$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: UZTZ+HWgXFpVNMe4ZRBsFritXXYAs9yzBEiVCRuqY14= Subject key identifier: AA:E2:22:4F:6B:71:5E:C8:DB:22:F2:C9:6D:72:39:CC:AE:B0:86:04 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 180DE424F42A174C4170923247B892D776DECE47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 012B Signing time: Fri 17 May 2024 13:50:55 +0000 Manifest this update: Fri 17 May 2024 13:45:55 +0000 Manifest next update: Mon 20 May 2024 21:39:55 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: M1wgOVdpfsVz3bdMLVKfhFFLXSQ11lWdOJ8zrXydAdE=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: 4099XIriwMmIUEiCz46DTqCTjK4eLvp9HDw31ycMzbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 21:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0d:e4:24:f4:2a:17:4c:41:70:92:32:47:b8:92:d7:76:de:ce:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: May 17 13:45:55 2024 GMT Not After : May 20 21:39:55 2024 GMT Subject: CN=AAE2224F6B715EC8DB22F2C96D7239CCAEB08604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:2c:ef:84:ca:dd:7d:0d:18:49:83:8d:31: d0:d9:ca:38:4c:1e:d7:b4:59:41:ca:56:40:09:5b: 32:60:c0:40:53:37:91:01:34:a8:7e:99:19:ae:f9: a0:77:03:7f:36:4f:94:64:38:93:16:21:1d:52:48: ff:dc:29:cc:d6:fb:bd:80:82:94:43:8a:a2:00:b1: d7:91:3c:d8:a6:23:b5:1a:48:23:7a:79:e8:9d:9e: f7:d2:5b:f5:27:28:ad:e1:82:b9:a4:24:68:93:c2: 9b:1b:10:05:cf:85:70:9c:f5:ff:5a:4c:2a:17:78: 79:a6:3e:50:4c:55:44:a4:b1:cd:39:7f:bc:f4:ae: 1f:2f:4c:e7:ae:74:75:6b:74:d6:e3:f9:49:c5:0d: 64:8c:5b:73:28:52:3f:fa:b3:55:12:a6:f0:8a:77: b0:02:4c:4d:40:36:86:75:6b:4c:4c:c9:c2:23:28: cb:5e:7e:28:89:38:aa:23:ab:65:7d:d8:e3:45:b9: 06:2e:9b:76:89:97:7a:bf:b2:dd:e0:a9:1f:96:58: 69:af:29:ef:ee:80:5b:8d:64:b6:e3:55:7e:31:58: f2:2f:f5:f1:d4:22:79:04:85:8c:83:37:8b:00:e0: db:19:cb:96:5b:0c:ec:83:9f:9c:a0:a0:eb:bc:06: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E2:22:4F:6B:71:5E:C8:DB:22:F2:C9:6D:72:39:CC:AE:B0:86:04 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:5b:b9:6d:34:ca:ad:c0:a4:7a:3f:58:27:37:d2:f5:17:6a: 43:73:49:d4:6d:a7:b0:91:62:f4:14:3f:c8:0a:70:79:2a:a1: f2:71:87:9d:57:1f:0e:62:3c:4e:4c:65:0e:fb:ae:bf:e0:d4: f6:d7:85:a2:c5:46:d1:e9:bf:bf:06:2f:df:d2:4b:25:84:8c: b6:63:d1:0c:4d:99:31:44:e1:c3:d8:5c:a1:96:04:f6:ca:dd: 64:e3:69:05:54:b7:27:02:69:db:8c:69:fc:c3:38:9d:e1:41: c8:d6:df:b9:92:38:f8:7a:e9:bb:fd:be:21:42:1c:cf:3d:d7: 28:7c:1c:e6:49:11:b3:79:45:69:7e:3d:b7:5f:47:a6:e8:b0: 59:5c:54:71:e0:7b:5f:44:6f:22:f9:47:24:63:29:71:fc:1d: 55:93:38:2d:7b:9f:53:b9:3e:bc:d1:17:eb:99:6c:44:9f:58: e3:ab:90:67:c1:fa:e0:78:b4:bd:fd:4f:1b:7d:ee:8e:57:0e: cb:11:1e:6c:9b:90:fd:bc:26:d0:94:2a:6a:e2:65:a8:95:a5: 7e:a3:c4:60:39:e6:e0:42:98:0f:3e:78:0e:5d:58:f8:51:74: 8a:aa:65:c5:ff:4c:f4:25:e1:d5:b0:58:67:0b:6c:fe:aa:7a: 74:4b:28:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGA3kJPQqF0xBcJIyR7iS13bezkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNDA1MTcxMzQ1NTVaFw0yNDA1MjAyMTM5NTVaMDMxMTAvBgNV BAMTKEFBRTIyMjRGNkI3MTVFQzhEQjIyRjJDOTZENzIzOUNDQUVCMDg2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+yzvhMrdfQ0YSYONMdDZyjhM Hte0WUHKVkAJWzJgwEBTN5EBNKh+mRmu+aB3A382T5RkOJMWIR1SSP/cKczW+72A gpRDiqIAsdeRPNimI7UaSCN6eeidnvfSW/UnKK3hgrmkJGiTwpsbEAXPhXCc9f9a TCoXeHmmPlBMVUSksc05f7z0rh8vTOeudHVrdNbj+UnFDWSMW3MoUj/6s1USpvCK d7ACTE1ANoZ1a0xMycIjKMtefiiJOKojq2V92ONFuQYum3aJl3q/st3gqR+WWGmv Ke/ugFuNZLbjVX4xWPIv9fHUInkEhYyDN4sA4NsZy5ZbDOyDn5ygoOu8BiBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUquIiT2txXsjbIvLJbXI5zK6whgQwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVbuW00yq3ApHo/WCc30vUXakNzSdRtp7CR YvQUP8gKcHkqofJxh51XHw5iPE5MZQ77rr/g1PbXhaLFRtHpv78GL9/SSyWEjLZj 0QxNmTFE4cPYXKGWBPbK3WTjaQVUtycCaduMafzDOJ3hQcjW37mSOPh66bv9viFC HM891yh8HOZJEbN5RWl+PbdfR6bosFlcVHHge19EbyL5RyRjKXH8HVWTOC17n1O5 PrzRF+uZbESfWOOrkGfB+uB4tL39Txt97o5XDssRHmybkP28JtCUKmriZaiVpX6j xGA55uBCmA8+eA5dWPhRdIqqZcX/TPQl4dWwWGcLbP6qenRLKGQ= -----END CERTIFICATE-----Generated at Fri May 17 15:21:32 2024 by rpki-client on console-ams.rpki-client.org