$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: jyolAmrAJ2FkjbSIJLnqKWh6Tb1p9Pi7hPs7/WWHezM= Subject key identifier: 34:3D:D5:28:26:BF:B3:51:76:AB:CE:AE:D0:DD:AC:D4:3A:85:85:72 Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 3BE2C1F57EEEB96D1991ACBE5DCC870CD1DF32DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: 86 Signing time: Sat 05 Apr 2025 00:11:04 +0000 Manifest this update: Sat 05 Apr 2025 00:06:04 +0000 Manifest next update: Tue 08 Apr 2025 04:15:04 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: PEiH2rQs186HiTr3lFCYM4bpYYuYGCFjQ4jj8p1do0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e2:c1:f5:7e:ee:b9:6d:19:91:ac:be:5d:cc:87:0c:d1:df:32:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Apr 5 00:06:04 2025 GMT Not After : Apr 8 04:15:04 2025 GMT Subject: CN=343DD52826BFB35176ABCEAED0DDACD43A858572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:1b:18:7b:b5:5c:04:73:9e:a0:e8:73:56: a4:ac:f9:73:48:b0:4d:db:86:24:73:88:36:f0:41: 2c:da:60:cf:af:b4:c5:8b:ab:fe:40:29:50:38:d5: b6:91:48:c5:b8:9f:49:42:6d:a9:da:71:25:3a:a4: 4b:4d:d3:40:34:7d:94:19:86:b2:94:83:b4:be:1d: 96:3f:4c:f7:4f:fd:d9:42:62:b1:b5:c5:66:c9:db: f7:1d:73:29:4e:80:38:6c:4a:f0:f6:1b:cb:99:2c: 6b:23:ba:3f:33:20:aa:76:dc:f0:d7:96:ef:71:95: 99:2e:62:e7:8c:5c:b8:f6:31:04:06:ad:a9:ae:41: 9f:c7:e4:d5:ee:9e:4c:d7:b6:ba:97:b7:b6:34:9d: ce:69:dd:89:fc:94:e6:be:a2:86:e0:ad:ac:cd:3c: 85:ab:77:20:d6:84:16:a0:02:6e:46:06:bf:34:6a: c9:fe:e0:90:31:d9:d5:2f:a6:a9:a3:fe:5b:b4:c2: f6:7b:3b:84:b7:33:8a:49:e4:8c:20:cf:45:30:1e: 1a:46:a8:ea:b9:7b:62:4f:c3:75:0e:55:81:39:27: 3d:df:8e:f4:e8:8c:d8:ea:88:38:c7:ca:25:e3:6c: f3:a2:73:c0:f2:58:de:3d:dd:ca:ad:e8:62:7a:1f: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3D:D5:28:26:BF:B3:51:76:AB:CE:AE:D0:DD:AC:D4:3A:85:85:72 X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:18:cf:50:85:e3:c3:42:04:ac:c6:6b:32:68:4c:4a:f4:f0: 12:04:3d:c6:71:8c:b2:d1:be:fc:df:f0:c5:89:46:98:9c:38: dc:40:f3:91:4c:c8:6d:69:c3:c6:f1:bc:67:70:2c:89:71:69: a5:1c:33:22:77:2d:33:74:be:05:dd:6b:f7:74:cd:c5:f5:ab: c3:27:11:67:25:b8:e6:d7:f7:b4:f6:91:1d:6c:de:b8:ff:60: f5:71:2a:39:d0:e2:cd:7a:3b:a0:d1:5d:f0:8b:38:f1:3d:58: c9:b2:f9:8d:50:5a:10:dc:18:c7:b0:60:cc:6e:2b:88:0d:56: 8a:e2:2c:03:3c:1f:64:de:34:32:a1:46:b2:63:66:ab:e2:74: 89:98:59:eb:06:0f:d4:b1:b7:ea:60:24:79:8a:da:5c:40:19: 7e:e6:e8:a5:9f:4e:f3:05:e5:d8:14:ae:ea:35:9d:a3:51:5a: 35:63:c5:43:ba:e7:cb:64:4d:61:22:a7:28:20:a7:dc:56:de: 91:13:34:ce:41:fb:c9:c4:63:9a:c4:28:b2:35:2b:7f:7c:28: 8c:06:32:ea:8d:34:69:df:95:ad:74:21:6e:dc:e6:19:d7:d9: 2f:89:78:2e:b9:e0:cf:b8:12:3c:90:8d:6f:e8:56:09:d9:58: ca:9f:5e:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+LB9X7uuW0Zkay+XcyHDNHfMt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTA0MDUwMDA2MDRaFw0yNTA0MDgwNDE1MDRaMDMxMTAvBgNV BAMTKDM0M0RENTI4MjZCRkIzNTE3NkFCQ0VBRUQwRERBQ0Q0M0E4NTg1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OhsYe7VcBHOeoOhzVqSs+XNI sE3bhiRziDbwQSzaYM+vtMWLq/5AKVA41baRSMW4n0lCbanacSU6pEtN00A0fZQZ hrKUg7S+HZY/TPdP/dlCYrG1xWbJ2/cdcylOgDhsSvD2G8uZLGsjuj8zIKp23PDX lu9xlZkuYueMXLj2MQQGramuQZ/H5NXunkzXtrqXt7Y0nc5p3Yn8lOa+oobgrazN PIWrdyDWhBagAm5GBr80asn+4JAx2dUvpqmj/lu0wvZ7O4S3M4pJ5Iwgz0UwHhpG qOq5e2JPw3UOVYE5Jz3fjvTojNjqiDjHyiXjbPOic8DyWN493cqt6GJ6HxOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUND3VKCa/s1F2q86u0N2s1DqFhXIwHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8Yz1CF48NCBKzGazJoTEr08BIEPcZxjLLR vvzf8MWJRpicONxA85FMyG1pw8bxvGdwLIlxaaUcMyJ3LTN0vgXda/d0zcX1q8Mn EWcluObX97T2kR1s3rj/YPVxKjnQ4s16O6DRXfCLOPE9WMmy+Y1QWhDcGMewYMxu K4gNVoriLAM8H2TeNDKhRrJjZqvidImYWesGD9Sxt+pgJHmK2lxAGX7m6KWfTvMF 5dgUruo1naNRWjVjxUO658tkTWEipyggp9xW3pETNM5B+8nEY5rEKLI1K398KIwG MuqNNGnfla10IW7c5hnX2S+JeC654M+4EjyQjW/oVgnZWMqfXrc= -----END CERTIFICATE-----Generated at Sat Apr 5 20:43:48 2025 by rpki-client