$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: MbAyjJqbKb6aUylzKJQJO4A95XHWRTCYSv9rQkLJvxQ= Subject key identifier: DA:B3:D5:74:E2:A4:5E:80:45:D4:C4:CE:AC:25:C2:BB:A7:43:AC:61 Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 5F1D9130A80D0B1834D7AF1D365429AA815B8459 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 01B0 Signing time: Sat 18 May 2024 12:11:21 +0000 Manifest this update: Sat 18 May 2024 12:06:21 +0000 Manifest next update: Tue 21 May 2024 17:05:21 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: tISlLZjE1xbuGxHDKkI2ctiEUg7DvpVALQ960fUo0+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1d:91:30:a8:0d:0b:18:34:d7:af:1d:36:54:29:aa:81:5b:84:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: May 18 12:06:21 2024 GMT Not After : May 21 17:05:21 2024 GMT Subject: CN=DAB3D574E2A45E8045D4C4CEAC25C2BBA743AC61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:50:45:5a:1e:fd:26:68:7e:ae:d6:37:8e:bc: bb:43:c6:40:de:17:46:b5:0b:a3:98:59:ea:c2:a9: 0e:c8:fb:17:38:81:00:86:09:3a:27:a9:33:0e:36: 2f:a9:5c:44:35:30:42:46:85:a5:29:b7:75:39:8d: 35:0d:53:39:b4:bc:1c:a7:1e:65:20:ba:13:0a:21: e8:cf:3f:b2:7f:a3:9e:4d:62:d3:a6:ee:03:92:9c: cd:bc:0a:43:b4:21:35:c1:55:58:36:a9:5b:73:6d: d7:9e:d4:b6:84:c3:3a:3d:53:a4:9e:e2:e7:8a:3b: 77:25:2a:b0:09:45:76:ea:9b:17:2d:6a:11:30:bb: c8:a5:0f:e8:ec:46:8b:43:d0:52:76:71:76:6c:86: c1:6d:eb:77:f9:0d:c3:db:cc:b2:22:04:55:c1:f2: ec:10:fc:e4:f1:b6:9e:fa:a8:f7:26:70:11:63:63: 7a:d9:83:d9:9f:2e:99:7f:5f:23:1c:50:35:a0:a7: f5:0c:a3:39:ee:91:c6:a4:1b:e0:e2:80:df:85:bd: 03:7e:60:fb:ed:79:94:f5:e3:ef:0c:bc:17:b5:9a: c9:21:6d:21:16:2e:c7:c0:ff:db:52:15:5a:67:2f: b7:a5:ba:f2:9c:14:5e:4b:95:66:55:62:0c:b3:47: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B3:D5:74:E2:A4:5E:80:45:D4:C4:CE:AC:25:C2:BB:A7:43:AC:61 X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:08:65:24:0d:70:d9:ad:51:9e:d4:30:b6:33:a2:69:35:ee: e2:ed:ef:f9:bb:b5:11:98:73:3b:90:41:75:8a:fa:40:ae:87: eb:98:7d:bf:17:c2:2c:e6:49:e6:c8:43:27:da:8c:13:ec:f9: 64:d7:af:65:3f:d2:dc:f8:30:8c:fe:cf:06:d2:d0:eb:f1:c5: 75:ff:bd:fc:3f:33:fb:f2:59:91:69:7c:ba:3c:83:13:76:83: 16:46:f7:07:6e:ee:13:67:1d:ae:d7:bb:8a:63:20:fc:41:30: d6:5a:c4:ea:24:80:46:05:f5:71:ee:86:d0:92:23:bd:4c:cb: b3:70:db:eb:a8:87:0b:51:a8:59:8f:c2:07:18:f8:14:06:30: 83:11:6c:7e:68:fd:1c:cd:86:e8:d6:14:cd:89:4c:81:4c:42: b8:86:b8:b8:3f:bf:56:6a:19:9a:dc:fe:83:ac:32:25:29:72: 44:59:b6:1b:3e:63:4f:3b:65:8b:bc:47:3c:81:ce:49:70:d5: b8:97:23:72:3a:2f:a0:24:1d:bd:80:d0:67:78:8b:72:65:c2: 87:c4:5e:40:0a:01:bc:79:17:81:1e:de:32:47:08:84:cd:72: 13:31:fe:d2:f9:11:32:84:5f:34:ad:0c:11:a6:e7:4d:18:8a: 7f:ae:19:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXx2RMKgNCxg0168dNlQpqoFbhFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNDA1MTgxMjA2MjFaFw0yNDA1MjExNzA1MjFaMDMxMTAvBgNV BAMTKERBQjNENTc0RTJBNDVFODA0NUQ0QzRDRUFDMjVDMkJCQTc0M0FDNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpUEVaHv0maH6u1jeOvLtDxkDe F0a1C6OYWerCqQ7I+xc4gQCGCTonqTMONi+pXEQ1MEJGhaUpt3U5jTUNUzm0vByn HmUguhMKIejPP7J/o55NYtOm7gOSnM28CkO0ITXBVVg2qVtzbdee1LaEwzo9U6Se 4ueKO3clKrAJRXbqmxctahEwu8ilD+jsRotD0FJ2cXZshsFt63f5DcPbzLIiBFXB 8uwQ/OTxtp76qPcmcBFjY3rZg9mfLpl/XyMcUDWgp/UMoznukcakG+DigN+FvQN+ YPvteZT14+8MvBe1mskhbSEWLsfA/9tSFVpnL7eluvKcFF5LlWZVYgyzRwtpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2rPVdOKkXoBF1MTOrCXCu6dDrGEwHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8IZSQNcNmtUZ7UMLYzomk17uLt7/m7tRGY czuQQXWK+kCuh+uYfb8XwizmSebIQyfajBPs+WTXr2U/0tz4MIz+zwbS0OvxxXX/ vfw/M/vyWZFpfLo8gxN2gxZG9wdu7hNnHa7Xu4pjIPxBMNZaxOokgEYF9XHuhtCS I71My7Nw2+uohwtRqFmPwgcY+BQGMIMRbH5o/RzNhujWFM2JTIFMQriGuLg/v1Zq GZrc/oOsMiUpckRZths+Y087ZYu8RzyBzklw1biXI3I6L6AkHb2A0Gd4i3JlwofE XkAKAbx5F4Ee3jJHCITNchMx/tL5ETKEXzStDBGm500Yin+uGXc= -----END CERTIFICATE-----Generated at Sat May 18 13:39:20 2024 by rpki-client on console-ams.rpki-client.org