$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: WLi6LHWGVF9xQp8sjWfoXpoXy7U7aubCAU4atcOJGlQ= Subject key identifier: B0:CF:25:F6:91:DF:F7:FE:16:45:42:E3:E2:60:89:72:B4:FC:A4:01 Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 7ED5F254C12F3F9F1C3BD8ED2A22A1B045A6A8EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 0485 Signing time: Wed 20 Nov 2024 12:41:06 +0000 Manifest this update: Wed 20 Nov 2024 12:36:06 +0000 Manifest next update: Sat 23 Nov 2024 23:30:06 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: 39jefImKgJU/LxRCCoDfLN96ifsbffQHndD7ffWdf4g=) 2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: kRLffRX8UpRiaE+rbFarBWLiYO9L/Hk+Vb4kVR4qvII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d5:f2:54:c1:2f:3f:9f:1c:3b:d8:ed:2a:22:a1:b0:45:a6:a8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Nov 20 12:36:06 2024 GMT Not After : Nov 23 23:30:06 2024 GMT Subject: CN=B0CF25F691DFF7FE164542E3E2608972B4FCA401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:d0:a3:4a:be:52:ce:c4:1c:ad:f4:90:65: fb:fd:51:90:88:3d:ae:4f:da:bc:fb:e2:7d:ba:8f: 3e:31:a4:33:3b:e3:9d:94:b5:8a:2a:cb:d0:30:7f: ff:fa:cd:1a:75:d6:d3:b6:17:c5:d7:dc:c8:57:fd: aa:8d:aa:b1:8c:09:1a:4d:4c:e0:75:c0:06:74:4c: 45:23:b5:89:e8:02:c5:a4:f5:1a:06:d2:31:c1:df: 2e:41:99:00:ca:0f:f8:c9:b8:a4:0d:9c:b8:1d:c0: 00:a9:60:e6:1d:91:f8:a9:e2:07:92:de:2b:81:f0: 15:62:9a:6d:d1:8c:b3:d9:ab:d8:8c:0d:81:64:e2: 69:be:94:e0:ea:23:3a:7c:5c:41:c4:fd:de:29:d2: c7:35:49:c7:82:c8:20:8c:06:17:bb:f4:d7:df:f9: 95:fd:04:c0:71:e0:27:0f:ee:86:d7:2f:70:1c:e0: dd:03:09:35:69:43:4f:79:7f:f8:26:e3:7d:a9:29: ff:ee:eb:9d:12:c0:85:06:1b:70:4e:05:91:85:ac: b6:93:30:4a:55:ac:d2:d3:ae:34:8c:8c:be:9d:61: 31:07:b9:91:56:b4:49:6e:e2:25:f3:a7:ff:42:49: 92:a1:bd:5d:a4:48:35:22:75:05:33:f8:67:e0:27: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CF:25:F6:91:DF:F7:FE:16:45:42:E3:E2:60:89:72:B4:FC:A4:01 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:52:c2:dd:83:ef:21:05:bb:cd:97:42:65:5c:1e:5b:78:8d: 77:a6:4b:24:e0:87:d9:d9:43:6f:e2:64:b3:0e:31:f8:00:89: cf:ae:3d:e8:19:8f:9e:a3:22:05:87:db:6d:70:31:b3:46:55: f1:35:d0:11:7e:64:5e:2f:f3:04:cb:aa:c0:38:e5:5f:19:a9: 88:f4:a5:e5:ca:b3:5f:12:4e:9e:64:c9:f9:14:35:a6:65:81: dc:cc:9b:85:7f:95:f4:e1:c1:05:e6:e5:a2:fd:27:4d:31:d7: 2b:75:e0:43:44:0a:84:6c:b9:a6:39:40:b1:f4:4a:b5:ea:5b: d9:20:bf:9b:79:13:e4:f5:01:8b:01:27:ec:4c:56:e6:d9:86: aa:10:4b:39:61:29:bd:75:a8:5e:61:74:6a:37:13:ad:43:f0: 81:f5:6e:4a:bc:67:a4:16:b1:b2:ff:dc:be:bd:53:d1:6b:7e: 4c:2b:78:c3:a0:a3:90:5d:29:99:8b:5a:f7:83:36:38:3f:56: 45:07:32:0f:e5:7f:a5:80:c4:40:40:6d:08:69:18:82:24:79: 21:5b:f6:67:6e:a6:38:df:e4:ef:29:00:6b:52:c4:e5:56:ab: ff:e3:01:41:88:f1:86:d1:b2:19:37:07:67:68:9c:c7:65:e8: dc:d6:0f:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftXyVMEvP58cO9jtKiKhsEWmqO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNDExMjAxMjM2MDZaFw0yNDExMjMyMzMwMDZaMDMxMTAvBgNV BAMTKEIwQ0YyNUY2OTFERkY3RkUxNjQ1NDJFM0UyNjA4OTcyQjRGQ0E0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfNNCjSr5SzsQcrfSQZfv9UZCI Pa5P2rz74n26jz4xpDM7452UtYoqy9Awf//6zRp11tO2F8XX3MhX/aqNqrGMCRpN TOB1wAZ0TEUjtYnoAsWk9RoG0jHB3y5BmQDKD/jJuKQNnLgdwACpYOYdkfip4geS 3iuB8BVimm3RjLPZq9iMDYFk4mm+lODqIzp8XEHE/d4p0sc1SceCyCCMBhe79Nff +ZX9BMBx4CcP7obXL3Ac4N0DCTVpQ095f/gm432pKf/u650SwIUGG3BOBZGFrLaT MEpVrNLTrjSMjL6dYTEHuZFWtElu4iXzp/9CSZKhvV2kSDUidQUz+GfgJyRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsM8l9pHf9/4WRULj4mCJcrT8pAEwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBSwt2D7yEFu82XQmVcHlt4jXemSyTgh9nZ Q2/iZLMOMfgAic+uPegZj56jIgWH221wMbNGVfE10BF+ZF4v8wTLqsA45V8ZqYj0 peXKs18STp5kyfkUNaZlgdzMm4V/lfThwQXm5aL9J00x1yt14ENECoRsuaY5QLH0 SrXqW9kgv5t5E+T1AYsBJ+xMVubZhqoQSzlhKb11qF5hdGo3E61D8IH1bkq8Z6QW sbL/3L69U9FrfkwreMOgo5BdKZmLWveDNjg/VkUHMg/lf6WAxEBAbQhpGIIkeSFb 9mdupjjf5O8pAGtSxOVWq//jAUGI8YbRshk3B2donMdl6NzWDyE= -----END CERTIFICATE-----Generated at Wed Nov 20 14:21:27 2024 by rpki-client on console-fra.rpki-client.org