$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: MS086czV7HlnPI523EVM/NZ3bT3IQvevTD8biiH8Iis= Subject key identifier: 96:C3:DB:8F:2D:33:00:23:3F:76:0A:83:D6:2F:E4:70:CF:DE:F8:4A Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 26E5BFEA3EF2B6D1BA98E0AEAA80B201894D64F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 0430 Signing time: Mon 20 May 2024 08:51:35 +0000 Manifest this update: Mon 20 May 2024 08:46:35 +0000 Manifest next update: Thu 23 May 2024 17:26:35 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: RDkGkw54/F3MYm880Eu5YnEGn2RwSdQBwJZx7z3QP1w=) 2: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: w9Wnk+h0eilgLBkpP9tHVr8iHavb1Fg+F4MC/0IiWcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 09:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e5:bf:ea:3e:f2:b6:d1:ba:98:e0:ae:aa:80:b2:01:89:4d:64:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: May 20 08:46:35 2024 GMT Not After : May 23 17:26:35 2024 GMT Subject: CN=96C3DB8F2D3300233F760A83D62FE470CFDEF84A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:af:82:4c:ee:55:b7:45:6b:46:07:2d:0a:70: 90:0b:d3:35:99:07:b3:ff:24:4b:32:d2:38:1a:f2: 51:ee:04:d1:45:ff:94:a4:10:32:b2:b0:bf:7d:8b: 76:ea:80:49:7f:b7:b3:54:7b:d4:50:31:dd:5a:23: 33:51:15:42:77:90:5b:40:ae:de:80:2d:44:f2:84: 84:f0:62:bf:f8:26:12:52:0d:26:a2:23:51:08:28: 55:26:04:0d:a4:d2:d1:95:19:57:fc:92:ca:a7:7f: ca:53:b2:6b:2a:a6:25:2e:60:f0:e8:3a:b1:87:4d: 2e:41:db:ae:27:7e:ee:76:d4:4d:15:85:19:f3:ea: 44:e5:8c:8f:be:df:1e:3b:c6:70:8e:d6:78:3b:e0: 71:86:ec:ba:58:f3:da:c6:47:45:ac:a2:25:98:c6: b3:2e:2e:9a:5b:3e:42:58:32:40:68:fa:05:42:81: 5f:05:aa:6a:48:09:26:cb:8b:10:08:54:db:d6:e7: 03:f5:f0:50:e1:6e:68:f9:59:04:3c:a0:b2:7b:98: f5:5b:a3:ae:d9:a5:c1:a4:cd:16:9b:9d:35:0b:2b: 47:50:4f:3f:9b:ce:22:06:76:ee:c5:bd:e4:e8:94: 49:0f:29:7b:aa:b2:1d:eb:80:51:d5:3d:3d:9e:fb: d0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C3:DB:8F:2D:33:00:23:3F:76:0A:83:D6:2F:E4:70:CF:DE:F8:4A X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3a:83:af:0b:7f:21:58:7c:76:55:0a:53:41:3a:31:b2:d8: d9:c6:b0:43:f9:f6:19:a1:1b:24:df:8b:4a:da:ea:45:85:16: 7e:99:14:ae:91:6c:dd:a4:ec:77:63:3a:09:16:66:3d:a7:e5: 64:ae:63:cd:37:3f:67:80:b4:c4:b9:5f:64:e4:c3:3f:4e:6e: b2:a0:82:5e:63:e1:b8:dc:34:cf:63:45:14:20:bc:39:e0:1a: da:fb:f9:0f:11:d5:c0:f2:c2:b7:bc:17:56:a8:32:a2:2b:fc: c7:95:6d:10:f7:30:8f:46:c4:1d:ee:ad:e6:6c:12:c9:d4:88: 42:db:3e:0e:1f:b5:06:f9:cf:42:6e:e1:80:f2:17:fb:45:7c: 3f:48:af:1a:27:f5:6d:85:df:62:e4:fb:46:fc:96:4a:0a:9d: 95:37:0b:06:9a:9d:4b:d7:fa:3d:bd:e6:7c:47:40:56:77:98: 3a:d3:c8:8f:b8:5e:2e:cc:fd:26:35:2e:a0:10:64:d3:8c:d4: 16:04:00:e3:8c:9a:03:a0:33:ee:a9:94:9a:29:2f:5a:b6:63: c6:40:2f:6a:ca:24:48:1e:09:d8:fb:ef:b5:b4:ba:99:2c:d5: a1:fa:80:e7:08:4c:ae:46:bd:33:b3:eb:a6:6a:66:ed:ae:4b: f0:b9:e8:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJuW/6j7yttG6mOCuqoCyAYlNZPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNDA1MjAwODQ2MzVaFw0yNDA1MjMxNzI2MzVaMDMxMTAvBgNV BAMTKDk2QzNEQjhGMkQzMzAwMjMzRjc2MEE4M0Q2MkZFNDcwQ0ZERUY4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhr4JM7lW3RWtGBy0KcJAL0zWZ B7P/JEsy0jga8lHuBNFF/5SkEDKysL99i3bqgEl/t7NUe9RQMd1aIzNRFUJ3kFtA rt6ALUTyhITwYr/4JhJSDSaiI1EIKFUmBA2k0tGVGVf8ksqnf8pTsmsqpiUuYPDo OrGHTS5B264nfu521E0VhRnz6kTljI++3x47xnCO1ng74HGG7LpY89rGR0WsoiWY xrMuLppbPkJYMkBo+gVCgV8FqmpICSbLixAIVNvW5wP18FDhbmj5WQQ8oLJ7mPVb o67ZpcGkzRabnTULK0dQTz+bziIGdu7FveTolEkPKXuqsh3rgFHVPT2e+9AXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlsPbjy0zACM/dgqD1i/kcM/e+EowHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGg6g68LfyFYfHZVClNBOjGy2NnGsEP59hmh GyTfi0ra6kWFFn6ZFK6RbN2k7HdjOgkWZj2n5WSuY803P2eAtMS5X2Tkwz9ObrKg gl5j4bjcNM9jRRQgvDngGtr7+Q8R1cDywre8F1aoMqIr/MeVbRD3MI9GxB3ureZs EsnUiELbPg4ftQb5z0Ju4YDyF/tFfD9Irxon9W2F32Lk+0b8lkoKnZU3CwaanUvX +j295nxHQFZ3mDrTyI+4Xi7M/SY1LqAQZNOM1BYEAOOMmgOgM+6plJopL1q2Y8ZA L2rKJEgeCdj777W0upks1aH6gOcITK5GvTOz66ZqZu2uS/C56Oo= -----END CERTIFICATE-----Generated at Mon May 20 09:48:51 2024 by rpki-client on console-ams.rpki-client.org