$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: KZuLBhlbHMlpjlyLJRdD9lHkqNPmTF1Hksm3+H8iId4= Subject key identifier: 43:CE:12:87:63:6A:18:46:52:17:F5:69:94:84:3C:4D:9E:40:02:8A Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 363DE19D6ABB45618BD9AD19545F81531FC74B56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 03CB Signing time: Fri 17 May 2024 20:10:35 +0000 Manifest this update: Fri 17 May 2024 20:05:35 +0000 Manifest next update: Tue 21 May 2024 07:52:35 +0000 Files and hashes: 1: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: 8Bx58tzxnAqAyIzCbwh2LPklxe5s25Ls9H4EIporoMw=) 2: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: 0tb7WibZG2une9C+kTkaXOGHtpzhAHXDOe1e9c/dkrA=) 3: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: VTOdkCSYRKSou4rbseqq1kv2MBANgI/9GK14MkL+qok=) 4: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: WYLYbFMp4adHQ+xFiBJKAXKz49ArrnghqR34FQIprEI=) 5: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: rn/Lk1HOU9ifhpJDeFgYsaJG8Tlb26J53a/080xefJE=) 6: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: /yE9hxH5qk25qcRz3ccfkBOSvhOQL+WqsnAaeuhlbEk=) 7: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: eCRTSgGgSk7Dr0G5UGbAuy4UfTW9+pIO+NeF/IoLPSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3d:e1:9d:6a:bb:45:61:8b:d9:ad:19:54:5f:81:53:1f:c7:4b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: May 17 20:05:35 2024 GMT Not After : May 21 07:52:35 2024 GMT Subject: CN=43CE1287636A18465217F56994843C4D9E40028A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:2e:d8:30:15:fe:49:38:d4:38:a4:3a:7c: 11:e2:94:c0:9b:14:b3:4f:e1:04:c5:93:46:2b:df: e1:d6:aa:ce:5c:9f:38:d7:d2:d6:5d:a8:19:ea:15: cf:35:53:34:7f:8e:9c:52:dd:dc:cf:22:79:1c:25: 9a:64:39:f3:1c:b9:36:d4:a7:1c:c8:b2:9c:77:41: 21:7f:8e:f1:93:16:58:e5:e4:1d:f5:8f:a2:7f:39: 9e:98:31:22:3d:dd:11:56:25:22:f6:30:bd:2d:af: 79:9b:1a:0b:ea:8b:ce:1b:65:fb:60:34:08:52:84: c4:d7:8a:20:5c:59:3a:f5:6f:dc:b4:93:6a:a9:fa: c7:3f:c1:83:a6:fc:c5:e0:68:15:95:17:31:1d:e1: 9d:eb:1b:1b:d8:0b:ea:02:75:3e:64:ea:ae:c3:b7: 24:27:91:24:33:78:ea:fe:02:ee:60:71:a5:a7:15: f3:7d:f9:11:02:f9:68:e6:08:14:65:64:a3:22:ba: ee:97:70:9d:7a:f3:a5:5b:b6:d8:2b:a5:d5:7d:ae: 12:1b:09:94:b0:96:e9:d1:ed:a5:2b:fb:66:eb:05: ac:6e:38:0b:0c:e6:50:bd:e3:ea:c4:5d:f2:d3:40: ae:36:6f:bd:f8:3f:2b:a6:bd:7c:e8:c2:c4:63:3a: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CE:12:87:63:6A:18:46:52:17:F5:69:94:84:3C:4D:9E:40:02:8A X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8c:9f:2b:da:3e:a5:d0:ec:b1:a2:df:54:cd:69:a1:cc:85: d8:b5:b6:7e:f2:dd:db:3b:d8:ef:7b:52:13:5d:ec:e6:82:b3: 07:9f:78:cb:f6:30:9c:b7:15:33:42:41:a0:48:9a:ff:bc:49: 4b:bf:3d:2f:8c:91:44:3b:6b:54:4c:5d:f7:9b:61:06:0e:ae: 2e:fb:65:13:c3:60:2c:97:85:54:0c:7d:6d:aa:84:91:7a:c3: 4f:c8:dd:08:31:54:26:25:15:05:c1:73:62:f9:48:06:40:81: f4:e0:07:69:e2:c2:3c:8a:76:bd:e5:44:51:a1:f9:3a:78:40: 8e:a4:e1:fd:a9:13:92:ef:54:40:f7:78:c2:2e:72:f6:05:aa: 05:4f:9f:0a:e6:2a:97:f4:0c:51:db:ec:f0:0e:b6:53:85:dc: 1b:a9:c1:5a:a0:2c:74:06:ee:f2:b5:8e:fc:67:2a:65:ac:d7: b8:ef:32:0d:c5:9c:fa:e3:e0:bb:20:38:c3:94:5a:91:f7:af: e8:dd:08:3c:0a:8f:6e:eb:3a:93:bf:c2:28:c9:d2:1a:e7:7e: 1b:f9:b0:b4:38:2e:60:61:75:4a:23:95:f7:3b:c7:9f:ec:cf: 5e:b2:f8:c9:cb:1a:f0:01:b2:d5:f9:25:68:98:61:bd:ad:d4: 1f:f7:a5:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNj3hnWq7RWGL2a0ZVF+BUx/HS1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNDA1MTcyMDA1MzVaFw0yNDA1MjEwNzUyMzVaMDMxMTAvBgNV BAMTKDQzQ0UxMjg3NjM2QTE4NDY1MjE3RjU2OTk0ODQzQzREOUU0MDAyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUuy7YMBX+STjUOKQ6fBHilMCb FLNP4QTFk0Yr3+HWqs5cnzjX0tZdqBnqFc81UzR/jpxS3dzPInkcJZpkOfMcuTbU pxzIspx3QSF/jvGTFljl5B31j6J/OZ6YMSI93RFWJSL2ML0tr3mbGgvqi84bZftg NAhShMTXiiBcWTr1b9y0k2qp+sc/wYOm/MXgaBWVFzEd4Z3rGxvYC+oCdT5k6q7D tyQnkSQzeOr+Au5gcaWnFfN9+REC+WjmCBRlZKMiuu6XcJ1686VbttgrpdV9rhIb CZSwlunR7aUr+2brBaxuOAsM5lC94+rEXfLTQK42b734PyumvXzowsRjOpoZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ84Sh2NqGEZSF/VplIQ8TZ5AAoowHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSMnyvaPqXQ7LGi31TNaaHMhdi1tn7y3ds7 2O97UhNd7OaCswefeMv2MJy3FTNCQaBImv+8SUu/PS+MkUQ7a1RMXfebYQYOri77 ZRPDYCyXhVQMfW2qhJF6w0/I3QgxVCYlFQXBc2L5SAZAgfTgB2niwjyKdr3lRFGh +Tp4QI6k4f2pE5LvVED3eMIucvYFqgVPnwrmKpf0DFHb7PAOtlOF3BupwVqgLHQG 7vK1jvxnKmWs17jvMg3FnPrj4LsgOMOUWpH3r+jdCDwKj27rOpO/wijJ0hrnfhv5 sLQ4LmBhdUojlfc7x5/sz16y+MnLGvABstX5JWiYYb2t1B/3pa4= -----END CERTIFICATE-----Generated at Fri May 17 21:06:47 2024 by rpki-client on console-ams.rpki-client.org