$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: j0z4SMd66vqNoDpTFSgh8X77MhhcHdiLNcBhZr6S98o= Subject key identifier: 91:45:EA:5F:0F:C1:ED:36:6C:6E:0A:2C:E9:0D:E4:8D:5D:C6:38:AE Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 49E5FA0ACFC32A1295EF4EA30AF32564EE6BEF1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: 43 Signing time: Sat 18 May 2024 16:11:24 +0000 Manifest this update: Sat 18 May 2024 16:06:24 +0000 Manifest next update: Tue 21 May 2024 17:04:24 +0000 Files and hashes: 1: 3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa (hash: 1bgjCxtih5NviKDqPJOqB+5FOGozsEa39HYVvcCY9KU=) 2: 3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa (hash: q+lqAfZ1AFJJBhtrlpE/T9+p7blI7DzXD2Sfy7vCSI8=) 3: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: +3Ncpo6cYHQrEcsZUxPI091V+j2qkC2uNa1eMMoVyQI=) 4: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: xjhpkhroZD/MLfxIHgr0W0iNRAD73tRrsROPDxi7mRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e5:fa:0a:cf:c3:2a:12:95:ef:4e:a3:0a:f3:25:64:ee:6b:ef:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: May 18 16:06:24 2024 GMT Not After : May 21 17:04:24 2024 GMT Subject: CN=9145EA5F0FC1ED366C6E0A2CE90DE48D5DC638AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:04:c0:2f:eb:7b:17:e3:87:35:f8:db:42: 34:23:1f:1c:7e:38:65:5e:f2:26:d6:45:e6:2b:dc: 5c:a9:dd:c5:4e:70:be:d4:0a:60:f7:2d:77:8b:0c: 77:64:73:e4:27:32:87:f3:af:c2:4b:d5:31:32:fc: f8:3e:bf:b3:4c:4c:04:32:20:a9:83:97:e0:a3:03: bb:76:94:82:b4:bb:96:cc:e9:bd:a7:78:45:e9:ba: 3f:34:d9:fc:42:94:4b:d2:00:ee:56:6e:6c:90:b8: 45:7b:a0:d0:63:f8:a6:78:01:91:f8:f2:d1:09:7d: 75:a5:e9:df:08:df:bb:0e:8b:51:b2:2b:1d:5e:e7: c8:f0:98:31:3f:26:e3:e7:b6:f0:a0:57:2a:a5:43: a0:ce:f5:34:46:22:87:36:fa:d5:2a:3c:ad:51:c0: 23:42:08:f9:a8:ca:79:e4:98:a3:4c:57:4e:a7:c2: b5:74:dd:2f:2a:11:17:bb:22:c0:d1:2c:02:14:7d: b9:ab:e7:42:de:ce:67:7f:57:db:6d:92:80:02:a6: 8e:30:be:7b:ef:3b:61:28:d0:b8:c7:02:9c:90:09: 1c:25:ec:a5:d3:96:b4:44:06:c6:e4:c0:0b:b3:d2: 9f:ce:10:ee:3d:cb:21:47:0f:73:84:6c:41:56:13: 24:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:45:EA:5F:0F:C1:ED:36:6C:6E:0A:2C:E9:0D:E4:8D:5D:C6:38:AE X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ee:0e:8c:c3:fb:9d:4f:57:ec:15:d9:71:b9:98:6b:2e:6f: 38:fc:2c:d6:f7:9e:e6:0d:62:29:b9:f0:92:55:a5:0c:d5:23: 06:9b:d3:1a:bf:d5:2e:27:d8:f6:d8:92:fa:7f:ba:ad:bd:c5: 36:e4:90:03:33:8f:80:1a:99:48:fd:8b:48:c0:9a:6a:4a:80: d2:8a:64:e1:25:59:e4:7c:65:92:13:1e:99:4d:f0:db:3f:1f: b0:e0:e6:77:77:ae:1b:3f:be:da:95:b2:ab:5d:cf:85:fd:63: 97:aa:bc:4f:ca:28:ae:7f:71:4d:bd:4a:8d:58:0c:2d:59:53: 86:a6:a7:dd:45:73:14:03:6a:1d:0f:0d:bc:dd:2a:b5:01:3d: e0:68:ec:74:cc:5d:3e:ee:93:f4:7d:a6:1a:64:77:71:a4:5a: c6:95:4c:66:6c:7f:a5:ca:92:11:f1:11:94:11:d8:7c:0c:61: 48:c6:ad:98:04:93:23:a0:2e:5a:a0:3f:fd:e2:ec:ed:6a:6e: 6b:f9:a9:fd:ce:0d:fa:ad:80:62:b5:d0:ab:f5:82:65:8f:fa: b1:f1:0f:72:0c:ca:29:ce:c6:0d:7e:c7:33:5e:c0:35:4e:f0: 31:cd:2d:cf:b9:69:77:af:2a:ef:9c:d2:f3:6d:38:2f:fc:fb: 1a:f6:2f:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSeX6Cs/DKhKV706jCvMlZO5r7x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNDA1MTgxNjA2MjRaFw0yNDA1MjExNzA0MjRaMDMxMTAvBgNV BAMTKDkxNDVFQTVGMEZDMUVEMzY2QzZFMEEyQ0U5MERFNDhENURDNjM4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRQTAL+t7F+OHNfjbQjQjHxx+ OGVe8ibWReYr3Fyp3cVOcL7UCmD3LXeLDHdkc+QnMofzr8JL1TEy/Pg+v7NMTAQy IKmDl+CjA7t2lIK0u5bM6b2neEXpuj802fxClEvSAO5WbmyQuEV7oNBj+KZ4AZH4 8tEJfXWl6d8I37sOi1GyKx1e58jwmDE/JuPntvCgVyqlQ6DO9TRGIoc2+tUqPK1R wCNCCPmoynnkmKNMV06nwrV03S8qERe7IsDRLAIUfbmr50Lezmd/V9ttkoACpo4w vnvvO2Eo0LjHApyQCRwl7KXTlrREBsbkwAuz0p/OEO49yyFHD3OEbEFWEyTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkUXqXw/B7TZsbgos6Q3kjV3GOK4wHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGruDozD+51PV+wV2XG5mGsubzj8LNb3nuYN Yim58JJVpQzVIwab0xq/1S4n2PbYkvp/uq29xTbkkAMzj4AamUj9i0jAmmpKgNKK ZOElWeR8ZZITHplN8Ns/H7Dg5nd3rhs/vtqVsqtdz4X9Y5eqvE/KKK5/cU29So1Y DC1ZU4amp91FcxQDah0PDbzdKrUBPeBo7HTMXT7uk/R9phpkd3GkWsaVTGZsf6XK khHxEZQR2HwMYUjGrZgEkyOgLlqgP/3i7O1qbmv5qf3ODfqtgGK10Kv1gmWP+rHx D3IMyinOxg1+xzNewDVO8DHNLc+5aXevKu+c0vNtOC/8+xr2L34= -----END CERTIFICATE-----Generated at Sat May 18 17:19:17 2024 by rpki-client on console-ams.rpki-client.org