$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: ih64xnZUD/9b39ztfEec6GBKM69zoDOZoRarKiWfE8Y= Subject key identifier: CC:A7:01:87:0F:FF:EC:0E:1C:49:3B:4B:02:00:C8:35:77:12:83:E4 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 081AAFC9E7A39C610471AE1084A0A5F0C4953683 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: 16 Signing time: Sun 19 May 2024 15:30:53 +0000 Manifest this update: Sun 19 May 2024 15:25:53 +0000 Manifest next update: Thu 23 May 2024 00:33:53 +0000 Files and hashes: 1: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: jCfXp4rOC+UDS61cK93Q5dsWMLp5VYO/f/qX9+fHW8I=) 2: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: zyxKS/cy9zSAl8klOoc1HN2ppA8UffDsTV/dfq2i2pM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1a:af:c9:e7:a3:9c:61:04:71:ae:10:84:a0:a5:f0:c4:95:36:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: May 19 15:25:53 2024 GMT Not After : May 23 00:33:53 2024 GMT Subject: CN=CCA701870FFFEC0E1C493B4B0200C835771283E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:8d:a1:f0:24:dc:e7:f9:7a:1a:d0:b8:90: b2:d1:83:74:10:04:23:07:3b:f0:17:cd:4a:e0:f6: 01:d3:60:6e:29:3a:70:82:d8:76:23:8b:0a:f8:fc: b0:77:a9:17:d5:1e:5a:1a:a2:ff:d2:98:8c:58:d8: 7d:3e:8f:e7:f9:8e:19:d0:bb:73:87:d7:d8:e3:83: 2e:36:4e:ae:67:17:21:b7:20:80:9f:98:85:92:65: ac:7a:70:a6:47:4e:d6:05:e8:e0:81:ad:cb:b3:25: cc:a1:09:15:7a:5c:61:98:1d:a6:51:5e:43:fa:87: 20:c4:16:f5:34:93:4e:31:fb:aa:ab:9c:da:fa:b5: 17:33:0a:40:eb:17:ea:88:fc:59:ce:ad:fc:40:0f: c4:8b:9f:30:04:09:84:38:85:56:9d:32:8c:07:c5: 14:cb:8d:e7:4d:67:c4:03:b2:3b:8e:b6:3f:12:78: 26:f1:90:2c:d6:2c:60:6a:f0:4f:82:b5:5a:44:98: 0e:35:29:ea:5c:b4:39:13:8b:d4:52:71:95:83:94: 8f:87:98:fd:ef:ca:f7:3e:17:fe:4c:09:92:af:5d: d5:ba:99:b6:fc:11:d1:5f:b1:d0:8f:7e:0a:f3:67: 86:91:8d:87:4e:22:b6:4d:e3:2b:5a:12:96:1c:9d: ff:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A7:01:87:0F:FF:EC:0E:1C:49:3B:4B:02:00:C8:35:77:12:83:E4 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:48:5a:45:d9:f9:b1:5f:c4:0f:49:8e:66:fc:e8:7c:70:97: 34:a9:6c:aa:39:4a:b9:e5:ca:ee:bf:01:05:30:98:33:ff:0a: a5:ee:d2:3d:0e:d0:30:05:56:93:fb:47:e2:e9:2a:aa:75:81: 20:33:4f:86:c1:dc:98:b0:a6:b7:45:24:bf:1f:fb:e2:e6:07: 87:e6:06:47:33:ac:92:6f:d2:84:68:15:c2:6a:94:ca:eb:1f: 34:2c:26:47:26:d9:79:b6:83:9e:81:ff:ac:1c:bd:9c:f1:68: f2:98:8c:be:1d:22:ba:59:9e:a6:0d:b0:e2:12:31:79:07:46: 4d:7a:5d:f6:37:83:74:c3:d0:d7:3a:da:b6:7e:b3:6d:ff:79: 67:b4:b0:61:0f:ad:4a:9b:cd:28:d7:7d:48:d4:25:dc:86:7d: 77:8c:4d:9c:8b:47:ca:db:42:a1:96:c2:26:57:5e:ed:14:7b: eb:4a:20:37:35:42:24:1e:34:3b:d8:4b:f6:94:23:8b:a5:90: b2:0b:d8:0f:e1:af:27:72:95:e2:84:d4:93:74:db:c9:69:04: 78:90:50:58:ba:47:bb:39:46:e6:09:42:d6:d4:9f:10:27:b8: 74:aa:9b:6c:62:95:1f:62:7b:bb:df:43:ae:78:65:52:95:c3: 48:a4:9f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBqvyeejnGEEca4QhKCl8MSVNoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNDA1MTkxNTI1NTNaFw0yNDA1MjMwMDMzNTNaMDMxMTAvBgNV BAMTKENDQTcwMTg3MEZGRkVDMEUxQzQ5M0I0QjAyMDBDODM1NzcxMjgzRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrX42h8CTc5/l6GtC4kLLRg3QQ BCMHO/AXzUrg9gHTYG4pOnCC2HYjiwr4/LB3qRfVHloaov/SmIxY2H0+j+f5jhnQ u3OH19jjgy42Tq5nFyG3IICfmIWSZax6cKZHTtYF6OCBrcuzJcyhCRV6XGGYHaZR XkP6hyDEFvU0k04x+6qrnNr6tRczCkDrF+qI/FnOrfxAD8SLnzAECYQ4hVadMowH xRTLjedNZ8QDsjuOtj8SeCbxkCzWLGBq8E+CtVpEmA41KepctDkTi9RScZWDlI+H mP3vyvc+F/5MCZKvXdW6mbb8EdFfsdCPfgrzZ4aRjYdOIrZN4ytaEpYcnf+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzKcBhw//7A4cSTtLAgDINXcSg+QwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1IWkXZ+bFfxA9Jjmb86HxwlzSpbKo5Srnl yu6/AQUwmDP/CqXu0j0O0DAFVpP7R+LpKqp1gSAzT4bB3JiwprdFJL8f++LmB4fm BkczrJJv0oRoFcJqlMrrHzQsJkcm2Xm2g56B/6wcvZzxaPKYjL4dIrpZnqYNsOIS MXkHRk16XfY3g3TD0Nc62rZ+s23/eWe0sGEPrUqbzSjXfUjUJdyGfXeMTZyLR8rb QqGWwiZXXu0Ue+tKIDc1QiQeNDvYS/aUI4ulkLIL2A/hrydyleKE1JN028lpBHiQ UFi6R7s5RuYJQtbUnxAnuHSqm2xilR9ie7vfQ654ZVKVw0ikn7k= -----END CERTIFICATE-----Generated at Sun May 19 16:36:51 2024 by rpki-client on console-fra.rpki-client.org