$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: BfiXmwS8ym9nwSUC0ePokGMc8NSKiiT98zZW/vNBY+8= Subject key identifier: 50:31:E8:74:7D:34:04:88:4C:37:B4:95:9E:29:64:CC:53:01:4A:E6 Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 5B4DB62042DAC567288BC73297A7A34A6822E4C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: 32 Signing time: Sat 28 Sep 2024 01:51:03 +0000 Manifest this update: Sat 28 Sep 2024 01:46:03 +0000 Manifest next update: Tue 01 Oct 2024 06:19:03 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: hVhUkyq+rhRyFGCscK2hkV761oADu4WLKAo8znjBvU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Oct 2024 06:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4d:b6:20:42:da:c5:67:28:8b:c7:32:97:a7:a3:4a:68:22:e4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Sep 28 01:46:03 2024 GMT Not After : Oct 1 06:19:03 2024 GMT Subject: CN=5031E8747D3404884C37B4959E2964CC53014AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:83:90:7b:29:f9:d6:e8:e2:ef:91:e5:bd:32: 72:86:27:19:87:76:36:99:02:f8:f8:60:c1:d9:a4: ea:69:6b:ff:d8:94:89:48:34:e3:fb:45:2e:2f:e9: 3b:b0:32:9d:b3:e9:79:5c:a0:e0:a7:92:84:70:3d: 56:d1:3c:d7:66:5c:4e:31:9b:4c:3a:9f:b9:22:5a: 60:86:d3:e5:74:ee:40:b2:36:9e:e4:cb:0c:f2:e5: f9:b8:29:9f:9f:60:4c:6c:54:eb:8e:4e:53:93:d5: b4:44:7a:8a:db:7b:ac:c3:10:36:c3:ff:cc:2b:eb: 24:76:4d:ae:14:27:15:ce:37:0c:57:19:b5:cb:20: ff:73:4c:1d:2d:4e:83:f6:7e:43:56:7e:12:3d:e4: c0:49:b4:46:69:42:2e:4f:47:0a:6c:0b:be:5a:10: f2:04:9c:5c:34:8d:7b:bc:e1:dd:62:7f:e2:f4:c6: c0:86:b6:12:e9:ae:ea:3e:ae:05:60:36:fd:20:38: 89:d6:1f:ab:57:7b:04:e8:22:ca:58:f3:15:a3:e4: ad:c2:83:12:a9:0e:3a:21:cd:c3:86:f0:4b:c0:d4: 54:35:aa:0c:a1:f6:f3:fd:66:9a:2e:58:69:e4:e6: 58:b3:3e:a0:8f:88:f1:ae:a7:05:aa:9f:73:e3:91: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:31:E8:74:7D:34:04:88:4C:37:B4:95:9E:29:64:CC:53:01:4A:E6 X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:03:9e:3e:de:4a:0b:be:07:ce:fa:d7:17:df:5f:32:7b:e4: a7:1a:e8:d9:dd:2f:5b:d7:3b:f4:96:e4:ab:82:22:c7:02:24: 86:e5:bc:ce:bf:9d:cc:6a:fe:dc:5d:58:17:fa:2f:2e:56:4b: ab:16:3f:6b:5e:aa:ce:5d:06:43:3e:82:da:39:ab:66:fe:74: bc:fa:8f:11:86:60:0d:f7:7a:1d:53:9c:34:25:14:bb:d4:af: 8b:31:8e:65:06:b0:35:ad:c8:6d:b9:70:03:d7:a9:48:59:33: 30:57:47:8a:e7:8a:b0:15:78:14:df:7f:ea:f9:fd:28:61:fe: 72:cf:56:51:46:6d:d8:20:b0:15:a3:3e:a4:43:2a:d4:b4:52: 1f:88:c6:40:3a:2e:76:04:92:39:ee:96:ef:81:49:9a:17:82: 72:d4:8a:42:1e:b0:8c:b6:eb:57:53:fc:53:3f:d2:b6:d4:0a: fa:3d:d3:15:15:58:05:be:21:0e:3a:f4:b7:43:1c:9f:ea:7d: 38:53:42:b3:ca:e7:5c:81:d5:4c:7d:2d:22:74:50:fd:9f:27: 5c:b4:6e:b6:26:51:b6:ed:8a:60:5e:8a:52:c7:57:e5:25:9f: 4e:02:55:8d:e8:7f:f0:bb:c4:f0:2f:f2:e9:1a:63:9a:b5:b1: 36:13:d5:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW022IELaxWcoi8cyl6ejSmgi5MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNDA5MjgwMTQ2MDNaFw0yNDEwMDEwNjE5MDNaMDMxMTAvBgNV BAMTKDUwMzFFODc0N0QzNDA0ODg0QzM3QjQ5NTlFMjk2NENDNTMwMTRBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOg5B7KfnW6OLvkeW9MnKGJxmH djaZAvj4YMHZpOppa//YlIlINOP7RS4v6TuwMp2z6XlcoOCnkoRwPVbRPNdmXE4x m0w6n7kiWmCG0+V07kCyNp7kywzy5fm4KZ+fYExsVOuOTlOT1bREeorbe6zDEDbD /8wr6yR2Ta4UJxXONwxXGbXLIP9zTB0tToP2fkNWfhI95MBJtEZpQi5PRwpsC75a EPIEnFw0jXu84d1if+L0xsCGthLpruo+rgVgNv0gOInWH6tXewToIspY8xWj5K3C gxKpDjohzcOG8EvA1FQ1qgyh9vP9ZpouWGnk5lizPqCPiPGupwWqn3PjkbJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUDHodH00BIhMN7SVnilkzFMBSuYwHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEDnj7eSgu+B8761xffXzJ75Kca6NndL1vX O/SW5KuCIscCJIblvM6/ncxq/txdWBf6Ly5WS6sWP2teqs5dBkM+gto5q2b+dLz6 jxGGYA33eh1TnDQlFLvUr4sxjmUGsDWtyG25cAPXqUhZMzBXR4rnirAVeBTff+r5 /Shh/nLPVlFGbdggsBWjPqRDKtS0Uh+IxkA6LnYEkjnulu+BSZoXgnLUikIesIy2 61dT/FM/0rbUCvo90xUVWAW+IQ469LdDHJ/qfThTQrPK51yB1Ux9LSJ0UP2fJ1y0 brYmUbbtimBeilLHV+Uln04CVY3of/C7xPAv8ukaY5q1sTYT1b8= -----END CERTIFICATE-----Generated at Sat Sep 28 03:38:03 2024 by rpki-client on console-ams.rpki-client.org