$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: 471iUsysl6UIAL9rY5CSCM7kdKQKiab4OjuTOjqtBhs= Subject key identifier: 2D:8C:C0:E7:F5:48:79:A6:DB:4B:9C:DE:03:C7:CB:29:D7:31:A8:A0 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 3558A26B89C02205CB3A27BAB489A7AE93EA81B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 6A Signing time: Tue 28 May 2024 20:41:26 +0000 Manifest this update: Tue 28 May 2024 20:36:26 +0000 Manifest next update: Sat 01 Jun 2024 01:30:26 +0000 Files and hashes: 1: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: e9e7tuoatt6WL5Cn7wsq4adnCs1GfLvmyDpgWotDA+A=) 2: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: 9eoWn7iSaH/945ms35h4POYME33wd4RCMIMG5XtrnSQ=) 3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: sUyxKtqsRFAu7nw5xJ+wlbwPbmjkBBCon26CrElZ/1Q=) 4: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: oLlilqzt6vQeDsNXQd7i6jG8F6R4Z1xuBAe0c7a+BVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 01:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:58:a2:6b:89:c0:22:05:cb:3a:27:ba:b4:89:a7:ae:93:ea:81:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: May 28 20:36:26 2024 GMT Not After : Jun 1 01:30:26 2024 GMT Subject: CN=2D8CC0E7F54879A6DB4B9CDE03C7CB29D731A8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:2c:84:65:da:66:56:44:35:24:86:8b:97: d5:b5:13:d0:53:81:c7:d0:7b:d8:4e:21:72:1f:16: 62:70:0f:91:dd:ee:98:10:54:a1:42:e1:13:0a:61: a9:f6:1f:f4:da:02:29:b3:de:9c:37:a0:e1:41:ea: de:ed:d2:8e:4d:e2:87:88:34:d8:71:0b:fc:2d:0e: c0:ac:c1:83:8d:3c:69:de:e8:1d:69:a1:fe:75:a8: 45:29:aa:51:db:eb:b6:e3:f3:bd:65:13:c8:64:c6: a0:53:fc:9e:44:6b:ed:35:e2:40:72:56:73:da:71: 76:ca:a6:e4:6c:f2:6b:a2:ad:c2:79:a4:29:a1:00: 93:b3:f7:e0:f0:51:9e:1e:f9:d1:e1:d4:97:3d:e0: 45:f8:8a:b9:7f:de:f1:87:76:5f:e5:dd:59:a4:39: a1:41:33:88:df:48:65:eb:e0:13:53:1d:70:49:d8: 94:30:8c:67:58:a9:7e:f9:83:2a:cd:df:8f:6b:65: d9:c5:8f:f0:da:15:77:56:a1:83:8f:d4:6d:eb:37: 57:75:80:07:26:e3:59:d2:40:9a:ef:6a:dd:42:89: ce:4b:f6:80:4c:27:38:3a:22:57:c0:09:61:e3:ff: 80:ab:e2:ed:84:26:2f:5d:5d:37:3a:41:52:fc:22: 3e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8C:C0:E7:F5:48:79:A6:DB:4B:9C:DE:03:C7:CB:29:D7:31:A8:A0 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e5:36:a1:20:76:35:07:c2:3b:de:e6:99:d5:a2:fd:4e:e2: 99:6f:91:ab:9d:2e:1a:78:ca:14:10:7b:b8:75:4a:eb:9c:76: d9:29:fe:f3:2c:08:84:95:2a:f6:69:dc:da:4b:d6:2d:f2:d0: 2a:0d:56:83:f1:62:32:e5:9c:42:da:e6:d6:08:3c:eb:3a:e7: f4:1e:27:0e:da:1d:1a:8e:99:b0:bb:dd:d1:cb:da:95:0e:84: 2c:d7:2d:ab:c6:00:c3:61:64:d8:5e:e1:33:03:3a:fb:43:b8: 0a:fd:95:de:6a:9f:5b:fc:93:ff:dc:0c:78:27:17:a1:bc:d5: 91:76:eb:cb:a1:0c:4e:e2:1c:24:6e:ee:2a:7b:91:d5:52:2b: 31:28:32:b4:8f:ca:ec:0a:9f:f6:ee:2c:16:8b:66:6d:d1:2a: 8a:7e:1c:48:b0:e6:87:a2:bd:49:4a:3e:71:a0:cc:b9:65:89: bc:06:ad:e3:a2:74:48:35:eb:1d:2f:ba:04:05:1f:33:83:f3: c9:09:2c:3e:10:3e:8c:97:f4:a7:92:3a:95:e8:f6:94:23:b6: 8a:1e:29:48:d0:a9:40:07:2a:4e:39:b7:28:ed:b3:b2:81:63: 74:65:14:fa:aa:43:91:fe:4d:84:5a:e4:e4:7f:3c:db:49:43: b1:c0:d3:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNViia4nAIgXLOie6tImnrpPqgbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNDA1MjgyMDM2MjZaFw0yNDA2MDEwMTMwMjZaMDMxMTAvBgNV BAMTKDJEOENDMEU3RjU0ODc5QTZEQjRCOUNERTAzQzdDQjI5RDczMUE4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0iCyEZdpmVkQ1JIaLl9W1E9BT gcfQe9hOIXIfFmJwD5Hd7pgQVKFC4RMKYan2H/TaAimz3pw3oOFB6t7t0o5N4oeI NNhxC/wtDsCswYONPGne6B1pof51qEUpqlHb67bj871lE8hkxqBT/J5Ea+014kBy VnPacXbKpuRs8muircJ5pCmhAJOz9+DwUZ4e+dHh1Jc94EX4irl/3vGHdl/l3Vmk OaFBM4jfSGXr4BNTHXBJ2JQwjGdYqX75gyrN349rZdnFj/DaFXdWoYOP1G3rN1d1 gAcm41nSQJrvat1Cic5L9oBMJzg6IlfACWHj/4Cr4u2EJi9dXTc6QVL8Ij6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYzA5/VIeabbS5zeA8fLKdcxqKAwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABflNqEgdjUHwjve5pnVov1O4plvkaudLhp4 yhQQe7h1Suucdtkp/vMsCISVKvZp3NpL1i3y0CoNVoPxYjLlnELa5tYIPOs65/Qe Jw7aHRqOmbC73dHL2pUOhCzXLavGAMNhZNhe4TMDOvtDuAr9ld5qn1v8k//cDHgn F6G81ZF268uhDE7iHCRu7ip7kdVSKzEoMrSPyuwKn/buLBaLZm3RKop+HEiw5oei vUlKPnGgzLllibwGreOidEg16x0vugQFHzOD88kJLD4QPoyX9KeSOpXo9pQjtooe KUjQqUAHKk45tyjts7KBY3RlFPqqQ5H+TYRa5OR/PNtJQ7HA0zg= -----END CERTIFICATE-----Generated at Tue May 28 22:49:02 2024 by rpki-client on console-ams.rpki-client.org