$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: 3r1nPJHpGvbxaBH8x7iW569+ZMsS6WfhsnZmNqNKgL0= Subject key identifier: 64:35:DD:32:18:CD:FE:69:AD:FB:82:B6:25:06:EC:34:B0:05:1A:5B Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 4F1EBC07EB24545498315CB33210C25A30A050C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 042F Signing time: Sun 19 May 2024 06:00:58 +0000 Manifest this update: Sun 19 May 2024 05:55:58 +0000 Manifest next update: Wed 22 May 2024 07:18:58 +0000 Files and hashes: 1: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: 9/L1p3+0vmkyL64UElQg6Czq4tuj68eoEVs9/y/+VQs=) 2: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: vGlTFDm85jw/H6QUE2lsygNRtCd7oXn0kLjm1KgmSA0=) 3: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: Airuh6lDEeoF5+KK8jnaYxBOexrfQLs+NyNnh6XSIPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1e:bc:07:eb:24:54:54:98:31:5c:b3:32:10:c2:5a:30:a0:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: May 19 05:55:58 2024 GMT Not After : May 22 07:18:58 2024 GMT Subject: CN=6435DD3218CDFE69ADFB82B62506EC34B0051A5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ee:6b:0a:b8:bb:80:7b:34:9c:06:15:a7:86: 82:5e:ff:55:8a:b8:ca:ae:1c:c7:91:ab:b9:88:0f: c9:21:3a:70:2d:47:ae:bd:c7:6a:c2:1d:5d:56:cd: a4:4f:3e:93:30:55:71:99:e1:07:41:4c:0a:95:82: 88:b3:ab:31:59:b3:a6:4b:44:a8:c0:11:0c:65:da: b1:f5:f6:22:0c:86:a6:dc:7a:cd:7d:ef:0d:b3:24: 7e:6f:0a:ca:7f:54:71:cc:cb:5e:7c:f9:c4:29:db: a6:6a:79:dc:2a:f7:b9:07:ac:69:e1:fa:d7:fc:9d: 6d:5f:76:6a:02:98:97:cc:dd:cf:b2:fd:d4:0f:59: 56:2a:46:4f:d9:be:ab:13:d4:c3:f0:9c:fe:6b:9f: 32:f6:77:c0:bd:08:2b:16:a0:5c:f9:76:74:f9:46: 69:0a:db:ca:43:69:87:8f:c1:91:b6:cc:bf:f0:b3: aa:61:60:91:dd:5c:19:84:df:2b:ed:57:d5:2f:f4: 25:d4:33:a7:3c:bf:38:5b:ea:68:fa:8a:5a:aa:1f: 21:10:e8:b8:dc:56:87:e7:7f:2f:d4:1a:9d:26:c5: 1a:a9:2e:06:d8:37:6f:6f:22:9a:03:25:b1:77:84: b2:e2:71:e2:6b:b0:95:04:78:26:f6:ae:74:41:5b: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:35:DD:32:18:CD:FE:69:AD:FB:82:B6:25:06:EC:34:B0:05:1A:5B X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:59:eb:56:aa:cd:73:10:1f:9e:89:91:f9:fa:3e:3b:87:b3: 1f:13:b5:d8:2f:8a:f3:23:37:99:2e:0c:8d:27:1b:f3:e9:c2: 42:d7:a3:b1:02:47:a7:a7:13:e7:5d:39:dd:2f:ce:36:a9:c5: c5:ff:43:b6:99:9a:12:4f:ae:07:1e:5d:6f:f2:19:a7:e6:8c: 1b:fd:2c:2b:27:09:f1:86:a3:59:5e:77:91:f8:b0:83:7f:60: dc:2a:ea:ce:48:d2:e1:98:ff:7c:8a:e7:6f:75:9f:df:fa:59: c9:95:88:9e:a2:3b:f0:3d:78:83:bc:9d:7c:bd:67:06:31:23: 5f:be:34:2d:27:f0:f7:17:96:a4:05:44:11:6a:a8:88:13:cc: 34:b9:e4:59:bc:35:f5:16:d8:bf:bb:9a:6c:b8:47:4f:c8:94: cc:68:2a:fe:ee:e5:9f:3d:23:2a:87:93:30:63:65:89:39:a4: ce:0c:33:54:5a:77:17:97:bd:57:e1:79:06:b8:8a:72:53:1a: b9:04:78:c9:5c:19:1a:56:7c:72:e8:dc:e2:6f:9a:4c:62:85: 53:e7:64:99:42:8b:97:f9:63:f3:8a:d0:31:0e:88:ee:e9:ea: aa:a5:d6:42:d6:38:93:3c:ad:b8:2f:6e:69:80:b1:8b:07:e0: 76:90:c1:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTx68B+skVFSYMVyzMhDCWjCgUMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNDA1MTkwNTU1NThaFw0yNDA1MjIwNzE4NThaMDMxMTAvBgNV BAMTKDY0MzVERDMyMThDREZFNjlBREZCODJCNjI1MDZFQzM0QjAwNTFBNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7msKuLuAezScBhWnhoJe/1WK uMquHMeRq7mID8khOnAtR669x2rCHV1WzaRPPpMwVXGZ4QdBTAqVgoizqzFZs6ZL RKjAEQxl2rH19iIMhqbces197w2zJH5vCsp/VHHMy158+cQp26Zqedwq97kHrGnh +tf8nW1fdmoCmJfM3c+y/dQPWVYqRk/ZvqsT1MPwnP5rnzL2d8C9CCsWoFz5dnT5 RmkK28pDaYePwZG2zL/ws6phYJHdXBmE3yvtV9Uv9CXUM6c8vzhb6mj6ilqqHyEQ 6LjcVofnfy/UGp0mxRqpLgbYN29vIpoDJbF3hLLiceJrsJUEeCb2rnRBW9XVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZDXdMhjN/mmt+4K2JQbsNLAFGlswHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtZ61aqzXMQH56Jkfn6PjuHsx8TtdgvivMj N5kuDI0nG/PpwkLXo7ECR6enE+ddOd0vzjapxcX/Q7aZmhJPrgceXW/yGafmjBv9 LCsnCfGGo1led5H4sIN/YNwq6s5I0uGY/3yK5291n9/6WcmViJ6iO/A9eIO8nXy9 ZwYxI1++NC0n8PcXlqQFRBFqqIgTzDS55Fm8NfUW2L+7mmy4R0/IlMxoKv7u5Z89 IyqHkzBjZYk5pM4MM1RadxeXvVfheQa4inJTGrkEeMlcGRpWfHLo3OJvmkxihVPn ZJlCi5f5Y/OK0DEOiO7p6qql1kLWOJM8rbgvbmmAsYsH4HaQwZo= -----END CERTIFICATE-----Generated at Sun May 19 07:40:10 2024 by rpki-client on console-fra.rpki-client.org