$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft File: 4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json) Hash identifier: AMP0jiDX7MxHDt6ofsomOXK9eaI+24R97AKjfixoYzk= Subject key identifier: 7B:23:26:8D:AB:12:BC:AA:3A:B5:4D:38:AE:C7:55:62:1A:AD:45:49 Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 Certificate issuer: /CN=4E27F034334E73C4B659862D683F564DB3AA9069 Certificate serial: 50459E3A95EAE33E8B053E5EBFF4DBCE8B933F22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft Manifest number: 0174 Signing time: Fri 25 Jul 2025 11:50:05 +0000 Manifest this update: Fri 25 Jul 2025 11:45:05 +0000 Manifest next update: Mon 28 Jul 2025 21:14:05 +0000 Files and hashes: 1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: C1ccfNmu5sTIq7E5XCQVuGWU7uRNKrVcg+5ZstYacP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 21:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:45:9e:3a:95:ea:e3:3e:8b:05:3e:5e:bf:f4:db:ce:8b:93:3f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069 Validity Not Before: Jul 25 11:45:05 2025 GMT Not After : Jul 28 21:14:05 2025 GMT Subject: CN=7B23268DAB12BCAA3AB54D38AEC755621AAD4549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:20:8a:06:88:75:33:fb:c8:9b:29:ac:b0: 80:77:75:e0:68:f8:65:3f:cb:bb:dd:c0:bd:01:d7: ff:b3:36:0f:9f:f0:b8:18:88:65:39:31:24:d3:48: 4f:d1:a1:a0:1c:97:df:b9:05:39:27:4b:c2:7c:4d: a4:1a:97:f8:3a:e4:35:9d:d4:fe:41:fa:82:e4:d4: 39:c6:e6:98:97:9d:59:d3:75:69:cd:b1:83:6b:32: 52:cd:ec:a3:4d:28:cc:c9:d8:0e:5c:79:5f:e2:27: 44:bb:03:56:38:02:b6:d4:6b:8d:35:4d:07:21:e6: 28:6e:54:72:9b:e4:87:76:0f:5f:41:be:e4:e5:f7: 97:63:62:50:41:34:ef:56:f7:4a:57:11:4a:6e:e9: ab:d9:27:e0:7e:12:af:ae:c6:93:92:9f:22:d3:cd: 26:d4:cc:02:8c:79:90:7d:85:c8:ff:f2:35:9c:c9: 02:ba:e4:a7:90:57:e9:5f:45:21:b0:ca:86:80:39: 2c:27:57:35:75:08:f7:e4:e4:b1:d5:7d:04:0b:75: 16:7b:20:1b:23:c8:09:7f:cc:74:f6:27:00:66:0c: f7:39:0e:9d:ff:43:ba:bd:5d:08:f5:2d:5a:40:af: 50:77:09:8c:9e:f6:f4:f8:96:5b:6d:82:0b:68:cc: dd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:23:26:8D:AB:12:BC:AA:3A:B5:4D:38:AE:C7:55:62:1A:AD:45:49 X509v3 Authority Key Identifier: keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a5:0d:59:9e:76:a4:94:6d:6b:ec:9b:9e:00:f1:3b:08:48: 8d:11:90:97:b7:35:79:34:2d:23:a3:1c:fe:2b:99:7a:e6:5b: 36:94:19:75:33:52:17:c7:5f:2d:8a:29:b0:e1:eb:d0:44:e7: a5:61:ac:20:74:e4:96:8e:4d:b6:c6:4f:90:b2:6c:97:1f:91: 8c:23:8a:2f:04:5c:98:7a:c3:99:63:2d:94:ac:9c:da:3a:91: 32:40:e2:93:2f:9b:0c:15:d6:3c:60:35:f0:58:f5:02:7d:1c: c6:b3:97:06:4f:22:ed:fe:f8:19:35:73:f9:10:b8:a0:c4:e0: dd:03:11:29:f3:44:ed:6e:00:47:d6:f5:df:9c:dc:65:f7:08: 25:26:b9:91:13:d2:3a:b0:43:34:6f:07:66:2a:ea:29:eb:f3: 1e:94:8d:8e:9f:90:7d:44:93:e5:b8:52:34:99:b4:7c:c6:05: 7a:59:74:81:b6:ae:1c:a4:39:ce:c9:aa:6f:3e:b3:f4:44:e2: c3:34:d9:00:d9:5e:11:c9:1a:2d:2a:f2:f3:8c:1f:02:46:68: c3:80:cb:ac:1c:03:fc:23:99:62:84:ab:6e:be:8d:24:98:85: c3:d8:a6:11:ef:de:e2:31:ce:cb:51:69:c4:f5:02:d8:80:f7: b0:66:1d:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUEWeOpXq4z6LBT5ev/TbzouTPyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERC M0FBOTA2OTAeFw0yNTA3MjUxMTQ1MDVaFw0yNTA3MjgyMTE0MDVaMDMxMTAvBgNV BAMTKDdCMjMyNjhEQUIxMkJDQUEzQUI1NEQzOEFFQzc1NTYyMUFBRDQ1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44iCKBoh1M/vImymssIB3deBo +GU/y7vdwL0B1/+zNg+f8LgYiGU5MSTTSE/RoaAcl9+5BTknS8J8TaQal/g65DWd 1P5B+oLk1DnG5piXnVnTdWnNsYNrMlLN7KNNKMzJ2A5ceV/iJ0S7A1Y4ArbUa401 TQch5ihuVHKb5Id2D19BvuTl95djYlBBNO9W90pXEUpu6avZJ+B+Eq+uxpOSnyLT zSbUzAKMeZB9hcj/8jWcyQK65KeQV+lfRSGwyoaAOSwnVzV1CPfk5LHVfQQLdRZ7 IBsjyAl/zHT2JwBmDPc5Dp3/Q7q9XQj1LVpAr1B3CYye9vT4llttggtozN3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeyMmjasSvKo6tU04rsdVYhqtRUkwHwYDVR0j BBgwFoAUTifwNDNOc8S2WYYtaD9WTbOqkGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTNiNjdlOC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC80RTI3RjAzNDMz NEU3M0M0QjY1OTg2MkQ2ODNGNTY0REIzQUE5MDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERCM0FB OTA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2 NERCM0FBOTA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGilDVmedqSUbWvsm54A8TsISI0RkJe3NXk0 LSOjHP4rmXrmWzaUGXUzUhfHXy2KKbDh69BE56VhrCB05JaOTbbGT5CybJcfkYwj ii8EXJh6w5ljLZSsnNo6kTJA4pMvmwwV1jxgNfBY9QJ9HMazlwZPIu3++Bk1c/kQ uKDE4N0DESnzRO1uAEfW9d+c3GX3CCUmuZET0jqwQzRvB2Yq6inr8x6UjY6fkH1E k+W4UjSZtHzGBXpZdIG2rhykOc7Jqm8+s/RE4sM02QDZXhHJGi0q8vOMHwJGaMOA y6wcA/wjmWKEq26+jSSYhcPYphHv3uIxzstRacT1AtiA97BmHfc= -----END CERTIFICATE-----Generated at Sat Jul 26 01:49:15 2025 by rpki-client