$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: xCqJz0gjKynZ0sdKP0wGQwIidPc+TLVGyXcBm9nhp4A= Subject key identifier: 2E:76:31:76:3A:CA:58:68:34:A7:76:86:66:A7:51:19:81:FF:56:8B Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 1DCD3A0EE604D4883B001BFE160B9AF7EC81351D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 01D3 Signing time: Wed 01 May 2024 07:31:48 +0000 Manifest this update: Wed 01 May 2024 07:26:48 +0000 Manifest next update: Sat 04 May 2024 11:37:48 +0000 Files and hashes: 1: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: CjdeSYG7DDxTs8HpXpId5dIrt/htwk57KSyPVfA9ITw=) 2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: SZ8vEotHi2iT5yPZtPSJoskfkDfnLkBT84Wo2mWI21Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 11:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cd:3a:0e:e6:04:d4:88:3b:00:1b:fe:16:0b:9a:f7:ec:81:35:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: May 1 07:26:48 2024 GMT Not After : May 4 11:37:48 2024 GMT Subject: CN=2E7631763ACA586834A7768666A7511981FF568B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:41:0e:1b:25:2d:9f:d4:19:75:fa:f9:43:22: db:66:07:16:e6:4c:20:5c:1e:f2:7e:6f:64:98:f7: 62:3d:a0:e4:86:3e:82:de:b6:17:62:b7:d4:b4:86: 64:86:db:45:eb:77:5c:d0:18:cd:f0:ca:b6:f8:08: 8b:92:65:f2:1d:50:68:3a:35:b7:aa:7f:7d:c4:b2: a2:0a:5c:9d:6f:09:d8:a0:23:29:fd:29:e3:47:49: c5:e6:0d:5e:37:55:06:53:91:8a:7a:3d:cc:80:14: e9:5f:f8:5d:06:81:84:92:90:0a:8b:7b:84:4a:79: f9:b2:5a:52:46:e0:bb:50:7f:55:94:f0:e0:c1:41: a8:ad:83:50:2f:36:c8:98:47:75:aa:20:ff:e8:87: 89:fd:3c:40:97:44:4c:97:99:64:29:df:c6:13:ae: f6:e4:2d:7b:84:6f:62:da:7a:6e:b6:ae:45:b9:61: a5:61:fc:15:c5:76:cb:b1:f2:b5:3d:39:2a:65:4c: 20:a0:92:da:e5:12:49:82:93:5f:5b:a4:67:3e:08: 3d:cf:1f:74:d9:b6:68:45:1f:5d:c6:02:0f:42:c7: 92:4d:af:87:c0:90:1b:a2:7d:db:a1:fd:1e:3a:87: a9:79:89:20:9f:db:9e:37:0d:ee:eb:36:13:54:b3: d8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:76:31:76:3A:CA:58:68:34:A7:76:86:66:A7:51:19:81:FF:56:8B X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7a:69:34:ef:d3:3f:93:d7:7a:4d:74:61:33:a0:62:9f:26: dc:62:1e:ee:e5:0d:a5:91:11:cc:7e:e8:10:9e:8e:54:ed:70: e4:9e:4d:c0:ab:7d:ab:48:3a:d2:7e:98:70:bc:3f:5e:db:06: 93:1f:f7:59:fa:39:e7:08:61:4f:12:89:99:04:10:7f:27:5a: b4:4f:06:25:29:70:26:f9:61:ee:1e:67:7c:d0:09:f1:4b:35: 16:25:89:2f:de:ff:36:06:8f:41:9c:f1:4f:9b:43:62:f4:da: c0:6b:48:4f:ee:1a:f5:c0:39:e9:d6:03:d2:db:3b:9b:50:8b: 91:6f:7a:3e:6d:ef:50:41:d3:db:78:7e:00:e8:aa:ed:38:cb: 84:6b:35:d7:ac:42:be:e2:f4:d9:92:59:34:ae:46:bf:d3:92: 17:8c:fa:ed:ed:38:89:7d:8a:88:fd:2b:a1:54:ce:2e:7d:e0: e0:86:c4:20:35:02:00:f1:c9:02:ba:56:ac:f5:db:02:e9:16: ef:05:89:6b:d2:76:0b:4b:c1:87:8d:96:86:d8:2c:1d:72:4e: 75:94:ba:4a:be:03:f6:26:d8:41:51:2b:8c:12:52:85:53:2e: b2:4e:5b:b0:fd:10:3b:da:38:d3:9a:6a:63:93:54:ab:cf:e0: dd:72:ec:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHc06DuYE1Ig7ABv+Fgua9+yBNR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNDA1MDEwNzI2NDhaFw0yNDA1MDQxMTM3NDhaMDMxMTAvBgNV BAMTKDJFNzYzMTc2M0FDQTU4NjgzNEE3NzY4NjY2QTc1MTE5ODFGRjU2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQQ4bJS2f1Bl1+vlDIttmBxbm TCBcHvJ+b2SY92I9oOSGPoLethdit9S0hmSG20Xrd1zQGM3wyrb4CIuSZfIdUGg6 Nbeqf33EsqIKXJ1vCdigIyn9KeNHScXmDV43VQZTkYp6PcyAFOlf+F0GgYSSkAqL e4RKefmyWlJG4LtQf1WU8ODBQaitg1AvNsiYR3WqIP/oh4n9PECXREyXmWQp38YT rvbkLXuEb2Laem62rkW5YaVh/BXFdsux8rU9OSplTCCgktrlEkmCk19bpGc+CD3P H3TZtmhFH13GAg9Cx5JNr4fAkBuifduh/R46h6l5iSCf2543De7rNhNUs9grAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULnYxdjrKWGg0p3aGZqdRGYH/VoswHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG16aTTv0z+T13pNdGEzoGKfJtxiHu7lDaWR Ecx+6BCejlTtcOSeTcCrfatIOtJ+mHC8P17bBpMf91n6OecIYU8SiZkEEH8nWrRP BiUpcCb5Ye4eZ3zQCfFLNRYliS/e/zYGj0Gc8U+bQ2L02sBrSE/uGvXAOenWA9Lb O5tQi5Fvej5t71BB09t4fgDoqu04y4RrNdesQr7i9NmSWTSuRr/TkheM+u3tOIl9 ioj9K6FUzi594OCGxCA1AgDxyQK6Vqz12wLpFu8FiWvSdgtLwYeNlobYLB1yTnWU ukq+A/Ym2EFRK4wSUoVTLrJOW7D9EDvaONOaamOTVKvP4N1y7Do= -----END CERTIFICATE-----Generated at Wed May 1 07:54:27 2024 by rpki-client on console-fra.rpki-client.org