$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: FkhJblbuzwsrtEIqpAWVg/kc7V7Ut5tIYI+snZzqgrA= Subject key identifier: F8:AB:C9:A6:B0:1E:43:67:48:F2:CF:08:63:91:75:51:9B:4D:81:B2 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 340A958E377CF8C1F7074CCCF8F63B2FA29C008B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: A3 Signing time: Fri 04 Apr 2025 21:01:41 +0000 Manifest this update: Fri 04 Apr 2025 20:56:41 +0000 Manifest next update: Tue 08 Apr 2025 00:43:41 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: Ooh30JOgWF4BjGx/NukmMV78arB1nCosoFs7W/SGrgw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 00:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0a:95:8e:37:7c:f8:c1:f7:07:4c:cc:f8:f6:3b:2f:a2:9c:00:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Apr 4 20:56:41 2025 GMT Not After : Apr 8 00:43:41 2025 GMT Subject: CN=F8ABC9A6B01E436748F2CF08639175519B4D81B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e2:29:4e:9f:a5:ff:1e:e6:d8:ca:5f:a7:e6: a5:44:b8:31:32:a9:4c:ee:57:76:46:fe:8f:20:c3: 4c:0b:e3:ee:c6:f6:7f:b4:d1:f0:d1:1e:d7:8e:8d: 7c:ca:50:d9:94:99:31:50:47:9e:33:5d:32:00:24: fd:9d:ba:87:2f:db:70:be:46:5d:73:5f:c2:0a:4d: ba:9d:68:f7:5c:60:c0:08:5a:ff:f6:9e:88:bb:12: 19:de:78:97:b8:56:ab:23:fd:4d:8c:0d:98:12:a7: 3d:ec:dd:8b:4f:93:8c:d3:91:03:a1:8f:04:4c:c9: 5a:c6:78:b3:23:89:60:99:46:38:95:49:ae:56:14: 83:08:d2:45:68:ab:32:f9:6e:7d:fd:ba:84:dd:b5: 13:67:b5:7d:90:4a:b5:b0:f6:e2:b6:ae:78:34:07: 8e:82:dd:34:9c:6d:fc:b6:50:8f:d7:09:c3:53:c5: e2:81:1a:4e:e4:c9:09:6d:82:43:5f:65:96:11:29: 3c:06:80:e8:a8:ea:99:27:b2:b9:5e:d9:b7:ad:f0: 66:9d:ca:2e:d9:f1:d1:f7:29:55:54:8a:ca:06:d6: bf:07:f5:a5:48:2a:93:46:39:4a:21:f3:1b:82:88: 52:43:47:3a:0c:ba:58:b0:86:b0:f5:bf:96:4c:54: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AB:C9:A6:B0:1E:43:67:48:F2:CF:08:63:91:75:51:9B:4D:81:B2 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:57:93:5a:e8:25:9a:14:67:c1:5f:ef:c2:b0:ab:d2:3c:23: b9:b8:d1:89:90:ea:e3:df:90:86:ed:8d:fc:4f:99:e8:a0:07: 7d:e4:95:9f:ee:71:44:a4:73:bd:75:76:9b:27:c4:8a:63:0d: b2:39:5a:e9:3f:25:9e:db:76:ca:9d:05:0c:ef:1e:e7:f5:04: 0d:a7:8c:92:10:0b:32:04:d6:bb:6b:21:5a:00:a8:ef:25:cd: c1:4d:a2:e2:10:9a:0f:91:0d:10:af:10:8a:11:83:e1:1c:87: b7:4c:32:86:c4:8e:e3:6a:36:d7:ec:f5:6d:91:cb:82:9f:5e: 6d:12:ae:ab:c3:8d:ea:40:c5:2f:cc:e0:68:fb:bb:2b:9c:74: d4:82:5d:e1:60:28:03:48:1c:3e:01:f5:63:3f:ad:29:f2:85: 31:ab:2f:6a:f8:c0:15:fc:43:55:4c:14:95:30:3e:b6:64:6e: 99:a4:de:5c:64:23:80:1e:2f:5d:95:48:d2:8c:6c:d3:99:e8: 65:84:ec:17:7f:ad:75:2b:38:a5:06:34:b0:5b:1b:f5:32:9b: f5:52:72:0e:ee:49:d7:60:c1:eb:7c:44:10:ab:c5:d6:5e:73: fc:31:31:88:26:34:ac:6c:b4:66:a8:9a:e6:de:54:de:f3:3f: 28:27:6e:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNAqVjjd8+MH3B0zM+PY7L6KcAIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTA0MDQyMDU2NDFaFw0yNTA0MDgwMDQzNDFaMDMxMTAvBgNV BAMTKEY4QUJDOUE2QjAxRTQzNjc0OEYyQ0YwODYzOTE3NTUxOUI0RDgxQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4ilOn6X/HubYyl+n5qVEuDEy qUzuV3ZG/o8gw0wL4+7G9n+00fDRHteOjXzKUNmUmTFQR54zXTIAJP2duocv23C+ Rl1zX8IKTbqdaPdcYMAIWv/2noi7EhneeJe4Vqsj/U2MDZgSpz3s3YtPk4zTkQOh jwRMyVrGeLMjiWCZRjiVSa5WFIMI0kVoqzL5bn39uoTdtRNntX2QSrWw9uK2rng0 B46C3TScbfy2UI/XCcNTxeKBGk7kyQltgkNfZZYRKTwGgOio6pknsrle2bet8Gad yi7Z8dH3KVVUisoG1r8H9aVIKpNGOUoh8xuCiFJDRzoMuliwhrD1v5ZMVMUrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+KvJprAeQ2dI8s8IY5F1UZtNgbIwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFXk1roJZoUZ8Ff78Kwq9I8I7m40YmQ6uPf kIbtjfxPmeigB33klZ/ucUSkc711dpsnxIpjDbI5Wuk/JZ7bdsqdBQzvHuf1BA2n jJIQCzIE1rtrIVoAqO8lzcFNouIQmg+RDRCvEIoRg+Ech7dMMobEjuNqNtfs9W2R y4KfXm0SrqvDjepAxS/M4Gj7uyucdNSCXeFgKANIHD4B9WM/rSnyhTGrL2r4wBX8 Q1VMFJUwPrZkbpmk3lxkI4AeL12VSNKMbNOZ6GWE7Bd/rXUrOKUGNLBbG/Uym/VS cg7uSddgwet8RBCrxdZec/wxMYgmNKxstGaomubeVN7zPygnbv8= -----END CERTIFICATE-----Generated at Sun Apr 6 04:42:50 2025 by rpki-client