$ rpki-client -vvf repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft File: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft (raw, json) Hash identifier: ptFSxLljqpC2YEHuPLgOl2tnFKKWJ1iPEuvsxIwQ9bY= Subject key identifier: 96:C0:1A:2E:AF:44:F9:A5:DE:DC:D0:29:70:35:9B:38:C6:CE:89:43 Authority key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD Certificate issuer: /CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Certificate serial: 392BCCD9012E9EC51DCD67203DE7EB3FE13EC078 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft Manifest number: 04ED Signing time: Sat 19 Jul 2025 23:01:31 +0000 Manifest this update: Sat 19 Jul 2025 22:56:31 +0000 Manifest next update: Wed 23 Jul 2025 09:30:31 +0000 Files and hashes: 1: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: Mn5S3vv0y8H86n0LvhDe7TG0qE+zI4uaMffW/k9fqwM=) 2: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: 3vA9Os0MWzKrIxrdLvYkOp/ZA589dKUhNYNySSQbRyE=) 3: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl (hash: yFtyOnTyfajn0Jb0+4DuRT0HpgDEIPAfmShfFQZuGb0=) 4: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: IzC9oagOHS4dTtSBILXnwVll7fkLpQc9RpoCIiKjX8I=) 5: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: miixVejqadzJoJUmMD6XBggcBXEaUqaEEMBzMvAqTNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2b:cc:d9:01:2e:9e:c5:1d:cd:67:20:3d:e7:eb:3f:e1:3e:c0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Validity Not Before: Jul 19 22:56:31 2025 GMT Not After : Jul 23 09:30:31 2025 GMT Subject: CN=96C01A2EAF44F9A5DEDCD02970359B38C6CE8943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:53:f1:eb:e9:65:e0:9a:04:05:11:64:22: 29:64:80:9a:6a:60:94:98:1a:37:45:6c:1e:80:f5: b4:15:14:3c:67:e9:31:bb:ef:81:95:31:28:94:9b: 19:3c:1a:32:6e:11:bc:cc:37:09:1e:a5:e8:36:e6: 75:fa:be:0f:15:df:ce:64:3d:8c:01:f7:c3:7d:95: 05:46:98:f0:b1:39:d6:a2:be:f7:52:5c:d9:24:47: ec:4e:84:f4:87:58:3e:70:77:f5:0c:8d:06:3f:9a: f3:53:56:fa:67:31:6f:9c:64:99:f6:11:09:e7:73: 6c:2a:60:c2:05:99:b2:d5:4f:a2:16:2c:6d:75:6c: 1a:e9:5a:62:f8:5d:6c:ba:03:b5:17:86:30:4b:fd: c2:c3:ed:c4:6f:3c:f5:31:87:47:ba:13:36:13:4f: 9d:61:ca:08:b4:37:f6:c9:d0:d4:7c:d0:0c:83:e3: 9d:88:77:eb:2f:02:42:c2:a6:6e:84:36:de:37:c0: b0:9f:ea:7c:d9:a2:3e:42:92:8e:9f:78:45:b6:f3: 52:ca:34:40:c0:1e:0e:11:70:0a:23:a8:b3:4a:b7: b2:2e:09:c4:b0:93:d3:9a:4a:ff:f8:5b:75:84:98: 08:1b:22:cc:e3:75:93:a6:7c:21:eb:a6:d7:b1:f8: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C0:1A:2E:AF:44:F9:A5:DE:DC:D0:29:70:35:9B:38:C6:CE:89:43 X509v3 Authority Key Identifier: keyid:E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fa:3c:c1:0e:44:cf:1b:94:91:f9:ef:6f:ce:d7:8e:15:65: 7d:fa:40:7c:88:28:ca:e8:8d:b6:73:8f:fa:9f:f6:a7:1a:b4: 86:99:6b:4d:34:5b:04:c9:af:0f:8c:7f:99:5b:60:99:15:19: 30:40:9a:a5:76:9e:a2:4c:84:80:75:fb:a1:ee:7c:70:b5:8b: 2c:74:79:79:c5:96:78:41:a8:b3:a8:ac:46:0d:a4:46:16:bb: 6b:e7:e8:f6:3e:ea:fa:b7:32:2e:8f:84:9d:75:6e:82:ce:24: a8:f5:53:12:05:67:76:45:34:b2:2c:30:50:89:3d:7a:af:e1: 8c:89:96:96:d4:39:32:1b:49:2c:75:58:31:a6:d3:03:aa:30: 74:4b:06:7e:3e:f6:1f:30:80:f6:6a:8c:8b:b0:da:f5:5d:ca: 34:c0:5e:2e:82:ad:f2:ae:b2:30:20:8b:87:80:3c:8f:b1:c2: 44:cd:c5:15:30:42:48:4e:9c:30:a6:57:59:3c:af:d8:a1:c6: 77:cf:ce:1f:3d:43:21:b9:e1:89:31:e1:41:3f:7f:01:86:fb: 74:af:d1:74:42:7c:90:ad:5c:9e:1f:9a:37:a2:5f:6c:76:ed: 55:29:ff:30:e0:1a:70:13:b4:5a:95:fe:f1:c5:0d:0f:cd:c3: e0:5a:8a:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSvM2QEunsUdzWcgPefrP+E+wHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0Qw MThEMEFERDAeFw0yNTA3MTkyMjU2MzFaFw0yNTA3MjMwOTMwMzFaMDMxMTAvBgNV BAMTKDk2QzAxQTJFQUY0NEY5QTVERURDRDAyOTcwMzU5QjM4QzZDRTg5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPI1Px6+ll4JoEBRFkIilkgJpq YJSYGjdFbB6A9bQVFDxn6TG774GVMSiUmxk8GjJuEbzMNwkepeg25nX6vg8V385k PYwB98N9lQVGmPCxOdaivvdSXNkkR+xOhPSHWD5wd/UMjQY/mvNTVvpnMW+cZJn2 EQnnc2wqYMIFmbLVT6IWLG11bBrpWmL4XWy6A7UXhjBL/cLD7cRvPPUxh0e6EzYT T51hygi0N/bJ0NR80AyD452Id+svAkLCpm6ENt43wLCf6nzZoj5Cko6feEW281LK NEDAHg4RcAojqLNKt7IuCcSwk9OaSv/4W3WEmAgbIszjdZOmfCHrptex+B0DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlsAaLq9E+aXe3NApcDWbOMbOiUMwHwYDVR0j BBgwFoAU4n8HCyfqsJbis1I/GhrNfQGNCt0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmEwMDJkZS0wY2RlLTQ2MmUtOTQwNC00NmJjNjI3MGUwNGYvMC9FMjdGMDcwQjI3 RUFCMDk2RTJCMzUyM0YxQTFBQ0Q3RDAxOEQwQURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0QwMThE MEFERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhMDAyZGUtMGNkZS00NjJlLTk0 MDQtNDZiYzYyNzBlMDRmLzAvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNE N0QwMThEMEFERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI36PMEORM8blJH572/O144VZX36QHyIKMro jbZzj/qf9qcatIaZa000WwTJrw+Mf5lbYJkVGTBAmqV2nqJMhIB1+6HufHC1iyx0 eXnFlnhBqLOorEYNpEYWu2vn6PY+6vq3Mi6PhJ11boLOJKj1UxIFZ3ZFNLIsMFCJ PXqv4YyJlpbUOTIbSSx1WDGm0wOqMHRLBn4+9h8wgPZqjIuw2vVdyjTAXi6CrfKu sjAgi4eAPI+xwkTNxRUwQkhOnDCmV1k8r9ihxnfPzh89QyG54Ykx4UE/fwGG+3Sv 0XRCfJCtXJ4fmjeiX2x27VUp/zDgGnATtFqV/vHFDQ/Nw+BaipQ= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:27 2025 by rpki-client