$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: x+qZFS1IWa1gs57TgVcvs0rOcVEOYJTfkKLIJOKL7+k= Subject key identifier: 62:45:F8:91:CB:35:1C:AF:3A:0C:4C:B0:A4:AE:A5:D4:D8:13:F6:2A Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 01C014EFDA4F8C64B0063594023766CFA839A03B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 036A Signing time: Sun 24 Nov 2024 08:52:09 +0000 Manifest this update: Sun 24 Nov 2024 08:47:09 +0000 Manifest next update: Wed 27 Nov 2024 13:50:09 +0000 Files and hashes: 1: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: 1FmXh7W09/OTIcJvMfRljgsvCancXCUmnVr2pCm23n0=) 2: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: v97THYrJGODUhqQu4S9CWg5LMfg7VG0qPlkEVD0x67M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c0:14:ef:da:4f:8c:64:b0:06:35:94:02:37:66:cf:a8:39:a0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Nov 24 08:47:09 2024 GMT Not After : Nov 27 13:50:09 2024 GMT Subject: CN=6245F891CB351CAF3A0C4CB0A4AEA5D4D813F62A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:20:57:fd:25:bb:cf:a9:39:9e:e9:aa:97: ce:29:f4:c8:29:a7:32:72:42:43:dc:96:bf:15:6d: a0:ef:ea:07:69:2a:9f:ad:04:3f:61:87:4a:9a:62: 45:01:25:88:52:1f:d9:46:df:47:95:6a:8b:f3:4f: 92:41:fa:c8:c5:73:54:25:d7:c6:37:4b:c7:c4:2f: c8:2a:4d:b8:fe:e1:7d:48:70:c1:b9:db:4e:cc:a4: 42:36:ce:dd:cc:fc:09:12:9d:c1:9e:16:bf:b5:44: 20:1c:43:1c:da:18:05:69:09:f3:71:79:f3:d6:e8: 04:56:bc:aa:74:3a:b9:15:ab:69:fe:e9:88:ec:26: 1e:df:a4:48:9d:96:74:36:81:17:c4:13:9c:1c:67: 12:c6:0e:39:89:49:79:13:92:e4:2c:f8:52:58:45: 42:9f:54:f1:ef:6c:85:c0:56:9b:c9:81:42:c6:ca: 51:8e:91:41:f2:82:e2:04:87:25:e9:14:05:d7:9a: fd:f6:ea:d4:fb:4f:0c:d2:f8:7c:9f:60:4b:c7:ca: 5c:e5:8d:89:c9:98:01:83:5b:00:f8:86:36:1b:91: c6:6b:49:db:75:26:17:ce:92:23:88:18:ca:5a:4b: e8:6c:43:ec:8c:91:2a:7f:06:45:d5:a1:27:d6:3f: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:45:F8:91:CB:35:1C:AF:3A:0C:4C:B0:A4:AE:A5:D4:D8:13:F6:2A X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:3b:11:da:81:fc:43:58:27:07:e6:c9:62:7e:a8:6e:d3:09: 71:07:36:47:0b:85:75:f2:6b:2b:c3:34:be:fa:c6:55:86:5a: c9:da:09:cd:a1:75:40:ac:6d:2a:84:08:9d:5a:ca:2d:62:d6: 3e:1a:11:cb:43:bf:c7:cc:dc:4a:26:7c:13:50:20:7d:77:a4: 81:cd:ba:45:08:04:e6:ac:12:0a:4f:6e:74:46:b5:8e:d5:a3: 7e:0a:ce:98:c8:a3:f7:85:ed:3c:67:8f:cd:2a:c2:2d:ee:c7: b9:e2:27:b4:6c:37:dd:ab:69:3c:78:35:60:e8:45:30:0d:69: a1:fe:6f:f8:fc:b2:d2:4d:99:13:9d:98:7a:b6:31:d6:3a:b6: 3f:bd:44:1b:5a:76:a2:a0:17:cf:6b:b3:91:bf:93:59:9f:6b: 3e:b9:ec:be:ed:01:b1:71:24:8a:de:03:46:fd:f4:3b:c7:84: aa:5a:a2:a3:8b:6f:ad:09:9d:94:65:d7:1e:d1:16:da:83:20: ee:50:cc:fc:cb:a4:f2:3d:db:f9:9f:9b:52:2e:bd:8a:14:28: 05:9f:e1:17:c8:fd:2f:52:3f:2e:4c:f8:21:ad:fc:b0:81:6d: 70:aa:cf:22:04:78:10:2b:f7:19:2f:ad:c9:58:6c:0c:1b:fa: ca:80:39:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAcAU79pPjGSwBjWUAjdmz6g5oDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNDExMjQwODQ3MDlaFw0yNDExMjcxMzUwMDlaMDMxMTAvBgNV BAMTKDYyNDVGODkxQ0IzNTFDQUYzQTBDNENCMEE0QUVBNUQ0RDgxM0Y2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNyBX/SW7z6k5numql84p9Mgp pzJyQkPclr8VbaDv6gdpKp+tBD9hh0qaYkUBJYhSH9lG30eVaovzT5JB+sjFc1Ql 18Y3S8fEL8gqTbj+4X1IcMG5207MpEI2zt3M/AkSncGeFr+1RCAcQxzaGAVpCfNx efPW6ARWvKp0OrkVq2n+6YjsJh7fpEidlnQ2gRfEE5wcZxLGDjmJSXkTkuQs+FJY RUKfVPHvbIXAVpvJgULGylGOkUHyguIEhyXpFAXXmv326tT7TwzS+HyfYEvHylzl jYnJmAGDWwD4hjYbkcZrSdt1JhfOkiOIGMpaS+hsQ+yMkSp/BkXVoSfWP3sdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYkX4kcs1HK86DEywpK6l1NgT9iowHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABM7EdqB/ENYJwfmyWJ+qG7TCXEHNkcLhXXy ayvDNL76xlWGWsnaCc2hdUCsbSqECJ1ayi1i1j4aEctDv8fM3EomfBNQIH13pIHN ukUIBOasEgpPbnRGtY7Vo34KzpjIo/eF7Txnj80qwi3ux7niJ7RsN92raTx4NWDo RTANaaH+b/j8stJNmROdmHq2MdY6tj+9RBtadqKgF89rs5G/k1mfaz657L7tAbFx JIreA0b99DvHhKpaoqOLb60JnZRl1x7RFtqDIO5QzPzLpPI92/mfm1IuvYoUKAWf 4RfI/S9SPy5M+CGt/LCBbXCqzyIEeBAr9xkvrclYbAwb+sqAOTs= -----END CERTIFICATE-----Generated at Sun Nov 24 10:18:22 2024 by rpki-client on console-fra.rpki-client.org