$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: U7jGb4Fs5wB8XIUadT+E4yB5UmNT6BknNRoJr0Gny/I= Subject key identifier: 9F:12:13:A9:32:05:63:0F:DC:F6:B5:8D:62:05:81:71:E1:1B:83:6C Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 5538B132EE91E44BFB0FC638EF7441A560E647BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: 010D Signing time: Tue 05 Aug 2025 10:20:04 +0000 Manifest this update: Tue 05 Aug 2025 10:15:04 +0000 Manifest next update: Fri 08 Aug 2025 14:50:04 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: Ywn1UEJnpT1UpuAh2VB4UnPn+99/TPlQAq9uS4gdn7I=) 2: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: chZgSebYL3AyASorKFgZxAtVxsXGef1bjWlqKc1bcs8=) 3: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: M98dO/m+ycrBeg1CtOIteFJftV3RCXQ2eLl/At2g8+Q=) 4: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: 5+LWAT1zABCWV7X8HsadbaJbnx1o8iIPqam57dBcApI=) 5: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: Cf8zuOBPe5ne4FbCX/nB71vXdpt4+lQ9NgMPpci6uTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:38:b1:32:ee:91:e4:4b:fb:0f:c6:38:ef:74:41:a5:60:e6:47:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Aug 5 10:15:04 2025 GMT Not After : Aug 8 14:50:04 2025 GMT Subject: CN=9F1213A93205630FDCF6B58D62058171E11B836C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:a1:17:94:95:2c:1e:aa:74:f9:3d:c0:df: 8a:11:36:45:b9:9c:fe:1d:a2:a0:77:b3:81:14:98: c7:23:c2:93:7d:f2:21:10:18:09:3d:ee:b2:26:84: 91:ad:65:76:e1:10:dc:29:cb:1f:84:11:bb:bc:e2: 34:28:77:9c:2c:99:d9:88:7e:d2:fc:bb:3b:27:13: 35:78:f7:64:21:0b:9a:92:99:5f:ff:63:52:ed:43: 19:5e:3b:fa:cc:d6:1d:34:b1:c3:4d:50:f4:61:48: 82:c3:c4:64:97:20:6d:67:8a:82:f8:7b:66:0c:4c: 0f:e9:96:a5:e7:22:3f:15:bc:4d:ef:9d:00:59:db: 04:9b:e5:15:f5:74:a1:79:10:50:36:6f:90:b5:44: 16:6d:0f:15:d7:c4:89:69:03:0f:9c:d0:7e:df:1e: 1c:04:59:f0:b2:57:11:b5:f4:55:71:bd:c3:7a:81: a3:b2:78:2d:be:6f:c9:c3:e4:c3:70:e4:49:27:32: d9:f4:69:1f:b1:e1:bc:24:36:06:f7:06:55:d5:6d: 54:72:ca:9e:ca:49:f9:22:bb:2f:9c:d9:cb:74:68: fe:ee:ca:17:05:91:ca:50:88:df:17:62:26:42:df: 43:2a:2d:bc:db:a4:00:c5:18:4c:b1:4a:a8:21:f3: dd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:12:13:A9:32:05:63:0F:DC:F6:B5:8D:62:05:81:71:E1:1B:83:6C X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f7:95:46:e9:2e:8b:24:ae:2c:65:6f:67:d9:86:c5:25:26: 4a:f3:d6:42:ba:66:d5:fc:a7:79:65:b7:99:10:08:b8:ef:a5: 95:60:6e:0b:9d:10:40:32:bb:2e:21:93:c6:fa:9b:62:7c:3c: 3f:b4:79:3f:6f:be:27:ba:b3:2c:b5:3c:a4:53:d2:aa:4b:07: 6d:74:ed:03:ad:30:76:d3:f8:f3:ba:ef:6f:d1:f4:20:af:64: 52:77:16:a0:ad:3d:aa:b5:b0:33:0b:9d:df:89:23:54:56:8c: 35:24:f4:fa:c7:64:4d:e6:b1:0e:44:a4:97:f0:d2:c8:8e:91: 3a:02:e2:94:c7:6e:40:88:03:9a:0a:83:af:52:6c:de:c4:b9: ec:0c:3e:13:f6:08:9b:59:e7:34:bc:64:0a:20:cd:e9:ce:a7: 41:cc:43:d2:2d:09:e2:20:32:fe:a6:fa:bf:72:90:59:75:6b: c4:a9:c4:d4:99:66:ac:a0:f2:8d:13:fa:75:5d:4d:7a:30:0d: b1:03:63:29:f8:57:e9:ec:00:22:3f:f7:99:79:db:76:64:d4: ad:85:8d:7f:6c:6a:34:f0:47:fd:7f:69:b4:f5:a9:f9:b0:e9: a3:3e:10:a3:72:5c:91:fc:80:bf:7f:c2:a4:48:6d:0c:e9:ba: ab:c3:16:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTixMu6R5Ev7D8Y473RBpWDmR74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTA4MDUxMDE1MDRaFw0yNTA4MDgxNDUwMDRaMDMxMTAvBgNV BAMTKDlGMTIxM0E5MzIwNTYzMEZEQ0Y2QjU4RDYyMDU4MTcxRTExQjgzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcd6EXlJUsHqp0+T3A34oRNkW5 nP4doqB3s4EUmMcjwpN98iEQGAk97rImhJGtZXbhENwpyx+EEbu84jQod5wsmdmI ftL8uzsnEzV492QhC5qSmV//Y1LtQxleO/rM1h00scNNUPRhSILDxGSXIG1nioL4 e2YMTA/plqXnIj8VvE3vnQBZ2wSb5RX1dKF5EFA2b5C1RBZtDxXXxIlpAw+c0H7f HhwEWfCyVxG19FVxvcN6gaOyeC2+b8nD5MNw5EknMtn0aR+x4bwkNgb3BlXVbVRy yp7KSfkiuy+c2ct0aP7uyhcFkcpQiN8XYiZC30MqLbzbpADFGEyxSqgh893lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnxITqTIFYw/c9rWNYgWBceEbg2wwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL3lUbpLoskrixlb2fZhsUlJkrz1kK6ZtX8 p3llt5kQCLjvpZVgbgudEEAyuy4hk8b6m2J8PD+0eT9vvie6syy1PKRT0qpLB210 7QOtMHbT+PO672/R9CCvZFJ3FqCtPaq1sDMLnd+JI1RWjDUk9PrHZE3msQ5EpJfw 0siOkToC4pTHbkCIA5oKg69SbN7EuewMPhP2CJtZ5zS8ZAogzenOp0HMQ9ItCeIg Mv6m+r9ykFl1a8SpxNSZZqyg8o0T+nVdTXowDbEDYyn4V+nsACI/95l523Zk1K2F jX9sajTwR/1/abT1qfmw6aM+EKNyXJH8gL9/wqRIbQzpuqvDFr0= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:32 2025 by rpki-client