$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: xGhtE8HQOEo8b8GmQvUtb/SG4cFXGaF/f2CgQleX8a4= Subject key identifier: DA:04:DE:C5:58:FF:DF:F7:3F:61:AA:93:62:C8:9E:4B:40:BD:A1:13 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 4221E91EB7576268DEFB9196F5E298BE2F7F41C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: 35 Signing time: Wed 20 Nov 2024 15:02:21 +0000 Manifest this update: Wed 20 Nov 2024 14:57:21 +0000 Manifest next update: Sat 23 Nov 2024 18:23:21 +0000 Files and hashes: 1: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: JTPBl2xXnGWTl8ZrptZDVbUzFDyRS3/D40BYMh+0i4U=) 2: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: AOOOH3GVJDKl7nNQSP54ek74qVchOZuE6wAB1Ab2ZEQ=) 3: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: Mr9+qsjEnJb2cnSB3AyArFy2+SWtmXNIU1+g9FxOCh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:21:e9:1e:b7:57:62:68:de:fb:91:96:f5:e2:98:be:2f:7f:41:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Nov 20 14:57:21 2024 GMT Not After : Nov 23 18:23:21 2024 GMT Subject: CN=DA04DEC558FFDFF73F61AA9362C89E4B40BDA113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0e:c5:d4:b9:56:6f:73:78:dc:82:19:84:de: 33:d8:11:ba:95:0a:2d:46:52:7a:59:4b:1e:24:87: 2f:a7:d2:c2:80:ba:91:87:d0:e9:a4:0f:bc:e0:40: a3:f2:83:93:28:e0:28:4a:b4:7b:6d:b7:88:ba:b3: 55:b2:8e:47:00:1c:bb:23:09:3c:d5:41:7b:03:cb: cf:f7:82:ff:61:87:4e:7b:a4:52:93:e7:de:b4:f8: 71:89:e4:6c:0f:93:cf:b7:f7:a7:c3:c4:a8:76:67: 8c:1d:0c:c2:ee:5d:a7:9f:55:b8:07:4e:f4:50:19: 1d:3f:9f:79:3c:a2:fb:e2:9b:97:10:cf:53:64:ff: 90:4e:5b:f3:75:91:25:cc:a3:3a:20:06:eb:76:b9: 75:09:a4:1d:04:b3:00:4e:5c:22:4b:2d:5a:dc:25: b5:b7:68:5f:73:b7:4f:2d:56:34:b4:b8:c5:30:ba: e4:b0:65:8f:fa:4d:09:b5:52:32:b5:46:23:39:f8: 4e:c7:bd:46:ef:43:8a:9b:fd:f8:d1:a0:52:22:3e: 7b:0c:39:24:24:71:52:cc:d0:cd:c0:cc:65:a3:a6: 41:08:dd:90:0b:e2:17:f4:d5:32:16:30:fc:3d:87: b7:5a:4f:96:c5:e9:d4:ba:22:ac:98:de:78:89:7d: 8b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:04:DE:C5:58:FF:DF:F7:3F:61:AA:93:62:C8:9E:4B:40:BD:A1:13 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:96:d6:9c:74:c5:5b:fb:be:d5:33:87:5d:47:09:71:59:8b: 24:f2:8d:93:a6:4b:95:e1:40:1a:34:b4:c5:38:ad:57:7c:64: 3f:e9:75:64:8b:38:7b:21:b2:54:1f:1c:dc:89:13:a5:07:87: 6a:38:6b:e0:ad:65:35:7a:2b:f5:1b:1b:c5:05:19:18:d3:55: 3a:b9:64:12:11:62:3f:d6:43:37:0f:e2:51:ae:1d:62:94:9e: e9:85:97:0a:10:36:4b:bb:e0:4e:93:40:ac:45:0b:cb:01:e7: f0:d6:37:a4:91:ad:52:d4:93:50:0d:4a:02:ad:7a:90:e6:3e: 4e:cc:99:a5:89:a2:25:2f:46:c3:41:50:26:d4:29:cc:f0:49: f9:80:15:43:fb:18:e3:48:6a:b5:d7:f8:df:8d:84:0c:6c:c9: ba:e8:be:51:b5:fc:23:3e:60:0d:bf:16:fb:89:19:1e:a5:63: 92:62:1b:80:30:d8:a0:54:5a:6f:99:fa:a9:a6:c8:31:a1:33: ac:d6:85:5a:c6:38:4a:47:28:9f:9c:c5:be:14:6d:5b:4a:7c: cb:ba:02:2c:ae:a9:21:71:8e:fb:3d:a4:0a:19:b3:be:c0:43: 34:1e:5d:12:e8:1c:de:f8:6b:b9:2c:7f:63:07:88:e0:a6:f6: cb:c3:6b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiHpHrdXYmje+5GW9eKYvi9/QcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNDExMjAxNDU3MjFaFw0yNDExMjMxODIzMjFaMDMxMTAvBgNV BAMTKERBMDRERUM1NThGRkRGRjczRjYxQUE5MzYyQzg5RTRCNDBCREExMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxDsXUuVZvc3jcghmE3jPYEbqV Ci1GUnpZSx4khy+n0sKAupGH0OmkD7zgQKPyg5Mo4ChKtHttt4i6s1WyjkcAHLsj CTzVQXsDy8/3gv9hh057pFKT5960+HGJ5GwPk8+396fDxKh2Z4wdDMLuXaefVbgH TvRQGR0/n3k8ovvim5cQz1Nk/5BOW/N1kSXMozogBut2uXUJpB0EswBOXCJLLVrc JbW3aF9zt08tVjS0uMUwuuSwZY/6TQm1UjK1RiM5+E7HvUbvQ4qb/fjRoFIiPnsM OSQkcVLM0M3AzGWjpkEI3ZAL4hf01TIWMPw9h7daT5bF6dS6IqyY3niJfYuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2gTexVj/3/c/YaqTYsieS0C9oRMwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmW1px0xVv7vtUzh11HCXFZiyTyjZOmS5Xh QBo0tMU4rVd8ZD/pdWSLOHshslQfHNyJE6UHh2o4a+CtZTV6K/UbG8UFGRjTVTq5 ZBIRYj/WQzcP4lGuHWKUnumFlwoQNku74E6TQKxFC8sB5/DWN6SRrVLUk1ANSgKt epDmPk7MmaWJoiUvRsNBUCbUKczwSfmAFUP7GONIarXX+N+NhAxsybrovlG1/CM+ YA2/FvuJGR6lY5JiG4Aw2KBUWm+Z+qmmyDGhM6zWhVrGOEpHKJ+cxb4UbVtKfMu6 AiyuqSFxjvs9pAoZs77AQzQeXRLoHN74a7ksf2MHiOCm9svDa8A= -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org