$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: 07d9NrXjW3UBD1Q+04sz4iWnhm6oWYOr5vyhJ7t+o0M= Subject key identifier: BC:F3:78:29:AA:E8:73:D4:19:5F:FC:83:D2:F0:E3:C2:4E:E2:58:C7 Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 0F69A4203BA2007408503265D879ACB9CD3F225C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 06 Signing time: Sat 19 Jul 2025 22:51:53 +0000 Manifest this update: Sat 19 Jul 2025 22:46:53 +0000 Manifest next update: Wed 23 Jul 2025 07:38:53 +0000 Files and hashes: 1: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: kRx+AgvNomxPEOw2Vz852THjCeMeRbz7a37kdcYc200=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:69:a4:20:3b:a2:00:74:08:50:32:65:d8:79:ac:b9:cd:3f:22:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Jul 19 22:46:53 2025 GMT Not After : Jul 23 07:38:53 2025 GMT Subject: CN=BCF37829AAE873D4195FFC83D2F0E3C24EE258C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:5d:56:ac:02:6c:dc:74:8f:0f:20:c2:3c: 3d:09:8f:fb:6f:82:f7:56:bc:4e:68:b5:16:be:d8: 22:86:53:b2:d3:fb:15:48:cb:72:06:71:d9:64:6d: 8c:06:6b:f6:4d:cb:b8:d8:8f:55:f3:58:fc:4c:bf: c1:09:2a:4d:2f:18:14:50:e1:93:ea:5a:d7:5b:e1: 29:ab:42:59:48:b9:23:ea:c7:f4:da:cb:51:50:ae: ea:c4:5e:b6:5e:65:c2:a4:28:80:f1:d3:01:cc:53: 3b:96:64:d3:7d:48:c1:99:b1:12:75:21:b3:13:cf: ee:ac:3f:b2:d9:8b:96:22:41:43:0a:e4:a5:3f:a9: 9a:95:a2:8b:e2:eb:9d:53:0b:07:73:ee:32:89:86: c0:06:85:d0:75:76:4f:a2:d4:6f:59:1a:13:7f:20: 79:2f:0b:1c:36:bf:91:5e:f3:fe:1d:4d:63:7e:79: a6:e1:c5:ec:a5:02:c4:9c:79:72:f2:65:a8:c0:7d: 44:e9:2a:e8:07:20:b0:ed:ca:62:a8:7e:e1:86:6f: ab:b5:00:4e:09:7b:94:6b:0a:d1:50:5d:b4:4c:dc: 26:f9:fe:fd:a1:2f:b2:99:10:c3:98:59:f5:6a:54: fa:df:5c:d9:3b:2a:f4:ca:db:58:f0:79:ee:8d:69: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F3:78:29:AA:E8:73:D4:19:5F:FC:83:D2:F0:E3:C2:4E:E2:58:C7 X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ec:b6:f3:b2:56:c7:93:b0:69:b0:8d:12:f5:23:99:52:96: 13:ce:c2:9d:27:ee:ff:d9:b0:31:3e:8a:73:26:28:db:7a:e4: 91:53:50:ae:0b:1f:39:ce:c7:d6:fb:75:cd:a9:5a:77:f5:3d: 1c:76:72:32:c0:c9:79:9a:a5:5c:0b:f0:c1:0e:19:a1:5b:8d: 3e:82:7a:21:6e:8b:8e:22:eb:67:43:36:cb:54:dd:80:42:60: 83:6e:c3:9e:da:c7:98:8a:08:a4:38:8e:0c:fb:e9:9f:85:69: c8:4d:10:db:4c:81:fc:d5:54:bc:e8:cc:12:33:f9:5a:1f:98: 56:0a:ac:a5:b0:03:f7:fc:df:9c:c8:dd:41:f9:20:4d:81:95: 2d:c2:db:8b:43:de:9e:ec:41:7c:a0:48:64:0b:bc:08:fe:3c: f0:c6:2c:3e:df:8e:9f:0a:de:e5:68:78:a1:36:8b:4d:c3:31: ff:c3:a2:cb:bf:47:30:fe:51:71:bc:61:97:2f:68:a9:d0:1f: 99:ff:db:a6:cd:61:10:18:ad:1d:b3:4a:f2:40:56:71:19:44: fc:21:9e:85:2a:d8:95:65:1b:38:f0:76:5a:a9:0e:76:54:fb: 6f:0e:90:6d:09:8f:d8:82:88:14:bf:15:5a:83:98:59:2c:ba: e3:7d:e9:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2mkIDuiAHQIUDJl2Hmsuc0/IlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNTA3MTkyMjQ2NTNaFw0yNTA3MjMwNzM4NTNaMDMxMTAvBgNV BAMTKEJDRjM3ODI5QUFFODczRDQxOTVGRkM4M0QyRjBFM0MyNEVFMjU4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsl1WrAJs3HSPDyDCPD0Jj/tv gvdWvE5otRa+2CKGU7LT+xVIy3IGcdlkbYwGa/ZNy7jYj1XzWPxMv8EJKk0vGBRQ 4ZPqWtdb4SmrQllIuSPqx/Tay1FQrurEXrZeZcKkKIDx0wHMUzuWZNN9SMGZsRJ1 IbMTz+6sP7LZi5YiQUMK5KU/qZqVoovi651TCwdz7jKJhsAGhdB1dk+i1G9ZGhN/ IHkvCxw2v5Fe8/4dTWN+eabhxeylAsSceXLyZajAfUTpKugHILDtymKofuGGb6u1 AE4Je5RrCtFQXbRM3Cb5/v2hL7KZEMOYWfVqVPrfXNk7KvTK21jwee6NaSRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvPN4Karoc9QZX/yD0vDjwk7iWMcwHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7stvOyVseTsGmwjRL1I5lSlhPOwp0n7v/Z sDE+inMmKNt65JFTUK4LHznOx9b7dc2pWnf1PRx2cjLAyXmapVwL8MEOGaFbjT6C eiFui44i62dDNstU3YBCYINuw57ax5iKCKQ4jgz76Z+FachNENtMgfzVVLzozBIz +VofmFYKrKWwA/f835zI3UH5IE2BlS3C24tD3p7sQXygSGQLvAj+PPDGLD7fjp8K 3uVoeKE2i03DMf/Dosu/RzD+UXG8YZcvaKnQH5n/26bNYRAYrR2zSvJAVnEZRPwh noUq2JVlGzjwdlqpDnZU+28OkG0Jj9iCiBS/FVqDmFksuuN96Yg= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:07 2025 by rpki-client