$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: zmlZCSjThUlSQVRwb9NjGQrTzyEOmB5+tF4gANKw40s= Subject key identifier: FA:3A:89:95:5B:35:CA:FB:FB:29:AF:80:B6:BD:34:C4:A9:32:B7:A0 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 44CFDE04B1B4FC569DFEA36934C55AAFF1DAA204 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: BE Signing time: Wed 04 Jun 2025 03:41:44 +0000 Manifest this update: Wed 04 Jun 2025 03:36:44 +0000 Manifest next update: Sat 07 Jun 2025 04:43:44 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: 0OtErJ0M2tJ4gdEnqonQBGxzksOdCCrx7u0ND+VakUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:cf:de:04:b1:b4:fc:56:9d:fe:a3:69:34:c5:5a:af:f1:da:a2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Jun 4 03:36:44 2025 GMT Not After : Jun 7 04:43:44 2025 GMT Subject: CN=FA3A89955B35CAFBFB29AF80B6BD34C4A932B7A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:a0:d9:14:5b:d8:25:9a:50:30:ab:23:46: d2:dd:41:64:b9:80:30:c4:88:2c:7f:ad:ce:aa:79: 49:e2:32:9e:34:53:8b:10:3c:be:fa:22:17:f6:33: 8f:93:ab:df:47:9a:56:d1:59:e9:ec:b7:04:8a:cc: 24:ed:91:95:bc:d1:d0:88:7e:49:8d:eb:24:0f:62: 3d:d6:74:eb:a8:e8:1b:fb:d5:06:aa:bb:a1:93:ad: 19:cd:b1:43:b4:74:de:66:f4:4b:bf:1f:38:20:d1: 0e:2c:2a:13:48:97:97:cd:8f:5c:6c:b7:d3:1a:4c: 97:35:c4:e0:45:2d:cd:63:10:10:bc:76:53:40:d1: 49:3a:bf:bd:4b:60:80:9a:99:c6:63:34:da:88:c3: 99:54:34:df:c1:5f:a5:ee:b3:10:eb:bc:e3:39:f9: 07:3b:2a:72:be:29:25:7f:b8:5c:2c:87:ef:73:ad: a9:19:15:17:d5:0b:8b:0c:64:4d:af:fd:60:94:4f: 33:7a:da:12:81:99:b6:47:25:01:f4:22:92:ab:f7: 45:9f:01:d3:75:d0:72:02:aa:88:b9:18:28:8d:9d: 60:53:59:a5:26:8d:54:af:fb:f7:4a:0a:3f:df:41: 4f:6b:a2:73:42:f2:2d:50:de:c6:98:2f:30:6a:04: f8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:89:95:5B:35:CA:FB:FB:29:AF:80:B6:BD:34:C4:A9:32:B7:A0 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:50:f8:f4:4f:c8:33:70:15:15:a1:12:87:5f:15:82:30:7b: 1b:2d:9c:00:76:4f:5b:d2:96:02:99:e1:36:58:5c:e8:13:e4: f9:29:36:af:0d:b2:9e:68:b5:95:ce:ff:04:32:17:a2:30:d6: 5e:a1:0a:76:1a:23:77:6e:2b:53:be:56:28:a5:8c:9a:05:02: c3:8a:9e:3e:76:b7:5c:7d:26:0c:ca:2b:c3:bf:54:78:c0:90: 01:ba:9b:0c:64:d6:af:ea:a4:e8:87:27:f1:d0:f2:ff:1b:eb: dd:de:03:61:11:40:7d:8d:99:88:4f:83:5a:04:d0:83:03:52: 46:5a:ce:93:ef:94:90:c2:d7:9b:dc:b0:18:cd:e8:8e:6b:a0: c3:29:fc:53:2d:a4:c2:c1:58:24:a8:70:24:3c:40:b7:e7:18: e0:5f:31:dd:5b:64:b0:ee:78:70:df:aa:f1:8f:41:3a:fa:1d: d0:71:90:8a:e1:ee:46:31:a1:69:86:11:87:01:a5:f6:05:a4: 79:4c:86:35:3d:3d:32:73:32:47:33:7f:11:dc:34:41:4c:a9: 46:43:ce:fd:18:8d:d4:e8:1b:8c:21:3f:4b:3f:ab:20:0f:ab: cc:93:c7:73:3b:47:bf:b2:58:45:f5:27:ce:89:0c:90:a2:5c: 66:94:8b:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURM/eBLG0/Fad/qNpNMVar/HaogQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTA2MDQwMzM2NDRaFw0yNTA2MDcwNDQzNDRaMDMxMTAvBgNV BAMTKEZBM0E4OTk1NUIzNUNBRkJGQjI5QUY4MEI2QkQzNEM0QTkzMkI3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdaDZFFvYJZpQMKsjRtLdQWS5 gDDEiCx/rc6qeUniMp40U4sQPL76Ihf2M4+Tq99HmlbRWenstwSKzCTtkZW80dCI fkmN6yQPYj3WdOuo6Bv71Qaqu6GTrRnNsUO0dN5m9Eu/Hzgg0Q4sKhNIl5fNj1xs t9MaTJc1xOBFLc1jEBC8dlNA0Uk6v71LYICamcZjNNqIw5lUNN/BX6XusxDrvOM5 +Qc7KnK+KSV/uFwsh+9zrakZFRfVC4sMZE2v/WCUTzN62hKBmbZHJQH0IpKr90Wf AdN10HICqoi5GCiNnWBTWaUmjVSv+/dKCj/fQU9ronNC8i1Q3saYLzBqBPjLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+jqJlVs1yvv7Ka+Atr00xKkyt6AwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5Q+PRPyDNwFRWhEodfFYIwexstnAB2T1vS lgKZ4TZYXOgT5PkpNq8Nsp5otZXO/wQyF6Iw1l6hCnYaI3duK1O+ViiljJoFAsOK nj52t1x9JgzKK8O/VHjAkAG6mwxk1q/qpOiHJ/HQ8v8b693eA2ERQH2NmYhPg1oE 0IMDUkZazpPvlJDC15vcsBjN6I5roMMp/FMtpMLBWCSocCQ8QLfnGOBfMd1bZLDu eHDfqvGPQTr6HdBxkIrh7kYxoWmGEYcBpfYFpHlMhjU9PTJzMkczfxHcNEFMqUZD zv0YjdToG4whP0s/qyAPq8yTx3M7R7+yWEX1J86JDJCiXGaUi7M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:28:43 2025 by rpki-client