$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: 32Sr+RUPdtSkIj/OvfTt8bLZr2An21994pwP20EaMW8= Subject key identifier: 34:0D:CD:E6:A8:B1:B1:D8:C9:41:0B:85:DA:F3:8D:0E:03:60:03:45 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 2D5ADC5B7E627D0E79B04A4864972BCD201716DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: 69 Signing time: Fri 22 Nov 2024 11:31:07 +0000 Manifest this update: Fri 22 Nov 2024 11:26:07 +0000 Manifest next update: Mon 25 Nov 2024 19:07:07 +0000 Files and hashes: 1: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: LmSdy6D4W9h0LKE152hwAW67Mx45Rawu3GbR59Jg8H4=) 2: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: zyxKS/cy9zSAl8klOoc1HN2ppA8UffDsTV/dfq2i2pM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5a:dc:5b:7e:62:7d:0e:79:b0:4a:48:64:97:2b:cd:20:17:16:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Nov 22 11:26:07 2024 GMT Not After : Nov 25 19:07:07 2024 GMT Subject: CN=340DCDE6A8B1B1D8C9410B85DAF38D0E03600345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:07:59:13:ea:81:28:3b:2c:f1:7a:d4:9f: 82:d6:83:85:b5:23:b5:14:28:3c:b7:a4:91:4c:c9: ef:c2:95:ef:3d:26:28:d6:a9:30:a1:8c:98:2e:ac: 89:8e:84:04:e5:b3:7d:63:fb:95:a1:69:8c:62:6f: 19:ab:3d:e6:46:d5:f8:f1:0a:26:36:64:7a:a6:b9: ab:27:5c:2c:44:d0:b3:66:92:03:c8:5d:0a:f3:3f: ca:d3:fc:ed:64:e0:1d:76:48:58:36:e6:bd:c2:16: eb:fc:8c:2a:67:58:67:22:45:5c:eb:e8:f4:b3:fd: 2c:05:37:d4:6c:90:64:07:56:9a:0b:7d:91:ff:43: 20:fb:58:fd:48:19:5e:72:74:9d:5c:9b:e3:15:75: c7:57:5d:65:6b:5b:72:b9:56:1b:22:29:1c:90:0c: c8:2b:46:2a:a2:57:a8:75:ad:b4:9e:97:23:2e:35: 4c:c4:35:66:e0:52:b6:c4:1c:d4:5f:be:a9:11:b6: 6f:5f:2e:a4:90:66:67:ec:26:b9:5b:4e:3f:a9:6f: e4:9b:b3:af:53:d0:cf:b3:7b:d7:52:11:8b:7f:e5: ca:3e:21:57:00:5b:e3:a8:1d:eb:fd:83:62:e9:44: 06:51:0a:27:81:44:96:dd:96:d0:ad:f4:13:86:8b: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0D:CD:E6:A8:B1:B1:D8:C9:41:0B:85:DA:F3:8D:0E:03:60:03:45 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:b0:f4:50:16:80:10:84:52:16:7f:52:88:40:1b:52:d4:9f: d1:62:86:a6:3d:44:1b:33:4f:cc:ca:e2:84:f5:19:5c:70:53: a7:1d:00:25:fd:ac:ab:ba:02:3b:5a:b7:f9:82:16:61:85:90: 0a:0b:d3:f8:1b:02:50:2c:c0:df:93:01:97:5b:e3:37:b7:6c: a5:aa:bd:44:97:e8:bc:6d:7e:eb:e3:7a:4e:8b:e9:c0:99:f1: 4b:01:b4:0b:93:81:83:d4:da:e3:81:e3:a0:9a:19:3f:a4:51: 8f:8c:5e:6f:a7:14:a4:dc:bf:2e:38:8a:9a:6f:f8:a4:7b:61: 13:fe:c5:79:e8:a9:9d:9c:aa:b5:23:6e:10:e9:54:da:c8:bd: 7e:d2:7e:6d:e9:be:fc:6c:d8:20:45:4e:0b:2f:07:94:61:1b: 37:e7:34:ce:d9:0a:b5:0b:dd:5a:1b:fd:31:0e:10:b3:51:e3: ce:ae:fb:c6:61:5f:bd:fd:85:a2:6b:fa:93:44:b2:12:fb:9c: ad:f9:11:f1:11:bc:0f:82:79:97:e1:f7:9d:08:b6:2d:d0:f0: 3f:19:2b:f1:32:51:a5:af:4f:0f:ea:3f:c2:32:9c:54:09:fe: 48:61:8d:98:4f:41:bc:55:2f:c9:b5:94:02:2e:2f:d7:28:14: 5d:8a:7e:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVrcW35ifQ55sEpIZJcrzSAXFtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNDExMjIxMTI2MDdaFw0yNDExMjUxOTA3MDdaMDMxMTAvBgNV BAMTKDM0MERDREU2QThCMUIxRDhDOTQxMEI4NURBRjM4RDBFMDM2MDAzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrwdZE+qBKDss8XrUn4LWg4W1 I7UUKDy3pJFMye/Cle89JijWqTChjJgurImOhATls31j+5WhaYxibxmrPeZG1fjx CiY2ZHqmuasnXCxE0LNmkgPIXQrzP8rT/O1k4B12SFg25r3CFuv8jCpnWGciRVzr 6PSz/SwFN9RskGQHVpoLfZH/QyD7WP1IGV5ydJ1cm+MVdcdXXWVrW3K5VhsiKRyQ DMgrRiqiV6h1rbSelyMuNUzENWbgUrbEHNRfvqkRtm9fLqSQZmfsJrlbTj+pb+Sb s69T0M+ze9dSEYt/5co+IVcAW+OoHev9g2LpRAZRCieBRJbdltCt9BOGi3+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNA3N5qixsdjJQQuF2vONDgNgA0UwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCw9FAWgBCEUhZ/UohAG1LUn9FihqY9RBsz T8zK4oT1GVxwU6cdACX9rKu6Ajtat/mCFmGFkAoL0/gbAlAswN+TAZdb4ze3bKWq vUSX6Lxtfuvjek6L6cCZ8UsBtAuTgYPU2uOB46CaGT+kUY+MXm+nFKTcvy44ippv +KR7YRP+xXnoqZ2cqrUjbhDpVNrIvX7Sfm3pvvxs2CBFTgsvB5RhGzfnNM7ZCrUL 3Vob/TEOELNR486u+8ZhX739haJr+pNEshL7nK35EfERvA+CeZfh950Iti3Q8D8Z K/EyUaWvTw/qP8IynFQJ/khhjZhPQbxVL8m1lAIuL9coFF2KftY= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org