$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: 9LaEjO5Ldk5oAkdxBguOLGUziIHEHIhuS83C4xFZhGk= Subject key identifier: 7F:3B:8A:97:85:6F:D7:02:1D:F1:7C:77:B2:CF:B9:E9:36:B0:00:87 Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 6E67D7B686381D1B6A9AA6B7F0CEB95B321D3EBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 01BC Signing time: Tue 05 Aug 2025 03:01:33 +0000 Manifest this update: Tue 05 Aug 2025 02:56:33 +0000 Manifest next update: Fri 08 Aug 2025 10:00:33 +0000 Files and hashes: 1: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: Qxvz6cLTsvkF/5QoPFib9ZcEBwW2jqzLdFAQealXxXU=) 2: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: cjUWV+6ScztjY1O/Fr49RxG7PxtWpQWbQVVlxkVru3k=) 3: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: WQermmKrjmkRkTYr0aG0+hIvHneRLS+rGSH7EGxbhwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:67:d7:b6:86:38:1d:1b:6a:9a:a6:b7:f0:ce:b9:5b:32:1d:3e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Aug 5 02:56:33 2025 GMT Not After : Aug 8 10:00:33 2025 GMT Subject: CN=7F3B8A97856FD7021DF17C77B2CFB9E936B00087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1a:6d:22:27:93:4d:35:c9:cf:e2:3a:f2:d5: 1e:39:79:82:d8:37:49:5a:de:57:4f:5b:7e:c8:cd: 04:88:5b:8d:85:2e:f3:b9:f5:e2:ff:da:e7:a5:a9: 09:70:54:a5:b3:1e:a1:8c:fc:a6:b7:ee:cd:8c:6c: 1b:88:75:de:60:11:70:d5:ab:62:ad:2e:cf:1e:3f: 64:42:bc:ea:82:1d:aa:39:b9:55:ee:ad:ff:20:35: e7:4a:a0:dc:d1:1d:b3:04:34:20:43:2e:3f:a0:92: b4:c1:cc:32:1e:45:4f:76:70:0c:22:31:7f:b6:82: 1d:0e:70:24:7b:dd:c4:03:04:81:37:d8:c9:35:d1: bb:d1:bb:bf:f7:62:7a:d8:85:1b:6d:bd:e3:71:dd: bb:9c:09:4a:0d:d4:4c:6d:01:4d:3f:a4:b9:4c:50: b6:23:c0:10:81:b2:f3:39:de:22:3d:6a:14:ff:36: 62:de:76:96:5c:de:a3:24:d0:a3:a2:5e:12:c8:65: 12:44:04:29:55:d6:b6:75:c5:4b:44:23:04:c1:2a: 30:59:23:ff:4b:2e:29:19:cb:81:3c:8a:9e:a7:b2: c3:db:44:e8:7b:d5:fc:60:94:8d:72:c6:82:14:bf: af:22:f2:5a:73:5f:24:fa:99:27:bd:93:1f:e2:28: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3B:8A:97:85:6F:D7:02:1D:F1:7C:77:B2:CF:B9:E9:36:B0:00:87 X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:91:e7:04:f5:8f:f3:c4:7f:ea:66:26:bd:1c:92:99:73:2d: 7a:66:e8:44:bc:79:14:7a:74:e9:fa:63:1f:00:09:8c:60:ef: ba:cb:73:a4:86:be:3b:07:25:11:9f:39:73:24:2b:b7:4b:89: 12:19:96:97:a2:2a:7b:2b:5b:5b:0c:c8:52:d8:d9:53:37:fc: 40:0f:ba:ab:f1:33:29:5e:a4:7b:8f:34:15:f9:e8:01:87:7b: 12:ba:7d:f4:a9:3a:78:49:96:00:8d:f1:00:9c:c6:40:8e:52: 31:2b:e7:5f:60:cf:4e:f5:59:6a:3c:fa:10:10:b6:fe:cc:cd: 27:6b:df:dc:4d:26:2b:74:8a:fb:ed:ed:cc:0f:cd:0c:6e:31: 66:61:a1:a7:49:10:be:92:9a:99:53:4d:52:d3:78:a1:45:e5: db:b1:c4:17:f7:89:28:d5:ef:d5:f5:b8:62:37:a9:49:40:46: 6a:3d:e7:a1:71:8c:c1:cf:16:cd:08:b7:0f:38:b8:26:45:f5: 3d:3a:92:51:e4:92:2c:fd:c5:77:f2:77:d5:4d:d6:8e:f7:8a: 3c:0f:7a:8e:9e:4d:46:7a:79:52:83:de:c9:4f:49:5b:a5:5d: 85:aa:3e:64:8f:2e:54:fb:f4:a4:b3:5e:95:5b:4b:f4:a9:05: 37:df:cf:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmfXtoY4HRtqmqa38M65WzIdPr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNTA4MDUwMjU2MzNaFw0yNTA4MDgxMDAwMzNaMDMxMTAvBgNV BAMTKDdGM0I4QTk3ODU2RkQ3MDIxREYxN0M3N0IyQ0ZCOUU5MzZCMDAwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtGm0iJ5NNNcnP4jry1R45eYLY N0la3ldPW37IzQSIW42FLvO59eL/2uelqQlwVKWzHqGM/Ka37s2MbBuIdd5gEXDV q2KtLs8eP2RCvOqCHao5uVXurf8gNedKoNzRHbMENCBDLj+gkrTBzDIeRU92cAwi MX+2gh0OcCR73cQDBIE32Mk10bvRu7/3YnrYhRttveNx3bucCUoN1ExtAU0/pLlM ULYjwBCBsvM53iI9ahT/NmLedpZc3qMk0KOiXhLIZRJEBClV1rZ1xUtEIwTBKjBZ I/9LLikZy4E8ip6nssPbROh71fxglI1yxoIUv68i8lpzXyT6mSe9kx/iKICDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfzuKl4Vv1wId8Xx3ss+56TawAIcwHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6R5wT1j/PEf+pmJr0ckplzLXpm6ES8eRR6 dOn6Yx8ACYxg77rLc6SGvjsHJRGfOXMkK7dLiRIZlpeiKnsrW1sMyFLY2VM3/EAP uqvxMylepHuPNBX56AGHexK6ffSpOnhJlgCN8QCcxkCOUjEr519gz071WWo8+hAQ tv7MzSdr39xNJit0ivvt7cwPzQxuMWZhoadJEL6SmplTTVLTeKFF5duxxBf3iSjV 79X1uGI3qUlARmo956FxjMHPFs0Itw84uCZF9T06klHkkiz9xXfyd9VN1o73ijwP eo6eTUZ6eVKD3slPSVulXYWqPmSPLlT79KSzXpVbS/SpBTffz24= -----END CERTIFICATE-----Generated at Thu Aug 7 00:33:17 2025 by rpki-client