$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: fSXWFHcrCygk9DfTEMCNE8FgLNaVZzsnYZPRUJAoUpc= Subject key identifier: D9:67:8F:15:A3:98:26:F1:F5:CF:D9:14:81:E3:64:AB:49:2B:C7:FD Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 21568FC8ECA19722EAF9A7EC748F4B1A8A8A539C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 0123 Signing time: Sat 18 May 2024 05:20:01 +0000 Manifest this update: Sat 18 May 2024 05:15:01 +0000 Manifest next update: Tue 21 May 2024 07:46:01 +0000 Files and hashes: 1: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: l4I6Y2zbWU4upxEkNpjRtmgkSzEN8IyE4eWm3SBBf3U=) 2: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: keXa2qv0ogy6uZwDPkAQ6N8XRsSnkpVdtRZyAztHbVs=) 3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: Uoqly9iLBU8r0q+qnf5bkkFoNDIwCzyTTJMnW3UvF5A=) 4: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: nWfVtqoj2DqgHDYQnergL14/xnlrAjcQENZ1+gHQ2Zg=) 5: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JZd23EqdCGdn2Pb+kmEbYzSLiyHN9uOLWhdDD976+vI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 07:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:56:8f:c8:ec:a1:97:22:ea:f9:a7:ec:74:8f:4b:1a:8a:8a:53:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: May 18 05:15:01 2024 GMT Not After : May 21 07:46:01 2024 GMT Subject: CN=D9678F15A39826F1F5CFD91481E364AB492BC7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:3d:3d:a9:b4:0d:09:d9:80:e3:da:f0:94: d5:82:5b:b2:38:3b:b9:50:a7:fc:90:a0:c7:21:55: 18:70:2d:f3:ef:ce:bc:0a:d5:05:b4:3c:67:d7:7e: 57:c9:a5:57:08:98:47:91:7b:87:d8:40:33:8e:f8: 43:55:1a:7d:ba:0c:bc:62:58:61:de:9c:84:67:50: 2e:37:78:e0:e4:46:7a:5b:44:b9:92:1c:94:0d:89: bf:91:9e:de:57:55:2e:9d:87:e9:7d:e5:ec:71:28: 0d:bd:6d:e1:cc:8f:30:12:4a:77:39:72:39:5c:7e: c9:55:b0:2d:6a:9c:99:64:01:0c:c6:74:56:ed:f6: 59:af:80:0f:d6:bc:44:b0:d5:f2:7d:5f:16:16:26: e5:55:3c:92:9d:23:2e:7f:89:b5:b0:6d:05:45:bf: 85:2e:64:27:38:79:3c:70:a1:0c:78:2f:aa:ab:dd: 34:8d:d8:ce:fe:23:19:75:5d:a9:99:d9:80:6f:09: 95:fc:91:49:26:f6:33:19:5e:cc:06:36:8d:d0:2b: 10:51:3e:0e:ad:82:86:8c:e9:4e:d2:17:2e:21:dd: 7a:93:cc:2e:fe:d7:22:7b:cd:8f:4c:97:92:01:7f: 16:08:b1:40:5b:18:1c:a4:82:60:7a:18:fe:cb:2b: e2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:67:8F:15:A3:98:26:F1:F5:CF:D9:14:81:E3:64:AB:49:2B:C7:FD X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:51:e2:f4:0d:c1:1c:69:b3:44:dc:f7:c3:9b:b0:53:7a:84: 47:5b:78:03:75:2a:6f:52:89:53:25:5e:b2:6c:d7:8a:6d:bd: 39:33:f2:8f:d6:0a:08:f7:c7:a0:27:36:68:55:c0:47:98:95: f2:12:c8:d7:65:20:da:ed:e6:63:8b:5e:a4:5d:bf:59:e1:75: c5:c9:a1:01:8a:4d:cf:5b:fe:37:fd:bb:3f:93:d1:85:98:31: 82:5a:b7:c3:f1:a4:2e:dc:94:82:22:22:c8:62:ae:5f:74:03: e3:63:88:87:8a:36:7f:23:53:13:6a:38:97:d0:36:26:f6:52: 68:da:e7:d1:74:0d:05:95:f9:43:a3:29:51:55:36:11:77:54: a2:ff:fe:7c:94:cc:53:ef:e0:ae:a0:0a:88:a8:af:22:03:a1: c4:07:b1:f9:27:99:9f:70:03:bb:7c:80:87:5d:55:c9:a9:7e: 56:97:de:da:cd:62:57:b7:73:1e:37:2e:93:24:c8:60:10:3e: 3d:bb:18:c1:bd:6c:ea:95:a6:7a:77:27:d1:fe:82:1e:1c:3b: 99:63:4d:21:7a:b8:e8:c9:37:33:f8:ee:3e:ce:06:28:19:ba: 6d:d9:eb:37:c8:00:4b:fa:24:bf:df:4d:24:4f:03:f6:a9:e7: 25:62:30:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVaPyOyhlyLq+afsdI9LGoqKU5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNDA1MTgwNTE1MDFaFw0yNDA1MjEwNzQ2MDFaMDMxMTAvBgNV BAMTKEQ5Njc4RjE1QTM5ODI2RjFGNUNGRDkxNDgxRTM2NEFCNDkyQkM3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfz09qbQNCdmA49rwlNWCW7I4 O7lQp/yQoMchVRhwLfPvzrwK1QW0PGfXflfJpVcImEeRe4fYQDOO+ENVGn26DLxi WGHenIRnUC43eODkRnpbRLmSHJQNib+Rnt5XVS6dh+l95exxKA29beHMjzASSnc5 cjlcfslVsC1qnJlkAQzGdFbt9lmvgA/WvESw1fJ9XxYWJuVVPJKdIy5/ibWwbQVF v4UuZCc4eTxwoQx4L6qr3TSN2M7+Ixl1XamZ2YBvCZX8kUkm9jMZXswGNo3QKxBR Pg6tgoaM6U7SFy4h3XqTzC7+1yJ7zY9Ml5IBfxYIsUBbGBykgmB6GP7LK+LvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2WePFaOYJvH1z9kUgeNkq0krx/0wHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRR4vQNwRxps0Tc98ObsFN6hEdbeAN1Km9S iVMlXrJs14ptvTkz8o/WCgj3x6AnNmhVwEeYlfISyNdlINrt5mOLXqRdv1nhdcXJ oQGKTc9b/jf9uz+T0YWYMYJat8PxpC7clIIiIshirl90A+NjiIeKNn8jUxNqOJfQ Nib2Umja59F0DQWV+UOjKVFVNhF3VKL//nyUzFPv4K6gCoioryIDocQHsfknmZ9w A7t8gIddVcmpflaX3trNYle3cx43LpMkyGAQPj27GMG9bOqVpnp3J9H+gh4cO5lj TSF6uOjJNzP47j7OBigZum3Z6zfIAEv6JL/fTSRPA/ap5yViMIM= -----END CERTIFICATE-----Generated at Sat May 18 07:39:11 2024 by rpki-client on console-ams.rpki-client.org