$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft File: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft (raw, json) Hash identifier: ZrA9WCrNR5O7i+OvVcP8EjNHkxaxb4OvBasoL063/g4= Subject key identifier: 91:94:73:34:D7:4F:DB:D1:95:E8:AB:16:1D:99:88:B3:85:5B:61:FF Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C Certificate issuer: /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Certificate serial: 79E7F1FD6124E65635CE4724DD2F80B076351AAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft Manifest number: 0484 Signing time: Thu 21 Nov 2024 22:41:30 +0000 Manifest this update: Thu 21 Nov 2024 22:36:30 +0000 Manifest next update: Mon 25 Nov 2024 08:38:30 +0000 Files and hashes: 1: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: 2l9WJirwQZDRv/TSoObPb5SI7hgV3kRaxDMplLJM4ms=) 2: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: K6IPwg5vPS17ImLidsJLbGqSOx5ucj2gTrepRe+aavU=) 3: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl (hash: 0E91ct9jVo1p4JcfkB/4G9/fguJMHxL+ZLb1U0oZrHk=) 4: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: uwduCvzKqm6swEghv3Zot5Za1ysLZxOy6ByFYlQKNCs=) 5: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: 2RQ2kX5zDajb4kTPcsNyRUqORecvlGLhw0ztmJt9qpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e7:f1:fd:61:24:e6:56:35:ce:47:24:dd:2f:80:b0:76:35:1a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Validity Not Before: Nov 21 22:36:30 2024 GMT Not After : Nov 25 08:38:30 2024 GMT Subject: CN=91947334D74FDBD195E8AB161D9988B3855B61FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:37:7e:de:dc:9d:00:9d:74:78:a5:a4:a4: 33:f0:ab:ca:bf:90:e7:7f:bb:7b:87:3f:74:4c:62: 95:12:4d:4e:54:11:46:ab:aa:b8:9c:6b:8f:4e:14: 72:e2:85:cc:bb:0f:14:ae:61:d6:76:b4:ce:fb:35: 4f:6b:d7:25:43:4d:45:b4:16:44:24:2f:98:53:df: 8b:ff:fe:de:5f:52:6c:86:93:06:6e:51:9b:a9:1c: b3:ea:bd:5b:60:0f:ff:f0:9a:74:91:9c:89:26:3e: 7d:e9:1f:85:67:43:81:92:49:2a:bc:0b:be:e8:7b: 8e:66:d8:a2:3c:ef:ea:64:c1:41:3e:29:ab:be:ef: 52:b3:c8:f5:6d:29:f5:b0:db:08:5d:b7:25:5b:da: 0a:26:ee:68:4e:31:a1:b5:05:c6:3d:3f:30:a1:3d: 53:97:1e:7a:aa:0b:69:24:81:3a:a7:61:75:15:a1: a7:79:36:e6:4d:fa:99:9c:2c:da:f4:bd:78:d1:27: ef:ed:d1:7b:b5:86:1f:f3:c1:bb:38:73:d7:61:b7: ff:f8:a0:a8:c1:77:d1:3a:fc:43:47:26:57:ca:0e: 95:5e:d1:16:a0:99:2f:f2:cd:d6:03:b3:76:38:04: 04:57:ab:52:1b:79:9a:65:cd:c9:56:2b:78:f3:1f: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:94:73:34:D7:4F:DB:D1:95:E8:AB:16:1D:99:88:B3:85:5B:61:FF X509v3 Authority Key Identifier: keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:91:19:b6:3a:fe:5e:3a:20:f5:10:1a:45:80:3f:c7:38:13: 80:fb:fa:5f:12:4b:61:c5:07:bd:05:76:02:61:6f:ba:f2:38: c6:15:e1:36:9f:28:33:da:0f:26:67:e5:94:c0:79:4f:d8:85: e3:3e:a5:72:8a:8c:da:2a:cd:f0:77:5d:50:47:ac:80:22:39: db:16:44:6e:fa:5b:25:3d:d1:49:c7:b5:4c:16:07:6e:29:49: 31:91:5c:52:24:b1:8e:52:51:42:1c:8d:3a:06:b1:d5:e6:25: 45:63:22:07:49:be:bb:44:13:2b:63:10:6d:b3:60:6b:6f:be: 06:c9:c4:45:df:9e:c7:79:36:b0:fa:6d:33:f6:30:90:62:67: 14:2e:ee:09:04:90:c1:c2:fc:f4:50:77:16:e4:8b:73:af:89: aa:ff:ec:4c:0f:d8:92:4f:91:21:f2:73:7c:44:0d:30:13:2d: bd:31:44:24:94:24:a3:8f:6e:53:86:43:82:3e:96:79:46:bd: 1a:f6:1b:96:9d:3a:6f:08:49:26:37:f5:39:a0:bd:d1:fd:5f: 89:ad:66:39:02:99:7f:a6:76:5f:56:2d:ab:ca:c2:27:c5:f2: 4a:7b:33:1f:c7:2e:ba:8a:6c:57:f6:76:cc:08:68:22:46:6a: bd:57:1e:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeefx/WEk5lY1zkck3S+AsHY1Gq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcw MzEyQUQ1QzAeFw0yNDExMjEyMjM2MzBaFw0yNDExMjUwODM4MzBaMDMxMTAvBgNV BAMTKDkxOTQ3MzM0RDc0RkRCRDE5NUU4QUIxNjFEOTk4OEIzODU1QjYxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTDd+3tydAJ10eKWkpDPwq8q/ kOd/u3uHP3RMYpUSTU5UEUarqrica49OFHLihcy7DxSuYdZ2tM77NU9r1yVDTUW0 FkQkL5hT34v//t5fUmyGkwZuUZupHLPqvVtgD//wmnSRnIkmPn3pH4VnQ4GSSSq8 C77oe45m2KI87+pkwUE+Kau+71KzyPVtKfWw2whdtyVb2gom7mhOMaG1BcY9PzCh PVOXHnqqC2kkgTqnYXUVoad5NuZN+pmcLNr0vXjRJ+/t0Xu1hh/zwbs4c9dht//4 oKjBd9E6/ENHJlfKDpVe0RagmS/yzdYDs3Y4BARXq1IbeZplzclWK3jzHzS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkZRzNNdP29GV6KsWHZmIs4VbYf8wHwYDVR0j BBgwFoAUzqA6B5iRB/VHorKrqmrU5wMSrVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTNhZTQ4NS1hNjU4LTRjNWMtYWJlMi0xZTdmZDhiMDM4YTAvMC9DRUEwM0EwNzk4 OTEwN0Y1NDdBMkIyQUJBQTZBRDRFNzAzMTJBRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcwMzEy QUQ1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0 RTcwMzEyQUQ1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+RGbY6/l46IPUQGkWAP8c4E4D7+l8SS2HF B70FdgJhb7ryOMYV4TafKDPaDyZn5ZTAeU/YheM+pXKKjNoqzfB3XVBHrIAiOdsW RG76WyU90UnHtUwWB24pSTGRXFIksY5SUUIcjToGsdXmJUVjIgdJvrtEEytjEG2z YGtvvgbJxEXfnsd5NrD6bTP2MJBiZxQu7gkEkMHC/PRQdxbki3Oviar/7EwP2JJP kSHyc3xEDTATLb0xRCSUJKOPblOGQ4I+lnlGvRr2G5adOm8ISSY39TmgvdH9X4mt ZjkCmX+mdl9WLavKwifF8kp7Mx/HLrqKbFf2dswIaCJGar1XHuY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org