$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: ekireE/PUCcxZrA+pnK+mxClssYUxqlxea6SaMTMjW4= Subject key identifier: 6C:58:C8:AD:69:A8:1E:AC:81:51:99:17:E0:A7:6C:98:06:D2:3C:A1 Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 3F3CAE9EE66829D15FC63BBEA49C7B3809FC3DBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: 0105 Signing time: Fri 18 Jul 2025 22:20:04 +0000 Manifest this update: Fri 18 Jul 2025 22:15:04 +0000 Manifest next update: Tue 22 Jul 2025 04:00:04 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: chZgSebYL3AyASorKFgZxAtVxsXGef1bjWlqKc1bcs8=) 2: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: x/4EkvFS7c4SDYM7IMqNJ33DXf2lkKINoVDuXYyBOec=) 3: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: M98dO/m+ycrBeg1CtOIteFJftV3RCXQ2eLl/At2g8+Q=) 4: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: Ywn1UEJnpT1UpuAh2VB4UnPn+99/TPlQAq9uS4gdn7I=) 5: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: Cf8zuOBPe5ne4FbCX/nB71vXdpt4+lQ9NgMPpci6uTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 04:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3c:ae:9e:e6:68:29:d1:5f:c6:3b:be:a4:9c:7b:38:09:fc:3d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Jul 18 22:15:04 2025 GMT Not After : Jul 22 04:00:04 2025 GMT Subject: CN=6C58C8AD69A81EAC81519917E0A76C9806D23CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:6f:3a:0b:98:8f:d1:51:1f:40:2b:06:aa: 76:00:d8:a5:0b:81:e2:4c:65:48:13:47:0e:b7:71: 69:50:ae:3b:71:42:3e:0e:29:e1:29:e0:54:c4:3c: 4a:1c:5e:c5:fc:24:bd:fd:9d:78:65:9f:ea:6b:6f: 63:20:4a:f6:a6:8b:42:70:6b:ff:9e:70:24:a7:7e: e7:db:22:55:e0:a1:9b:e9:9a:ba:45:61:b6:0d:d7: 55:2e:16:9a:c4:f2:07:6d:6e:5f:3d:18:12:e3:c1: 10:cd:ab:45:e7:59:a7:bb:4a:a4:44:e2:a2:f9:37: ab:00:93:ab:9e:1a:e4:c6:b3:aa:8f:41:ee:df:3a: b9:46:8f:01:11:cc:f2:20:de:f4:03:70:f1:54:6a: 02:75:24:43:ec:f9:20:41:07:60:37:98:d4:66:0b: d6:92:02:1d:87:34:bd:e8:73:db:96:ff:9f:57:d7: 33:ad:93:c0:99:db:f6:73:71:76:0f:7a:71:4a:49: 32:3e:88:56:bf:aa:69:aa:cb:03:f7:96:af:e8:e1: d2:19:bc:8e:af:73:53:6e:93:dc:5f:66:38:26:13: c7:75:c8:47:a1:87:63:b7:b6:95:e0:3b:cc:5f:02: f1:c1:8f:92:ac:8b:b0:06:4c:08:74:80:db:5b:30: f3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:58:C8:AD:69:A8:1E:AC:81:51:99:17:E0:A7:6C:98:06:D2:3C:A1 X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:63:e4:90:16:40:1e:b9:3a:37:90:cb:13:7c:d7:ab:17:53: 51:6d:ab:98:ec:77:7a:45:6e:3f:ff:db:9d:3b:b5:3b:aa:70: f8:7e:da:74:2a:9f:31:5f:e5:d5:c8:88:61:23:52:2c:8c:64: 3f:6f:d5:15:c0:58:e6:ea:fb:72:9d:c2:fc:7c:1a:8d:3e:5e: 91:e8:6d:49:94:11:df:86:2c:bf:72:35:db:2d:30:2a:de:32: db:4a:2d:fa:9a:06:08:85:0d:94:c7:2a:85:57:d7:77:18:ea: ee:a9:f0:97:31:01:25:64:15:04:95:08:37:08:00:56:ad:d2: e9:3c:86:d2:c8:a3:27:f3:c1:c9:db:d6:a9:d7:95:ec:48:04: 3c:cf:32:15:e9:ce:bd:6f:a5:46:5c:ac:0a:7d:56:3f:64:a7: e7:48:26:6b:f7:3f:6d:a5:2a:ec:0c:73:d2:f5:d6:5d:da:22: d1:f4:60:2f:63:36:35:b9:2f:1b:b4:9a:6e:63:5c:19:74:69: f0:ae:5e:b3:a2:93:0c:c2:83:02:4f:fb:33:48:35:6d:36:b3: f3:42:9e:e5:1d:dc:cd:44:ae:8c:fe:c2:b0:a0:8b:e5:96:0e: 97:d4:6a:ba:5e:78:11:ad:70:45:19:92:94:b5:ef:07:e2:8d: 35:19:78:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPzyunuZoKdFfxju+pJx7OAn8PbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTA3MTgyMjE1MDRaFw0yNTA3MjIwNDAwMDRaMDMxMTAvBgNV BAMTKDZDNThDOEFENjlBODFFQUM4MTUxOTkxN0UwQTc2Qzk4MDZEMjNDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Vm86C5iP0VEfQCsGqnYA2KUL geJMZUgTRw63cWlQrjtxQj4OKeEp4FTEPEocXsX8JL39nXhln+prb2MgSvami0Jw a/+ecCSnfufbIlXgoZvpmrpFYbYN11UuFprE8gdtbl89GBLjwRDNq0XnWae7SqRE 4qL5N6sAk6ueGuTGs6qPQe7fOrlGjwERzPIg3vQDcPFUagJ1JEPs+SBBB2A3mNRm C9aSAh2HNL3oc9uW/59X1zOtk8CZ2/ZzcXYPenFKSTI+iFa/qmmqywP3lq/o4dIZ vI6vc1Nuk9xfZjgmE8d1yEehh2O3tpXgO8xfAvHBj5Ksi7AGTAh0gNtbMPN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbFjIrWmoHqyBUZkX4KdsmAbSPKEwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJj5JAWQB65OjeQyxN816sXU1Ftq5jsd3pF bj//2507tTuqcPh+2nQqnzFf5dXIiGEjUiyMZD9v1RXAWObq+3Kdwvx8Go0+XpHo bUmUEd+GLL9yNdstMCreMttKLfqaBgiFDZTHKoVX13cY6u6p8JcxASVkFQSVCDcI AFat0uk8htLIoyfzwcnb1qnXlexIBDzPMhXpzr1vpUZcrAp9Vj9kp+dIJmv3P22l KuwMc9L11l3aItH0YC9jNjW5Lxu0mm5jXBl0afCuXrOikwzCgwJP+zNINW02s/NC nuUd3M1Eroz+wrCgi+WWDpfUarpeeBGtcEUZkpS17wfijTUZeIU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:12 2025 by rpki-client