$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: ZaXGzBhXxbfevXvEhOaPIXoE36On4reVVHh4h4JR9mU= Subject key identifier: 02:55:8F:12:80:13:91:AC:64:D6:CB:B7:BA:54:92:E2:A7:23:3B:11 Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 26190AC92A19BB0FDBF5C9B4DD17BDA18A00E146 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: F6 Signing time: Sun 15 Jun 2025 18:40:04 +0000 Manifest this update: Sun 15 Jun 2025 18:35:04 +0000 Manifest next update: Wed 18 Jun 2025 19:15:04 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: chZgSebYL3AyASorKFgZxAtVxsXGef1bjWlqKc1bcs8=) 2: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: Cf8zuOBPe5ne4FbCX/nB71vXdpt4+lQ9NgMPpci6uTA=) 3: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: Ywn1UEJnpT1UpuAh2VB4UnPn+99/TPlQAq9uS4gdn7I=) 4: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: M98dO/m+ycrBeg1CtOIteFJftV3RCXQ2eLl/At2g8+Q=) 5: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: /xi+McRVOCuOm5FL8m1KA1lCGS4QJq+j64u93ZDqwM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 19:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:19:0a:c9:2a:19:bb:0f:db:f5:c9:b4:dd:17:bd:a1:8a:00:e1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Jun 15 18:35:04 2025 GMT Not After : Jun 18 19:15:04 2025 GMT Subject: CN=02558F12801391AC64D6CBB7BA5492E2A7233B11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:cc:0d:c5:f3:6f:a6:1b:59:96:20:c4:06: e2:c8:b8:42:8c:67:af:e3:1e:8c:f8:be:37:b9:21: a1:1d:e6:11:1f:fe:2e:85:11:e0:cd:31:ee:e5:b8: f6:75:1a:05:bc:f2:28:f6:19:c1:c7:31:36:5b:31: 67:a6:0b:45:db:b9:e8:3e:9d:40:25:5f:7c:a3:fe: df:62:9a:0b:24:51:bc:42:f5:45:dd:f1:48:44:66: a7:1c:ce:59:96:26:49:f6:76:12:99:47:a5:7c:56: a7:94:1f:65:07:21:75:b8:4e:53:90:9d:22:d1:68: 78:cf:92:92:8e:d9:2a:df:32:02:0a:2f:42:58:93: 99:be:21:79:32:7d:3f:0f:76:25:25:23:63:8a:12: f4:46:55:ef:6c:28:c4:8c:79:6a:b5:2f:cd:9c:45: 0f:7c:38:15:da:ad:9c:ad:b8:87:ae:92:0f:64:53: 3c:d0:35:1a:e3:57:e8:ae:a6:f9:7d:f4:7c:f4:da: 20:37:d7:62:ff:ee:5e:2b:8e:2b:fc:5c:be:73:5c: 04:9a:32:19:55:3e:90:42:f6:a7:6d:1c:db:8e:e1: 1a:b7:24:89:0a:7c:83:c1:34:14:54:b2:81:1b:65: c8:e3:ff:3b:10:2d:4e:98:90:c2:bc:a8:0a:84:a3: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:55:8F:12:80:13:91:AC:64:D6:CB:B7:BA:54:92:E2:A7:23:3B:11 X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c0:91:a7:c3:7a:12:04:44:0a:38:56:f8:6e:2a:fc:20:d2: be:6d:80:3e:96:64:42:f6:36:d0:bf:8b:ad:4b:78:2f:f8:bf: 53:37:b7:6a:8e:16:e3:29:53:04:79:2b:df:bb:c1:f2:70:70: a5:f5:b0:94:a4:28:52:61:21:6b:b2:ec:d5:6b:fa:da:6b:95: 21:c1:55:81:b0:e3:c5:67:cf:d4:72:f8:cf:25:9e:70:c8:8f: 84:ba:7f:f7:f0:82:57:e1:cb:0d:f6:12:20:96:b5:01:94:96: 8f:ea:1c:fd:9f:4f:93:86:91:36:bc:1b:f1:6a:83:37:0c:08: 3c:ef:81:2a:e7:b8:29:a1:f1:f9:63:65:21:7f:ce:59:57:45: 20:a9:79:97:fb:ff:4a:22:88:96:3c:62:c7:c3:38:0a:07:ba: 38:8c:3c:92:c4:42:af:90:06:84:0a:7b:0e:ce:13:b3:dc:f7: 79:34:a0:38:a5:44:cd:68:77:c4:4a:36:62:6d:bb:81:73:32: 4b:b1:61:af:39:11:72:8a:1d:06:44:73:65:6d:a4:6f:6d:1a: a3:69:b9:18:b3:81:f5:88:f7:67:5f:f9:cd:eb:e3:4f:b0:12: c6:7b:12:16:dd:18:d6:66:13:f4:57:fb:82:5a:ba:4d:eb:88: 95:6c:d5:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhkKySoZuw/b9cm03Re9oYoA4UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTA2MTUxODM1MDRaFw0yNTA2MTgxOTE1MDRaMDMxMTAvBgNV BAMTKDAyNTU4RjEyODAxMzkxQUM2NEQ2Q0JCN0JBNTQ5MkUyQTcyMzNCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ocwNxfNvphtZliDEBuLIuEKM Z6/jHoz4vje5IaEd5hEf/i6FEeDNMe7luPZ1GgW88ij2GcHHMTZbMWemC0Xbueg+ nUAlX3yj/t9imgskUbxC9UXd8UhEZqcczlmWJkn2dhKZR6V8VqeUH2UHIXW4TlOQ nSLRaHjPkpKO2SrfMgIKL0JYk5m+IXkyfT8PdiUlI2OKEvRGVe9sKMSMeWq1L82c RQ98OBXarZytuIeukg9kUzzQNRrjV+iupvl99Hz02iA312L/7l4rjiv8XL5zXASa MhlVPpBC9qdtHNuO4Rq3JIkKfIPBNBRUsoEbZcjj/zsQLU6YkMK8qAqEo/Q1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAlWPEoATkaxk1su3ulSS4qcjOxEwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDAkafDehIERAo4VvhuKvwg0r5tgD6WZEL2 NtC/i61LeC/4v1M3t2qOFuMpUwR5K9+7wfJwcKX1sJSkKFJhIWuy7NVr+tprlSHB VYGw48Vnz9Ry+M8lnnDIj4S6f/fwglfhyw32EiCWtQGUlo/qHP2fT5OGkTa8G/Fq gzcMCDzvgSrnuCmh8fljZSF/zllXRSCpeZf7/0oiiJY8YsfDOAoHujiMPJLEQq+Q BoQKew7OE7Pc93k0oDilRM1od8RKNmJtu4FzMkuxYa85EXKKHQZEc2VtpG9tGqNp uRizgfWI92df+c3r40+wEsZ7EhbdGNZmE/RX+4Jauk3riJVs1W8= -----END CERTIFICATE-----Generated at Mon Jun 16 02:03:45 2025 by rpki-client