$ rpki-client -vvf repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft File: 27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft (raw, json) Hash identifier: tzoB2fdXCMK+MQ1pTvpcv10Lzj6oBr6q9n05CIibh6I= Subject key identifier: EE:38:5E:49:8D:3B:4E:50:DB:B3:CF:2A:17:5A:C3:B8:8A:30:4C:13 Authority key identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B Certificate issuer: /CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B Certificate serial: 23E394BBF4D6F9FC441A71E672091B1BE8FA75A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft Manifest number: F1 Signing time: Tue 29 Apr 2025 21:00:40 +0000 Manifest this update: Tue 29 Apr 2025 20:55:40 +0000 Manifest next update: Fri 02 May 2025 22:08:40 +0000 Files and hashes: 1: 27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl (hash: 6NT7rVaRnuZ9tUUwjPfsG2cPHuH6HpjQo4rNanixEpQ=) 2: 3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa (hash: 26OQCazS10mHzPZmCoBJYR+HqlsaeWN0tzDbXe/Uk88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 22:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e3:94:bb:f4:d6:f9:fc:44:1a:71:e6:72:09:1b:1b:e8:fa:75:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B Validity Not Before: Apr 29 20:55:40 2025 GMT Not After : May 2 22:08:40 2025 GMT Subject: CN=EE385E498D3B4E50DBB3CF2A175AC3B88A304C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:84:da:e5:80:56:fb:b3:45:bc:44:4d:91: 10:5a:2d:4a:61:21:0d:68:e8:7a:d8:c0:4f:c8:c6: bc:10:a4:ef:e0:d0:3b:33:ce:b6:e4:63:f2:50:ff: bc:60:ca:44:c9:8c:25:4e:93:0b:8e:21:85:87:7a: 4f:fc:bd:b7:e2:47:68:aa:ca:5c:07:68:1f:bd:ec: 3a:c2:95:8d:29:01:81:0d:bc:d2:c1:79:05:ed:65: e3:5d:58:97:1e:84:6f:55:db:96:51:9e:06:5f:e7: 00:b1:d6:ba:d5:1e:2f:dd:ea:67:16:6d:08:cf:c2: 90:d4:66:a4:b3:8f:f8:2a:e1:ea:97:0e:41:8c:02: 52:e1:43:c5:6d:94:9b:ff:10:b5:3f:96:90:47:49: fb:67:5b:b5:b6:15:56:69:4a:4b:61:dc:86:33:67: ad:f4:af:56:b0:a4:6f:1e:59:55:39:c4:a3:65:77: c4:13:07:a4:ab:24:c1:0e:70:ea:f7:99:88:34:f8: 5c:51:46:48:8b:17:7c:62:dc:26:5d:d9:76:97:b6: 68:b4:eb:0a:a2:66:43:f5:25:92:ea:d4:25:95:54: f4:89:6a:74:ec:39:15:2b:2b:1a:af:ea:b4:2f:fa: 73:ad:3f:70:1e:4e:8a:6d:13:ec:4e:3c:ee:56:42: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:38:5E:49:8D:3B:4E:50:DB:B3:CF:2A:17:5A:C3:B8:8A:30:4C:13 X509v3 Authority Key Identifier: keyid:27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:10:1a:ec:6e:85:4c:33:b7:33:1d:52:06:73:92:b6:f0:2b: 88:6f:ea:34:04:4c:80:e1:f0:a2:ff:bf:7d:97:e5:6e:c5:b0: 1b:ae:08:6f:41:e7:16:b8:9b:17:9b:4d:93:1a:7f:99:ca:ea: ff:01:f6:8f:a0:79:17:d1:eb:aa:29:e7:7f:20:1a:5e:d7:f6: aa:1e:f1:8e:fa:e2:48:1b:6e:15:b2:68:b6:fc:2b:51:19:1a: a7:fa:e4:5d:c0:bd:5b:f7:22:fd:79:56:20:d9:39:fa:22:95: 15:6e:52:59:63:98:7b:8a:f9:7b:f2:46:07:22:96:90:a9:fe: 70:8f:79:ef:6a:15:34:bc:8f:a7:91:d6:ec:70:7a:f3:00:4a: f5:b6:42:3b:82:8d:dd:20:85:70:e0:18:7e:83:6d:85:82:f8: 69:0a:03:22:49:36:04:f4:f5:85:7f:a1:8d:d4:5a:37:6f:67: b9:aa:a4:9c:7a:7c:dd:5d:92:6a:d8:31:75:9b:d2:4c:80:70: a4:ca:6e:26:0c:0b:5f:f0:79:c4:f5:2d:ef:8b:85:4e:66:6d: b8:08:bb:96:24:a3:22:10:13:a8:ea:56:48:a7:16:86:f1:ad: bd:65:02:2b:8c:ab:65:38:4d:39:81:27:1a:45:82:d8:78:73: be:f1:fd:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+OUu/TW+fxEGnHmcgkbG+j6dagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCMkNFOTZGQUU4RTE3NjNBM0MzMERCMzNDM0JCRDhG MDUxODM4QjAeFw0yNTA0MjkyMDU1NDBaFw0yNTA1MDIyMjA4NDBaMDMxMTAvBgNV BAMTKEVFMzg1RTQ5OEQzQjRFNTBEQkIzQ0YyQTE3NUFDM0I4OEEzMDRDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8A4Ta5YBW+7NFvERNkRBaLUph IQ1o6HrYwE/IxrwQpO/g0DszzrbkY/JQ/7xgykTJjCVOkwuOIYWHek/8vbfiR2iq ylwHaB+97DrClY0pAYENvNLBeQXtZeNdWJcehG9V25ZRngZf5wCx1rrVHi/d6mcW bQjPwpDUZqSzj/gq4eqXDkGMAlLhQ8VtlJv/ELU/lpBHSftnW7W2FVZpSkth3IYz Z630r1awpG8eWVU5xKNld8QTB6SrJMEOcOr3mYg0+FxRRkiLF3xi3CZd2XaXtmi0 6wqiZkP1JZLq1CWVVPSJanTsORUrKxqv6rQv+nOtP3AeToptE+xOPO5WQjHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7jheSY07TlDbs88qF1rDuIowTBMwHwYDVR0j BBgwFoAUJ7LOlvro4XY6PDDbM8O72PBRg4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTUxMWE4YS0zMGRhLTQ2NzAtYTAxMC03OTI2ZDdjZDUxMGIvMC8yN0IyQ0U5NkZB RThFMTc2M0EzQzMwREIzM0MzQkJEOEYwNTE4MzhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCMkNFOTZGQUU4RTE3NjNBM0MzMERCMzNDM0JCRDhGMDUx ODM4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU1MTFhOGEtMzBkYS00NjcwLWEw MTAtNzkyNmQ3Y2Q1MTBiLzAvMjdCMkNFOTZGQUU4RTE3NjNBM0MzMERCMzNDM0JC RDhGMDUxODM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAQGuxuhUwztzMdUgZzkrbwK4hv6jQETIDh 8KL/v32X5W7FsBuuCG9B5xa4mxebTZMaf5nK6v8B9o+geRfR66op538gGl7X9qoe 8Y764kgbbhWyaLb8K1EZGqf65F3AvVv3Iv15ViDZOfoilRVuUlljmHuK+XvyRgci lpCp/nCPee9qFTS8j6eR1uxwevMASvW2QjuCjd0ghXDgGH6DbYWC+GkKAyJJNgT0 9YV/oY3UWjdvZ7mqpJx6fN1dkmrYMXWb0kyAcKTKbiYMC1/wecT1Le+LhU5mbbgI u5YkoyIQE6jqVkinFobxrb1lAiuMq2U4TTmBJxpFgth4c77x/cM= -----END CERTIFICATE-----Generated at Wed Apr 30 11:20:31 2025 by rpki-client