$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: sUNo2o5cJP5C5k4GDVxuAi901IH0IWyj+2xpqR1coBs= Subject key identifier: 3B:CE:D2:1C:97:1B:1D:73:13:5F:5E:C2:9F:97:03:75:68:A8:19:31 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 740540F55F07C2D79B116E5DCDA7D08147DC32CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: B3 Signing time: Sat 10 May 2025 13:11:42 +0000 Manifest this update: Sat 10 May 2025 13:06:42 +0000 Manifest next update: Tue 13 May 2025 15:44:42 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: OB2Zso0ihW+xpJ8g2J5mwhD9QlLz2SVzAQ/d+/bf2M8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 15:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:05:40:f5:5f:07:c2:d7:9b:11:6e:5d:cd:a7:d0:81:47:dc:32:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: May 10 13:06:42 2025 GMT Not After : May 13 15:44:42 2025 GMT Subject: CN=3BCED21C971B1D73135F5EC29F97037568A81931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:a0:d6:5f:8e:db:fb:27:72:92:ce:f4:72: 5b:76:ae:43:be:26:68:87:3e:ad:96:83:99:28:01: 15:4a:e9:19:e9:41:86:2d:da:4d:1d:e2:3a:4b:f8: 18:f5:1e:4a:0e:1d:b6:c6:c2:9b:44:0e:f2:c7:53: d5:56:ca:4e:f6:f9:7b:ba:ca:81:58:b2:62:0d:2d: c5:12:c4:80:96:b3:60:56:3f:29:6e:fc:53:81:0a: 4b:3a:5d:77:f2:56:ef:2d:da:c5:d9:8f:8e:01:13: a7:1a:0e:06:15:cb:3a:ea:fb:84:36:c4:0b:78:a5: 41:9d:bd:e4:54:48:ad:72:df:21:94:49:54:95:eb: eb:b4:22:0d:ec:29:f1:e8:48:d2:19:cf:15:d1:f5: 05:40:f4:83:9c:bf:dc:81:9f:3c:b3:19:85:be:fe: 30:5c:ff:af:49:53:dd:10:0e:0d:a8:96:b9:ab:c0: 56:19:b4:62:33:d6:35:07:83:cc:b0:54:b0:99:b3: db:01:bc:1d:11:e7:25:7d:20:8c:71:50:23:a1:9f: fc:7c:1c:61:75:7b:d7:5f:de:f2:00:7e:da:45:48: 53:7a:22:e4:7c:7d:7c:45:ec:38:27:d8:f7:1b:04: a4:f3:1f:b7:03:6f:b3:8a:46:72:96:5e:a0:33:80: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CE:D2:1C:97:1B:1D:73:13:5F:5E:C2:9F:97:03:75:68:A8:19:31 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a4:77:2f:17:6e:c7:8b:ba:d3:70:31:50:e3:7c:a6:85:06: 86:c1:4b:6d:b9:4d:0f:48:a3:e3:8e:7f:8e:89:bc:40:3c:a1: b2:93:ff:e7:f1:5b:b7:ce:b1:81:c9:6a:7d:f1:82:0a:19:28: 2f:66:1f:7f:47:a9:0d:fc:ff:11:e8:27:d4:70:7d:28:53:82: 48:55:cc:07:16:94:1b:cb:93:95:2f:75:2c:3c:cb:af:06:d8: bb:dc:5a:ec:61:fb:ce:91:7a:03:65:e7:6d:e8:d3:02:c8:2a: 9d:a9:7c:48:7f:d5:b4:92:9b:1c:25:35:0a:80:c4:e1:fe:f1: f9:bd:7a:de:40:44:b9:ba:2b:fd:9f:bf:88:2d:96:e5:45:00: 1d:04:66:02:64:11:7a:02:0d:fd:4a:a5:eb:75:1e:e0:b7:27: ab:68:83:9f:a0:31:93:d9:84:3e:9b:ba:40:ae:ee:ef:b3:21: 35:52:ef:a5:7e:82:cc:7d:97:25:64:d7:b1:b0:d9:cb:eb:64: 78:1f:c3:71:87:92:4c:2e:1f:61:4f:d6:ed:6a:4d:77:ee:59: a1:f6:65:65:71:8b:e0:83:6e:8f:67:a5:1c:9a:99:70:d0:00: 1b:e5:a1:95:17:54:ac:77:c9:58:95:31:84:f3:da:75:40:49: 2d:47:d4:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdAVA9V8HwtebEW5dzafQgUfcMsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTA1MTAxMzA2NDJaFw0yNTA1MTMxNTQ0NDJaMDMxMTAvBgNV BAMTKDNCQ0VEMjFDOTcxQjFENzMxMzVGNUVDMjlGOTcwMzc1NjhBODE5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2n6DWX47b+ydyks70clt2rkO+ JmiHPq2Wg5koARVK6RnpQYYt2k0d4jpL+Bj1HkoOHbbGwptEDvLHU9VWyk72+Xu6 yoFYsmINLcUSxICWs2BWPylu/FOBCks6XXfyVu8t2sXZj44BE6caDgYVyzrq+4Q2 xAt4pUGdveRUSK1y3yGUSVSV6+u0Ig3sKfHoSNIZzxXR9QVA9IOcv9yBnzyzGYW+ /jBc/69JU90QDg2olrmrwFYZtGIz1jUHg8ywVLCZs9sBvB0R5yV9IIxxUCOhn/x8 HGF1e9df3vIAftpFSFN6IuR8fXxF7Dgn2PcbBKTzH7cDb7OKRnKWXqAzgDLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO87SHJcbHXMTX17Cn5cDdWioGTEwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2kdy8XbseLutNwMVDjfKaFBobBS225TQ9I o+OOf46JvEA8obKT/+fxW7fOsYHJan3xggoZKC9mH39HqQ38/xHoJ9RwfShTgkhV zAcWlBvLk5UvdSw8y68G2LvcWuxh+86RegNl523o0wLIKp2pfEh/1bSSmxwlNQqA xOH+8fm9et5ARLm6K/2fv4gtluVFAB0EZgJkEXoCDf1Kpet1HuC3J6tog5+gMZPZ hD6bukCu7u+zITVS76V+gsx9lyVk17Gw2cvrZHgfw3GHkkwuH2FP1u1qTXfuWaH2 ZWVxi+CDbo9npRyamXDQABvloZUXVKx3yViVMYTz2nVASS1H1BQ= -----END CERTIFICATE-----Generated at Mon May 12 17:10:54 2025 by rpki-client