$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: wbhrSlWTj+oUeLKN+22wMZyBO0Vf2JBxXzok3geGklg= Subject key identifier: 0E:B9:F4:18:DF:3A:B5:A1:A7:26:9B:E0:23:CA:3C:BB:2B:23:39:DF Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 72164C8E72A6DCEDE46106C56317B489C00614E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 017A Signing time: Wed 20 Nov 2024 21:31:57 +0000 Manifest this update: Wed 20 Nov 2024 21:26:57 +0000 Manifest next update: Sun 24 Nov 2024 02:12:57 +0000 Files and hashes: 1: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: MrMq1vmSsjx8+60pgP4jBoPEasKC/g1DeWLVozuft0A=) 2: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: 7Jfz8eiJsSKg/gqg6ezR1zzYl+cDG8GLXV5Z9IyWjlc=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: zBmW9Bk2lLkpCt+UwsQR1DXBR9F91BW/SX5QBgtlozE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 02:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:16:4c:8e:72:a6:dc:ed:e4:61:06:c5:63:17:b4:89:c0:06:14:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Nov 20 21:26:57 2024 GMT Not After : Nov 24 02:12:57 2024 GMT Subject: CN=0EB9F418DF3AB5A1A7269BE023CA3CBB2B2339DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5f:5d:26:81:e6:7f:47:70:b1:b8:83:8c:a5: 5b:3c:c8:f7:3f:89:8b:90:b0:82:c9:12:fa:4a:5c: e5:a1:bf:11:e2:83:c6:0f:06:24:ae:6f:fe:76:6f: 90:ec:74:07:7d:0f:14:92:02:0f:41:e8:18:0e:b6: 82:c7:50:6d:8e:8c:98:b4:1e:99:52:23:6e:0a:b0: e1:ad:68:a7:c7:c2:ee:3e:8b:fc:2d:c4:c0:48:3a: 2f:2d:4d:46:b0:27:5b:28:34:40:5e:ca:ae:3b:8e: 64:5b:95:2a:97:83:bf:93:00:9f:2f:59:7a:93:45: 6a:0f:b4:92:16:f4:20:85:d6:b1:95:30:35:09:4d: 5f:c6:c8:ef:1d:3f:e2:77:6e:a7:c0:84:1f:ea:33: 7d:2a:7d:2c:25:b6:0a:e0:71:f4:75:b7:e4:42:38: 1d:28:09:98:0d:00:c3:da:ee:62:c4:5c:59:be:af: e7:2b:1a:f0:9b:7d:7f:2d:65:de:5e:63:df:53:4c: 9a:0b:cc:76:04:38:85:33:12:67:92:2e:6b:f7:03: 7f:66:c4:b3:e8:fd:16:62:4b:4a:61:8b:26:62:89: 46:38:06:d4:67:26:83:8e:05:48:f9:80:ef:3c:12: fa:68:9b:90:0b:b3:22:97:7a:9c:a6:c3:b4:61:e1: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B9:F4:18:DF:3A:B5:A1:A7:26:9B:E0:23:CA:3C:BB:2B:23:39:DF X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9f:20:ff:f1:a5:42:6a:0f:32:9b:f1:18:73:e8:da:c9:ac: dd:fa:b1:9e:5b:c2:fc:5d:c4:e1:cb:24:73:5c:56:9c:b1:58: a3:8b:a0:bf:09:f5:d4:04:90:87:33:20:97:0e:92:9d:a7:29: c7:86:bd:dc:16:54:40:c9:56:a6:25:cf:ae:b0:b2:53:94:61: a2:27:f7:56:c1:bb:2e:ab:26:8c:c1:8f:08:6c:a5:bf:1c:eb: 29:59:a0:64:d1:8c:57:e9:a8:6b:da:ed:d1:9e:31:34:fa:2e: 14:0d:a7:ac:93:97:32:b2:89:37:18:82:bb:61:8c:d0:c2:1b: 3f:d0:b3:14:bc:f9:6d:13:b0:be:40:ff:1c:fe:6c:41:7b:6f: 3e:7e:ff:aa:3e:a4:af:42:31:5c:06:d0:37:c6:ed:f5:fe:ad: 94:d1:36:c8:b5:ee:db:2e:11:f7:fc:9e:fe:89:4d:2e:2e:2e: 87:87:60:31:25:1e:5a:1a:fe:bf:ca:4b:f5:a4:11:e2:8f:25: c1:77:eb:40:66:30:c6:92:30:e5:71:e1:9a:f7:d9:b5:21:15: 99:a5:2c:7f:5e:4d:54:ba:2b:e3:47:74:84:a7:16:5c:2a:dc: 5c:89:1d:37:41:cf:3e:d9:de:c1:8b:46:6f:b9:7b:2e:85:fe: 2d:80:db:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchZMjnKm3O3kYQbFYxe0icAGFOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNDExMjAyMTI2NTdaFw0yNDExMjQwMjEyNTdaMDMxMTAvBgNV BAMTKDBFQjlGNDE4REYzQUI1QTFBNzI2OUJFMDIzQ0EzQ0JCMkIyMzM5REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoX10mgeZ/R3CxuIOMpVs8yPc/ iYuQsILJEvpKXOWhvxHig8YPBiSub/52b5DsdAd9DxSSAg9B6BgOtoLHUG2OjJi0 HplSI24KsOGtaKfHwu4+i/wtxMBIOi8tTUawJ1soNEBeyq47jmRblSqXg7+TAJ8v WXqTRWoPtJIW9CCF1rGVMDUJTV/GyO8dP+J3bqfAhB/qM30qfSwltgrgcfR1t+RC OB0oCZgNAMPa7mLEXFm+r+crGvCbfX8tZd5eY99TTJoLzHYEOIUzEmeSLmv3A39m xLPo/RZiS0phiyZiiUY4BtRnJoOOBUj5gO88Evpom5ALsyKXepymw7Rh4c6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDrn0GN86taGnJpvgI8o8uysjOd8wHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+fIP/xpUJqDzKb8Rhz6NrJrN36sZ5bwvxd xOHLJHNcVpyxWKOLoL8J9dQEkIczIJcOkp2nKceGvdwWVEDJVqYlz66wslOUYaIn 91bBuy6rJozBjwhspb8c6ylZoGTRjFfpqGva7dGeMTT6LhQNp6yTlzKyiTcYgrth jNDCGz/QsxS8+W0TsL5A/xz+bEF7bz5+/6o+pK9CMVwG0DfG7fX+rZTRNsi17tsu Eff8nv6JTS4uLoeHYDElHloa/r/KS/WkEeKPJcF360BmMMaSMOVx4Zr32bUhFZml LH9eTVS6K+NHdISnFlwq3FyJHTdBzz7Z3sGLRm+5ey6F/i2A2yc= -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org