$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft File: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft (raw, json) Hash identifier: jAFNGl/n8GZoC8PZPIsEfSmWITi769CpQkDq1ItKokI= Subject key identifier: AC:A0:54:4E:68:00:E6:1D:AA:1C:10:74:1D:A7:6A:C7:D4:69:2D:ED Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Certificate serial: 521220ED14F94300E0F7891523720D25E519C32C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft Manifest number: 017A Signing time: Mon 21 Jul 2025 07:51:14 +0000 Manifest this update: Mon 21 Jul 2025 07:46:14 +0000 Manifest next update: Thu 24 Jul 2025 08:51:14 +0000 Files and hashes: 1: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: Q3xxSdQXC23vXFGFdHyLQV020HZB9BgH6IL3S5vtQAA=) 2: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: 6gVzJ3lnoTzbRecAFAnRC8x24kDXXXW3lAWqPBdz2dw=) 3: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: 1f4e1XEuXG9su40zHvwmNI+q39l2fKb22IFThBoIE0Y=) 4: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: JiNsqLJvEYFIyhrR6R0JR1hrj3KWiaaB75HG9L5QPcg=) 5: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl (hash: hlpKqozLvu00g4ebRRcYqko7J+KCrBCYgbHt3wdM+6Q=) 6: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: 6N2J2kg+Zlk+0sQHWC1BIhfECV5xjbZiRhQRFmUUNag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:12:20:ed:14:f9:43:00:e0:f7:89:15:23:72:0d:25:e5:19:c3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Validity Not Before: Jul 21 07:46:14 2025 GMT Not After : Jul 24 08:51:14 2025 GMT Subject: CN=ACA0544E6800E61DAA1C10741DA76AC7D4692DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:20:29:7f:0d:cc:dd:4e:ae:71:e0:e4:f1: af:e9:51:bb:bb:c2:8d:2a:b3:ff:ff:72:05:d5:1d: ef:36:5b:af:9d:ea:c6:f1:6c:bb:cb:78:88:da:26: bd:07:e1:1b:26:2a:8d:70:5c:ef:cc:66:ee:1f:f0: 0f:6d:eb:a4:f3:69:ec:0d:7a:fb:65:02:60:7f:b8: d4:51:9e:7a:64:df:b4:47:42:c3:19:b2:01:55:4b: 96:f6:dc:72:a7:17:87:df:9d:b5:22:ae:7a:0a:f4: 90:b9:a3:d5:f4:e5:7f:77:88:9d:75:38:01:08:b9: 69:85:a1:78:9e:34:dc:a7:5f:75:9a:0e:51:00:19: ca:08:18:34:6d:3b:87:a9:4c:03:e2:6b:b2:13:e3: b0:eb:f6:08:d9:06:b5:63:20:0a:77:7e:fa:e8:d7: 73:2e:2c:f9:ce:ec:90:6c:3f:4d:60:e7:40:8b:7e: 70:64:28:ff:39:07:98:6a:e3:96:38:55:61:63:67: fa:09:02:eb:14:81:17:b3:3e:6c:58:da:59:19:24: 7f:ae:bc:d7:82:b3:c2:57:c5:9a:31:14:b8:42:bd: 1c:aa:20:57:2d:4b:b9:8f:bd:18:79:e9:93:2a:c0: e8:80:09:0c:c9:8e:9a:b3:1e:cd:06:24:a1:5b:3a: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A0:54:4E:68:00:E6:1D:AA:1C:10:74:1D:A7:6A:C7:D4:69:2D:ED X509v3 Authority Key Identifier: keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2d:05:05:f3:88:c6:ad:86:59:b9:aa:c5:ae:82:af:d0:ab: bf:11:fb:25:0d:0d:a5:3f:c2:7d:d1:40:6d:53:0d:68:9f:60: f4:f8:1b:94:bd:33:45:75:a7:44:52:5c:d4:ed:1a:43:49:10: c9:e8:3e:a2:c5:38:fc:a2:0a:3c:27:ca:6f:4d:37:5f:14:9a: 55:7d:e8:15:2c:44:ac:03:c1:3f:96:d6:f0:a7:dc:1e:af:90: af:02:6a:79:cf:e7:3a:9e:06:23:34:ac:44:5b:da:02:66:f0: 8a:81:93:7b:30:e1:e5:12:84:19:63:b9:28:9c:9d:e2:f6:62: da:84:fd:76:76:6c:48:c3:07:a2:c3:ea:c7:8f:d3:29:f6:eb: 2b:a5:2d:44:d8:08:57:d1:a2:b5:bb:b2:ad:dc:25:f5:3b:ea: 54:b5:d2:6d:f2:b8:50:c2:66:de:57:29:05:ef:eb:dc:77:26: 58:44:22:60:d3:0f:75:27:5a:82:93:9d:c6:ff:b9:0b:f7:8b: bf:03:98:2d:ad:49:00:f7:a8:5a:ad:3c:67:3d:53:24:be:b1: bf:5d:fd:62:cf:dc:90:08:ce:14:2a:86:bd:93:b5:b4:76:0e: 8f:b1:a2:75:2a:31:7b:45:69:30:a6:12:1f:a2:43:49:4e:51: 34:1c:3a:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhIg7RT5QwDg94kVI3INJeUZwywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC NTM2OTVGQzAeFw0yNTA3MjEwNzQ2MTRaFw0yNTA3MjQwODUxMTRaMDMxMTAvBgNV BAMTKEFDQTA1NDRFNjgwMEU2MURBQTFDMTA3NDFEQTc2QUM3RDQ2OTJERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJiApfw3M3U6uceDk8a/pUbu7 wo0qs///cgXVHe82W6+d6sbxbLvLeIjaJr0H4RsmKo1wXO/MZu4f8A9t66TzaewN evtlAmB/uNRRnnpk37RHQsMZsgFVS5b23HKnF4ffnbUirnoK9JC5o9X05X93iJ11 OAEIuWmFoXieNNynX3WaDlEAGcoIGDRtO4epTAPia7IT47Dr9gjZBrVjIAp3fvro 13MuLPnO7JBsP01g50CLfnBkKP85B5hq45Y4VWFjZ/oJAusUgRezPmxY2lkZJH+u vNeCs8JXxZoxFLhCvRyqIFctS7mPvRh56ZMqwOiACQzJjpqzHs0GJKFbOuAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrKBUTmgA5h2qHBB0Hadqx9RpLe0wHwYDVR0j BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2 OTVGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4 MDlCNTM2OTVGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUtBQXziMathlm5qsWugq/Qq78R+yUNDaU/ wn3RQG1TDWifYPT4G5S9M0V1p0RSXNTtGkNJEMnoPqLFOPyiCjwnym9NN18UmlV9 6BUsRKwDwT+W1vCn3B6vkK8CannP5zqeBiM0rERb2gJm8IqBk3sw4eUShBljuSic neL2YtqE/XZ2bEjDB6LD6seP0yn26yulLUTYCFfRorW7sq3cJfU76lS10m3yuFDC Zt5XKQXv69x3JlhEImDTD3UnWoKTncb/uQv3i78DmC2tSQD3qFqtPGc9UyS+sb9d /WLP3JAIzhQqhr2TtbR2Do+xonUqMXtFaTCmEh+iQ0lOUTQcOoc= -----END CERTIFICATE-----Generated at Mon Jul 21 23:21:19 2025 by rpki-client