$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: Qa+/S2bXhh5yqq8g8cPBCsw10uvwOUDwCbQol+47s1s= Subject key identifier: D9:FD:0F:FE:D2:CE:31:5F:1A:72:A8:14:87:51:CE:18:00:D1:A8:40 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 1412D5E3B03D95EEA250A4031C88F1BD042ED755 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: 38 Signing time: Thu 21 Nov 2024 20:02:25 +0000 Manifest this update: Thu 21 Nov 2024 19:57:25 +0000 Manifest next update: Mon 25 Nov 2024 00:38:25 +0000 Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: ExPWXzqmYsGmVxhZzf6CBr3nexIRy6Zj+MrakmkvbVA=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: xJ7jPZiRN5p9CCeavvlkfOq9xqVrWGN0H9fWEY/Ic+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 00:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:12:d5:e3:b0:3d:95:ee:a2:50:a4:03:1c:88:f1:bd:04:2e:d7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Nov 21 19:57:25 2024 GMT Not After : Nov 25 00:38:25 2024 GMT Subject: CN=D9FD0FFED2CE315F1A72A8148751CE1800D1A840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:1a:67:60:84:19:e9:96:0f:65:8d:bc:03: f6:0d:51:58:44:77:fe:eb:d4:59:72:a5:31:6b:99: cb:f5:12:21:4f:1e:c3:4d:4b:21:ab:13:dc:57:dc: 87:6e:6d:72:48:2b:c0:32:e6:87:f0:b9:01:d4:12: 71:b8:24:3c:e1:82:e2:09:33:fb:e4:c9:9c:72:dc: e2:4e:37:4a:5b:f4:0c:b5:d6:79:f0:c4:37:b1:70: a7:28:01:c3:b4:2b:29:fa:32:55:69:d9:24:09:f5: aa:ed:1b:df:4b:8d:d7:fe:07:86:54:79:93:2e:33: fb:f7:ac:fd:57:d2:01:59:44:60:9f:8e:41:58:69: de:5b:72:6a:c4:7c:21:b7:1f:71:ee:08:11:14:66: 92:70:d9:c2:23:5a:ed:57:c5:20:3d:c6:94:f6:86: 50:3c:2b:49:a7:f6:85:61:33:33:af:e0:df:a9:04: 9e:74:14:43:23:ab:3c:c2:77:7c:79:27:10:4a:61: 22:ce:dc:7e:4c:29:2d:b6:84:7d:7b:d9:d1:0a:20: f1:01:f3:36:c5:4d:e0:cf:3b:38:c5:7b:57:cd:c1: af:61:91:ee:d9:ab:8d:0d:c9:c2:50:69:2b:f0:64: b7:37:12:d6:4e:a2:ac:69:13:86:21:70:00:d2:8a: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FD:0F:FE:D2:CE:31:5F:1A:72:A8:14:87:51:CE:18:00:D1:A8:40 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:04:93:2d:a8:80:1f:8c:f6:a2:1c:e2:98:cd:78:7b:33:1b: 19:68:33:24:eb:43:e2:f1:6d:3c:ee:4f:94:52:6f:34:f9:1a: 77:bc:97:53:cc:1d:f6:f4:dd:b3:a4:15:60:05:fb:a3:0a:15: de:c1:a2:df:b7:16:15:ed:79:f8:13:c7:90:5c:23:a3:35:74: e5:7a:3c:25:06:91:81:82:17:9b:01:3e:e0:ec:6d:1d:a3:57: fd:3d:c3:21:72:0a:c7:67:f8:5f:b6:0a:2f:bc:71:b4:b8:4a: cc:a9:c3:94:f9:f0:ca:c7:52:0a:2e:7f:5e:be:26:0e:39:d6: 25:5e:60:73:ec:f1:20:2a:f2:5d:4a:ed:63:16:e2:04:23:0c: cc:5d:dd:29:4c:e8:bc:81:8b:c1:92:19:56:99:c2:4d:7f:a2: cd:22:32:73:d0:e5:0e:f1:c6:03:1e:f2:7a:c8:60:1b:8d:26: d9:62:42:25:59:c6:25:a3:0c:93:9e:05:29:58:a4:f7:82:f3: d0:4f:3b:60:35:11:75:fe:1b:0a:1b:0c:0f:dd:16:4d:03:9e: e1:5f:42:d2:cb:60:76:b7:99:91:63:33:b1:60:81:df:29:33: 09:11:13:6c:56:7e:c9:6e:91:08:4d:d0:96:ad:eb:ce:4d:26: f9:9d:43:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBLV47A9le6iUKQDHIjxvQQu11UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNDExMjExOTU3MjVaFw0yNDExMjUwMDM4MjVaMDMxMTAvBgNV BAMTKEQ5RkQwRkZFRDJDRTMxNUYxQTcyQTgxNDg3NTFDRTE4MDBEMUE4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvBpnYIQZ6ZYPZY28A/YNUVhE d/7r1FlypTFrmcv1EiFPHsNNSyGrE9xX3IdubXJIK8Ay5ofwuQHUEnG4JDzhguIJ M/vkyZxy3OJON0pb9Ay11nnwxDexcKcoAcO0Kyn6MlVp2SQJ9artG99Ljdf+B4ZU eZMuM/v3rP1X0gFZRGCfjkFYad5bcmrEfCG3H3HuCBEUZpJw2cIjWu1XxSA9xpT2 hlA8K0mn9oVhMzOv4N+pBJ50FEMjqzzCd3x5JxBKYSLO3H5MKS22hH172dEKIPEB 8zbFTeDPOzjFe1fNwa9hke7Zq40NycJQaSvwZLc3EtZOoqxpE4YhcADSigOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2f0P/tLOMV8acqgUh1HOGADRqEAwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYEky2ogB+M9qIc4pjNeHszGxloMyTrQ+Lx bTzuT5RSbzT5Gne8l1PMHfb03bOkFWAF+6MKFd7Bot+3FhXtefgTx5BcI6M1dOV6 PCUGkYGCF5sBPuDsbR2jV/09wyFyCsdn+F+2Ci+8cbS4Ssypw5T58MrHUgouf16+ Jg451iVeYHPs8SAq8l1K7WMW4gQjDMxd3SlM6LyBi8GSGVaZwk1/os0iMnPQ5Q7x xgMe8nrIYBuNJtliQiVZxiWjDJOeBSlYpPeC89BPO2A1EXX+GwobDA/dFk0DnuFf QtLLYHa3mZFjM7Fggd8pMwkRE2xWfslukQhN0Jat685NJvmdQ70= -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:21 2024 by rpki-client on console-fra.rpki-client.org