$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: XKGPQt82pF+351LbYEwC8oGIGNWKxOJ5v9cFCVqOv6A= Subject key identifier: 29:4C:D7:33:F6:8B:19:68:A0:20:C5:DC:B8:CC:6C:0B:3E:EA:03:73 Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 064E9DBB4EDB83520937272B59A8D264DCBFBB11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 012D Signing time: Thu 21 Nov 2024 11:12:14 +0000 Manifest this update: Thu 21 Nov 2024 11:07:14 +0000 Manifest next update: Sun 24 Nov 2024 13:59:14 +0000 Files and hashes: 1: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: gdC4QPXGhNvicJ/nkXxmmBnktVdL2N26lWU3blR93Ew=) 2: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: oLa9cCei9pKiGWr8BFNqh/B/YQHv8J1MAtYIK4feuIY=) 3: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: hx/ewGlEs42WwazUkR19IGaEFBeT7zadPeBTmHRYrnU=) 4: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: PyYiwhlFLYwpVeZMVUP48PPdFiaKcZ+8zWirbz0F2cA=) 5: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: kMTgFhm7y8+vUOnTIGuYD/xnygQP3IJ+v4/uEIrSv/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4e:9d:bb:4e:db:83:52:09:37:27:2b:59:a8:d2:64:dc:bf:bb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Nov 21 11:07:14 2024 GMT Not After : Nov 24 13:59:14 2024 GMT Subject: CN=294CD733F68B1968A020C5DCB8CC6C0B3EEA0373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:45:f0:d0:67:40:03:6e:56:14:fc:ef:54: 69:9a:b1:23:35:a2:85:ce:7c:91:89:c8:e1:42:bd: 1f:be:67:c6:4f:13:72:bb:58:84:ce:d3:ba:b0:ee: 38:c6:60:72:4d:20:bb:45:1a:ac:aa:75:f9:56:aa: 9c:6f:ce:05:98:32:db:a0:57:47:1e:01:53:2d:f2: 86:dd:d5:2f:f2:a7:f5:db:ff:53:f5:31:68:99:91: e0:bf:91:1f:54:c8:73:86:01:89:42:b9:92:5a:b9: 21:b2:f9:f7:fa:8a:55:e2:48:55:af:21:5a:08:f2: 48:d5:5e:5b:59:ef:3c:55:7d:ee:93:b5:cd:a3:c3: 7a:9e:ad:05:54:f0:95:2b:fe:9c:ec:a6:7e:62:38: c5:8c:d4:66:9a:e4:e3:8d:63:09:60:c9:57:92:23: b9:dd:f2:d2:94:f1:42:1f:80:51:b8:6b:06:13:9f: 2f:20:b0:5d:5c:d5:5d:df:b1:11:f4:0a:0c:bf:91: 51:39:76:ab:76:f2:d2:18:53:4e:c0:8f:c9:2f:ce: 68:0f:34:a5:b7:f4:7c:44:a3:ae:b2:ec:1f:31:30: e3:8f:95:4b:2f:af:65:45:e2:b5:06:59:ba:c4:e6: 6a:58:72:93:ad:09:6f:6e:6c:71:a1:ed:cb:42:8b: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4C:D7:33:F6:8B:19:68:A0:20:C5:DC:B8:CC:6C:0B:3E:EA:03:73 X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f8:89:d8:58:43:c5:68:e5:17:a3:be:23:b4:d5:82:aa:01: 84:a0:22:39:10:94:2b:c4:88:b3:f6:0f:f6:d4:e7:1f:b8:62: 2d:ee:ec:4f:af:92:58:92:34:c4:76:01:71:b7:c3:0d:f6:26: f2:7f:74:4c:12:eb:16:f7:6d:b9:41:cc:00:ec:98:83:23:bf: e5:7b:72:fd:10:d6:48:f5:c2:d5:c7:1e:64:5b:35:97:6a:1a: 4a:3e:3f:17:31:a5:f8:7c:f1:b6:4b:99:ee:38:fb:d6:23:80: a1:df:c6:91:fb:62:c0:d9:0a:49:42:f5:33:17:80:cb:50:03: 41:f1:c4:3d:21:e9:69:dd:66:a5:85:1b:15:75:35:d2:25:e0: 71:c0:54:00:8b:88:6f:d5:a4:62:56:9a:94:88:15:d3:c9:04: 4e:f5:2d:47:fa:d6:f5:b5:e4:8f:02:d7:7e:8e:a7:c9:0f:db: 4e:ae:e8:3f:fc:60:0c:06:39:49:d0:cf:8b:ad:8a:a1:d5:97: df:e9:d2:21:84:19:0e:aa:47:5b:43:3a:db:17:40:a8:48:0a: 5b:99:40:33:f0:dc:40:e0:1f:d8:c3:73:3e:15:0e:78:c9:e6: a0:fb:54:dc:8a:b9:22:d4:fa:97:3a:a7:c1:e9:7b:9b:1c:cc: d2:81:fc:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBk6du07bg1IJNycrWajSZNy/uxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNDExMjExMTA3MTRaFw0yNDExMjQxMzU5MTRaMDMxMTAvBgNV BAMTKDI5NENENzMzRjY4QjE5NjhBMDIwQzVEQ0I4Q0M2QzBCM0VFQTAzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JUXw0GdAA25WFPzvVGmasSM1 ooXOfJGJyOFCvR++Z8ZPE3K7WITO07qw7jjGYHJNILtFGqyqdflWqpxvzgWYMtug V0ceAVMt8obd1S/yp/Xb/1P1MWiZkeC/kR9UyHOGAYlCuZJauSGy+ff6ilXiSFWv IVoI8kjVXltZ7zxVfe6Ttc2jw3qerQVU8JUr/pzspn5iOMWM1Gaa5OONYwlgyVeS I7nd8tKU8UIfgFG4awYTny8gsF1c1V3fsRH0Cgy/kVE5dqt28tIYU07Aj8kvzmgP NKW39HxEo66y7B8xMOOPlUsvr2VF4rUGWbrE5mpYcpOtCW9ubHGh7ctCi5QBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKUzXM/aLGWigIMXcuMxsCz7qA3MwHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT4idhYQ8Vo5RejviO01YKqAYSgIjkQlCvE iLP2D/bU5x+4Yi3u7E+vkliSNMR2AXG3ww32JvJ/dEwS6xb3bblBzADsmIMjv+V7 cv0Q1kj1wtXHHmRbNZdqGko+Pxcxpfh88bZLme44+9YjgKHfxpH7YsDZCklC9TMX gMtQA0HxxD0h6WndZqWFGxV1NdIl4HHAVACLiG/VpGJWmpSIFdPJBE71LUf61vW1 5I8C136Op8kP206u6D/8YAwGOUnQz4utiqHVl9/p0iGEGQ6qR1tDOtsXQKhICluZ QDPw3EDgH9jDcz4VDnjJ5qD7VNyKuSLU+pc6p8Hpe5sczNKB/Ok= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org