$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: QZL2+CxhtOkwflsGJpc7BJhTLnuaM9QXWl2YgkkfZQk= Subject key identifier: 7D:E2:9F:08:11:98:B7:7D:1D:BC:28:FF:0E:FA:F8:69:F8:84:C9:2F Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 6492D9D24CD704EFC38E71592F4CF40E7BE62804 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 3B Signing time: Fri 27 Sep 2024 23:40:53 +0000 Manifest this update: Fri 27 Sep 2024 23:35:53 +0000 Manifest next update: Tue 01 Oct 2024 01:07:53 +0000 Files and hashes: 1: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: /alk2AQOS8SNMxbFK1uBetQoLF/fNwS3eEJaJ67VJQg=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: ovjV3a2j1iQ8rLesRKk+cSW1tBSJlk1/Dzy2fJZMGZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 10:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:92:d9:d2:4c:d7:04:ef:c3:8e:71:59:2f:4c:f4:0e:7b:e6:28:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Sep 27 23:35:53 2024 GMT Not After : Oct 1 01:07:53 2024 GMT Subject: CN=7DE29F081198B77D1DBC28FF0EFAF869F884C92F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:70:c3:b9:6a:14:90:22:b8:b2:b9:94:c7: f6:fc:18:b5:fb:38:c6:33:90:29:2f:e8:bc:3c:4e: 02:67:34:af:ba:d4:13:87:b4:dd:bf:89:b3:5b:05: 09:b3:22:73:88:a9:a3:af:0e:80:e9:ea:b8:a3:5a: cd:21:0c:a3:88:1d:22:52:d1:ae:24:8b:af:94:70: b1:4c:12:99:2f:03:4f:b1:f1:c9:fd:da:79:9f:ea: de:99:f8:6c:7a:6c:e5:f2:73:7e:0f:24:c8:83:d0: 96:20:62:7e:39:b6:36:c6:97:03:0c:e3:cc:6f:e9: 82:c2:4f:db:5e:c5:48:12:dc:a4:37:8d:33:b8:7e: b8:ec:6f:58:12:31:2f:ef:b5:67:67:d1:e8:5a:4f: 1b:00:88:ca:7c:06:07:3a:8f:65:84:3e:87:44:03: 7b:03:f8:84:c1:f3:7a:7e:4a:de:73:3d:ea:b2:9d: 12:c4:a0:57:31:b8:5e:18:8c:74:30:d3:2f:96:0b: 65:89:54:82:cf:3e:72:1b:cb:cb:4a:f4:96:fe:60: af:b6:f2:3d:0a:61:bf:88:16:b4:d2:ea:3b:73:f0: 79:5b:83:b7:da:47:42:04:9a:5a:92:cf:bb:29:89: 72:66:7c:23:05:30:42:2f:c3:2e:62:a0:da:db:c5: dc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E2:9F:08:11:98:B7:7D:1D:BC:28:FF:0E:FA:F8:69:F8:84:C9:2F X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:02:ca:4b:0a:66:59:8e:9c:eb:aa:19:0f:6e:2e:0b:95:5b: 79:5f:95:c5:07:49:8b:20:c0:89:9a:11:26:72:13:18:b1:71: 62:bc:45:a0:f2:b4:d7:22:ef:13:fe:da:17:59:b6:0b:c2:09: 74:e4:89:34:ed:92:db:79:ef:42:30:3c:63:cf:45:16:67:2a: f0:bd:ab:5b:53:3b:e1:83:14:c0:d2:b1:d2:8f:60:fe:ec:e4: bb:fb:5d:ab:ca:27:e4:50:d1:9e:86:b4:6d:6a:17:68:64:49: bd:10:47:63:97:a6:3b:00:26:23:74:f1:20:f3:4b:42:84:75: d9:62:a3:9f:9f:b6:0a:35:27:f2:08:7a:e1:bb:d0:78:c4:f5: 39:cb:9d:4c:5a:31:50:40:1d:e4:81:1a:26:6d:68:22:31:11: 1e:cd:32:ea:99:6a:a3:1a:79:09:39:07:db:1e:e9:d5:5f:e0: a1:55:a8:6d:db:5f:5c:97:57:83:17:0c:ea:c5:28:cf:4d:ec: bd:2e:d9:91:12:59:d2:07:2d:a9:d0:02:76:55:93:31:2f:93: e6:1d:b9:0f:20:7c:51:76:92:41:fb:02:f3:65:44:0b:89:5a: 08:a7:d6:df:d5:d9:8e:e7:10:fd:5f:64:18:46:4c:59:02:b5: 47:71:81:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJLZ0kzXBO/DjnFZL0z0DnvmKAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNDA5MjcyMzM1NTNaFw0yNDEwMDEwMTA3NTNaMDMxMTAvBgNV BAMTKDdERTI5RjA4MTE5OEI3N0QxREJDMjhGRjBFRkFGODY5Rjg4NEM5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fXDDuWoUkCK4srmUx/b8GLX7 OMYzkCkv6Lw8TgJnNK+61BOHtN2/ibNbBQmzInOIqaOvDoDp6rijWs0hDKOIHSJS 0a4ki6+UcLFMEpkvA0+x8cn92nmf6t6Z+Gx6bOXyc34PJMiD0JYgYn45tjbGlwMM 48xv6YLCT9texUgS3KQ3jTO4frjsb1gSMS/vtWdn0ehaTxsAiMp8Bgc6j2WEPodE A3sD+ITB83p+St5zPeqynRLEoFcxuF4YjHQw0y+WC2WJVILPPnIby8tK9Jb+YK+2 8j0KYb+IFrTS6jtz8Hlbg7faR0IEmlqSz7spiXJmfCMFMEIvwy5ioNrbxdwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfeKfCBGYt30dvCj/Dvr4afiEyS8wHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwCyksKZlmOnOuqGQ9uLguVW3lflcUHSYsg wImaESZyExixcWK8RaDytNci7xP+2hdZtgvCCXTkiTTtktt570IwPGPPRRZnKvC9 q1tTO+GDFMDSsdKPYP7s5Lv7XavKJ+RQ0Z6GtG1qF2hkSb0QR2OXpjsAJiN08SDz S0KEddlio5+ftgo1J/IIeuG70HjE9TnLnUxaMVBAHeSBGiZtaCIxER7NMuqZaqMa eQk5B9se6dVf4KFVqG3bX1yXV4MXDOrFKM9N7L0u2ZESWdIHLanQAnZVkzEvk+Yd uQ8gfFF2kkH7AvNlRAuJWgin1t/V2Y7nEP1fZBhGTFkCtUdxgTc= -----END CERTIFICATE-----Generated at Sat Sep 28 01:14:35 2024 by rpki-client on console-ams.rpki-client.org