$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: T5Tq3la3Rzfeaq0eiEbCKRkpOejz1tjE5n/3IohVQBE= Subject key identifier: C1:DA:FD:11:CF:90:91:F3:F7:8C:D4:C6:3E:09:BD:56:06:CC:A7:01 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 6E0724CA1B279BF3C910A720B9D075CAEFD19037 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 0430 Signing time: Sat 18 May 2024 02:00:47 +0000 Manifest this update: Sat 18 May 2024 01:55:47 +0000 Manifest next update: Tue 21 May 2024 03:18:47 +0000 Files and hashes: 1: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: J2pH72jkK9J7AYm1PtxEXPwUAeXHJi0pEWo4j0cFThA=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: vUjR+m/RKSTfKMGTZIkfKA9/4PxbsZhMRIgcwKqRAiY=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: FXuWLv4KpAuXzRzkRW3XcwpRELe8oZNEN5yhnySbpog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 03:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:07:24:ca:1b:27:9b:f3:c9:10:a7:20:b9:d0:75:ca:ef:d1:90:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: May 18 01:55:47 2024 GMT Not After : May 21 03:18:47 2024 GMT Subject: CN=C1DAFD11CF9091F3F78CD4C63E09BD5606CCA701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:01:52:00:0c:b2:f8:24:fe:44:64:75:3c: f5:f8:80:fb:10:cf:bc:b8:dd:7c:92:7a:d1:2e:d5: 7a:0d:15:19:8d:78:6e:d9:3a:8e:12:b5:82:d2:5e: 35:61:e5:ca:5b:ab:37:46:de:74:a6:78:73:82:f4: d8:77:75:de:07:78:47:56:58:87:1d:4d:88:d6:8b: 91:94:b8:25:57:80:77:93:b3:e1:15:51:96:0c:a3: 16:c3:bf:51:b2:f8:05:b4:33:8b:57:1f:84:4e:02: a6:87:b4:33:5d:eb:e7:32:29:66:db:99:90:d4:9e: ea:71:aa:66:1f:18:11:81:5c:f0:8d:e0:12:4a:71: 0c:53:da:aa:0f:6d:38:54:10:6d:52:9c:86:c1:1c: 09:71:05:66:73:a1:03:5b:d4:13:38:0d:0a:68:4e: 57:26:60:8c:5a:b1:50:fe:fe:f8:f5:32:39:40:83: c4:47:38:3e:70:23:e4:75:e6:76:7c:95:4a:f0:84: 7d:47:e7:a8:31:97:a5:e7:a4:88:93:4c:c2:13:cb: fc:c5:4e:39:fb:ff:74:bc:6c:14:6b:45:6b:01:06: b3:02:ca:cf:84:42:7b:46:e1:6e:6b:d3:07:09:47: 48:73:0d:2d:04:a0:fd:cf:48:63:a7:51:74:44:cb: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DA:FD:11:CF:90:91:F3:F7:8C:D4:C6:3E:09:BD:56:06:CC:A7:01 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:12:9f:11:61:0b:52:84:f1:e3:da:b3:1f:96:30:16:ea:e9: 26:60:44:cd:1a:c3:72:16:26:4c:4d:51:46:8d:b3:54:c5:9c: 1d:3b:0f:81:c8:61:32:80:08:12:ff:38:9b:a2:47:1e:07:03: 98:12:65:56:e1:75:b0:5a:0e:48:53:8d:1b:3f:75:e9:8e:16: 62:c9:34:ba:e2:50:4d:ab:7c:d0:61:68:aa:0d:6f:07:2f:9e: 38:d5:9d:a9:e6:7b:a2:f8:23:27:b1:a7:0c:75:ec:e2:86:ca: 20:34:19:8f:3c:d4:74:3e:27:1f:c1:b3:15:09:83:03:d8:58: 02:3c:5e:fe:38:d6:fc:cc:12:9b:dd:39:22:91:7c:82:31:6e: 27:a3:01:de:63:19:c4:38:58:5d:9f:aa:c5:d6:88:90:48:02: 85:46:f6:05:92:d4:bf:f8:77:18:6c:22:7b:c6:3d:d9:9c:f0: 0a:e0:ef:45:7a:03:5a:66:d9:6a:4d:c1:c6:3e:f8:fb:14:30: e3:af:d7:bf:03:96:e9:1d:49:10:2c:c5:1e:2a:14:b4:7c:70: 35:34:aa:af:00:b9:80:86:82:06:21:18:09:ed:c7:ca:6a:59: 13:55:41:2c:33:25:8d:00:2e:e0:77:11:30:f8:9f:8f:b3:c8: 38:e7:35:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbgckyhsnm/PJEKcgudB1yu/RkDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNDA1MTgwMTU1NDdaFw0yNDA1MjEwMzE4NDdaMDMxMTAvBgNV BAMTKEMxREFGRDExQ0Y5MDkxRjNGNzhDRDRDNjNFMDlCRDU2MDZDQ0E3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+wFSAAyy+CT+RGR1PPX4gPsQ z7y43XySetEu1XoNFRmNeG7ZOo4StYLSXjVh5cpbqzdG3nSmeHOC9Nh3dd4HeEdW WIcdTYjWi5GUuCVXgHeTs+EVUZYMoxbDv1Gy+AW0M4tXH4ROAqaHtDNd6+cyKWbb mZDUnupxqmYfGBGBXPCN4BJKcQxT2qoPbThUEG1SnIbBHAlxBWZzoQNb1BM4DQpo TlcmYIxasVD+/vj1MjlAg8RHOD5wI+R15nZ8lUrwhH1H56gxl6XnpIiTTMITy/zF Tjn7/3S8bBRrRWsBBrMCys+EQntG4W5r0wcJR0hzDS0EoP3PSGOnUXREy3GXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwdr9Ec+QkfP3jNTGPgm9VgbMpwEwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYSnxFhC1KE8ePasx+WMBbq6SZgRM0aw3IW JkxNUUaNs1TFnB07D4HIYTKACBL/OJuiRx4HA5gSZVbhdbBaDkhTjRs/demOFmLJ NLriUE2rfNBhaKoNbwcvnjjVnanme6L4Iyexpwx17OKGyiA0GY881HQ+Jx/BsxUJ gwPYWAI8Xv441vzMEpvdOSKRfIIxbiejAd5jGcQ4WF2fqsXWiJBIAoVG9gWS1L/4 dxhsInvGPdmc8Arg70V6A1pm2WpNwcY++PsUMOOv178DlukdSRAsxR4qFLR8cDU0 qq8AuYCGggYhGAntx8pqWRNVQSwzJY0ALuB3ETD4n4+zyDjnNfc= -----END CERTIFICATE-----Generated at Sat May 18 04:02:39 2024 by rpki-client on console-ams.rpki-client.org