$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: Bt1eD7gxGwZybiRCXiCy0B35cSxiEx4MMp5SdoWVnDo= Subject key identifier: A3:92:42:F0:E9:DE:3B:E8:E9:67:35:B3:B6:FB:22:1A:4D:24:10:B5 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 20DF1CEF00F53F7381674D00C55799080273FAEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 19 Signing time: Wed 29 May 2024 08:22:06 +0000 Manifest this update: Wed 29 May 2024 08:17:06 +0000 Manifest next update: Sat 01 Jun 2024 12:54:06 +0000 Files and hashes: 1: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: MWfc4hoMW6m0Hr2+DObR6fHBYzDdnYPXD4kZlGYfpQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:df:1c:ef:00:f5:3f:73:81:67:4d:00:c5:57:99:08:02:73:fa:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: May 29 08:17:06 2024 GMT Not After : Jun 1 12:54:06 2024 GMT Subject: CN=A39242F0E9DE3BE8E96735B3B6FB221A4D2410B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:10:f2:13:32:9f:cb:80:7c:2b:cf:16:48: 82:36:b3:3b:59:1d:ca:e7:f5:1e:ce:02:3a:43:43: 61:81:1b:2f:95:5d:6c:d2:61:21:5c:88:ab:16:9e: 2c:66:d9:da:43:fb:f6:4e:42:8e:94:5f:cf:4f:fb: c9:69:f7:5a:ed:7c:7f:42:fb:a7:be:5f:ef:f4:d8: e3:34:4e:cf:64:fd:95:21:ff:c9:fe:39:86:77:43: d1:c2:11:5f:8a:85:c4:7e:ae:62:d6:7a:dc:41:48: 78:21:14:b9:18:c9:dc:0a:0b:8c:6a:13:4b:dc:c4: ec:74:14:31:7f:df:b6:90:47:97:91:9c:4b:e7:b0: 1b:e2:0e:b9:1c:53:87:21:6d:63:6c:51:e2:f5:89: 4d:2c:32:54:6a:0d:11:0f:49:8e:93:10:b3:bb:58: 84:cf:6b:9e:8d:23:ba:b4:bf:e9:a8:a2:38:4c:54: 17:3d:36:6a:75:90:d8:84:a7:a8:34:59:90:68:f5: 3a:cd:e9:45:f2:9d:82:5e:5a:fa:ee:98:0c:9b:e0: 4e:63:1c:af:5b:7f:22:fb:74:93:cd:db:c6:80:7f: d0:6f:34:cd:08:c1:cb:9a:6f:a2:40:de:fe:2f:20: a4:11:b8:e0:57:7c:3e:98:83:d3:13:b9:e0:9b:58: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:92:42:F0:E9:DE:3B:E8:E9:67:35:B3:B6:FB:22:1A:4D:24:10:B5 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:6f:db:31:d2:48:67:e9:1f:0b:31:d3:05:97:1c:46:e7:f4: 85:49:03:1c:c0:e8:f3:2e:87:73:2b:2c:a3:04:7c:0d:6e:f3: 07:a8:fa:70:1b:31:c2:62:12:8f:67:11:0a:d4:cb:16:75:7c: 8a:e4:a6:4f:3f:2c:77:90:ea:6e:06:d4:f6:a9:9e:3f:b4:01: ef:eb:96:56:3a:12:04:a2:80:42:bf:49:d7:db:26:68:fd:a7: 5e:6f:3d:e5:b3:65:c4:7b:14:07:0b:77:2b:50:b9:df:e1:12: ee:13:60:51:a8:77:f3:20:f7:fd:b6:8e:77:aa:f6:62:63:b5: 37:16:bd:15:74:e4:a1:6c:60:d5:e6:a8:aa:d6:89:ef:16:08: fc:73:d6:98:25:55:1a:4d:49:86:cf:f1:dd:4d:61:49:ae:0d: d4:ea:d9:2b:15:71:c3:02:cf:81:1c:6d:67:21:18:a7:dd:8c: c6:e7:a5:8a:bc:8f:ab:46:43:b0:c0:e9:3e:23:c4:57:76:78: f5:1c:30:93:2d:73:80:aa:a6:59:94:17:60:f0:f9:15:90:39: 8b:7b:74:38:b5:6a:d6:64:52:da:fe:6d:ee:be:30:ec:83:28: 91:4f:b6:3d:9d:68:e4:68:b3:53:38:52:78:63:1d:bb:3d:ff: fe:63:fe:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIN8c7wD1P3OBZ00AxVeZCAJz+uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNDA1MjkwODE3MDZaFw0yNDA2MDExMjU0MDZaMDMxMTAvBgNV BAMTKEEzOTI0MkYwRTlERTNCRThFOTY3MzVCM0I2RkIyMjFBNEQyNDEwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqhDyEzKfy4B8K88WSII2sztZ Hcrn9R7OAjpDQ2GBGy+VXWzSYSFciKsWnixm2dpD+/ZOQo6UX89P+8lp91rtfH9C +6e+X+/02OM0Ts9k/ZUh/8n+OYZ3Q9HCEV+KhcR+rmLWetxBSHghFLkYydwKC4xq E0vcxOx0FDF/37aQR5eRnEvnsBviDrkcU4chbWNsUeL1iU0sMlRqDREPSY6TELO7 WITPa56NI7q0v+moojhMVBc9Nmp1kNiEp6g0WZBo9TrN6UXynYJeWvrumAyb4E5j HK9bfyL7dJPN28aAf9BvNM0Iwcuab6JA3v4vIKQRuOBXfD6Yg9MTueCbWCbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo5JC8OneO+jpZzWztvsiGk0kELUwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFv2zHSSGfpHwsx0wWXHEbn9IVJAxzA6PMu h3MrLKMEfA1u8weo+nAbMcJiEo9nEQrUyxZ1fIrkpk8/LHeQ6m4G1Papnj+0Ae/r llY6EgSigEK/SdfbJmj9p15vPeWzZcR7FAcLdytQud/hEu4TYFGod/Mg9/22jneq 9mJjtTcWvRV05KFsYNXmqKrWie8WCPxz1pglVRpNSYbP8d1NYUmuDdTq2SsVccMC z4EcbWchGKfdjMbnpYq8j6tGQ7DA6T4jxFd2ePUcMJMtc4CqplmUF2Dw+RWQOYt7 dDi1atZkUtr+be6+MOyDKJFPtj2daORos1M4UnhjHbs9//5j/oM= -----END CERTIFICATE-----Generated at Wed May 29 09:15:13 2024 by rpki-client on console-fra.rpki-client.org