$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: +iG/CnvGMfDyURnXkBTav6OfKj8Pu1DUUQbbfByP3V0= Subject key identifier: 54:A8:48:3A:49:C0:66:10:78:74:D6:86:3A:F4:51:2A:50:BF:D1:B2 Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 4FFC0EA828CA6DB30ED187B39E1C98F5354E0919 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 0430 Signing time: Fri 17 May 2024 12:50:55 +0000 Manifest this update: Fri 17 May 2024 12:45:55 +0000 Manifest next update: Mon 20 May 2024 16:53:55 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: sNVSyyId+pKhRU7SCXz++K/1q6I0WmlzRqnk37T/knM=) 2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: lw7B/sGyLgDptvIDVt3JjONg+82UO5dZHkCCtMyVbOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 16:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fc:0e:a8:28:ca:6d:b3:0e:d1:87:b3:9e:1c:98:f5:35:4e:09:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: May 17 12:45:55 2024 GMT Not After : May 20 16:53:55 2024 GMT Subject: CN=54A8483A49C066107874D6863AF4512A50BFD1B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:b3:6f:41:bb:76:ad:72:50:c5:11:3b:1f: 9f:87:d9:da:60:64:97:f2:c9:89:98:f7:a7:89:42: be:07:cc:c0:ad:87:78:b2:66:6b:d6:75:ec:21:ba: 96:22:11:c4:94:c2:2f:6c:39:25:8e:f7:dc:8a:d3: 69:ab:60:bc:26:23:41:27:d5:79:39:b6:f3:8e:aa: 21:00:71:1b:46:5c:a4:9f:2c:e5:62:b2:72:4a:bc: d7:5e:e0:13:14:c4:29:9b:a5:1b:ce:a9:c1:e1:b9: c0:dc:87:6d:28:c6:12:52:cb:4c:89:13:29:ee:11: 32:ce:96:94:e8:73:9d:13:fc:f1:fa:5c:63:e1:ae: 4d:d5:60:e1:33:b7:f2:e9:39:46:bb:19:f6:60:0d: 9a:6b:9f:76:9d:25:4c:59:e2:b5:ae:c6:b3:68:92: f7:f2:93:f9:6f:f7:8e:7a:5b:ac:70:93:ad:dd:a3: 14:ae:ae:d8:1a:8e:95:4c:48:1d:a5:6a:ae:48:e5: 42:23:68:d3:1d:6d:91:59:ed:ab:a6:92:b2:04:8b: 48:3f:91:b7:d8:60:1c:13:d5:da:ce:f4:59:f1:86: 4d:02:9f:9a:92:83:40:31:d8:e7:96:fa:d5:ca:11: 8e:9b:e3:b8:ca:7d:95:e2:32:83:6b:93:9c:20:1f: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A8:48:3A:49:C0:66:10:78:74:D6:86:3A:F4:51:2A:50:BF:D1:B2 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a5:1b:59:6e:52:d6:ba:11:17:2c:8f:b7:41:16:eb:0b:ed: 53:87:71:8f:51:26:0b:a1:f7:e0:5b:56:c6:f5:04:e4:3d:82: 14:9a:e5:c3:34:55:5c:84:dc:61:e6:6c:67:f4:08:27:d0:1f: fa:24:5e:f6:06:cd:5d:8a:e5:ec:9a:25:cf:39:d3:04:ba:90: 37:95:52:7d:71:77:ed:4d:09:5c:9e:e0:ce:c7:fd:37:b9:a2: 56:6b:ad:7c:d9:58:5a:02:6f:d8:42:69:9d:f2:3b:e1:27:12: 1a:56:1b:16:29:70:aa:a6:72:c8:b7:2e:e3:da:9d:71:15:f6: 1c:c6:fc:3c:99:90:6d:b6:ea:8e:be:85:59:d5:29:87:b9:78: e7:27:09:00:b6:79:51:28:07:f1:49:27:85:01:47:35:11:50: 58:ff:8d:1f:6f:73:6a:09:11:b5:dc:e1:39:ed:0a:4d:57:70: 29:db:bd:f0:fd:44:2f:46:8a:43:9c:31:7a:48:11:49:41:78: 38:25:e0:3b:9a:d1:67:0e:aa:24:bc:38:06:99:50:43:e0:63: b9:63:da:bc:6f:8a:5b:09:63:7a:b2:ca:0c:5f:13:de:1e:fb: 61:fa:7d:e0:32:8a:65:ea:48:b5:20:b2:e5:6d:3a:b3:ca:37: 2a:48:2c:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/wOqCjKbbMO0YeznhyY9TVOCRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNDA1MTcxMjQ1NTVaFw0yNDA1MjAxNjUzNTVaMDMxMTAvBgNV BAMTKDU0QTg0ODNBNDlDMDY2MTA3ODc0RDY4NjNBRjQ1MTJBNTBCRkQxQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RbNvQbt2rXJQxRE7H5+H2dpg ZJfyyYmY96eJQr4HzMCth3iyZmvWdewhupYiEcSUwi9sOSWO99yK02mrYLwmI0En 1Xk5tvOOqiEAcRtGXKSfLOVisnJKvNde4BMUxCmbpRvOqcHhucDch20oxhJSy0yJ EynuETLOlpToc50T/PH6XGPhrk3VYOEzt/LpOUa7GfZgDZprn3adJUxZ4rWuxrNo kvfyk/lv9456W6xwk63doxSurtgajpVMSB2laq5I5UIjaNMdbZFZ7aumkrIEi0g/ kbfYYBwT1drO9Fnxhk0Cn5qSg0Ax2OeW+tXKEY6b47jKfZXiMoNrk5wgH4mfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVKhIOknAZhB4dNaGOvRRKlC/0bIwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEulG1luUta6ERcsj7dBFusL7VOHcY9RJguh 9+BbVsb1BOQ9ghSa5cM0VVyE3GHmbGf0CCfQH/okXvYGzV2K5eyaJc850wS6kDeV Un1xd+1NCVye4M7H/Te5olZrrXzZWFoCb9hCaZ3yO+EnEhpWGxYpcKqmcsi3LuPa nXEV9hzG/DyZkG226o6+hVnVKYe5eOcnCQC2eVEoB/FJJ4UBRzURUFj/jR9vc2oJ EbXc4TntCk1XcCnbvfD9RC9GikOcMXpIEUlBeDgl4Dua0WcOqiS8OAaZUEPgY7lj 2rxvilsJY3qyygxfE94e+2H6feAyimXqSLUgsuVtOrPKNypILFc= -----END CERTIFICATE-----Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org