$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: kqRSYlmpoZ17t1KDIgYL2Nf8i/BBv32pTBSHD9C7URs= Subject key identifier: 8F:EF:12:04:F4:57:C6:26:D0:DE:29:09:01:9A:F0:75:30:A8:A7:2F Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 3EFD3242769EED7379D136492FAD9D3377C4F7C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 0177 Signing time: Mon 25 Nov 2024 03:00:01 +0000 Manifest this update: Mon 25 Nov 2024 02:55:01 +0000 Manifest next update: Thu 28 Nov 2024 07:27:01 +0000 Files and hashes: 1: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: Y+Q4wljx9edSndNXfau+vKiErsBXQsct6kwwWSV/BDM=) 2: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 0c0AcZ/g0Y/aLqSrBLtFXttsaA+nVZZS35pU9na53Pc=) 3: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: mz70MTqOLGXFNyYZZbHLhpR+WE1o9lomyfPVxqOTPaU=) 4: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: fFLNezlC2i1rSeXd21jK58XdbXQuPO/GogOg8uMXSig=) 5: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: TnvRLVD9S+eH7vJLKdUS4+zjpGKBHvC1c1i8lw5v/WM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:fd:32:42:76:9e:ed:73:79:d1:36:49:2f:ad:9d:33:77:c4:f7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Nov 25 02:55:01 2024 GMT Not After : Nov 28 07:27:01 2024 GMT Subject: CN=8FEF1204F457C626D0DE2909019AF07530A8A72F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:68:5c:67:aa:52:bf:30:91:ce:cd:2e:4d: f2:fb:cd:25:6b:36:17:9f:88:a5:f3:2a:dd:1d:4a: 8c:2a:9a:d9:8b:7b:d1:fc:d7:f3:3f:3e:57:ae:e6: ac:54:b6:5a:0f:16:36:a3:77:4c:8a:fa:f5:33:99: 38:e5:88:d8:4e:aa:49:1d:6c:b5:2c:b6:6a:60:14: e1:57:96:71:5f:aa:c6:c8:0d:6d:eb:5b:04:88:5e: 60:da:1a:95:06:56:02:46:23:17:37:d7:11:10:4e: 37:2b:d3:0d:0f:55:32:64:2d:97:f9:f5:80:6b:c7: 48:58:15:33:5a:1f:7b:83:99:b0:69:68:27:81:8d: ae:7e:d3:89:8f:70:18:c5:3f:7d:74:31:38:e2:95: c5:47:aa:c5:6b:4f:64:de:8f:c7:19:1a:86:20:eb: 8a:e0:53:74:b4:e9:ce:ec:85:0e:5d:c1:01:47:ae: 60:c0:58:40:68:8d:2a:96:f6:f0:7d:b3:f4:5d:63: ae:8a:ad:a5:c9:3c:14:75:47:64:23:9b:15:26:28: cb:34:57:bb:63:0f:0f:2d:cd:d4:03:6f:40:a1:19: 39:51:02:87:2f:9f:e9:e9:8b:e7:28:ee:b0:43:f4: be:ad:45:73:12:ad:bd:40:df:7e:3b:b4:40:e3:5d: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EF:12:04:F4:57:C6:26:D0:DE:29:09:01:9A:F0:75:30:A8:A7:2F X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e4:7e:3b:c1:9c:20:51:8a:f8:6a:e1:60:ff:44:b9:9a:e8: 98:f1:0a:3b:45:72:79:9d:1e:3f:90:1c:fc:40:65:1b:47:85: 69:b5:78:08:19:c6:25:47:6b:aa:0f:bf:6a:e8:8c:e7:56:e5: 0e:42:21:2a:2c:e9:51:2f:6d:35:7e:8b:24:f3:9e:38:b9:6f: d9:c0:4d:e6:3b:0e:10:7b:6c:81:f5:a9:94:38:d8:ca:f0:b2: c5:af:cf:f1:d0:d4:db:f2:48:88:2e:a5:ab:05:e1:8a:73:b2: dd:29:8a:4b:45:60:32:f0:dd:8e:20:12:5a:e2:84:dd:de:00: 28:46:31:e7:1d:ef:d5:b5:6d:64:17:1b:f5:cd:e3:ca:4c:2e: 37:e3:07:52:72:40:6f:2c:ce:1f:95:44:49:55:b2:18:ef:42: a3:03:52:71:ae:03:e0:da:ea:d4:3d:10:06:a8:b0:87:39:2a: be:7d:db:18:5b:90:4c:c6:9c:7a:89:e1:ee:d2:d3:80:5d:a0: 08:e4:45:b3:94:b2:9c:90:5d:04:0a:ff:61:3d:71:93:07:0c: d5:a9:ca:77:c9:4e:76:c3:0e:0f:7c:44:fe:d0:da:64:56:c5: f5:dc:a1:df:4b:58:fb:c1:d5:d4:3a:4a:58:c6:48:97:cb:6d: aa:c8:8c:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPv0yQnae7XN50TZJL62dM3fE98IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNDExMjUwMjU1MDFaFw0yNDExMjgwNzI3MDFaMDMxMTAvBgNV BAMTKDhGRUYxMjA0RjQ1N0M2MjZEMERFMjkwOTAxOUFGMDc1MzBBOEE3MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpGhcZ6pSvzCRzs0uTfL7zSVr NhefiKXzKt0dSowqmtmLe9H81/M/Pleu5qxUtloPFjajd0yK+vUzmTjliNhOqkkd bLUstmpgFOFXlnFfqsbIDW3rWwSIXmDaGpUGVgJGIxc31xEQTjcr0w0PVTJkLZf5 9YBrx0hYFTNaH3uDmbBpaCeBja5+04mPcBjFP310MTjilcVHqsVrT2Tej8cZGoYg 64rgU3S06c7shQ5dwQFHrmDAWEBojSqW9vB9s/RdY66KraXJPBR1R2QjmxUmKMs0 V7tjDw8tzdQDb0ChGTlRAocvn+npi+co7rBD9L6tRXMSrb1A3347tEDjXV0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+8SBPRXxibQ3ikJAZrwdTCopy8wHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfkfjvBnCBRivhq4WD/RLma6JjxCjtFcnmd Hj+QHPxAZRtHhWm1eAgZxiVHa6oPv2rojOdW5Q5CISos6VEvbTV+iyTznji5b9nA TeY7DhB7bIH1qZQ42MrwssWvz/HQ1NvySIgupasF4Ypzst0piktFYDLw3Y4gElri hN3eAChGMecd79W1bWQXG/XN48pMLjfjB1JyQG8szh+VRElVshjvQqMDUnGuA+Da 6tQ9EAaosIc5Kr592xhbkEzGnHqJ4e7S04BdoAjkRbOUspyQXQQK/2E9cZMHDNWp ynfJTnbDDg98RP7Q2mRWxfXcod9LWPvB1dQ6SljGSJfLbarIjHI= -----END CERTIFICATE-----Generated at Mon Nov 25 04:52:35 2024 by rpki-client on console-fra.rpki-client.org