$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft File: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft (raw, json) Hash identifier: 3rLm8CRdM+q7QJMIEAq4Jf+C9zFXT4FqsPhTW0mfC4A= Subject key identifier: 11:72:9E:F8:9B:56:CE:6B:90:3A:4F:B1:F1:10:4C:3B:BA:8F:80:DC Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C Certificate issuer: /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Certificate serial: 50B62B469B9BCD7D645A65B24987B0DB0169A38F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft Manifest number: 0431 Signing time: Sat 18 May 2024 08:11:14 +0000 Manifest this update: Sat 18 May 2024 08:06:14 +0000 Manifest next update: Tue 21 May 2024 10:15:14 +0000 Files and hashes: 1: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: Q1RZouAbRj9rNWYYHBYFWZvoZELLl8OZIK8cMQWUDXA=) 2: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl (hash: tDzIR+yX49jz3D037487lbq2LPI/q8soIjMW2O1SiXg=) 3: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: XxMdqqymwnXaFzBio3OOU6QSxneZX5Wc0L1Yuf8qvgo=) 4: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: LSzUMoVvmiAEZu3xuJ4+608FfpEFwxeakvsDBs0f8CQ=) 5: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: 62AOXONPCfPBRxAtpNp6448deYzXkfkQpY21xizhiY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 10:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b6:2b:46:9b:9b:cd:7d:64:5a:65:b2:49:87:b0:db:01:69:a3:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Validity Not Before: May 18 08:06:14 2024 GMT Not After : May 21 10:15:14 2024 GMT Subject: CN=11729EF89B56CE6B903A4FB1F1104C3BBA8F80DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:b8:0a:28:3e:ba:66:6c:a3:09:8f:fe:4f: e2:94:99:6d:72:cc:65:6e:d0:14:26:d1:2c:d3:97: 1f:dc:fe:ca:48:f8:10:0e:dd:c1:d5:8e:12:08:85: 7c:a0:35:31:ec:e4:5c:e2:aa:a2:a6:58:4b:d9:71: 02:e6:37:eb:0d:a4:b3:68:04:12:95:50:10:39:50: a7:d2:66:86:79:3f:90:86:b2:e6:ce:ce:13:eb:f6: e1:6a:4b:2b:9b:cc:e0:ee:38:7a:e9:ab:07:b0:1b: 4d:35:b8:34:55:52:3b:db:42:73:3a:1f:ec:2a:5f: 57:98:d2:f7:05:ba:96:00:b1:5e:b6:0d:85:24:06: 71:76:97:c9:5d:16:b0:a9:b2:99:61:62:83:03:4b: ea:8a:d1:eb:d8:a0:d2:74:aa:3d:92:9c:46:35:8a: 18:8a:ba:f5:05:90:e6:b3:1e:68:f3:d1:8d:a8:96: 6c:ea:07:c7:a3:b6:ed:59:66:b2:c9:b5:a4:71:3d: dc:b1:13:d1:e9:ea:cb:fd:86:a4:96:86:d0:8b:77: 12:85:0d:e4:7c:99:f2:a5:e1:0b:00:ff:ba:84:71: d8:56:5d:c7:09:11:ab:fa:38:b3:36:00:00:ff:0b: 8a:94:35:d1:99:3e:70:ca:99:89:a4:ce:13:fe:c1: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:72:9E:F8:9B:56:CE:6B:90:3A:4F:B1:F1:10:4C:3B:BA:8F:80:DC X509v3 Authority Key Identifier: keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:38:05:45:75:95:9c:08:41:2e:0b:51:8a:81:61:81:fb:df: 4a:47:7e:42:31:dd:81:70:b2:69:51:96:7d:71:ac:97:51:e8: d5:9d:92:8f:a7:bd:b6:04:f9:90:0f:e3:e0:d4:96:10:a0:2c: 07:f8:1a:7d:d2:6e:cd:67:81:69:d6:f0:33:ad:db:1d:22:12: 3b:af:6a:db:60:02:bc:ab:89:c9:95:9c:20:c8:0f:35:ce:d7: 24:b3:99:eb:96:3a:78:6b:50:85:38:97:fe:d4:b4:0d:17:01: 3c:79:1e:2b:b5:9c:f1:ca:f5:c5:90:69:7e:90:f5:1d:1c:55: ca:fe:ad:40:4e:9c:0e:3d:0c:9e:df:21:7e:9f:dc:c3:f9:b0: 14:c1:5d:9d:7f:b8:09:5f:55:8e:de:1c:81:8c:8e:0d:41:7c: 8e:ac:c5:62:fc:63:b7:b5:11:39:46:7e:00:c3:83:31:c1:d5: 62:21:26:6a:6d:7c:90:d1:1a:e0:15:ab:61:16:33:fb:34:e5: 20:ec:69:c2:d7:ed:dd:99:f4:b9:40:c1:8e:bd:bb:73:d6:a5: 20:10:ef:79:a5:63:df:8f:05:23:3c:86:31:53:ec:15:23:2c: 3c:10:0a:74:8d:ae:18:4a:95:02:10:c0:1d:cb:91:bc:50:cd: 20:23:0d:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUULYrRpubzX1kWmWySYew2wFpo48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcw MzEyQUQ1QzAeFw0yNDA1MTgwODA2MTRaFw0yNDA1MjExMDE1MTRaMDMxMTAvBgNV BAMTKDExNzI5RUY4OUI1NkNFNkI5MDNBNEZCMUYxMTA0QzNCQkE4RjgwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOsrgKKD66ZmyjCY/+T+KUmW1y zGVu0BQm0SzTlx/c/spI+BAO3cHVjhIIhXygNTHs5FziqqKmWEvZcQLmN+sNpLNo BBKVUBA5UKfSZoZ5P5CGsubOzhPr9uFqSyubzODuOHrpqwewG001uDRVUjvbQnM6 H+wqX1eY0vcFupYAsV62DYUkBnF2l8ldFrCpsplhYoMDS+qK0evYoNJ0qj2SnEY1 ihiKuvUFkOazHmjz0Y2olmzqB8ejtu1ZZrLJtaRxPdyxE9Hp6sv9hqSWhtCLdxKF DeR8mfKl4QsA/7qEcdhWXccJEav6OLM2AAD/C4qUNdGZPnDKmYmkzhP+wTrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEXKe+JtWzmuQOk+x8RBMO7qPgNwwHwYDVR0j BBgwFoAUzqA6B5iRB/VHorKrqmrU5wMSrVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTNhZTQ4NS1hNjU4LTRjNWMtYWJlMi0xZTdmZDhiMDM4YTAvMC9DRUEwM0EwNzk4 OTEwN0Y1NDdBMkIyQUJBQTZBRDRFNzAzMTJBRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcwMzEy QUQ1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0 RTcwMzEyQUQ1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG04BUV1lZwIQS4LUYqBYYH730pHfkIx3YFw smlRln1xrJdR6NWdko+nvbYE+ZAP4+DUlhCgLAf4Gn3Sbs1ngWnW8DOt2x0iEjuv attgAryricmVnCDIDzXO1ySzmeuWOnhrUIU4l/7UtA0XATx5Hiu1nPHK9cWQaX6Q 9R0cVcr+rUBOnA49DJ7fIX6f3MP5sBTBXZ1/uAlfVY7eHIGMjg1BfI6sxWL8Y7e1 ETlGfgDDgzHB1WIhJmptfJDRGuAVq2EWM/s05SDsacLX7d2Z9LlAwY69u3PWpSAQ 73mlY9+PBSM8hjFT7BUjLDwQCnSNrhhKlQIQwB3LkbxQzSAjDWg= -----END CERTIFICATE-----Generated at Sat May 18 09:08:41 2024 by rpki-client on console-ams.rpki-client.org