$ rpki-client -vvf repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft File: 27A3131BB606D93657151019C1A9735DF861C9D4.mft (raw, json) Hash identifier: DrwmECxfly/DyGg5UWeCBEqjUeddS0rRsISSR1SfaoY= Subject key identifier: EC:CC:F4:56:E7:62:57:55:74:8F:A2:E2:0A:19:4B:9E:6A:24:92:A4 Authority key identifier: 27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4 Certificate issuer: /CN=27A3131BB606D93657151019C1A9735DF861C9D4 Certificate serial: 566E60C0046495D737336F72AEBF8B2C7D25EFC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft Manifest number: 02DA Signing time: Tue 22 Jul 2025 09:51:01 +0000 Manifest this update: Tue 22 Jul 2025 09:46:01 +0000 Manifest next update: Fri 25 Jul 2025 16:46:01 +0000 Files and hashes: 1: 27A3131BB606D93657151019C1A9735DF861C9D4.crl (hash: SLv351m51lrD0WqFh/swPX6v+hl0+pmRxlkrEPZsJIo=) 2: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: encpHXfOglU+n5zC00TevMjvjDMOpcW1MtPZsrVdOCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6e:60:c0:04:64:95:d7:37:33:6f:72:ae:bf:8b:2c:7d:25:ef:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27A3131BB606D93657151019C1A9735DF861C9D4 Validity Not Before: Jul 22 09:46:01 2025 GMT Not After : Jul 25 16:46:01 2025 GMT Subject: CN=ECCCF456E7625755748FA2E20A194B9E6A2492A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:59:81:8c:98:df:d6:b8:c8:82:10:8a:cf:a5: ad:94:b5:72:90:d2:b8:3e:1c:1c:35:af:7e:79:c0: e0:59:ab:08:a2:8d:7a:96:94:66:6c:83:ba:29:f3: 42:dc:54:88:0b:ab:92:46:99:14:3a:64:e2:9a:4f: 31:f2:b4:7f:71:0c:82:bb:18:6e:9c:08:52:33:28: 67:71:71:b5:0c:b2:63:1e:54:ab:21:d4:df:a1:73: de:47:5a:9e:28:f9:ad:7b:08:64:a0:0e:44:cd:f7: d6:76:bf:db:49:cd:95:1f:80:ca:78:e7:45:af:4d: 5f:48:85:94:01:60:f7:cb:66:72:16:0f:fd:db:6d: ad:e2:a4:83:71:22:8b:1c:4e:9f:7b:f0:49:38:c0: 20:f4:54:35:f0:9a:ae:f8:5d:84:02:2d:c5:f7:ed: e2:26:ad:9c:35:3d:bc:21:4f:14:ae:62:82:8a:29: 0b:26:bb:99:9b:e3:47:26:cb:72:d3:df:81:a3:d0: 77:e7:15:dc:82:5d:4b:c9:7a:6e:3e:53:45:bf:d5: de:76:07:58:8d:e2:a8:f6:1a:87:6f:e9:13:3d:74: 44:3e:ff:40:2e:dc:ab:52:ea:44:ad:f4:07:6e:0c: 5e:cf:81:f3:e8:dd:81:1e:c7:d2:4a:f6:9b:1a:fb: e0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CC:F4:56:E7:62:57:55:74:8F:A2:E2:0A:19:4B:9E:6A:24:92:A4 X509v3 Authority Key Identifier: keyid:27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d6:e1:c8:e2:4f:4a:4a:38:e1:92:ba:75:9d:e5:ba:86:ec: c5:bf:06:fd:7a:ee:c3:1c:64:2e:ab:a6:21:2b:80:c9:2d:a5: 5c:70:20:f8:c2:53:a1:86:e4:b8:4a:19:c7:c7:11:ee:5b:1b: 41:91:8b:43:f0:e2:ad:b4:0a:62:85:b0:a9:10:0f:67:d9:28: f0:05:7d:56:3b:93:3c:32:17:99:be:d6:56:cf:e5:b0:5c:0b: b1:8a:18:a6:2b:a3:7f:cf:b3:00:f4:f4:aa:44:30:cd:80:d4: f0:17:9b:23:e0:d5:86:c2:fd:c9:86:94:2e:d5:c7:93:18:db: 97:7a:10:e8:bc:4f:b6:48:70:88:ef:fc:4d:ae:7c:ee:9a:2c: f0:bb:2e:1a:5b:83:82:c8:2d:a8:e5:61:a0:4a:b6:0e:7a:96: ec:2b:b4:04:e6:17:c9:d0:bd:ab:53:55:e0:cc:94:b7:eb:eb: bc:56:2b:ce:bf:33:a8:50:6a:32:3a:e4:b4:7d:2c:ea:3e:68: 23:22:ca:48:f2:37:89:76:2d:26:2a:fc:fc:3f:45:aa:6c:a5: 3f:a8:fd:92:d9:d0:27:31:cd:f4:74:71:79:af:6c:46:81:b2: 35:07:6e:8b:c2:d3:72:46:94:70:e0:f6:28:80:12:9f:ce:79: 2d:ac:67:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVm5gwARkldc3M29yrr+LLH0l78QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTczNURG ODYxQzlENDAeFw0yNTA3MjIwOTQ2MDFaFw0yNTA3MjUxNjQ2MDFaMDMxMTAvBgNV BAMTKEVDQ0NGNDU2RTc2MjU3NTU3NDhGQTJFMjBBMTk0QjlFNkEyNDkyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwWYGMmN/WuMiCEIrPpa2UtXKQ 0rg+HBw1r355wOBZqwiijXqWlGZsg7op80LcVIgLq5JGmRQ6ZOKaTzHytH9xDIK7 GG6cCFIzKGdxcbUMsmMeVKsh1N+hc95HWp4o+a17CGSgDkTN99Z2v9tJzZUfgMp4 50WvTV9IhZQBYPfLZnIWD/3bba3ipINxIoscTp978Ek4wCD0VDXwmq74XYQCLcX3 7eImrZw1PbwhTxSuYoKKKQsmu5mb40cmy3LT34Gj0HfnFdyCXUvJem4+U0W/1d52 B1iN4qj2Godv6RM9dEQ+/0Au3KtS6kSt9AduDF7PgfPo3YEex9JK9psa++DFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Mz0VudiV1V0j6LiChlLnmokkqQwHwYDVR0j BBgwFoAUJ6MTG7YG2TZXFRAZwalzXfhhydQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTQ0ZTk1MS0zZDA4LTQ1OGEtYTQ0YS01MjlkMzg3ZDI2YjEvMC8yN0EzMTMxQkI2 MDZEOTM2NTcxNTEwMTlDMUE5NzM1REY4NjFDOUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTczNURGODYx QzlENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0 NGEtNTI5ZDM4N2QyNmIxLzAvMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTcz NURGODYxQzlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfW4cjiT0pKOOGSunWd5bqG7MW/Bv167sMc ZC6rpiErgMktpVxwIPjCU6GG5LhKGcfHEe5bG0GRi0Pw4q20CmKFsKkQD2fZKPAF fVY7kzwyF5m+1lbP5bBcC7GKGKYro3/PswD09KpEMM2A1PAXmyPg1YbC/cmGlC7V x5MY25d6EOi8T7ZIcIjv/E2ufO6aLPC7Lhpbg4LILajlYaBKtg56luwrtATmF8nQ vatTVeDMlLfr67xWK86/M6hQajI65LR9LOo+aCMiykjyN4l2LSYq/Pw/RapspT+o /ZLZ0CcxzfR0cXmvbEaBsjUHbovC03JGlHDg9iiAEp/OeS2sZ0A= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:44 2025 by rpki-client