$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: yLXLqIycALHtWJgtWzlwd4f77UvqfZlutMIPfxOYzpg= Subject key identifier: B1:E5:44:A0:E3:31:13:70:62:D1:0F:5B:7A:F9:A5:EA:F8:1E:8B:AD Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 2B159F1925A62F6085C6EF4FF6C71FFD7EFBCC2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 0485 Signing time: Sun 24 Nov 2024 12:40:55 +0000 Manifest this update: Sun 24 Nov 2024 12:35:55 +0000 Manifest next update: Wed 27 Nov 2024 21:02:55 +0000 Files and hashes: 1: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: inTtE/2z3zxOo2M8puwuxje9wrX7I3TQwEI651FTI7w=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: 6/BGm352ofBFwmMWeXlwLiQDWFsCjJihfEUy/SjVwOI=) 3: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: haPM6+gwxufz1okvY3aHzeNVK4OrbEm8gja1ZCq/Djw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:15:9f:19:25:a6:2f:60:85:c6:ef:4f:f6:c7:1f:fd:7e:fb:cc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Nov 24 12:35:55 2024 GMT Not After : Nov 27 21:02:55 2024 GMT Subject: CN=B1E544A0E331137062D10F5B7AF9A5EAF81E8BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:01:69:48:dd:57:6f:4b:ff:ed:b4:b6:3a: 0e:d3:ec:41:4c:65:5d:f9:0f:b3:ed:05:43:72:e5: e2:49:b0:53:62:ef:fd:1d:1c:b6:29:66:96:3d:e5: bd:a3:56:6d:00:33:d8:71:3b:29:bb:a3:b0:f4:23: d5:6d:ae:6b:19:6a:9a:a9:ad:3b:28:8e:6b:71:08: 37:fa:07:69:57:37:b9:2f:73:d1:cf:b2:00:22:df: 5f:f2:84:2b:f0:54:5c:56:b3:8c:20:37:b0:25:e0: e0:e0:57:06:c6:c8:8d:f1:21:e2:47:6f:80:7a:b2: ef:d4:03:a9:e6:5a:81:b5:2f:97:7b:4a:ca:c5:bc: 80:af:a6:62:36:b4:65:c8:18:58:7e:95:0b:33:e1: be:06:4d:93:d7:3d:f3:09:4f:bb:67:13:71:7d:3e: 05:28:ad:8a:a5:c8:bf:d4:48:d0:f9:81:65:66:4f: 9d:a1:dc:90:8b:eb:46:e5:72:75:97:c9:52:d0:77: 12:a6:4f:c1:f7:5d:cc:d4:f9:83:17:c1:89:5d:3c: 21:41:b7:8a:8f:10:5d:b0:f4:a8:f0:73:42:4d:9e: fc:6e:2d:e1:56:a8:a0:c7:52:f6:79:46:96:f0:19: 15:34:91:d4:96:a9:84:5e:72:e1:0b:63:a2:d8:08: 57:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E5:44:A0:E3:31:13:70:62:D1:0F:5B:7A:F9:A5:EA:F8:1E:8B:AD X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6b:e6:f8:9d:76:8d:87:83:c5:d2:f1:c9:1c:f4:b0:bd:ac: d0:3a:20:aa:e7:54:12:c2:ab:0c:93:84:d4:7f:e6:05:95:57: 20:55:99:c4:85:ba:40:49:ac:c7:61:2b:17:d8:43:cf:92:62: 5f:1c:b6:40:c9:fb:52:bc:d4:78:d0:a8:86:5a:ad:ad:b6:be: 88:3c:ac:4e:e8:48:5d:64:fe:db:4a:ee:c3:9e:11:09:59:39: c6:77:cc:94:d8:e8:83:5d:27:2b:4b:f3:43:a7:ab:d6:18:f5: 90:b3:9a:63:cf:fe:02:7b:1c:3c:d9:25:33:81:52:d2:88:e2: 10:f6:14:0b:33:ea:94:fb:47:4c:2d:33:a3:99:92:93:27:cf: 3f:97:66:0f:43:9d:b0:5b:00:45:f5:fb:d0:81:3f:d1:57:32: 0c:a6:8d:e9:4b:60:1a:04:61:97:b9:d1:c5:23:4d:ba:12:d8: 9c:80:1f:5d:99:26:67:7b:20:97:05:d1:c4:9c:c9:47:fc:5e: 2c:fc:da:f2:04:5f:96:7e:43:b9:28:ba:a9:ae:91:a2:e3:0b: 40:f9:6d:d9:c7:13:48:53:a8:2e:ce:28:2d:49:3e:12:49:90: 2b:68:b3:29:c6:7f:94:0a:98:97:7a:45:55:e0:45:d5:5c:cb: ce:93:76:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxWfGSWmL2CFxu9P9scf/X77zC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNDExMjQxMjM1NTVaFw0yNDExMjcyMTAyNTVaMDMxMTAvBgNV BAMTKEIxRTU0NEEwRTMzMTEzNzA2MkQxMEY1QjdBRjlBNUVBRjgxRThCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkqwFpSN1Xb0v/7bS2Og7T7EFM ZV35D7PtBUNy5eJJsFNi7/0dHLYpZpY95b2jVm0AM9hxOym7o7D0I9VtrmsZapqp rTsojmtxCDf6B2lXN7kvc9HPsgAi31/yhCvwVFxWs4wgN7Al4ODgVwbGyI3xIeJH b4B6su/UA6nmWoG1L5d7SsrFvICvpmI2tGXIGFh+lQsz4b4GTZPXPfMJT7tnE3F9 PgUorYqlyL/USND5gWVmT52h3JCL60blcnWXyVLQdxKmT8H3XczU+YMXwYldPCFB t4qPEF2w9Kjwc0JNnvxuLeFWqKDHUvZ5RpbwGRU0kdSWqYRecuELY6LYCFf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUseVEoOMxE3Bi0Q9bevml6vgei60wHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1r5viddo2Hg8XS8ckc9LC9rNA6IKrnVBLC qwyThNR/5gWVVyBVmcSFukBJrMdhKxfYQ8+SYl8ctkDJ+1K81HjQqIZara22vog8 rE7oSF1k/ttK7sOeEQlZOcZ3zJTY6INdJytL80Onq9YY9ZCzmmPP/gJ7HDzZJTOB UtKI4hD2FAsz6pT7R0wtM6OZkpMnzz+XZg9DnbBbAEX1+9CBP9FXMgymjelLYBoE YZe50cUjTboS2JyAH12ZJmd7IJcF0cScyUf8Xiz82vIEX5Z+Q7kouqmukaLjC0D5 bdnHE0hTqC7OKC1JPhJJkCtosynGf5QKmJd6RVXgRdVcy86Tdqc= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org