$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: 7ZlWdVdx8HMadhvRdMap85ew1nAfY7RF87wim8oEDak= Subject key identifier: 5D:5A:89:B3:47:B2:44:18:2B:24:2D:DF:E6:A9:EA:41:DE:09:42:9B Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 568ED86C4E442F4DD101536723237089A221F559 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 0421 Signing time: Fri 22 Nov 2024 07:20:42 +0000 Manifest this update: Fri 22 Nov 2024 07:15:42 +0000 Manifest next update: Mon 25 Nov 2024 09:18:42 +0000 Files and hashes: 1: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: OJRRTWPMmrOaPtCLRrFDVFaSiYmj3l4rR9ClzjJa+24=) 2: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: 3Mmpn/Dag2AKulQ+C8mVDMduU1Rnc8mOjy91rhhCe8M=) 3: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: BkyUAjLFhkYTF0Hnp1FC4HAWxyi30SojTHwp3GdzR9c=) 4: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: CnfRbobaPk9MDY310cd2407p48KXM88AEI8ZWvg/uB0=) 5: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: FNXev7Vmhm/Ojkn9PJyGzZcdoX0hrOovdAiihI+Rnnw=) 6: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: p+rm7vbA5ngIqMZr32PI/RSnvPiqpzUUqSs4LwHOSfI=) 7: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: EejqxQaLe95fpqkSYRlHTxb70l60dtmnNQ1/4qfd494=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8e:d8:6c:4e:44:2f:4d:d1:01:53:67:23:23:70:89:a2:21:f5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Nov 22 07:15:42 2024 GMT Not After : Nov 25 09:18:42 2024 GMT Subject: CN=5D5A89B347B244182B242DDFE6A9EA41DE09429B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:c8:ab:fc:62:e8:fc:e5:87:32:db:45:4d: 91:74:3e:c8:e8:45:eb:06:db:c2:da:24:8a:e7:05: 4a:e0:89:ea:fa:ff:57:b6:86:0d:0d:f5:0a:41:4d: c2:5e:76:1e:0c:75:e9:8a:94:07:b9:82:f9:ae:47: ce:d8:d7:b9:bf:7b:39:d0:fd:62:7f:83:a7:83:88: f1:43:89:66:4e:27:f1:37:f5:1f:a1:25:c0:da:ab: 53:b9:24:ab:f6:08:42:30:68:e1:4d:12:27:0e:5c: f6:d6:3d:2e:32:af:17:4e:6a:06:55:92:1a:96:02: c7:9d:73:b3:86:53:7d:04:29:91:af:cd:9d:28:1e: f2:0f:66:d9:3a:6c:98:b0:d3:28:1c:11:80:1e:d7: 91:83:b6:71:22:ec:f7:c0:6d:67:d2:3c:f2:25:20: 42:85:dd:2e:d3:94:58:99:ac:79:4b:be:66:a0:4b: 86:3a:29:38:1d:30:4b:ca:a7:c5:2c:af:31:6c:ee: b9:f9:69:b5:a1:69:99:2a:38:b0:c5:49:8d:3a:c0: 90:58:62:91:57:61:fc:44:c7:0b:fc:16:9a:33:dc: e7:4f:00:bc:5e:00:6d:52:ee:01:3a:ea:e2:bd:27: 45:ba:41:c1:b6:c2:b6:92:92:57:19:d1:c9:0c:13: d3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5A:89:B3:47:B2:44:18:2B:24:2D:DF:E6:A9:EA:41:DE:09:42:9B X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:06:21:d8:92:d9:ae:4d:6d:4b:13:d9:64:15:10:98:c5:de: 2f:4f:c3:3f:3f:b6:ff:48:6e:1f:5f:3a:be:85:a4:36:ff:22: 92:81:45:53:a3:a6:71:48:3e:68:75:6c:07:9b:9b:37:86:56: 82:3f:62:99:52:a2:f8:4c:15:fd:51:ce:4c:ca:06:96:dc:a2: 3a:a2:39:60:48:74:67:dc:dc:78:a2:bb:c4:77:c6:e4:f4:d1: f7:66:15:a2:91:d9:17:41:f0:e1:3e:76:b9:f9:63:0b:e0:f3: 8c:c5:0a:2f:99:7f:43:64:16:0b:2d:65:ba:20:22:63:db:a7: 76:da:32:fa:0c:74:30:11:b5:02:52:4f:73:33:a5:f0:ef:98: 1d:98:9f:2e:ad:16:5c:ac:9a:8a:d3:23:fa:1a:e0:09:d4:c4: 41:4f:31:38:c2:56:a6:57:14:c2:be:38:3d:8e:a6:44:d5:cb: 05:4d:72:f2:64:3f:d5:26:cb:9c:4b:08:b6:2f:2e:d1:b5:36: d1:3b:ae:19:17:9c:1e:80:8f:f4:56:28:42:9c:cc:4c:f8:ef: a3:86:8a:bb:56:f2:36:fa:59:eb:ea:7e:07:9b:6d:25:4c:f8: 29:71:1a:72:5d:ce:52:ed:9f:89:5f:93:85:8b:b2:2b:78:29: 71:32:a7:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVo7YbE5EL03RAVNnIyNwiaIh9VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNDExMjIwNzE1NDJaFw0yNDExMjUwOTE4NDJaMDMxMTAvBgNV BAMTKDVENUE4OUIzNDdCMjQ0MTgyQjI0MkRERkU2QTlFQTQxREUwOTQyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIsir/GLo/OWHMttFTZF0Psjo ResG28LaJIrnBUrgier6/1e2hg0N9QpBTcJedh4MdemKlAe5gvmuR87Y17m/eznQ /WJ/g6eDiPFDiWZOJ/E39R+hJcDaq1O5JKv2CEIwaOFNEicOXPbWPS4yrxdOagZV khqWAsedc7OGU30EKZGvzZ0oHvIPZtk6bJiw0ygcEYAe15GDtnEi7PfAbWfSPPIl IEKF3S7TlFiZrHlLvmagS4Y6KTgdMEvKp8UsrzFs7rn5abWhaZkqOLDFSY06wJBY YpFXYfxExwv8Fpoz3OdPALxeAG1S7gE66uK9J0W6QcG2wraSklcZ0ckME9PnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXVqJs0eyRBgrJC3f5qnqQd4JQpswHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoGIdiS2a5NbUsT2WQVEJjF3i9Pwz8/tv9I bh9fOr6FpDb/IpKBRVOjpnFIPmh1bAebmzeGVoI/YplSovhMFf1RzkzKBpbcojqi OWBIdGfc3Hiiu8R3xuT00fdmFaKR2RdB8OE+drn5Ywvg84zFCi+Zf0NkFgstZbog ImPbp3baMvoMdDARtQJST3MzpfDvmB2Yny6tFlysmorTI/oa4AnUxEFPMTjCVqZX FMK+OD2OpkTVywVNcvJkP9Umy5xLCLYvLtG1NtE7rhkXnB6Aj/RWKEKczEz476OG irtW8jb6WevqfgebbSVM+ClxGnJdzlLtn4lfk4WLsit4KXEyp0g= -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org