$ rpki-client -vvf repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft File: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft (raw, json) Hash identifier: XT+Nl0klHeI8bdNXwtITE+WpUOQW255iBK92Wla5kjU= Subject key identifier: 7D:AF:98:CF:CA:2D:E9:B3:22:68:D3:6F:BA:33:9E:2B:63:A5:5A:F9 Authority key identifier: 33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 Certificate issuer: /CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Certificate serial: 4659DCA94135D0F8A75D9E05B23D431214026BCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft Manifest number: 017B Signing time: Mon 25 Nov 2024 06:50:05 +0000 Manifest this update: Mon 25 Nov 2024 06:45:05 +0000 Manifest next update: Thu 28 Nov 2024 06:51:05 +0000 Files and hashes: 1: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: 5VYrgn1zUEMmFB5PjMK8gcq3fn0Pc+poasFslffQwao=) 2: 3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl (hash: 6MEyV81L/PFY6aIVrJqJmpncJLDmKmhNuj5AOVnFfyw=) 3: 3130332e3132302e3233332e302f32342d3234203d3e2034383030.roa (hash: 9MtyVzSA4VMwDCupiOyuohqq8njDtlZpU7JiCPF6EBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 06:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:59:dc:a9:41:35:d0:f8:a7:5d:9e:05:b2:3d:43:12:14:02:6b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3366CD5573BB4B11694DBCF0F1502CE2B46BFD51 Validity Not Before: Nov 25 06:45:05 2024 GMT Not After : Nov 28 06:51:05 2024 GMT Subject: CN=7DAF98CFCA2DE9B32268D36FBA339E2B63A55AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:82:85:ee:a3:40:41:07:a2:5b:4f:1a:fe: 01:fb:22:51:64:d5:23:84:1a:ec:59:16:bf:06:61: 8d:53:34:bf:55:47:44:64:49:a3:91:78:94:31:38: 06:d3:38:1a:ce:4a:fd:e8:89:96:6f:2a:77:6e:ff: f2:95:f8:30:ef:53:b0:9d:57:2a:db:78:8d:2e:fa: 20:a8:47:f5:48:ff:74:1b:c1:62:5d:d3:23:d2:3a: 13:2f:fc:04:c4:f8:fa:31:ff:29:97:a2:21:d7:6c: fe:31:90:cb:ff:7b:ba:94:46:a1:fb:b2:b8:ba:42: 59:8a:fc:ee:63:af:2e:44:77:a9:43:78:fa:95:b0: c6:c1:08:c5:d6:2c:1b:8b:4f:00:f6:ca:3c:53:0e: b2:d0:4c:06:cd:fa:c1:90:f9:a4:7a:15:ac:1e:11: 4a:51:3f:aa:80:19:46:22:f7:1c:39:43:43:f7:34: 2c:6f:b6:2d:95:29:c0:43:b1:f8:ac:d2:ee:cc:28: 4b:e3:83:24:68:0e:ae:14:2d:95:99:58:22:08:1c: 8e:df:c5:04:bb:d6:11:5c:ed:01:07:a5:90:8e:f0: 37:81:ed:dd:91:38:57:6a:e6:48:ed:41:71:c8:ee: 9a:26:49:1f:61:6b:60:0c:7b:45:7c:e3:91:ea:cd: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AF:98:CF:CA:2D:E9:B3:22:68:D3:6F:BA:33:9E:2B:63:A5:5A:F9 X509v3 Authority Key Identifier: keyid:33:66:CD:55:73:BB:4B:11:69:4D:BC:F0:F1:50:2C:E2:B4:6B:FD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/3366CD5573BB4B11694DBCF0F1502CE2B46BFD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c2:47:ef:77:56:ee:d3:02:82:f3:cf:f5:0a:42:4a:63:6c: f7:c1:a4:34:60:83:06:f3:88:59:e5:18:8a:62:0b:8c:33:da: 83:1b:11:cb:34:00:70:17:5c:79:d6:40:e9:88:d8:ee:d8:c0: 64:a4:92:20:03:9c:c2:8e:90:4a:7e:ef:79:c6:e3:d3:b2:c5: 8b:af:cf:2c:50:a6:59:ad:de:1a:6a:bf:e5:26:10:fb:ea:bc: 7c:60:ad:d7:06:99:0f:1e:ff:dc:cb:8d:d2:05:c6:04:17:ec: 3e:b9:44:5f:6b:1b:5e:75:e6:32:cc:57:65:d1:5d:16:93:fe: d9:be:8f:e5:9f:21:63:92:f0:05:0b:16:72:4b:74:7d:01:07: 46:15:6c:ad:a4:a1:ee:a8:af:72:32:62:ec:e1:a6:0d:25:02: 53:db:2d:95:fc:89:f5:a9:14:9a:a5:80:c4:02:8e:bf:9e:d7: 4b:c4:f9:83:dd:2e:42:18:6b:32:db:85:34:45:97:07:d9:f4: e1:15:1f:ea:38:6a:44:07:4e:30:b5:71:91:ec:ec:bf:a6:5a: b0:5c:35:a6:27:f7:23:b2:c7:5b:66:48:54:93:3a:fc:a2:91: 89:74:e0:8e:ce:47:8a:3e:f9:56:da:2f:d3:43:c6:8a:3a:48: a2:0e:42:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlncqUE10PinXZ4Fsj1DEhQCa84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJC NDZCRkQ1MTAeFw0yNDExMjUwNjQ1MDVaFw0yNDExMjgwNjUxMDVaMDMxMTAvBgNV BAMTKDdEQUY5OENGQ0EyREU5QjMyMjY4RDM2RkJBMzM5RTJCNjNBNTVBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VYKF7qNAQQeiW08a/gH7IlFk 1SOEGuxZFr8GYY1TNL9VR0RkSaOReJQxOAbTOBrOSv3oiZZvKndu//KV+DDvU7Cd VyrbeI0u+iCoR/VI/3QbwWJd0yPSOhMv/ATE+Pox/ymXoiHXbP4xkMv/e7qURqH7 sri6QlmK/O5jry5Ed6lDePqVsMbBCMXWLBuLTwD2yjxTDrLQTAbN+sGQ+aR6Fawe EUpRP6qAGUYi9xw5Q0P3NCxvti2VKcBDsfis0u7MKEvjgyRoDq4ULZWZWCIIHI7f xQS71hFc7QEHpZCO8DeB7d2ROFdq5kjtQXHI7pomSR9ha2AMe0V845HqzSYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfa+Yz8ot6bMiaNNvujOeK2OlWvkwHwYDVR0j BBgwFoAUM2bNVXO7SxFpTbzw8VAs4rRr/VEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2EyNmJmYi02NzVmLTQ0NGYtOTBjOS01ZDNhOWIxOGMzNGMvMC8zMzY2Q0Q1NTcz QkI0QjExNjk0REJDRjBGMTUwMkNFMkI0NkJGRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJDRTJCNDZC RkQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvMzM2NkNENTU3M0JCNEIxMTY5NERCQ0YwRjE1MDJD RTJCNDZCRkQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTCR+93Vu7TAoLzz/UKQkpjbPfBpDRggwbz iFnlGIpiC4wz2oMbEcs0AHAXXHnWQOmI2O7YwGSkkiADnMKOkEp+73nG49OyxYuv zyxQplmt3hpqv+UmEPvqvHxgrdcGmQ8e/9zLjdIFxgQX7D65RF9rG1515jLMV2XR XRaT/tm+j+WfIWOS8AULFnJLdH0BB0YVbK2koe6or3IyYuzhpg0lAlPbLZX8ifWp FJqlgMQCjr+e10vE+YPdLkIYazLbhTRFlwfZ9OEVH+o4akQHTjC1cZHs7L+mWrBc NaYn9yOyx1tmSFSTOvyikYl04I7OR4o++VbaL9NDxoo6SKIOQkk= -----END CERTIFICATE-----Generated at Mon Nov 25 09:02:06 2024 by rpki-client on console-ams.rpki-client.org