$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft File: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft (raw, json) Hash identifier: PDStkZ9dZQIPgAQ5/albKkGvYKJqTjDen+0QR29R8CM= Subject key identifier: EC:A7:F9:22:74:AC:EC:1C:BB:1D:15:2D:F2:5E:23:C0:78:1A:21:EE Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Certificate serial: 2ADED8E481B0AB7031ED0828BA5FA1841F273465 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft Manifest number: 0155 Signing time: Mon 28 Apr 2025 12:01:15 +0000 Manifest this update: Mon 28 Apr 2025 11:56:15 +0000 Manifest next update: Thu 01 May 2025 15:39:15 +0000 Files and hashes: 1: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl (hash: j96WFmn4M0lbrY4SqMpsx1hgk+u8wj2ianlfYgm3vXU=) 2: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: JiNsqLJvEYFIyhrR6R0JR1hrj3KWiaaB75HG9L5QPcg=) 3: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: Q3xxSdQXC23vXFGFdHyLQV020HZB9BgH6IL3S5vtQAA=) 4: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: 6N2J2kg+Zlk+0sQHWC1BIhfECV5xjbZiRhQRFmUUNag=) 5: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: 6gVzJ3lnoTzbRecAFAnRC8x24kDXXXW3lAWqPBdz2dw=) 6: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: 1f4e1XEuXG9su40zHvwmNI+q39l2fKb22IFThBoIE0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:de:d8:e4:81:b0:ab:70:31:ed:08:28:ba:5f:a1:84:1f:27:34:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Validity Not Before: Apr 28 11:56:15 2025 GMT Not After : May 1 15:39:15 2025 GMT Subject: CN=ECA7F92274ACEC1CBB1D152DF25E23C0781A21EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:e5:22:5a:00:ae:f1:9b:43:ec:3f:93:b7: 2d:89:af:ed:94:db:6b:04:4a:35:d0:46:91:39:b6: 0a:8e:ca:a5:b4:8d:a0:4e:df:e9:d3:10:a4:f4:68: 75:66:8f:8a:51:0a:31:aa:d9:2d:40:f5:e1:6c:60: 0c:86:89:7e:cc:ce:5c:33:06:00:63:9f:13:c1:6f: f9:5a:e9:88:f0:c7:c7:73:1e:2e:ab:0c:fa:da:c3: d0:8e:61:2f:23:28:38:bf:21:25:ee:0b:f8:6f:c7: ac:e8:04:2c:50:c3:9d:be:0a:dc:30:b1:25:a6:67: c9:5c:09:4a:3f:56:c4:0c:90:74:c1:17:a8:06:6f: 4b:ea:c2:c4:f9:db:04:73:4a:56:39:9a:5c:4a:22: 6b:4f:48:38:d5:60:01:25:97:ba:dc:3d:37:f6:90: af:04:ba:e4:e9:85:97:37:1e:93:56:15:6c:6c:7c: 2e:5e:3c:4b:b7:98:90:cb:58:0b:14:6b:86:9d:02: f0:fc:be:36:87:20:35:a9:89:0b:a7:0d:d5:d2:0a: 99:fc:56:c7:88:00:d0:77:85:a9:89:7a:0e:78:84: d9:73:39:98:f4:4f:55:76:a4:8e:12:cd:e7:01:24: a0:8c:db:6a:41:d2:04:ed:52:86:32:5e:ca:3a:27: 8d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A7:F9:22:74:AC:EC:1C:BB:1D:15:2D:F2:5E:23:C0:78:1A:21:EE X509v3 Authority Key Identifier: keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:48:cb:4b:d3:34:5b:54:c7:45:16:f1:79:59:22:d0:cb:dd: 51:42:4d:ab:68:05:8b:90:4f:32:b6:9b:fa:f8:6c:cc:25:9b: ef:c2:dc:fe:57:25:b1:32:12:28:a6:8b:28:80:4b:bb:39:19: 40:52:01:d8:59:c0:7d:72:23:a4:91:40:c8:aa:4c:f7:db:2f: 3c:25:c6:00:dc:cb:51:c4:9a:fe:44:32:39:61:99:c8:bf:fb: fd:5a:2b:c2:4b:95:d5:a3:30:1a:9d:b2:60:bd:85:44:de:0a: f7:77:5d:83:17:fe:a1:0b:05:6b:79:fd:4f:f3:79:f4:b4:24: a1:e8:b3:37:e7:5b:8c:24:4e:c2:a1:69:a5:07:1a:c9:1d:98: 55:5b:b4:c6:f5:54:37:3f:60:24:5a:a0:0b:da:ec:c5:3d:c7: ac:15:ba:2a:6c:19:50:ee:29:95:86:d3:df:ad:c7:ef:3c:08: 0e:b3:c2:e2:db:f7:3b:33:bf:62:24:22:b8:93:e6:cc:47:0d: 69:68:96:83:e7:35:45:37:92:dd:e8:57:9e:90:cc:42:d4:4f: 43:ff:43:23:c8:93:54:e8:fd:17:40:28:38:1f:61:1b:d7:77: 1a:9c:ff:31:92:2e:0f:38:c0:04:e3:83:3e:83:f7:77:d1:27: a1:38:25:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKt7Y5IGwq3Ax7Qgoul+hhB8nNGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC NTM2OTVGQzAeFw0yNTA0MjgxMTU2MTVaFw0yNTA1MDExNTM5MTVaMDMxMTAvBgNV BAMTKEVDQTdGOTIyNzRBQ0VDMUNCQjFEMTUyREYyNUUyM0MwNzgxQTIxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbeUiWgCu8ZtD7D+Tty2Jr+2U 22sESjXQRpE5tgqOyqW0jaBO3+nTEKT0aHVmj4pRCjGq2S1A9eFsYAyGiX7Mzlwz BgBjnxPBb/la6Yjwx8dzHi6rDPraw9COYS8jKDi/ISXuC/hvx6zoBCxQw52+Ctww sSWmZ8lcCUo/VsQMkHTBF6gGb0vqwsT52wRzSlY5mlxKImtPSDjVYAEll7rcPTf2 kK8EuuTphZc3HpNWFWxsfC5ePEu3mJDLWAsUa4adAvD8vjaHIDWpiQunDdXSCpn8 VseIANB3hamJeg54hNlzOZj0T1V2pI4SzecBJKCM22pB0gTtUoYyXso6J41dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Kf5InSs7By7HRUt8l4jwHgaIe4wHwYDVR0j BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2 OTVGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4 MDlCNTM2OTVGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtIy0vTNFtUx0UW8XlZItDL3VFCTatoBYuQ TzK2m/r4bMwlm+/C3P5XJbEyEiimiyiAS7s5GUBSAdhZwH1yI6SRQMiqTPfbLzwl xgDcy1HEmv5EMjlhmci/+/1aK8JLldWjMBqdsmC9hUTeCvd3XYMX/qELBWt5/U/z efS0JKHoszfnW4wkTsKhaaUHGskdmFVbtMb1VDc/YCRaoAva7MU9x6wVuipsGVDu KZWG09+tx+88CA6zwuLb9zszv2IkIriT5sxHDWloloPnNUU3kt3oV56QzELUT0P/ QyPIk1To/RdAKDgfYRvXdxqc/zGSLg84wATjgz6D93fRJ6E4JXk= -----END CERTIFICATE-----Generated at Tue Apr 29 09:20:34 2025 by rpki-client