$ rpki-client -vvf repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft File: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft (raw, json) Hash identifier: zAQ+EKhPi+exOdlq0SW7i07H0W/FmvSvjfuCU8pW56A= Subject key identifier: D6:10:8E:A2:30:4F:BC:F3:88:6D:CA:12:66:69:EB:FD:27:0B:1B:7C Authority key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD Certificate issuer: /CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Certificate serial: 0EEDC4EBFF0C80D4ECA56A78A243B04BDAE48486 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft Manifest number: 04DE Signing time: Sun 15 Jun 2025 21:01:30 +0000 Manifest this update: Sun 15 Jun 2025 20:56:30 +0000 Manifest next update: Thu 19 Jun 2025 06:13:30 +0000 Files and hashes: 1: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: Mn5S3vv0y8H86n0LvhDe7TG0qE+zI4uaMffW/k9fqwM=) 2: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl (hash: 5Ve1wbirST0eKv5R8DTQZEmiq1fxums08KOrNcF4D+4=) 3: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: miixVejqadzJoJUmMD6XBggcBXEaUqaEEMBzMvAqTNc=) 4: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: IzC9oagOHS4dTtSBILXnwVll7fkLpQc9RpoCIiKjX8I=) 5: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: 3vA9Os0MWzKrIxrdLvYkOp/ZA589dKUhNYNySSQbRyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 06:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ed:c4:eb:ff:0c:80:d4:ec:a5:6a:78:a2:43:b0:4b:da:e4:84:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Validity Not Before: Jun 15 20:56:30 2025 GMT Not After : Jun 19 06:13:30 2025 GMT Subject: CN=D6108EA2304FBCF3886DCA126669EBFD270B1B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:99:70:32:11:2f:01:a4:dd:ea:dd:fc:7a: 13:d4:e7:e1:c5:02:16:2d:73:01:bd:aa:8a:4e:cc: 3b:8b:b7:cd:66:d7:86:fe:73:4b:fe:93:52:ec:71: e0:f5:20:e0:9e:71:84:57:86:13:20:8e:19:79:d0: 63:a1:49:58:26:92:e6:7b:c7:e4:7e:64:1c:47:11: 84:75:bc:9a:df:d4:66:56:aa:4b:59:04:36:ed:e5: f7:d9:70:c9:27:35:af:9e:c6:69:0c:84:89:fb:16: 21:0d:17:6f:a9:0c:07:76:e5:b0:02:1b:ad:e8:77: 45:b9:ed:0e:7a:0a:4d:4e:1f:9f:c0:ef:d1:d9:94: 85:ea:fa:d0:94:55:19:0f:e6:1a:8c:f1:55:b2:33: ba:fb:1e:ef:16:5c:ea:b6:6e:a6:e9:d1:32:41:2f: 94:14:c5:55:ee:17:b4:62:5c:96:df:be:27:da:f5: ee:ac:60:ad:50:f0:18:df:53:ac:28:33:a1:30:45: 08:f9:14:1a:1f:7b:92:eb:0a:57:68:43:f2:21:e9: c1:3b:a2:40:f5:0b:81:29:a6:e7:44:47:6f:dc:d9: 2b:11:98:1f:4f:1f:87:d6:e6:ef:7e:dc:64:6e:ab: 73:aa:da:b0:59:68:40:ed:c3:4c:d1:52:1e:59:75: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:10:8E:A2:30:4F:BC:F3:88:6D:CA:12:66:69:EB:FD:27:0B:1B:7C X509v3 Authority Key Identifier: keyid:E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:2a:5a:74:bf:75:80:4f:d5:41:08:f7:a8:8d:3c:1b:cd:ca: 05:19:19:09:9b:31:fb:e6:e2:6d:7b:75:07:51:2a:1f:c0:9c: d2:2a:53:ae:d0:e0:93:69:ed:38:02:6f:04:dd:e1:7d:16:6e: 36:87:3c:cd:32:dc:3e:23:24:5b:0f:2f:a3:f0:6c:d9:31:79: 6e:a8:ef:47:5b:0f:fe:91:12:a9:81:3c:31:fa:f4:4b:6a:f1: f8:fe:2a:f3:d7:6a:77:57:8f:3e:39:b9:a7:fa:db:99:92:ff: 52:a2:26:90:79:06:a9:8c:51:59:46:d0:22:6d:c0:48:c4:fc: 93:5a:c2:17:3d:e8:f8:64:6a:e6:d5:59:19:b0:d5:2f:2b:51: 8e:70:97:0a:f2:c0:6f:51:7d:7d:50:7b:0c:38:0f:bb:0d:65: a3:6f:79:a9:56:cb:9e:cf:89:61:4f:27:32:1f:9c:55:d7:d5: ed:3e:80:54:b0:92:aa:1b:00:a4:6c:cb:e0:02:a4:72:79:af: 5b:e0:16:aa:9c:31:1b:63:43:4f:10:e4:d2:2a:0f:35:13:62: ca:2a:88:b1:a0:e2:82:f3:5a:84:be:b4:5b:57:4f:22:73:b6: c1:97:69:b5:df:8e:3b:bf:86:5a:60:7c:35:a6:de:43:4f:31: 0d:c5:26:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDu3E6/8MgNTspWp4okOwS9rkhIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0Qw MThEMEFERDAeFw0yNTA2MTUyMDU2MzBaFw0yNTA2MTkwNjEzMzBaMDMxMTAvBgNV BAMTKEQ2MTA4RUEyMzA0RkJDRjM4ODZEQ0ExMjY2NjlFQkZEMjcwQjFCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7O5lwMhEvAaTd6t38ehPU5+HF AhYtcwG9qopOzDuLt81m14b+c0v+k1LsceD1IOCecYRXhhMgjhl50GOhSVgmkuZ7 x+R+ZBxHEYR1vJrf1GZWqktZBDbt5ffZcMknNa+exmkMhIn7FiENF2+pDAd25bAC G63od0W57Q56Ck1OH5/A79HZlIXq+tCUVRkP5hqM8VWyM7r7Hu8WXOq2bqbp0TJB L5QUxVXuF7RiXJbfvifa9e6sYK1Q8BjfU6woM6EwRQj5FBofe5LrCldoQ/Ih6cE7 okD1C4EppudER2/c2SsRmB9PH4fW5u9+3GRuq3Oq2rBZaEDtw0zRUh5ZdchZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1hCOojBPvPOIbcoSZmnr/ScLG3wwHwYDVR0j BBgwFoAU4n8HCyfqsJbis1I/GhrNfQGNCt0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmEwMDJkZS0wY2RlLTQ2MmUtOTQwNC00NmJjNjI3MGUwNGYvMC9FMjdGMDcwQjI3 RUFCMDk2RTJCMzUyM0YxQTFBQ0Q3RDAxOEQwQURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0QwMThE MEFERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhMDAyZGUtMGNkZS00NjJlLTk0 MDQtNDZiYzYyNzBlMDRmLzAvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNE N0QwMThEMEFERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMqWnS/dYBP1UEI96iNPBvNygUZGQmbMfvm 4m17dQdRKh/AnNIqU67Q4JNp7TgCbwTd4X0WbjaHPM0y3D4jJFsPL6PwbNkxeW6o 70dbD/6REqmBPDH69Etq8fj+KvPXandXjz45uaf625mS/1KiJpB5BqmMUVlG0CJt wEjE/JNawhc96PhkaubVWRmw1S8rUY5wlwrywG9RfX1Qeww4D7sNZaNvealWy57P iWFPJzIfnFXX1e0+gFSwkqobAKRsy+ACpHJ5r1vgFqqcMRtjQ08Q5NIqDzUTYsoq iLGg4oLzWoS+tFtXTyJztsGXabXfjju/hlpgfDWm3kNPMQ3FJrM= -----END CERTIFICATE-----Generated at Wed Jun 18 05:25:45 2025 by rpki-client