 Manifest this update: Sat 23 Nov 2024 22:55:46 +0000 Manifest next update: Wed 27 Nov 2024 05:44:46 +0000 Files and hashes: 1: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: lDGsZiNmmAdsQpoq3dATXpFXhEXT9gKKmBdSHJNPgks=) 2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: pUX9oUckLxQ7+nA9jTCbaJ+1yovM3swODy5P/0jicyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:7d:c0:36:9e:8f:73:5c:74:a9:7a:f5:11:73:a4:0c:19:34:01:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Nov 23 22:55:46 2024 GMT Not After : Nov 27 05:44:46 2024 GMT Subject: CN=4734ED8D8C0F84AF5EDC57F12A97A147AFDA748A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:48:c7:18:93:1c:b9:c0:8d:72:98:5f:06:26: 1b:fd:45:87:32:83:62:4f:2c:35:80:0d:e8:86:ea: af:9a:7c:44:1e:b5:e5:7c:27:eb:cd:dc:ab:3e:42: c0:5a:40:ed:17:05:c0:ad:c4:a0:55:62:35:27:ba: 58:a9:fe:ed:74:2c:3b:d2:ac:49:76:fa:02:30:cc: d6:f3:b1:33:97:2c:80:f8:3e:89:b0:47:f1:d5:e1: 87:db:04:99:1d:d7:eb:d7:5e:19:52:07:db:98:ab: e2:91:32:54:ef:ba:4d:6b:aa:a7:9f:b0:0d:f7:c0: 3c:3c:85:2c:17:5a:4f:46:d1:f7:31:22:33:43:ac: 86:bc:7e:31:61:c3:b4:bb:4c:6d:db:b0:6e:7e:d2: 28:cd:73:5e:99:c5:1c:8a:74:21:91:13:90:0a:d3: ad:93:37:5e:64:38:ac:6c:7f:d2:e3:e6:25:c4:d7: 59:86:83:99:2b:ec:8a:e2:0d:49:68:6d:b8:1c:90: f6:3b:f9:c5:d5:e5:25:6c:cc:c3:95:64:72:ab:41: 72:38:53:a8:62:4c:91:cc:e0:eb:4b:a8:97:09:52: 34:5a:3a:bf:a7:20:be:a7:2d:ba:22:34:c3:15:cd: 12:ff:d5:77:98:29:a7:93:39:9c:7c:4f:78:5a:09: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:34:ED:8D:8C:0F:84:AF:5E:DC:57:F1:2A:97:A1:47:AF:DA:74:8A X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d8:e8:76:6f:2e:53:a5:30:d5:0b:b1:10:23:7c:6e:61:55: 71:9d:3d:48:a7:2e:e1:25:c2:88:28:d0:04:1b:17:28:94:8f: f9:3c:a9:20:df:a9:93:e5:6b:16:21:f6:7a:54:97:f1:93:67: f9:4f:df:c1:fb:ab:f3:17:05:97:d6:87:e9:27:b2:23:64:75: b4:2b:0c:16:45:85:0e:4b:2d:fb:f9:08:ce:47:b6:ad:88:88: 43:66:cd:ee:0e:a9:56:5c:40:47:9a:36:f8:45:23:9a:f7:97: 39:64:a9:6a:42:03:6c:2a:6a:fb:62:3a:36:a6:0c:c6:4c:fb: ac:a6:10:64:8e:81:43:b2:48:d5:5a:6f:de:1a:df:ef:5c:07: 1c:bf:62:bd:72:d0:03:77:1f:fe:a0:57:1b:28:f5:dd:40:68: c6:41:7f:d8:5b:6a:7d:74:80:68:d7:51:59:62:52:9f:71:14: f3:7c:52:81:ff:03:b0:13:53:46:80:f0:f7:7f:e9:dc:2c:51: 99:eb:7b:5a:20:77:04:3d:1c:a9:03:b6:50:74:09:e9:44:5f: 40:e2:9c:94:b0:c6:3e:ba:f4:e1:e5:1f:7d:f4:bf:0e:8e:78: dd:fc:dd:65:86:8d:1d:5d:7c:9e:28:42:ff:c5:c5:98:d2:a1: da:9d:5b:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD33ANp6Pc1x0qXr1EXOkDBk0AeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNDExMjMyMjU1NDZaFw0yNDExMjcwNTQ0NDZaMDMxMTAvBgNV BAMTKDQ3MzRFRDhEOEMwRjg0QUY1RURDNTdGMTJBOTdBMTQ3QUZEQTc0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSMcYkxy5wI1ymF8GJhv9RYcy g2JPLDWADeiG6q+afEQeteV8J+vN3Ks+QsBaQO0XBcCtxKBVYjUnulip/u10LDvS rEl2+gIwzNbzsTOXLID4PomwR/HV4YfbBJkd1+vXXhlSB9uYq+KRMlTvuk1rqqef sA33wDw8hSwXWk9G0fcxIjNDrIa8fjFhw7S7TG3bsG5+0ijNc16ZxRyKdCGRE5AK 062TN15kOKxsf9Lj5iXE11mGg5kr7IriDUlobbgckPY7+cXV5SVszMOVZHKrQXI4 U6hiTJHM4OtLqJcJUjRaOr+nIL6nLboiNMMVzRL/1XeYKaeTOZx8T3haCYlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURzTtjYwPhK9e3FfxKpehR6/adIowHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzY6HZvLlOlMNULsRAjfG5hVXGdPUinLuEl wogo0AQbFyiUj/k8qSDfqZPlaxYh9npUl/GTZ/lP38H7q/MXBZfWh+knsiNkdbQr DBZFhQ5LLfv5CM5Htq2IiENmze4OqVZcQEeaNvhFI5r3lzlkqWpCA2wqavtiOjam DMZM+6ymEGSOgUOySNVab94a3+9cBxy/Yr1y0AN3H/6gVxso9d1AaMZBf9hban10 gGjXUVliUp9xFPN8UoH/A7ATU0aA8Pd/6dwsUZnre1ogdwQ9HKkDtlB0CelEX0Di nJSwxj669OHlH330vw6OeN383WWGjR1dfJ4oQv/FxZjSodqdW/c= -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:09 2024 by rpki-client on console-fra.rpki-client.org