$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.mft (raw, json) Hash identifier: l6oEhCVE6M4cMBhTWAvVip5FtCD02AFOmJGjJDRImV8= Subject key identifier: 5E:62:59:01:3A:5B:6B:CF:0F:FB:DC:12:A6:C8:38:02:50:C2:34:09 Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Certificate serial: 61DD2129CE4A03D69679AED34D9D3ABB6CB953EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft Manifest number: CF Signing time: Sun 19 May 2024 06:41:58 +0000 Manifest this update: Sun 19 May 2024 06:36:58 +0000 Manifest next update: Wed 22 May 2024 15:55:58 +0000 Files and hashes: 1: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: 2coPKVs6UYgvaRhALb3U6qftTnGIwKrxHvCONmCCP9c=) 2: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: 0C7jpUpVTjmOGuK/oBK6p+XprH86Ru+jIJ70xZk5QLI=) 3: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: yyGDJTjbiIw2TBHu2C0tn5QD9FrUbybNbiDsekl6klA=) 4: 7433AB64571BE1827F0BC97ED291976B6E3429FA.crl (hash: Kn4Aii4CAW9Cch2QW5v0n5DvjU7F18oq7ppu55tsPJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:dd:21:29:ce:4a:03:d6:96:79:ae:d3:4d:9d:3a:bb:6c:b9:53:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Validity Not Before: May 19 06:36:58 2024 GMT Not After : May 22 15:55:58 2024 GMT Subject: CN=5E6259013A5B6BCF0FFBDC12A6C8380250C23409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:8f:c8:46:4a:a3:4e:30:2a:c6:f0:be:09: a1:ac:d4:1c:0b:1d:06:07:33:77:7c:f6:cc:8f:f9: a6:8f:50:e1:bb:66:2f:bb:9b:8d:96:cc:8b:b0:a1: a8:62:ab:70:d1:f1:18:31:60:fa:26:07:e1:6d:fd: ca:20:f0:7a:b1:dd:44:00:9b:43:9c:54:26:25:b1: 03:cc:69:86:ab:10:45:a1:84:d5:c6:c8:db:42:e1: 64:ce:a9:77:9d:fa:32:27:bf:ec:f2:b9:5d:8c:f8: 40:e9:aa:d5:84:88:af:c9:13:21:72:53:55:7b:93: 53:34:e7:ef:f9:94:6a:6b:23:c1:c3:3f:a9:7a:03: f8:3d:54:c7:be:61:95:b9:26:9f:7f:b2:76:1b:78: 1c:92:36:c1:d6:18:29:44:48:f4:37:74:e5:d6:63: e9:84:50:d5:c2:29:c5:55:9c:9a:c5:d0:66:a9:4f: 06:1e:cb:5e:b3:59:0b:86:9a:9d:ff:47:46:ca:ab: 03:14:8d:96:9c:bc:7a:c2:94:28:9d:6c:7c:8a:09: cf:79:b5:53:d1:1f:8c:ee:b3:dc:2e:d7:4c:c2:38: 31:ac:34:a2:ed:a5:18:63:1b:09:ff:56:76:93:81: 39:fb:b5:e7:5f:0c:52:6c:c6:77:a7:d5:20:9c:33: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:62:59:01:3A:5B:6B:CF:0F:FB:DC:12:A6:C8:38:02:50:C2:34:09 X509v3 Authority Key Identifier: keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:74:14:34:5d:b0:c9:3a:04:ec:2d:16:e9:fd:56:d6:00:cd: c9:12:31:85:fd:84:92:bf:06:27:50:b9:33:0b:c7:63:8f:b6: cc:89:a1:b6:07:6d:8b:21:2b:be:df:d1:5c:28:f8:fd:99:50: b6:8a:e4:65:9f:09:3b:a7:42:75:62:11:2e:04:d9:c9:dc:24: e1:5a:af:4e:88:20:ef:18:36:66:7b:27:77:94:a6:08:29:8e: 10:9f:e7:4c:e8:33:44:a5:b6:a0:c4:a2:12:31:de:bd:31:6f: 94:61:3b:4b:97:db:3d:b2:b0:14:d6:b4:76:16:67:d6:89:dd: 9f:ff:42:69:be:ed:fb:a3:a0:40:e2:9d:ad:28:04:63:26:ab: 4d:a2:f0:98:65:dd:9e:09:08:17:0a:27:d4:81:98:bc:3f:dc: 32:ef:d4:67:3d:64:7c:79:81:28:cb:7e:19:2b:32:6a:0c:fd: be:f2:4d:fd:66:09:ff:c3:46:8c:6f:27:91:17:60:a9:97:c7: fc:64:b2:73:fc:ab:57:81:5f:5c:a2:f1:a7:b6:fc:5a:d0:42: 1b:46:1e:4f:05:8d:fc:36:21:02:c7:3b:47:5b:c4:a3:5f:14: 6b:fb:08:e2:15:f5:8f:d6:c2:7d:27:82:f7:00:ed:49:75:0f: 61:37:eb:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYd0hKc5KA9aWea7TTZ06u2y5U+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2 RTM0MjlGQTAeFw0yNDA1MTkwNjM2NThaFw0yNDA1MjIxNTU1NThaMDMxMTAvBgNV BAMTKDVFNjI1OTAxM0E1QjZCQ0YwRkZCREMxMkE2QzgzODAyNTBDMjM0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3kI/IRkqjTjAqxvC+CaGs1BwL HQYHM3d89syP+aaPUOG7Zi+7m42WzIuwoahiq3DR8RgxYPomB+Ft/cog8Hqx3UQA m0OcVCYlsQPMaYarEEWhhNXGyNtC4WTOqXed+jInv+zyuV2M+EDpqtWEiK/JEyFy U1V7k1M05+/5lGprI8HDP6l6A/g9VMe+YZW5Jp9/snYbeBySNsHWGClESPQ3dOXW Y+mEUNXCKcVVnJrF0GapTwYey16zWQuGmp3/R0bKqwMUjZacvHrClCidbHyKCc95 tVPRH4zus9wu10zCODGsNKLtpRhjGwn/VnaTgTn7tedfDFJsxnen1SCcMw8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXmJZATpba88P+9wSpsg4AlDCNAkwHwYDVR0j BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3 MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0 MjlGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3 NkI2RTM0MjlGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZ0FDRdsMk6BOwtFun9VtYAzckSMYX9hJK/ BidQuTMLx2OPtsyJobYHbYshK77f0Vwo+P2ZULaK5GWfCTunQnViES4E2cncJOFa r06IIO8YNmZ7J3eUpggpjhCf50zoM0SltqDEohIx3r0xb5RhO0uX2z2ysBTWtHYW Z9aJ3Z//Qmm+7fujoEDina0oBGMmq02i8Jhl3Z4JCBcKJ9SBmLw/3DLv1Gc9ZHx5 gSjLfhkrMmoM/b7yTf1mCf/DRoxvJ5EXYKmXx/xksnP8q1eBX1yi8ae2/FrQQhtG Hk8Fjfw2IQLHO0dbxKNfFGv7COIV9Y/Wwn0ngvcA7Ul1D2E360A= -----END CERTIFICATE-----Generated at Sun May 19 08:24:27 2024 by rpki-client on console-ams.rpki-client.org