$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: ZcfU3ltaW/F6ESkX7Wl3dRiUVc3vTtgD6C7Zq1ekBgM= Subject key identifier: 5D:FD:B3:3D:C2:F9:89:B8:07:1C:F6:60:1F:20:04:A1:2F:62:53:13 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 64B4854E762821FCEFEC2667CBEAFA0C778C8936 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 02C8 Signing time: Fri 22 Nov 2024 01:22:26 +0000 Manifest this update: Fri 22 Nov 2024 01:17:26 +0000 Manifest next update: Mon 25 Nov 2024 10:27:26 +0000 Files and hashes: 1: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: QgODoIyqYZYJFRy4PIBQYLz2dNOwL8f8bQ3ZEigNWZw=) 2: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: FECXbEANcSvpuwQi6g61+PQ8hXLctZV7VoL+uT0qSco=) 3: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: HKR/DIQnXiAuYSQWPwEnbaoRhaaRH/yTF7kuTD9nYdw=) 4: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: lVVEQRaIbonJY374bXa4Eau4fPAIIr1m4g0jH3SuIpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 10:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b4:85:4e:76:28:21:fc:ef:ec:26:67:cb:ea:fa:0c:77:8c:89:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Nov 22 01:17:26 2024 GMT Not After : Nov 25 10:27:26 2024 GMT Subject: CN=5DFDB33DC2F989B8071CF6601F2004A12F625313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:83:b9:cf:3d:b9:a9:53:56:82:25:c7:0b:1a: c2:36:58:a8:a0:7c:5b:71:0a:16:f3:53:95:d8:1a: bc:2d:23:ac:de:45:75:f6:a2:86:28:d8:dd:3d:0f: f8:63:af:b3:23:56:0e:79:db:7d:c1:37:30:57:f2: 9b:35:e1:ec:0f:9f:d1:2e:32:9b:96:64:21:fe:91: d4:a1:a3:04:8e:ad:23:e2:19:33:f2:6d:58:1b:58: 85:61:be:9a:0a:b5:25:c7:30:3e:74:ee:01:82:0b: 42:27:df:2c:00:e6:c0:df:b1:0b:28:1a:e0:6a:86: 62:de:74:fe:62:ca:25:30:ad:a5:11:cd:c3:14:a8: c1:d5:13:f4:58:41:75:60:a4:6e:9c:90:8f:cc:aa: 9c:6e:27:a7:c5:39:1e:4e:8d:4f:f3:a8:dd:4a:a5: e4:82:6e:fc:87:c7:c9:2b:da:a1:a1:c4:d9:5d:b3: 0d:06:1a:e0:9d:75:c8:13:c2:b6:f2:07:c7:c0:72: 55:c5:c2:0b:ff:e6:51:df:ff:66:96:0d:8f:20:da: db:70:16:94:93:b4:81:f3:04:10:1a:d6:17:70:36: 8c:1d:45:5a:30:f2:11:2f:df:89:a6:44:59:82:3f: 79:a6:21:c3:95:58:82:97:a2:eb:4b:6d:34:e8:31: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FD:B3:3D:C2:F9:89:B8:07:1C:F6:60:1F:20:04:A1:2F:62:53:13 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ca:7b:81:89:dd:30:8b:c1:f2:a5:0e:5c:3f:76:4e:d0:35: eb:69:8a:f5:0a:d7:cf:c8:a8:fd:bf:d9:ce:12:6a:92:6d:dc: df:cf:70:74:e3:f1:01:30:82:d1:90:4f:dd:9e:f5:7a:41:01: 5e:99:48:5e:3d:0b:23:36:a5:9d:44:94:50:ac:10:3f:61:28: c0:c0:b8:48:e2:37:4e:61:8a:28:e7:6c:67:89:2c:05:22:93: 28:d9:4e:df:46:9e:c4:fa:50:f7:e7:91:cd:76:cc:01:ab:78: 2a:66:ca:72:c8:7b:fc:72:f0:44:5a:c8:bf:07:53:77:f4:69: fc:3e:0c:36:a0:3a:39:f3:90:69:fa:2a:6e:e6:b7:24:00:83: fd:aa:e7:cc:be:6a:6d:1e:9b:a2:ce:67:d0:c5:28:a2:d9:e8: bb:8f:43:e9:e3:40:69:12:3f:07:f2:8a:c6:fa:2f:e3:71:70: 70:71:38:5f:2d:82:5f:cd:8b:85:a7:5e:ca:a1:40:29:4f:e0: 5c:1b:41:c4:c2:19:c5:99:96:42:17:25:4f:48:6a:18:1c:ec: eb:94:ad:11:0b:41:39:76:a6:d9:8c:9c:c3:69:fb:15:10:61: e0:f1:38:7d:a7:66:7d:d9:de:94:66:17:08:b9:7b:80:05:ee: 39:ba:de:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLSFTnYoIfzv7CZny+r6DHeMiTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNDExMjIwMTE3MjZaFw0yNDExMjUxMDI3MjZaMDMxMTAvBgNV BAMTKDVERkRCMzNEQzJGOTg5QjgwNzFDRjY2MDFGMjAwNEExMkY2MjUzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgg7nPPbmpU1aCJccLGsI2WKig fFtxChbzU5XYGrwtI6zeRXX2ooYo2N09D/hjr7MjVg55233BNzBX8ps14ewPn9Eu MpuWZCH+kdShowSOrSPiGTPybVgbWIVhvpoKtSXHMD507gGCC0In3ywA5sDfsQso GuBqhmLedP5iyiUwraURzcMUqMHVE/RYQXVgpG6ckI/MqpxuJ6fFOR5OjU/zqN1K peSCbvyHx8kr2qGhxNldsw0GGuCddcgTwrbyB8fAclXFwgv/5lHf/2aWDY8g2ttw FpSTtIHzBBAa1hdwNowdRVow8hEv34mmRFmCP3mmIcOVWIKXoutLbTToMYzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXf2zPcL5ibgHHPZgHyAEoS9iUxMwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/Ke4GJ3TCLwfKlDlw/dk7QNetpivUK18/I qP2/2c4SapJt3N/PcHTj8QEwgtGQT92e9XpBAV6ZSF49CyM2pZ1ElFCsED9hKMDA uEjiN05hiijnbGeJLAUikyjZTt9GnsT6UPfnkc12zAGreCpmynLIe/xy8ERayL8H U3f0afw+DDagOjnzkGn6Km7mtyQAg/2q58y+am0em6LOZ9DFKKLZ6LuPQ+njQGkS Pwfyisb6L+NxcHBxOF8tgl/Ni4WnXsqhQClP4FwbQcTCGcWZlkIXJU9Iahgc7OuU rRELQTl2ptmMnMNp+xUQYeDxOH2nZn3Z3pRmFwi5e4AF7jm63vE= -----END CERTIFICATE-----Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org