$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: 6h2mnPqf11mc5rqwmZnCqltQ8ykrzs0J2xI4f1/7N7Y= Subject key identifier: B0:57:7D:B7:50:64:BF:42:91:C4:19:02:D2:D1:31:70:94:23:DB:AA Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 05A12ACB14547843A8361C9D94233E0D0E055FFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 0126 Signing time: Sat 18 May 2024 02:21:42 +0000 Manifest this update: Sat 18 May 2024 02:16:42 +0000 Manifest next update: Tue 21 May 2024 07:50:42 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: RtapAmq0AdhoIckA1cbUzQglD/svw0ka4A1dgcAQ+Rw=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 9eEhAiwPEk41hS4EShBuHySZFu9xW3gx4oFfmlbWZPg=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: VxUtS32mVNjNaRblEVp2E2xsi5RhwU0w6HhnxpR12SM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a1:2a:cb:14:54:78:43:a8:36:1c:9d:94:23:3e:0d:0e:05:5f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: May 18 02:16:42 2024 GMT Not After : May 21 07:50:42 2024 GMT Subject: CN=B0577DB75064BF4291C41902D2D131709423DBAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:a7:1e:d4:d5:a4:1f:af:36:d2:8e:1c:30: 99:e4:e0:f9:36:6e:b1:46:90:c4:9d:b5:f9:68:a9: f7:1a:a3:12:48:8b:6b:1d:ea:2d:c6:e4:43:a7:e8: 03:cd:b1:e1:9e:e9:67:a5:4c:5f:54:5e:5a:03:dc: c6:c9:dc:74:05:e0:81:bc:08:91:bf:96:ab:63:b9: ed:f7:c9:53:65:07:cc:09:9a:6e:b4:71:0d:cb:cb: d0:01:56:e5:38:c9:a3:60:bc:32:b5:95:1b:c4:ab: 8b:26:ce:97:f8:77:07:82:e4:a6:d6:e7:cf:2a:36: b0:e6:3d:4f:bb:be:72:87:37:d9:b1:fb:b6:88:07: cf:07:dc:a5:e6:b1:96:3b:5e:e1:bd:d3:f5:2f:d9: ea:4e:30:8c:06:d5:a2:ad:47:c0:8b:5b:84:26:dd: 3f:3a:65:61:17:8a:d8:08:41:c9:4c:d4:a5:0f:ac: ee:7f:7d:2e:d0:63:c4:fd:e1:77:83:9a:22:21:91: c0:76:f7:ed:81:d6:53:30:92:a9:bf:f9:b4:9f:d9: 45:95:0d:a9:20:ac:21:16:2f:89:92:d2:77:cf:f3: 21:a8:3e:d9:88:2b:94:df:f5:e9:f2:89:7c:d7:86: fb:6a:26:a3:6c:a9:3f:0f:e8:f7:6a:55:ff:a2:bc: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:57:7D:B7:50:64:BF:42:91:C4:19:02:D2:D1:31:70:94:23:DB:AA X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:84:ff:9c:59:96:f5:fa:80:1e:9b:9e:b5:66:41:4a:42:93: bd:52:cd:d6:f3:1d:d3:9a:bd:7e:ef:d2:28:d0:49:48:75:2c: 87:74:7b:4c:29:6f:49:2c:4a:90:0c:10:62:35:d3:6e:e7:b4: de:57:16:90:bf:c2:82:4e:62:74:67:12:c7:70:da:fd:ca:70: f5:f7:d9:82:05:37:09:89:df:e2:11:58:80:21:9f:ac:51:62: 9f:d2:74:bc:78:53:2b:80:7c:f1:6a:71:6f:e9:6b:23:cb:d8: a4:d8:7b:9e:ed:35:7d:e1:8b:00:ed:97:b3:9e:10:14:87:2e: e8:95:9e:27:8b:e4:95:a3:7d:58:99:72:b1:60:ef:92:b1:a1: e8:12:88:c3:fe:81:ec:0f:37:df:a0:a5:96:25:34:db:10:82: 69:df:77:43:e8:c1:bc:b8:1f:6d:08:96:28:5c:91:f3:8e:0e: ce:b3:f1:72:39:61:da:94:86:1d:0d:46:2c:cf:80:ee:99:45: 6c:33:9e:8a:9c:45:eb:b7:a2:7f:1d:28:d9:c7:55:a4:62:9d: 30:74:24:cb:15:65:05:59:21:c8:d1:0a:4b:50:ea:2e:89:eb: 45:43:12:66:62:18:75:27:27:94:92:6a:e1:36:91:1e:f8:69: aa:c0:28:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaEqyxRUeEOoNhydlCM+DQ4FX/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNDA1MTgwMjE2NDJaFw0yNDA1MjEwNzUwNDJaMDMxMTAvBgNV BAMTKEIwNTc3REI3NTA2NEJGNDI5MUM0MTkwMkQyRDEzMTcwOTQyM0RCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2N6ce1NWkH6820o4cMJnk4Pk2 brFGkMSdtfloqfcaoxJIi2sd6i3G5EOn6APNseGe6WelTF9UXloD3MbJ3HQF4IG8 CJG/lqtjue33yVNlB8wJmm60cQ3Ly9ABVuU4yaNgvDK1lRvEq4smzpf4dweC5KbW 588qNrDmPU+7vnKHN9mx+7aIB88H3KXmsZY7XuG90/Uv2epOMIwG1aKtR8CLW4Qm 3T86ZWEXitgIQclM1KUPrO5/fS7QY8T94XeDmiIhkcB29+2B1lMwkqm/+bSf2UWV DakgrCEWL4mS0nfP8yGoPtmIK5Tf9enyiXzXhvtqJqNsqT8P6PdqVf+ivD/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsFd9t1Bkv0KRxBkC0tExcJQj26owHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCE/5xZlvX6gB6bnrVmQUpCk71SzdbzHdOa vX7v0ijQSUh1LId0e0wpb0ksSpAMEGI1027ntN5XFpC/woJOYnRnEsdw2v3KcPX3 2YIFNwmJ3+IRWIAhn6xRYp/SdLx4UyuAfPFqcW/payPL2KTYe57tNX3hiwDtl7Oe EBSHLuiVnieL5JWjfViZcrFg75KxoegSiMP+gewPN9+gpZYlNNsQgmnfd0Powby4 H20IlihckfOODs6z8XI5YdqUhh0NRizPgO6ZRWwznoqcReu3on8dKNnHVaRinTB0 JMsVZQVZIcjRCktQ6i6J60VDEmZiGHUnJ5SSauE2kR74aarAKL4= -----END CERTIFICATE-----Generated at Sat May 18 03:47:49 2024 by rpki-client on console-fra.rpki-client.org