$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft File: 4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json) Hash identifier: NqCYte0IvcG7fE4Ac2l17MFQCj1DjwySWQbIgpqM928= Subject key identifier: EC:E1:0B:16:9F:BF:82:AC:A2:82:28:B9:33:FC:CB:FC:BB:81:68:B8 Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 Certificate issuer: /CN=4E27F034334E73C4B659862D683F564DB3AA9069 Certificate serial: 34844999B5F6E7DA457B851D5A3319C014078C6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft Manifest number: 0172 Signing time: Sun 20 Jul 2025 15:00:05 +0000 Manifest this update: Sun 20 Jul 2025 14:55:05 +0000 Manifest next update: Thu 24 Jul 2025 02:29:05 +0000 Files and hashes: 1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: KS5FT1xYTll/v88/IxDEfJTEAZgDJzEOQNIZ5umpxGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:84:49:99:b5:f6:e7:da:45:7b:85:1d:5a:33:19:c0:14:07:8c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069 Validity Not Before: Jul 20 14:55:05 2025 GMT Not After : Jul 24 02:29:05 2025 GMT Subject: CN=ECE10B169FBF82ACA28228B933FCCBFCBB8168B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:7c:21:e3:85:9f:47:c2:df:a8:25:8d:a8: 9f:bf:94:1d:03:f9:a5:20:16:8f:4a:f6:71:f5:ab: 72:12:f2:32:e8:e0:67:ff:ba:9a:0a:92:81:02:0a: d9:b2:dc:b4:1b:10:92:88:52:84:85:50:77:69:c7: 75:9e:24:b2:dc:a0:ca:db:ff:94:9e:6b:0e:be:2c: 67:53:d0:1f:93:70:be:fe:ba:76:fc:ea:4f:a5:6d: 3f:2f:41:bc:c9:01:d1:5c:a6:e5:fe:5d:a3:0f:15: c8:0d:3e:c6:89:0b:aa:88:f2:aa:92:22:8a:c2:15: a2:15:54:4f:44:a8:91:d0:89:15:40:bd:26:52:5e: d4:71:86:78:22:d1:05:36:22:b9:8d:2a:34:06:93: bd:15:f0:99:84:c2:19:94:b0:43:8d:63:99:e2:fe: d6:62:d3:5c:ae:05:c2:59:83:44:96:e7:ce:85:cf: 8d:53:6f:d3:a6:cd:c1:8d:fe:90:a9:fb:08:2b:4a: e8:20:00:4b:8a:eb:97:68:24:e3:14:7b:1d:cc:34: 78:d3:97:7a:a0:8e:e4:52:bc:61:84:15:c6:4f:1f: 5e:40:01:b5:72:c2:70:59:59:72:35:71:fa:01:f8: 21:a5:c1:18:64:c4:10:ec:4c:1f:fe:b8:43:fe:9d: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E1:0B:16:9F:BF:82:AC:A2:82:28:B9:33:FC:CB:FC:BB:81:68:B8 X509v3 Authority Key Identifier: keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c0:73:1b:0d:63:8f:8d:73:c9:1e:70:cd:30:fb:f6:09:af: 55:8e:ee:9b:ab:dc:a5:56:6d:4f:34:46:8e:1d:4f:19:b4:06: 46:f9:03:71:36:29:96:31:ca:25:fe:93:03:2e:6e:70:7d:c1: 1e:e1:a1:79:7c:cd:74:ce:f9:60:c6:67:31:8a:27:84:cd:d5: da:3f:f3:fd:98:a7:49:c8:9b:b7:52:99:00:ec:a1:80:58:1d: d7:65:a3:4b:32:52:c5:ca:0f:e4:ef:56:a3:a6:ea:4a:4c:a9: 18:fc:1d:33:ee:fe:f6:f5:09:3f:ac:63:26:d8:f7:d8:91:9b: 75:b7:29:93:77:04:13:c8:f2:af:2b:58:d8:c2:52:c6:44:c1: fc:be:37:4b:0f:48:01:0e:f9:6d:ee:ae:3d:5d:99:3d:9f:90: a9:cb:05:a9:79:44:6c:5f:2f:35:c6:79:da:75:43:f8:64:f1: ba:44:fe:1c:37:ea:2f:a6:12:ff:01:93:29:31:95:f0:52:c5: d3:b7:50:d2:2b:0a:af:9f:ba:25:e0:a0:47:3e:d4:e0:7f:ad: 75:2a:a1:6c:5e:43:8d:fb:16:df:1a:d8:b6:26:a5:11:68:fe: a0:63:9f:45:f2:03:66:2a:88:8b:bc:47:e4:3d:53:01:a5:b9: 15:a2:76:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIRJmbX259pFe4UdWjMZwBQHjG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERC M0FBOTA2OTAeFw0yNTA3MjAxNDU1MDVaFw0yNTA3MjQwMjI5MDVaMDMxMTAvBgNV BAMTKEVDRTEwQjE2OUZCRjgyQUNBMjgyMjhCOTMzRkNDQkZDQkI4MTY4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHnwh44WfR8LfqCWNqJ+/lB0D +aUgFo9K9nH1q3IS8jLo4Gf/upoKkoECCtmy3LQbEJKIUoSFUHdpx3WeJLLcoMrb /5Seaw6+LGdT0B+TcL7+unb86k+lbT8vQbzJAdFcpuX+XaMPFcgNPsaJC6qI8qqS IorCFaIVVE9EqJHQiRVAvSZSXtRxhngi0QU2IrmNKjQGk70V8JmEwhmUsEONY5ni /tZi01yuBcJZg0SW586Fz41Tb9OmzcGN/pCp+wgrSuggAEuK65doJOMUex3MNHjT l3qgjuRSvGGEFcZPH15AAbVywnBZWXI1cfoB+CGlwRhkxBDsTB/+uEP+nfBBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7OELFp+/gqyigii5M/zL/LuBaLgwHwYDVR0j BBgwFoAUTifwNDNOc8S2WYYtaD9WTbOqkGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTNiNjdlOC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC80RTI3RjAzNDMz NEU3M0M0QjY1OTg2MkQ2ODNGNTY0REIzQUE5MDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERCM0FB OTA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2 NERCM0FBOTA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7AcxsNY4+Nc8kecM0w+/YJr1WO7pur3KVW bU80Ro4dTxm0Bkb5A3E2KZYxyiX+kwMubnB9wR7hoXl8zXTO+WDGZzGKJ4TN1do/ 8/2Yp0nIm7dSmQDsoYBYHddlo0syUsXKD+TvVqOm6kpMqRj8HTPu/vb1CT+sYybY 99iRm3W3KZN3BBPI8q8rWNjCUsZEwfy+N0sPSAEO+W3urj1dmT2fkKnLBal5RGxf LzXGedp1Q/hk8bpE/hw36i+mEv8BkykxlfBSxdO3UNIrCq+fuiXgoEc+1OB/rXUq oWxeQ437Ft8a2LYmpRFo/qBjn0XyA2YqiIu8R+Q9UwGluRWidqU= -----END CERTIFICATE-----Generated at Tue Jul 22 12:00:48 2025 by rpki-client