$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: Q0T9+M5YDBYYvQ6H5FT0WBCrtALW2dbyHBTv8ewhH4k= Subject key identifier: 5A:8D:1F:15:65:E7:BA:D6:C8:1D:B7:76:D7:C2:91:43:28:FF:E0:B4 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 3854CC7C5A17873D9DA07A54444C2651F77F976E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 0483 Signing time: Thu 21 Nov 2024 02:31:54 +0000 Manifest this update: Thu 21 Nov 2024 02:26:54 +0000 Manifest next update: Sun 24 Nov 2024 09:53:54 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: VmRTNF6O8M+AnB/zvqxaffecroR7hC8t3eEDnSwP8hw=) 2: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: bTNnFawKArEI1i+dm+Q57vqfm7/Kb7kT6uARLT9iSRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:54:cc:7c:5a:17:87:3d:9d:a0:7a:54:44:4c:26:51:f7:7f:97:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Nov 21 02:26:54 2024 GMT Not After : Nov 24 09:53:54 2024 GMT Subject: CN=5A8D1F1565E7BAD6C81DB776D7C2914328FFE0B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:dc:34:6b:c3:93:bb:ac:6e:46:23:25:35: ac:da:ea:ca:8c:31:d9:36:8c:b6:40:b5:26:03:45: 64:f9:51:fd:9f:ce:44:99:4a:a8:8e:4c:00:56:a5: 7d:09:fd:45:da:a2:4b:5c:af:7a:8f:93:35:de:e4: 8f:0d:1e:a2:62:95:b9:a0:84:23:5d:19:4b:65:1c: 69:92:e6:da:cf:c5:e7:48:15:11:a5:2f:07:a5:20: 7c:40:54:b4:a6:d9:f9:19:ff:80:ac:be:8b:aa:06: 45:7c:50:6e:f0:d2:a8:e3:15:21:77:0e:ac:77:11: c8:c0:b3:29:35:fa:76:f7:a5:72:08:72:c0:9b:6b: 08:09:11:b1:3d:2a:42:74:e3:c9:4a:24:36:58:34: ac:56:ce:06:a7:bc:5b:5a:fc:96:09:af:9b:c1:d8: 01:bb:c8:51:c8:2e:2d:34:d0:5e:98:4b:41:a2:02: b4:7f:59:46:a4:05:e2:43:e4:6e:a3:ee:df:c3:4b: 38:e4:8b:df:96:67:bd:c2:2f:ad:e8:cf:b0:14:9f: 26:e0:24:81:ec:59:17:41:e0:11:50:8d:2f:5d:5c: 2b:37:21:0d:ad:a1:84:67:85:ae:e5:6f:58:9f:57: 46:8b:5f:a6:55:71:35:a1:72:1d:9e:a5:8a:61:41: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8D:1F:15:65:E7:BA:D6:C8:1D:B7:76:D7:C2:91:43:28:FF:E0:B4 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2b:e8:67:9b:28:77:dd:ab:f7:3c:a5:41:30:cb:90:69:49: 2c:4e:d7:d5:43:1a:84:12:8b:25:4e:f5:3e:a0:ca:67:85:61: cd:39:7f:4c:b0:37:b9:64:2d:9c:b9:e5:4f:c7:54:e1:de:5e: 29:b6:8c:d1:56:63:dd:49:ca:a8:82:7c:aa:d8:ab:04:5c:62: db:7a:f3:98:50:80:fd:b4:63:1b:3d:4b:94:d3:02:4d:d6:1e: f6:e5:d3:c9:79:2e:d7:47:ec:e8:ea:8b:d7:cb:47:ee:a2:bc: 17:6d:82:51:64:b4:04:59:42:09:b0:fd:94:9d:4b:6e:22:c1: 05:77:ca:15:30:4d:0a:e8:3e:37:21:42:8e:87:b2:b6:62:a1: 96:9e:2a:9d:4f:52:24:0d:15:b7:f8:38:9b:dd:89:32:53:08: 28:e1:9f:07:84:64:d8:d4:9f:bf:ce:d6:ee:6f:36:e4:39:a5: f6:45:cd:a2:4e:58:e8:31:bd:30:14:06:59:29:f8:27:aa:7c: 8a:b1:65:2e:01:83:7d:78:51:8f:24:81:b9:29:39:1e:32:07: 37:0f:2c:e7:76:49:86:a1:a3:dd:de:49:7a:05:49:16:e6:24: cb:5d:72:53:07:5d:4f:6f:a4:17:36:22:09:c4:4b:c3:0b:ce: a5:3c:a1:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFTMfFoXhz2doHpUREwmUfd/l24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNDExMjEwMjI2NTRaFw0yNDExMjQwOTUzNTRaMDMxMTAvBgNV BAMTKDVBOEQxRjE1NjVFN0JBRDZDODFEQjc3NkQ3QzI5MTQzMjhGRkUwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2CNw0a8OTu6xuRiMlNaza6sqM Mdk2jLZAtSYDRWT5Uf2fzkSZSqiOTABWpX0J/UXaoktcr3qPkzXe5I8NHqJilbmg hCNdGUtlHGmS5trPxedIFRGlLwelIHxAVLSm2fkZ/4CsvouqBkV8UG7w0qjjFSF3 Dqx3EcjAsyk1+nb3pXIIcsCbawgJEbE9KkJ048lKJDZYNKxWzganvFta/JYJr5vB 2AG7yFHILi000F6YS0GiArR/WUakBeJD5G6j7t/DSzjki9+WZ73CL63oz7AUnybg JIHsWRdB4BFQjS9dXCs3IQ2toYRnha7lb1ifV0aLX6ZVcTWhch2epYphQYw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWo0fFWXnutbIHbd218KRQyj/4LQwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0r6GebKHfdq/c8pUEwy5BpSSxO19VDGoQS iyVO9T6gymeFYc05f0ywN7lkLZy55U/HVOHeXim2jNFWY91JyqiCfKrYqwRcYtt6 85hQgP20Yxs9S5TTAk3WHvbl08l5LtdH7Ojqi9fLR+6ivBdtglFktARZQgmw/ZSd S24iwQV3yhUwTQroPjchQo6HsrZioZaeKp1PUiQNFbf4OJvdiTJTCCjhnweEZNjU n7/O1u5vNuQ5pfZFzaJOWOgxvTAUBlkp+CeqfIqxZS4Bg314UY8kgbkpOR4yBzcP LOd2SYaho93eSXoFSRbmJMtdclMHXU9vpBc2IgnES8MLzqU8oSM= -----END CERTIFICATE-----Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org