$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: auucI6WKFsnOdS8/DEbCrqAOz4Bo9WADOSepRkMzyxQ= Subject key identifier: FD:92:F9:5D:8C:B7:84:1F:1C:AC:71:5A:CF:03:EC:3A:28:48:7E:10 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 5E7153EB29762F9424302DA22F61C6B2BD0190DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 0278 Signing time: Sun 26 May 2024 10:53:06 +0000 Manifest this update: Sun 26 May 2024 10:48:06 +0000 Manifest next update: Wed 29 May 2024 21:07:06 +0000 Files and hashes: 1: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: ykhDUjar352ZXYF1yrvOC3nsNBZRuGd7Y8eRXgrAGR8=) 2: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: Zn8G7kto7H0teel/AK5hoQPL4J/EZewllX6vXX/ujC0=) 3: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: 5T8eHor5zmp1kuFa7D2kKOMHrJWy3PNt3q7VirpvC8E=) 4: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: PsnUWGdXsyxieyzG/92mflGbYlhRk/S8RUEhaVSKn3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 17:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:71:53:eb:29:76:2f:94:24:30:2d:a2:2f:61:c6:b2:bd:01:90:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: May 26 10:48:06 2024 GMT Not After : May 29 21:07:06 2024 GMT Subject: CN=FD92F95D8CB7841F1CAC715ACF03EC3A28487E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:75:3c:00:fd:e1:0f:81:5b:41:d7:67:01:f6: d9:98:b4:9b:85:68:06:f8:57:aa:8b:42:e0:8a:14: f9:ed:32:a3:16:e5:16:de:75:86:7c:09:ed:d3:03: 17:c4:63:45:a5:1c:54:cd:10:f0:03:cc:fb:c1:dc: ba:be:87:66:df:7b:db:6c:d8:07:17:ca:5c:e8:c4: a2:b4:56:4e:1a:41:a0:c0:84:c5:2f:8f:6f:70:1b: 86:7e:9e:28:09:8f:4e:9a:9b:ae:a7:42:b3:51:72: 9c:7b:e0:03:1c:12:30:fe:fd:f8:f3:75:72:04:c8: 11:df:5e:70:da:2f:eb:72:09:d2:aa:8e:df:b6:22: da:e6:aa:de:31:7f:85:75:8d:67:3b:93:b7:a7:ee: c8:be:b7:5b:b4:bb:ce:2a:82:17:ba:7c:cb:6d:8f: b2:90:67:03:4f:1d:9d:31:0f:38:87:ae:aa:81:aa: af:17:0a:20:13:7a:dd:47:2b:9a:cd:cd:0b:8e:27: 3f:94:7b:64:9e:04:9b:3c:91:b9:27:61:41:be:d2: 7c:8e:26:f0:49:9c:c0:8d:78:47:fc:29:3a:24:0f: 43:24:3b:ea:ed:4a:59:a5:37:7c:0b:97:cd:d9:13: e6:2a:b3:3e:73:fb:b4:1c:4b:42:a9:71:c8:c2:41: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:92:F9:5D:8C:B7:84:1F:1C:AC:71:5A:CF:03:EC:3A:28:48:7E:10 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:52:69:5f:2a:0d:9a:53:16:22:5d:95:8c:ac:15:a0:fa:0b: 70:54:40:fb:4a:11:94:64:e8:08:41:16:7c:ee:03:0c:a1:9e: b8:fe:27:d5:d5:98:0d:85:8e:8e:39:0c:ed:f4:a9:38:ef:27: ff:3a:25:f6:5b:5c:f9:da:da:82:71:d5:80:6e:97:c7:bf:1e: c2:db:74:f9:83:83:ee:16:bb:aa:df:f2:3e:ac:79:f3:b6:ec: 32:b1:17:9a:70:56:bd:0a:6a:28:58:a5:c1:04:ea:8b:35:23: e3:3b:a5:a1:b8:75:c2:5d:e6:ed:24:b0:b7:2b:59:4b:62:6f: 93:61:5d:35:c3:b3:ca:b5:a4:68:cd:9c:b4:b8:f2:81:9a:a4: cd:9e:09:d1:01:5b:1d:58:86:eb:48:3a:d0:77:b6:fc:92:95: 5f:05:af:87:40:71:b2:04:e5:d2:ca:42:89:77:ef:6c:8b:a7: 60:96:f5:1c:09:83:ba:9b:fc:ae:b3:57:d1:e2:c1:b1:38:0c: b2:6c:30:89:5c:b1:68:c0:bc:61:9f:a0:20:99:ac:4b:19:89: 1f:fa:19:c0:86:f3:7b:73:c3:c9:85:d8:9e:98:ee:a3:6b:4f: 0c:23:1d:83:c6:23:be:1f:b3:87:ea:b5:33:28:db:0a:e0:25: ce:70:7f:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnFT6yl2L5QkMC2iL2HGsr0BkN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNDA1MjYxMDQ4MDZaFw0yNDA1MjkyMTA3MDZaMDMxMTAvBgNV BAMTKEZEOTJGOTVEOENCNzg0MUYxQ0FDNzE1QUNGMDNFQzNBMjg0ODdFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdTwA/eEPgVtB12cB9tmYtJuF aAb4V6qLQuCKFPntMqMW5RbedYZ8Ce3TAxfEY0WlHFTNEPADzPvB3Lq+h2bfe9ts 2AcXylzoxKK0Vk4aQaDAhMUvj29wG4Z+nigJj06am66nQrNRcpx74AMcEjD+/fjz dXIEyBHfXnDaL+tyCdKqjt+2Itrmqt4xf4V1jWc7k7en7si+t1u0u84qghe6fMtt j7KQZwNPHZ0xDziHrqqBqq8XCiATet1HK5rNzQuOJz+Ue2SeBJs8kbknYUG+0nyO JvBJnMCNeEf8KTokD0MkO+rtSlmlN3wLl83ZE+Yqsz5z+7QcS0KpccjCQfDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ZL5XYy3hB8crHFazwPsOihIfhAwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhSaV8qDZpTFiJdlYysFaD6C3BUQPtKEZRk 6AhBFnzuAwyhnrj+J9XVmA2Fjo45DO30qTjvJ/86JfZbXPna2oJx1YBul8e/HsLb dPmDg+4Wu6rf8j6sefO27DKxF5pwVr0KaihYpcEE6os1I+M7paG4dcJd5u0ksLcr WUtib5NhXTXDs8q1pGjNnLS48oGapM2eCdEBWx1YhutIOtB3tvySlV8Fr4dAcbIE 5dLKQol372yLp2CW9RwJg7qb/K6zV9HiwbE4DLJsMIlcsWjAvGGfoCCZrEsZiR/6 GcCG83tzw8mF2J6Y7qNrTwwjHYPGI74fs4fqtTMo2wrgJc5wf5k= -----END CERTIFICATE-----Generated at Sun May 26 11:57:06 2024 by rpki-client on console-fra.rpki-client.org