$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: 1iDQJxD9reHOLVL7pRSXFW8wdI1D85HmlYDAPxTV3o8= Subject key identifier: 3E:B6:B1:E0:43:13:B2:73:8B:00:BE:DD:18:02:47:2C:1A:C8:86:F5 Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 74A1A702455664340317A7FC88C6FE1F7BE4520C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 0483 Signing time: Fri 22 Nov 2024 01:01:17 +0000 Manifest this update: Fri 22 Nov 2024 00:56:17 +0000 Manifest next update: Mon 25 Nov 2024 08:49:17 +0000 Files and hashes: 1: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: Mr5ErEBqdBC2buYePutImdJn7Wzg8nlpibvn6SwM4SA=) 2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: czpyfmW5qXUOgmdTX+fLvnr7WIFjh3STKQ+hvn+zqQg=) 3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: +wADgBbGHlnAaJF9ne9rrntz6G0qBIbnlfj6NpTrwJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a1:a7:02:45:56:64:34:03:17:a7:fc:88:c6:fe:1f:7b:e4:52:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Nov 22 00:56:17 2024 GMT Not After : Nov 25 08:49:17 2024 GMT Subject: CN=3EB6B1E04313B2738B00BEDD1802472C1AC886F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:90:98:94:e3:6b:08:02:70:83:91:eb:3b: 0b:61:f1:de:df:ce:aa:f1:36:01:88:c2:09:bc:2a: 7d:68:ff:75:a0:f8:3c:f8:73:24:94:e4:86:fd:38: 6f:2a:4d:06:71:b7:60:d7:35:f4:55:48:d9:4f:25: 35:50:53:04:14:bd:fc:df:69:0d:e7:05:ae:64:c6: a7:bd:ec:5f:11:60:11:37:4b:ed:9d:77:f3:59:b5: 6d:8c:2c:d6:d8:a3:b6:47:8d:56:9c:b1:f4:8f:2b: 11:ae:ae:d1:e2:28:9b:91:1e:04:1c:89:77:18:b9: 82:55:99:94:2c:d2:67:e6:71:d3:03:2d:aa:9f:77: ad:19:e0:00:5b:39:5d:2f:d8:68:3f:bd:04:5e:c5: f7:96:4a:0a:d9:54:8d:c4:a3:79:56:ae:df:07:69: 87:06:e6:d1:fb:34:71:da:65:ee:01:e4:eb:cc:89: fa:85:5f:e9:24:e6:6c:8c:b9:98:5d:ee:24:0c:c1: 0b:01:7d:01:44:4a:f4:00:96:ec:88:a5:d3:b8:8c: 1c:ce:ed:54:d7:b5:35:22:3f:83:4b:8f:cb:8c:c9: 78:ff:62:1d:f3:1f:be:31:3e:a8:96:ac:b4:d1:97: f0:a7:4d:e1:6d:bf:f2:b8:74:b1:70:3b:1b:be:99: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B6:B1:E0:43:13:B2:73:8B:00:BE:DD:18:02:47:2C:1A:C8:86:F5 X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ff:d1:16:6a:b3:c8:24:8e:1d:61:80:2d:97:cc:b0:f2:a8: 1a:9d:14:68:37:79:ed:ee:ee:a4:01:a7:2d:80:0c:65:e6:ca: ac:ab:b2:5e:bb:20:e2:4c:46:f2:42:05:df:52:4e:48:ab:e0: 5c:11:45:74:bb:10:86:13:b0:2c:b7:20:4b:1a:b6:65:83:30: 24:ad:02:9b:77:04:af:ae:6f:b1:45:6d:61:f1:0d:34:61:80: ac:ac:1b:df:7e:b1:14:94:24:02:dc:ac:5e:20:b8:5d:99:cc: 26:fa:83:3b:2b:86:a7:c4:33:81:e8:f8:15:7b:84:3c:05:c0: b7:62:f8:c5:f5:67:f4:13:a4:28:d4:82:6f:fa:5e:6d:b2:07: dc:16:14:d9:2b:39:20:ba:6b:4e:06:3c:89:06:d7:b0:48:52: 2e:2f:71:95:5e:83:99:e2:95:0f:09:5f:32:e0:8c:a3:3d:71: f2:1b:31:59:86:f7:05:e6:4d:ca:6e:4c:49:4c:9e:4a:6e:d2: e2:6e:65:16:da:de:97:9d:41:47:5a:06:f7:93:9b:38:b9:7e: 75:77:21:27:40:30:f9:55:50:39:ae:75:08:07:92:e3:94:ab: 87:fb:bd:9b:6b:94:08:da:db:35:7f:cb:25:43:a9:1e:00:3b: 76:64:df:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKGnAkVWZDQDF6f8iMb+H3vkUgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNDExMjIwMDU2MTdaFw0yNDExMjUwODQ5MTdaMDMxMTAvBgNV BAMTKDNFQjZCMUUwNDMxM0IyNzM4QjAwQkVERDE4MDI0NzJDMUFDODg2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlZCYlONrCAJwg5HrOwth8d7f zqrxNgGIwgm8Kn1o/3Wg+Dz4cySU5Ib9OG8qTQZxt2DXNfRVSNlPJTVQUwQUvfzf aQ3nBa5kxqe97F8RYBE3S+2dd/NZtW2MLNbYo7ZHjVacsfSPKxGurtHiKJuRHgQc iXcYuYJVmZQs0mfmcdMDLaqfd60Z4ABbOV0v2Gg/vQRexfeWSgrZVI3Eo3lWrt8H aYcG5tH7NHHaZe4B5OvMifqFX+kk5myMuZhd7iQMwQsBfQFESvQAluyIpdO4jBzO 7VTXtTUiP4NLj8uMyXj/Yh3zH74xPqiWrLTRl/CnTeFtv/K4dLFwOxu+mZvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPrax4EMTsnOLAL7dGAJHLBrIhvUwHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3/0RZqs8gkjh1hgC2XzLDyqBqdFGg3ee3u 7qQBpy2ADGXmyqyrsl67IOJMRvJCBd9STkir4FwRRXS7EIYTsCy3IEsatmWDMCSt Apt3BK+ub7FFbWHxDTRhgKysG99+sRSUJALcrF4guF2ZzCb6gzsrhqfEM4Ho+BV7 hDwFwLdi+MX1Z/QTpCjUgm/6Xm2yB9wWFNkrOSC6a04GPIkG17BIUi4vcZVeg5ni lQ8JXzLgjKM9cfIbMVmG9wXmTcpuTElMnkpu0uJuZRba3pedQUdaBveTmzi5fnV3 ISdAMPlVUDmudQgHkuOUq4f7vZtrlAja2zV/yyVDqR4AO3Zk3/8= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org