$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: j7KxEV8YxRZV/imak7N6HwtVvMLYlTek7P9tG4bstLQ= Subject key identifier: 1D:E5:EA:D7:94:D6:95:DC:5F:15:91:E6:16:B6:5D:70:14:68:0F:CF Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 333A21E0F61DA85E6EF62E369BCCC230E2AADC3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: 14 Signing time: Sat 18 May 2024 19:51:29 +0000 Manifest this update: Sat 18 May 2024 19:46:29 +0000 Manifest next update: Tue 21 May 2024 23:05:29 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: O/Hz4l5J53NRAlzxtsdU39Vmfsl5VtD+NTM1guKBOjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3a:21:e0:f6:1d:a8:5e:6e:f6:2e:36:9b:cc:c2:30:e2:aa:dc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: May 18 19:46:29 2024 GMT Not After : May 21 23:05:29 2024 GMT Subject: CN=1DE5EAD794D695DC5F1591E616B65D7014680FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:ed:b3:08:d1:fa:ee:72:cc:d7:67:12:04: c0:5a:20:ac:fa:8a:a6:49:4d:6a:48:95:28:da:d3: 2f:27:de:fa:2b:6b:f2:c5:d5:06:01:e4:b6:f4:53: 7f:48:b5:eb:92:9d:3c:55:af:39:fd:7c:cd:37:84: ad:e0:4f:b9:36:32:af:3c:c2:f1:a2:35:32:02:8d: 21:25:ba:30:58:8d:e7:6d:68:08:5a:85:ed:f0:78: c9:4a:8c:6d:2b:32:a6:13:8c:08:d1:1f:0a:e7:b1: 48:fe:0b:a6:e6:68:e6:c3:15:c2:30:10:f8:2f:b3: b6:ed:79:86:ae:eb:24:f0:98:5e:71:69:22:6b:87: 55:5a:e3:8a:1a:3d:0b:19:1d:54:d9:f0:7a:81:13: a5:e7:8b:b9:92:77:b4:da:bc:d3:c1:a7:26:ba:e3: 79:c6:af:6e:b9:e0:a2:b6:f4:76:51:0a:0d:db:e2: e5:94:06:62:1d:fc:cc:ec:92:b3:2f:60:cf:3b:73: 9a:d6:81:ba:95:94:af:ed:36:62:e1:95:e6:eb:6d: 85:45:dc:b7:e5:2e:6d:0e:e7:b0:90:3a:f0:0b:cf: 2e:18:5b:1f:a4:f2:12:cb:f5:1b:59:e6:f2:c3:24: aa:10:06:86:4f:e6:b8:72:c3:0e:89:1c:b3:5f:00: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E5:EA:D7:94:D6:95:DC:5F:15:91:E6:16:B6:5D:70:14:68:0F:CF X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:32:74:47:06:11:f2:e6:3e:ed:2a:ba:9d:59:3a:e5:a4:66: e0:c3:1e:9f:c4:56:50:be:6d:05:25:69:8c:6d:88:98:b5:e0: aa:22:bf:13:1e:97:9e:0d:43:16:9c:41:fd:43:4e:ae:9e:5b: 45:9a:ce:32:20:08:56:e4:9b:d9:e6:ec:e4:80:f4:3c:30:e6: 41:bc:6c:f8:1f:dd:25:6f:c1:59:c3:a7:bd:08:ce:35:47:1c: 9f:42:08:dc:df:30:6e:e0:45:40:00:ac:2e:e1:e7:c7:98:76: 0c:3c:c0:3c:32:eb:69:59:be:6a:a3:e4:95:cd:b3:74:84:76: 7b:e2:26:fc:7b:89:69:de:7f:51:57:51:25:e6:84:58:4b:1a: dc:f5:22:8d:b1:0a:58:2e:f9:b1:fc:b5:6e:2d:06:a1:2a:53: 0a:0a:46:74:b9:44:bc:e0:fc:6b:d6:87:6b:11:a5:e0:25:4e: a1:4b:1c:1a:c3:a9:c8:3a:e2:8b:eb:57:a3:25:22:a9:c8:38: ac:a0:ce:6c:71:35:e4:fe:31:f5:1c:61:ac:a5:13:c1:31:a7: 0d:5f:23:89:14:1d:d4:e8:aa:e1:24:35:90:e1:f7:d1:b0:94: c3:a4:08:b5:50:75:80:80:01:b2:9a:6a:95:73:ec:9d:86:40: 2b:86:56:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzoh4PYdqF5u9i42m8zCMOKq3D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNDA1MTgxOTQ2MjlaFw0yNDA1MjEyMzA1MjlaMDMxMTAvBgNV BAMTKDFERTVFQUQ3OTRENjk1REM1RjE1OTFFNjE2QjY1RDcwMTQ2ODBGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGge2zCNH67nLM12cSBMBaIKz6 iqZJTWpIlSja0y8n3vora/LF1QYB5Lb0U39IteuSnTxVrzn9fM03hK3gT7k2Mq88 wvGiNTICjSElujBYjedtaAhahe3weMlKjG0rMqYTjAjRHwrnsUj+C6bmaObDFcIw EPgvs7bteYau6yTwmF5xaSJrh1Va44oaPQsZHVTZ8HqBE6Xni7mSd7TavNPBpya6 43nGr2654KK29HZRCg3b4uWUBmId/MzskrMvYM87c5rWgbqVlK/tNmLhlebrbYVF 3LflLm0O57CQOvALzy4YWx+k8hLL9RtZ5vLDJKoQBoZP5rhyww6JHLNfAOp/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHeXq15TWldxfFZHmFrZdcBRoD88wHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcydEcGEfLmPu0qup1ZOuWkZuDDHp/EVlC+ bQUlaYxtiJi14KoivxMel54NQxacQf1DTq6eW0WazjIgCFbkm9nm7OSA9Dww5kG8 bPgf3SVvwVnDp70IzjVHHJ9CCNzfMG7gRUAArC7h58eYdgw8wDwy62lZvmqj5JXN s3SEdnviJvx7iWnef1FXUSXmhFhLGtz1Io2xClgu+bH8tW4tBqEqUwoKRnS5RLzg /GvWh2sRpeAlTqFLHBrDqcg64ovrV6MlIqnIOKygzmxxNeT+MfUcYaylE8Expw1f I4kUHdToquEkNZDh99GwlMOkCLVQdYCAAbKaapVz7J2GQCuGVtg= -----END CERTIFICATE-----Generated at Sat May 18 21:30:46 2024 by rpki-client on console-ams.rpki-client.org