$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: asQN0HlYuG34Ck7oMaQ9gSN0aklEOXo7KmY/fNaPI4k= Subject key identifier: 84:25:B9:67:12:24:57:EF:2F:DB:CD:3E:B4:D9:9B:9D:7E:6B:DC:DC Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 14E706678491D8CC0C7BAE4727834BF47140AECE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: 95 Signing time: Thu 08 May 2025 02:51:04 +0000 Manifest this update: Thu 08 May 2025 02:46:04 +0000 Manifest next update: Sun 11 May 2025 07:30:04 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: wpk52kYS7abt5+/AfPvKHgAopjYSp0s3GQIr5pgf924=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 07:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e7:06:67:84:91:d8:cc:0c:7b:ae:47:27:83:4b:f4:71:40:ae:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: May 8 02:46:04 2025 GMT Not After : May 11 07:30:04 2025 GMT Subject: CN=8425B967122457EF2FDBCD3EB4D99B9D7E6BDCDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d6:54:f7:4b:91:dd:97:2e:ce:9f:7d:bb:e1: 56:bc:e5:73:7f:e3:be:13:83:99:e5:e1:14:87:e3: 16:07:07:09:3b:d7:bb:73:97:60:8a:15:67:c2:81: c1:08:bf:1a:5a:81:88:ca:ff:8d:fd:ac:fa:ca:40: 81:fa:44:72:22:f0:da:73:32:1d:1a:70:91:a2:69: 32:71:e6:89:72:9d:27:b0:06:c0:d7:ab:ff:e0:e1: 5f:e3:76:ca:b7:3e:c5:bd:4c:60:a5:80:98:d1:44: db:9b:1c:eb:9f:5f:24:d5:cb:08:96:5e:14:51:3a: 08:94:c9:6b:81:6d:bc:74:64:9e:3f:75:82:71:9f: 70:15:27:09:45:19:1c:8d:50:aa:8c:0e:94:bb:e8: 38:bb:ef:17:cd:c9:ac:3e:7a:4b:98:5d:3c:19:a5: 6b:eb:7a:a7:56:75:99:0c:02:4b:19:87:50:43:69: b3:7b:40:7e:1a:7d:c1:90:a2:93:ba:94:36:f7:df: f1:b8:00:76:a5:55:cd:c7:93:1a:1f:cd:8f:90:9f: 98:32:6e:75:5e:75:8d:20:1e:e1:bf:43:b9:3e:c9: ce:22:21:37:0a:e0:9f:8d:11:e5:0a:2a:78:44:cb: 2f:3e:ec:e0:36:43:b7:2b:3d:46:47:f7:86:bd:64: 38:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:25:B9:67:12:24:57:EF:2F:DB:CD:3E:B4:D9:9B:9D:7E:6B:DC:DC X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a0:c5:9c:ce:54:87:41:ea:bd:ab:93:68:a0:15:19:e5:7a: 3f:4e:19:2c:21:b9:ef:4d:0f:1e:8b:ca:13:fe:77:75:e0:97: 0c:5c:8a:ff:92:c4:82:e9:6d:6e:7e:4e:4e:66:b5:81:bb:b6: 68:cf:37:da:50:d7:d0:23:85:36:61:27:5f:92:8a:62:8c:90: 02:3e:77:02:73:22:a5:c4:df:b3:a6:09:a7:4e:48:49:86:bf: 20:8f:69:97:e9:5b:86:f4:60:c8:a7:d3:5e:6f:2f:94:a4:f9: d3:2a:4e:08:9b:25:50:fc:9e:32:78:79:90:ce:2e:c7:17:34: 62:08:9b:43:e3:57:b7:23:a3:c9:20:c5:db:53:07:6e:37:61: 65:46:a5:78:f3:13:e8:30:54:99:03:36:fc:03:22:8a:de:9c: 75:cc:6c:a5:0f:b0:7a:7e:fb:16:13:fa:f9:c2:c5:7d:2d:82: 66:f6:9e:06:c2:88:bd:e5:9b:4a:5f:4b:b6:1d:43:8e:88:43: fe:12:9b:bd:50:27:c5:91:5c:16:42:74:b9:11:49:77:fb:79: 4a:2b:1e:8e:fd:af:6d:cc:d6:a3:bb:38:a9:d2:84:64:cd:c4: 2a:52:96:a0:7a:80:16:9d:dd:da:12:ca:97:cb:53:fd:bc:b5: e7:41:88:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOcGZ4SR2MwMe65HJ4NL9HFArs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTA1MDgwMjQ2MDRaFw0yNTA1MTEwNzMwMDRaMDMxMTAvBgNV BAMTKDg0MjVCOTY3MTIyNDU3RUYyRkRCQ0QzRUI0RDk5QjlEN0U2QkRDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs1lT3S5Hdly7On3274Va85XN/ 474Tg5nl4RSH4xYHBwk717tzl2CKFWfCgcEIvxpagYjK/439rPrKQIH6RHIi8Npz Mh0acJGiaTJx5olynSewBsDXq//g4V/jdsq3PsW9TGClgJjRRNubHOufXyTVywiW XhRROgiUyWuBbbx0ZJ4/dYJxn3AVJwlFGRyNUKqMDpS76Di77xfNyaw+ekuYXTwZ pWvreqdWdZkMAksZh1BDabN7QH4afcGQopO6lDb33/G4AHalVc3HkxofzY+Qn5gy bnVedY0gHuG/Q7k+yc4iITcK4J+NEeUKKnhEyy8+7OA2Q7crPUZH94a9ZDi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhCW5ZxIkV+8v280+tNmbnX5r3NwwHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKugxZzOVIdB6r2rk2igFRnlej9OGSwhue9N Dx6LyhP+d3Xglwxciv+SxILpbW5+Tk5mtYG7tmjPN9pQ19AjhTZhJ1+SimKMkAI+ dwJzIqXE37OmCadOSEmGvyCPaZfpW4b0YMin015vL5Sk+dMqTgibJVD8njJ4eZDO LscXNGIIm0PjV7cjo8kgxdtTB243YWVGpXjzE+gwVJkDNvwDIorenHXMbKUPsHp+ +xYT+vnCxX0tgmb2ngbCiL3lm0pfS7YdQ46IQ/4Sm71QJ8WRXBZCdLkRSXf7eUor Ho79r23M1qO7OKnShGTNxCpSlqB6gBad3doSypfLU/28tedBiOk= -----END CERTIFICATE-----Generated at Thu May 8 09:40:39 2025 by rpki-client