$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: gblh7k8BrwiZLzIvZJ5anJpbpH+SNAd4Azwmn0xEim0= Subject key identifier: 0E:5F:40:22:0C:E4:A6:83:2F:F6:15:86:08:88:C7:6C:66:60:69:2B Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 7B337248151F765219D8F11AB3535B45C74F521C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 0405 Signing time: Thu 30 May 2024 13:41:51 +0000 Manifest this update: Thu 30 May 2024 13:36:51 +0000 Manifest next update: Mon 03 Jun 2024 00:08:51 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: QIcta8JZI/pCSQeD7UWUUdfedZXpO2ZPdFASydXXgG4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 22:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:33:72:48:15:1f:76:52:19:d8:f1:1a:b3:53:5b:45:c7:4f:52:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: May 30 13:36:51 2024 GMT Not After : Jun 3 00:08:51 2024 GMT Subject: CN=0E5F40220CE4A6832FF615860888C76C6660692B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:2e:22:87:93:09:dd:5b:30:6d:43:87:4e: 2c:cc:a8:52:a6:32:47:6e:c2:0b:d0:fd:e1:9b:42: 13:ba:b5:8a:cc:82:0b:26:7e:9a:0d:cd:2d:cb:bb: d8:52:09:f5:38:ad:8b:89:49:fe:00:2f:ea:04:49: 3d:5f:b1:18:d3:80:f8:ad:92:93:83:72:62:d8:4c: af:54:1e:ff:d0:ab:aa:5e:5d:f0:08:d2:d6:30:ef: 45:e1:ba:6f:21:75:55:7e:8d:80:1d:41:dc:67:3c: 9d:19:14:bf:69:b1:59:46:8f:04:70:48:fb:c4:0c: b4:7e:07:57:41:20:81:9b:ca:7c:8f:a4:54:d1:bc: 24:fb:04:63:90:5a:22:4b:88:de:3e:32:77:78:b6: c0:82:37:37:e7:91:fb:fe:40:9d:51:55:62:9c:cb: 91:50:31:ed:26:b3:2c:00:a6:fc:54:c4:8f:4f:cc: 0f:c4:0a:96:6d:55:f8:b0:16:05:b7:bc:c6:1b:83: e2:f6:ef:3e:00:50:61:fb:05:ab:dc:54:54:64:9d: 30:99:23:57:eb:a6:45:57:bb:1d:35:c4:57:98:44: 6a:6c:0a:4f:6f:26:ff:49:88:1c:a6:28:71:8a:44: d6:c5:4b:74:3b:fe:c3:8e:4d:0d:b9:b6:4a:68:16: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5F:40:22:0C:E4:A6:83:2F:F6:15:86:08:88:C7:6C:66:60:69:2B X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5d:5d:13:16:c6:3a:29:db:54:3a:a7:41:9e:7c:ff:23:b0: 18:4e:6b:d2:79:26:d3:5e:2f:51:b1:a1:91:48:fd:41:af:39: 10:49:9e:ae:d6:f9:8f:5c:5b:eb:cf:ab:82:ba:e7:64:1a:25: 5a:e4:2c:4e:cf:1a:74:8f:66:03:2e:9a:4a:9c:b9:aa:07:9b: 57:ed:7a:83:b0:05:75:f3:ca:11:f2:09:93:5c:3c:fc:1e:05: 55:ae:c4:ed:18:be:f7:d8:32:1f:30:1b:8c:6c:a3:30:32:d3: 17:fd:20:b1:ff:98:8d:a0:e9:8f:1b:e9:55:09:e9:41:df:f5: 9c:64:4d:ea:80:03:47:33:cc:99:9d:b0:fb:56:2b:07:16:d6: 74:26:d2:c9:0a:77:0e:49:11:5b:a2:39:7a:5c:2c:9f:c3:f6: 96:f3:69:1d:aa:88:1d:00:6d:69:82:db:75:49:63:49:b3:3f: 86:e8:6f:90:4b:40:9b:d0:ae:09:39:18:c3:56:fb:d7:34:f9: 65:21:28:99:74:55:ea:e1:43:aa:e1:30:10:f6:a6:4b:ec:9d: f6:aa:01:5b:0d:15:90:3f:d8:06:f3:cd:5b:9d:30:b7:05:c0: ae:7b:ba:fb:45:92:1c:6f:ca:23:46:c2:4a:0c:c7:a9:51:4d: 4e:84:5d:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezNySBUfdlIZ2PEas1NbRcdPUhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNDA1MzAxMzM2NTFaFw0yNDA2MDMwMDA4NTFaMDMxMTAvBgNV BAMTKDBFNUY0MDIyMENFNEE2ODMyRkY2MTU4NjA4ODhDNzZDNjY2MDY5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfYC4ih5MJ3VswbUOHTizMqFKm MkduwgvQ/eGbQhO6tYrMggsmfpoNzS3Lu9hSCfU4rYuJSf4AL+oEST1fsRjTgPit kpODcmLYTK9UHv/Qq6peXfAI0tYw70Xhum8hdVV+jYAdQdxnPJ0ZFL9psVlGjwRw SPvEDLR+B1dBIIGbynyPpFTRvCT7BGOQWiJLiN4+Mnd4tsCCNzfnkfv+QJ1RVWKc y5FQMe0msywApvxUxI9PzA/ECpZtVfiwFgW3vMYbg+L27z4AUGH7BavcVFRknTCZ I1frpkVXux01xFeYRGpsCk9vJv9JiBymKHGKRNbFS3Q7/sOOTQ25tkpoFqohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDl9AIgzkpoMv9hWGCIjHbGZgaSswHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5dXRMWxjop21Q6p0GefP8jsBhOa9J5JtNe L1GxoZFI/UGvORBJnq7W+Y9cW+vPq4K652QaJVrkLE7PGnSPZgMumkqcuaoHm1ft eoOwBXXzyhHyCZNcPPweBVWuxO0YvvfYMh8wG4xsozAy0xf9ILH/mI2g6Y8b6VUJ 6UHf9ZxkTeqAA0czzJmdsPtWKwcW1nQm0skKdw5JEVuiOXpcLJ/D9pbzaR2qiB0A bWmC23VJY0mzP4bob5BLQJvQrgk5GMNW+9c0+WUhKJl0VerhQ6rhMBD2pkvsnfaq AVsNFZA/2AbzzVudMLcFwK57uvtFkhxvyiNGwkoMx6lRTU6EXa0= -----END CERTIFICATE-----Generated at Thu May 30 15:03:38 2024 by rpki-client on console-ams.rpki-client.org