$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: m/IlB5UqY/P3KAKOheWch8cadaHupM2Q3fmIPcLol/8= Subject key identifier: 21:B4:99:46:4B:88:2F:DE:01:13:DD:DC:CA:01:56:99:35:B1:1A:B0 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 06B6FEEF6BC92604B89E29ED3F06F177CB79EA55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: 68 Signing time: Fri 22 Nov 2024 17:11:51 +0000 Manifest this update: Fri 22 Nov 2024 17:06:51 +0000 Manifest next update: Mon 25 Nov 2024 22:12:51 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: U3vLH7hmkEnmQHUTVkwPHESZZVsiov5ZAfVupeYfuoc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b6:fe:ef:6b:c9:26:04:b8:9e:29:ed:3f:06:f1:77:cb:79:ea:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Nov 22 17:06:51 2024 GMT Not After : Nov 25 22:12:51 2024 GMT Subject: CN=21B499464B882FDE0113DDDCCA01569935B11AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ae:2b:49:28:e8:ac:a9:60:d8:0e:42:b2:db: 20:cb:7d:46:b9:e0:c9:94:94:7c:ad:b3:80:be:5d: 09:32:f9:25:be:a8:d7:97:4a:65:f3:71:c3:07:9d: 65:d2:64:8c:04:e8:f6:a4:25:8f:87:70:74:52:f2: be:78:66:b7:0c:05:a6:d7:0d:9a:47:a6:b5:68:a2: 19:92:22:cd:1a:70:b7:66:7c:36:97:20:07:ce:be: 33:25:35:67:3c:f9:18:ae:e5:fd:8d:e0:91:ca:01: ff:d4:05:55:65:d7:8b:f0:76:81:a5:59:a8:03:81: f2:7a:09:3d:03:d2:03:c0:a2:9c:bc:7d:de:26:f5: b9:08:f7:f3:d4:9a:47:c5:97:ac:8f:41:55:09:a6: bd:91:42:28:fc:3b:41:c3:5b:40:1e:7f:c3:7b:50: 89:97:01:a9:a2:6e:ff:2d:0a:6e:bd:ff:f7:fc:5d: fe:9c:07:6a:04:ad:f7:fa:fe:e1:13:fe:1a:a6:9b: a8:e7:9c:aa:9b:b4:b3:f6:d3:3d:c6:b4:04:7a:77: 5b:24:14:ab:09:26:a0:f2:98:3b:fc:f6:37:80:6e: 3a:10:49:14:93:67:82:82:5f:8d:76:62:dd:fc:4c: c4:56:72:21:6f:a2:0e:a0:71:2c:97:75:fc:47:29: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B4:99:46:4B:88:2F:DE:01:13:DD:DC:CA:01:56:99:35:B1:1A:B0 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:9e:b5:34:ef:b8:03:30:f9:9c:1c:83:f6:82:27:8e:1c:ef: 53:6d:03:57:29:0e:53:d4:83:92:b0:7d:f4:63:43:ca:0a:2b: 43:76:f5:d9:7e:29:45:fc:8e:1b:15:88:b1:d2:0d:fa:0d:1b: ab:fa:de:25:2a:f0:d2:c9:6a:49:42:ca:9f:2c:f0:91:b2:29: 63:85:3f:94:b4:d3:21:f5:b0:bf:03:f8:04:12:f9:01:d6:fc: 04:84:0c:5a:b0:6f:e6:e7:19:c2:fa:51:52:39:97:db:e6:42: e1:1b:e0:e7:d1:42:47:19:47:f9:a9:af:60:0c:0d:ae:da:0c: f1:14:af:6a:4b:81:f9:b7:61:16:e4:01:48:6e:db:0d:25:4f: f6:a3:2c:ee:bc:a7:4d:dc:5d:0d:7d:1d:74:da:4f:8e:90:0a: 73:68:35:48:d3:a2:67:50:44:ef:e2:3b:53:ae:ed:d5:25:85: f9:c8:85:05:f2:96:31:2a:bc:6c:f2:7b:99:ea:83:43:26:ee: b4:5f:f3:8e:45:ae:43:e8:14:5c:3b:bf:e4:3c:44:25:88:8d: 84:58:28:12:90:ce:4b:bb:83:a9:10:b1:8a:40:71:ea:e1:d5: 37:00:e3:d4:e3:78:03:b4:0e:ac:9a:ea:2d:5a:72:4b:84:67: 25:d6:3c:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrb+72vJJgS4nintPwbxd8t56lUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNDExMjIxNzA2NTFaFw0yNDExMjUyMjEyNTFaMDMxMTAvBgNV BAMTKDIxQjQ5OTQ2NEI4ODJGREUwMTEzREREQ0NBMDE1Njk5MzVCMTFBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbritJKOisqWDYDkKy2yDLfUa5 4MmUlHyts4C+XQky+SW+qNeXSmXzccMHnWXSZIwE6PakJY+HcHRS8r54ZrcMBabX DZpHprVoohmSIs0acLdmfDaXIAfOvjMlNWc8+Riu5f2N4JHKAf/UBVVl14vwdoGl WagDgfJ6CT0D0gPAopy8fd4m9bkI9/PUmkfFl6yPQVUJpr2RQij8O0HDW0Aef8N7 UImXAamibv8tCm69//f8Xf6cB2oErff6/uET/hqmm6jnnKqbtLP20z3GtAR6d1sk FKsJJqDymDv89jeAbjoQSRSTZ4KCX412Yt38TMRWciFvog6gcSyXdfxHKYGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIbSZRkuIL94BE93cygFWmTWxGrAwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOetTTvuAMw+Zwcg/aCJ44c71NtA1cpDlPU g5KwffRjQ8oKK0N29dl+KUX8jhsViLHSDfoNG6v63iUq8NLJaklCyp8s8JGyKWOF P5S00yH1sL8D+AQS+QHW/ASEDFqwb+bnGcL6UVI5l9vmQuEb4OfRQkcZR/mpr2AM Da7aDPEUr2pLgfm3YRbkAUhu2w0lT/ajLO68p03cXQ19HXTaT46QCnNoNUjTomdQ RO/iO1Ou7dUlhfnIhQXyljEqvGzye5nqg0Mm7rRf845FrkPoFFw7v+Q8RCWIjYRY KBKQzku7g6kQsYpAcerh1TcA49TjeAO0Dqya6i1ackuEZyXWPIM= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:55 2024 by rpki-client on console-ams.rpki-client.org