$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft File: 4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json) Hash identifier: 9aYAJjGqmZz2baV1qZLzhnoj+0+KkbEBfSwGN9jBwuw= Subject key identifier: B4:77:EC:DD:8A:AB:A1:2A:23:9D:D5:F8:64:09:E1:30:EB:F6:1F:1E Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 Certificate issuer: /CN=4E27F034334E73C4B659862D683F564DB3AA9069 Certificate serial: 3BDDA2073D68066BA006668500FFE53AA4BF3BD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft Manifest number: 0179 Signing time: Tue 05 Aug 2025 15:30:05 +0000 Manifest this update: Tue 05 Aug 2025 15:25:05 +0000 Manifest next update: Fri 08 Aug 2025 22:44:05 +0000 Files and hashes: 1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: g8Do9IDsLX8Sx24xNReub4kO5yn03HH90pAmcPnOm9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 22:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:dd:a2:07:3d:68:06:6b:a0:06:66:85:00:ff:e5:3a:a4:bf:3b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069 Validity Not Before: Aug 5 15:25:05 2025 GMT Not After : Aug 8 22:44:05 2025 GMT Subject: CN=B477ECDD8AABA12A239DD5F86409E130EBF61F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:0f:80:7f:54:d9:41:2e:82:77:58:ce:af: c8:07:44:67:93:3f:02:51:84:e0:28:ff:6c:db:35: 56:d6:49:0e:55:10:35:f8:79:8f:41:fe:45:ab:89: 43:95:80:2a:8d:cc:37:eb:52:75:95:8d:37:1c:de: 16:16:5b:73:23:7b:9d:d5:52:91:8e:79:53:18:c1: 01:cd:aa:52:eb:be:7a:37:31:32:ee:de:78:be:ff: b2:b0:bc:75:fc:bd:1b:66:d4:46:14:22:b6:eb:10: d6:a3:5e:b7:08:b6:bd:e6:37:b7:1f:56:ed:3a:72: 77:3a:8c:ef:c5:9b:ee:ff:c2:fe:36:92:a8:ce:c3: 49:3e:11:cf:62:7e:57:31:22:e3:87:90:3b:a9:55: b7:c3:a0:27:e6:b6:5a:1b:f5:f6:57:21:6d:b2:04: 60:e5:39:13:b1:30:0a:1e:c9:1b:6c:3d:ac:16:49: 8c:9b:51:56:be:62:d8:68:cf:78:8f:57:42:65:27: f0:c7:77:8e:b1:af:30:0b:56:cd:9c:e4:68:96:fa: b1:58:20:94:8e:5c:1b:9d:ca:14:ac:20:58:3b:62: bc:77:f6:f7:c0:aa:86:59:8b:79:f9:9b:ca:e5:d4: 0a:d1:05:77:b3:37:94:7f:75:ae:77:39:04:7f:82: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:77:EC:DD:8A:AB:A1:2A:23:9D:D5:F8:64:09:E1:30:EB:F6:1F:1E X509v3 Authority Key Identifier: keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e6:4f:cb:7f:48:2e:fd:10:ec:c0:c8:0b:2a:75:e3:77:2f: c2:3e:d2:ee:b1:c5:45:26:43:23:85:b0:13:39:67:73:19:61: 76:4a:bb:da:93:b9:a8:f3:75:aa:5a:71:fa:24:a5:7b:55:76: ad:c6:75:f3:e9:a3:8b:3e:25:d3:ad:1a:a1:c4:82:30:c4:b7: 02:26:76:32:ef:2a:db:f3:35:f8:a5:1a:e2:ba:3a:3d:56:33: fb:4c:18:45:98:17:0d:bd:a1:08:61:61:37:f0:2f:21:96:d0: bd:cb:84:a4:47:41:30:26:58:90:e8:d2:b6:fb:b2:0c:4c:ab: 67:c8:90:af:86:e6:aa:5f:81:09:cc:77:6d:c8:d7:9b:1e:4e: 3f:4d:fd:a2:1e:fe:74:01:86:b9:d8:04:aa:4c:55:84:c9:2f: 7e:28:e1:f4:18:3f:9e:c3:81:41:92:04:2c:0d:77:17:07:97: 96:53:82:26:10:04:04:c3:1f:eb:66:42:9e:8e:29:5c:14:c0: db:23:19:96:cd:79:fb:41:6e:33:20:fd:3c:3d:e8:69:07:51: 5b:0c:47:5c:f8:76:c6:95:8f:56:a9:3a:ad:81:08:8b:be:f8: 26:89:67:2f:da:53:dc:c2:ce:a0:e0:ba:e0:72:e3:1f:40:d2: 23:75:be:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO92iBz1oBmugBmaFAP/lOqS/O9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERC M0FBOTA2OTAeFw0yNTA4MDUxNTI1MDVaFw0yNTA4MDgyMjQ0MDVaMDMxMTAvBgNV BAMTKEI0NzdFQ0REOEFBQkExMkEyMzlERDVGODY0MDlFMTMwRUJGNjFGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdg+Af1TZQS6Cd1jOr8gHRGeT PwJRhOAo/2zbNVbWSQ5VEDX4eY9B/kWriUOVgCqNzDfrUnWVjTcc3hYWW3Mje53V UpGOeVMYwQHNqlLrvno3MTLu3ni+/7KwvHX8vRtm1EYUIrbrENajXrcItr3mN7cf Vu06cnc6jO/Fm+7/wv42kqjOw0k+Ec9iflcxIuOHkDupVbfDoCfmtlob9fZXIW2y BGDlOROxMAoeyRtsPawWSYybUVa+Ythoz3iPV0JlJ/DHd46xrzALVs2c5GiW+rFY IJSOXBudyhSsIFg7Yrx39vfAqoZZi3n5m8rl1ArRBXezN5R/da53OQR/gt4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtHfs3YqroSojndX4ZAnhMOv2Hx4wHwYDVR0j BBgwFoAUTifwNDNOc8S2WYYtaD9WTbOqkGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTNiNjdlOC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC80RTI3RjAzNDMz NEU3M0M0QjY1OTg2MkQ2ODNGNTY0REIzQUE5MDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERCM0FB OTA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2 NERCM0FBOTA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjmT8t/SC79EOzAyAsqdeN3L8I+0u6xxUUm QyOFsBM5Z3MZYXZKu9qTuajzdapacfokpXtVdq3GdfPpo4s+JdOtGqHEgjDEtwIm djLvKtvzNfilGuK6Oj1WM/tMGEWYFw29oQhhYTfwLyGW0L3LhKRHQTAmWJDo0rb7 sgxMq2fIkK+G5qpfgQnMd23I15seTj9N/aIe/nQBhrnYBKpMVYTJL34o4fQYP57D gUGSBCwNdxcHl5ZTgiYQBATDH+tmQp6OKVwUwNsjGZbNeftBbjMg/Tw96GkHUVsM R1z4dsaVj1apOq2BCIu++CaJZy/aU9zCzqDguuBy4x9A0iN1vgE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:07 2025 by rpki-client