$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: FxraLcacyagKm2nb9VYuYwdbi2GO4aV15TUDYulnCyc= Subject key identifier: 9B:F2:C5:79:66:2A:7C:8E:48:4E:02:B9:07:3F:11:37:92:1F:C1:6C Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 4D147F2DDAB5557A645BC5895B563FA88D8363EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 53 Signing time: Thu 21 Nov 2024 07:00:56 +0000 Manifest this update: Thu 21 Nov 2024 06:55:56 +0000 Manifest next update: Sun 24 Nov 2024 11:26:56 +0000 Files and hashes: 1: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: Jpaipoup9SjdgsPZghk1qwovHG++gb7X+87Ha/QGjMM=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: ovjV3a2j1iQ8rLesRKk+cSW1tBSJlk1/Dzy2fJZMGZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:14:7f:2d:da:b5:55:7a:64:5b:c5:89:5b:56:3f:a8:8d:83:63:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Nov 21 06:55:56 2024 GMT Not After : Nov 24 11:26:56 2024 GMT Subject: CN=9BF2C579662A7C8E484E02B9073F1137921FC16C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:d7:e4:f2:71:eb:91:e5:df:a0:d8:8d:8d: 14:54:89:ce:64:6a:c9:7f:3f:74:09:0a:46:e0:2e: ca:fe:b6:14:20:bc:71:ab:48:12:47:58:75:90:4e: 95:e9:a6:c2:9a:38:8a:39:f5:80:31:6e:10:95:4a: db:d3:7b:b2:b0:04:e4:8b:de:50:83:0b:72:a1:4c: 9f:11:51:8a:a1:a5:e8:d6:76:2f:8d:23:f6:97:e6: e9:66:10:21:51:3c:2f:d4:4d:e2:95:b2:16:4d:99: d5:7d:4a:83:94:f2:c8:3c:af:22:f5:4b:fd:e2:1b: a2:de:87:d3:76:ce:1f:5f:a6:ef:fa:56:ba:71:b9: b9:c3:76:f2:40:2b:48:f2:f0:21:e8:01:e9:ee:8e: 60:72:7b:71:3c:13:fc:f6:7a:c9:5e:4e:45:70:2a: d2:18:aa:99:b7:44:ec:56:8b:d4:22:69:d4:e9:b0: 99:5f:a5:3e:5d:3a:8e:4b:72:39:2b:34:9a:aa:85: ba:71:d5:be:ea:90:9e:74:0f:da:4b:0d:f0:c1:ed: 97:ae:4e:75:42:f1:db:c7:6f:04:50:cc:e9:94:33: 72:a9:06:43:37:5d:a3:2c:01:8e:20:ec:6f:d6:db: e4:82:e5:bb:5d:03:23:94:8b:94:ff:5c:b0:19:4b: 87:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F2:C5:79:66:2A:7C:8E:48:4E:02:B9:07:3F:11:37:92:1F:C1:6C X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:54:b5:95:42:47:59:f2:b5:d9:63:be:60:8c:82:4e:8e:eb: 4e:6f:41:56:29:01:2a:fb:72:fe:2b:46:f1:ab:8c:c9:33:f9: 6e:1e:09:39:c9:90:69:f8:69:89:df:2d:85:af:d1:fc:29:7c: 65:72:da:81:16:32:0b:db:2c:4b:2f:d8:33:5b:28:9f:2f:10: 4c:81:43:05:1f:42:d5:14:bf:36:b4:4d:49:67:c0:91:fa:0c: 01:de:a0:34:78:62:3a:1e:86:be:3e:9a:d5:6e:fb:0b:fe:6f: 06:fe:57:52:a5:6c:7f:8c:e2:8d:c1:c9:75:0b:d7:cf:85:3f: 27:df:ba:0a:b7:92:6e:3a:6b:25:b7:63:ff:9d:f6:b0:6b:ff: a6:13:e9:64:e7:05:45:35:76:ee:31:cd:18:fe:79:43:23:fe: 66:67:4e:6b:ce:74:f0:91:04:06:e7:b6:3c:20:09:68:89:79: 7e:ae:c0:35:e8:9c:54:6f:70:48:fa:f6:2e:02:5e:ac:b2:10: 97:a6:2a:d6:ba:2f:45:d4:a4:08:bf:6e:70:f4:92:66:b1:00: 45:b7:1f:7f:61:5a:3b:ea:c5:47:8d:4a:66:f5:fb:da:08:9d: af:67:3b:0c:f2:4b:e7:e0:6f:b3:0d:59:39:60:df:60:c0:d1: 34:7c:de:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRR/Ldq1VXpkW8WJW1Y/qI2DY+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNDExMjEwNjU1NTZaFw0yNDExMjQxMTI2NTZaMDMxMTAvBgNV BAMTKDlCRjJDNTc5NjYyQTdDOEU0ODRFMDJCOTA3M0YxMTM3OTIxRkMxNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DNfk8nHrkeXfoNiNjRRUic5k asl/P3QJCkbgLsr+thQgvHGrSBJHWHWQTpXppsKaOIo59YAxbhCVStvTe7KwBOSL 3lCDC3KhTJ8RUYqhpejWdi+NI/aX5ulmECFRPC/UTeKVshZNmdV9SoOU8sg8ryL1 S/3iG6Leh9N2zh9fpu/6VrpxubnDdvJAK0jy8CHoAenujmBye3E8E/z2esleTkVw KtIYqpm3ROxWi9QiadTpsJlfpT5dOo5LcjkrNJqqhbpx1b7qkJ50D9pLDfDB7Zeu TnVC8dvHbwRQzOmUM3KpBkM3XaMsAY4g7G/W2+SC5btdAyOUi5T/XLAZS4dRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm/LFeWYqfI5ITgK5Bz8RN5IfwWwwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpUtZVCR1nytdljvmCMgk6O605vQVYpASr7 cv4rRvGrjMkz+W4eCTnJkGn4aYnfLYWv0fwpfGVy2oEWMgvbLEsv2DNbKJ8vEEyB QwUfQtUUvza0TUlnwJH6DAHeoDR4Yjoehr4+mtVu+wv+bwb+V1KlbH+M4o3ByXUL 18+FPyffugq3km46ayW3Y/+d9rBr/6YT6WTnBUU1du4xzRj+eUMj/mZnTmvOdPCR BAbntjwgCWiJeX6uwDXonFRvcEj69i4CXqyyEJemKta6L0XUpAi/bnD0kmaxAEW3 H39hWjvqxUeNSmb1+9oIna9nOwzyS+fgb7MNWTlg32DA0TR83lM= -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org