$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: KTmp6vsjAU848zkZ9LAHFMa/7bWb36DXNik57vxoXDw= Subject key identifier: BB:03:F3:DE:8A:E3:94:4F:06:CA:03:77:0A:05:B4:BD:B2:01:87:07 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 1F8720D8A66C77F031AFCA99601E423423679F17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 66 Signing time: Thu 21 Nov 2024 02:52:23 +0000 Manifest this update: Thu 21 Nov 2024 02:47:23 +0000 Manifest next update: Sun 24 Nov 2024 12:31:23 +0000 Files and hashes: 1: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: 4TbCkWucxzFCMavXqUnMRbXZtl4aW0+LtYARbiI9J+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:87:20:d8:a6:6c:77:f0:31:af:ca:99:60:1e:42:34:23:67:9f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Nov 21 02:47:23 2024 GMT Not After : Nov 24 12:31:23 2024 GMT Subject: CN=BB03F3DE8AE3944F06CA03770A05B4BDB2018707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:d3:3e:bc:2a:6f:46:1a:1f:27:ac:4d:be: 3f:2c:ca:93:08:c2:59:13:73:64:d4:2e:e3:bd:21: 13:59:d5:20:1d:e3:f5:a1:1b:b5:be:58:19:27:e5: 03:65:03:5e:18:e5:1f:64:f8:d3:82:8b:88:31:24: 4b:83:e3:6b:08:36:0c:96:06:49:4e:7b:e8:a2:43: 3d:55:10:ed:c1:cb:d0:3e:16:bb:10:61:8e:d3:42: 09:ee:6c:c3:46:9c:f0:7b:ff:f2:1d:ab:a7:42:f4: 01:a8:61:fc:dd:74:c1:66:26:e0:c9:37:bb:c2:ba: c3:1d:13:56:11:03:3c:e0:a7:18:36:6c:a5:df:f6: f6:95:7a:da:39:25:6d:55:6a:29:91:83:43:a1:eb: b9:3e:9f:f9:89:eb:fa:6d:06:9e:4e:2c:64:ab:36: 1b:0b:e9:4c:27:29:26:ce:9f:6c:af:b4:3e:9e:b2: b6:51:f1:b2:b6:97:e9:4a:55:13:94:20:5b:f5:f3: 3f:4b:41:0d:d1:e2:77:e0:29:a1:da:40:4b:20:dd: 4e:51:8d:86:ea:27:e3:63:d6:69:42:ac:df:c5:e9: bf:f2:9e:18:12:07:07:20:c5:42:36:27:25:2c:f7: 0d:37:a9:90:92:c9:0d:bb:76:fa:5e:5f:84:b8:84: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:03:F3:DE:8A:E3:94:4F:06:CA:03:77:0A:05:B4:BD:B2:01:87:07 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:20:d3:02:bd:1d:d8:48:40:cb:f9:6a:8d:39:c8:fd:a5:9c: f0:48:67:92:0e:5f:9c:d5:ad:0f:a1:62:04:f1:2d:14:d5:42: a2:13:25:89:23:a6:73:b3:3c:e0:6c:a1:da:81:db:8a:f4:ab: b1:27:9d:3f:72:7d:18:ed:c5:52:6e:24:b8:6f:b3:4f:58:db: 26:00:34:d6:e1:38:13:5b:a5:48:f2:52:37:e9:b1:74:4e:91: 79:31:bc:66:02:99:86:60:40:84:20:fc:88:49:10:93:6c:ae: ee:07:d0:8c:e6:a5:e3:cb:43:a6:c7:04:47:74:99:c8:10:0b: dc:f1:f4:63:87:59:52:e1:82:81:5f:2e:b7:26:dd:67:5f:ce: 44:f0:aa:fd:16:e4:bb:b2:2d:84:70:08:c6:39:7c:74:25:70: 0b:c0:8c:57:cb:89:c2:07:2d:a2:4f:73:4e:23:26:f6:7e:ce: 62:99:c7:fa:7a:5d:08:1a:79:1c:54:0d:e5:cc:b4:a3:a5:e7: f2:f0:d7:ac:61:a8:7b:33:7e:a3:12:75:93:3e:21:21:b2:0a: 01:93:cc:3d:dd:64:5d:cf:ed:46:7b:84:53:65:ef:2e:ae:c3: 42:58:06:bd:00:44:3d:0d:24:02:17:43:07:c5:ae:2c:e7:0e: 4a:3e:12:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4cg2KZsd/Axr8qZYB5CNCNnnxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNDExMjEwMjQ3MjNaFw0yNDExMjQxMjMxMjNaMDMxMTAvBgNV BAMTKEJCMDNGM0RFOEFFMzk0NEYwNkNBMDM3NzBBMDVCNEJEQjIwMTg3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWdM+vCpvRhofJ6xNvj8sypMI wlkTc2TULuO9IRNZ1SAd4/WhG7W+WBkn5QNlA14Y5R9k+NOCi4gxJEuD42sINgyW BklOe+iiQz1VEO3By9A+FrsQYY7TQgnubMNGnPB7//Idq6dC9AGoYfzddMFmJuDJ N7vCusMdE1YRAzzgpxg2bKXf9vaVeto5JW1VaimRg0Oh67k+n/mJ6/ptBp5OLGSr NhsL6UwnKSbOn2yvtD6esrZR8bK2l+lKVROUIFv18z9LQQ3R4nfgKaHaQEsg3U5R jYbqJ+Nj1mlCrN/F6b/ynhgSBwcgxUI2JyUs9w03qZCSyQ27dvpeX4S4hLLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwPz3orjlE8GygN3CgW0vbIBhwcwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0g0wK9HdhIQMv5ao05yP2lnPBIZ5IOX5zV rQ+hYgTxLRTVQqITJYkjpnOzPOBsodqB24r0q7EnnT9yfRjtxVJuJLhvs09Y2yYA NNbhOBNbpUjyUjfpsXROkXkxvGYCmYZgQIQg/IhJEJNsru4H0IzmpePLQ6bHBEd0 mcgQC9zx9GOHWVLhgoFfLrcm3WdfzkTwqv0W5LuyLYRwCMY5fHQlcAvAjFfLicIH LaJPc04jJvZ+zmKZx/p6XQgaeRxUDeXMtKOl5/Lw16xhqHszfqMSdZM+ISGyCgGT zD3dZF3P7UZ7hFNl7y6uw0JYBr0ARD0NJAIXQwfFriznDko+Eu0= -----END CERTIFICATE-----Generated at Thu Nov 21 05:34:31 2024 by rpki-client on console-ams.rpki-client.org