$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: VWC2ccJ3CpqMbJjD9GiYKk7nUDALoiYuAArHeFBz2Zs= Subject key identifier: 56:42:4A:A0:64:5C:08:52:7E:3E:42:C7:B3:C6:80:57:58:05:52:36 Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 2B2327F3283A202BDE8C7C50CBD1D94A2CF8A635 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 0192 Signing time: Sat 19 Jul 2025 16:51:39 +0000 Manifest this update: Sat 19 Jul 2025 16:46:39 +0000 Manifest next update: Wed 23 Jul 2025 03:50:39 +0000 Files and hashes: 1: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: QXa1ERgQncrgMtWJhyVspUGz8cmuW9QmpbYe6CQGQKo=) 2: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=) 3: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:23:27:f3:28:3a:20:2b:de:8c:7c:50:cb:d1:d9:4a:2c:f8:a6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Jul 19 16:46:39 2025 GMT Not After : Jul 23 03:50:39 2025 GMT Subject: CN=56424AA0645C08527E3E42C7B3C6805758055236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:6a:9e:99:79:45:46:f1:ab:26:bd:b1:e9: f0:a7:eb:66:d9:d3:ae:06:8b:d1:f0:43:27:25:e5: ef:42:ab:07:73:5d:41:90:33:2a:40:22:bd:5b:90: 26:68:8b:00:26:5c:8b:51:7a:7a:37:f9:0a:02:0d: 07:eb:b1:03:06:2c:2b:08:82:dd:25:bc:c9:e3:36: 15:b3:0d:f3:9f:b5:31:76:08:4d:3c:a5:11:a2:4d: f1:be:84:4e:32:88:ae:e3:6d:03:28:8a:9e:bd:52: d2:34:38:4a:89:ee:7d:89:d5:76:f2:89:42:5f:17: 8f:10:64:83:d4:63:f6:b3:bd:f2:82:7e:b9:b7:e1: 68:6a:d9:7f:4e:e5:5c:d5:7c:0c:30:98:67:08:8a: 9c:01:6e:e2:73:bd:2b:e5:26:dd:a7:72:06:0c:b4: 1d:f4:f1:e5:6f:f9:bf:d2:2a:0c:e5:19:94:dd:14: ed:58:41:8f:8e:0a:8e:a0:7a:53:99:b2:d9:fb:bb: e7:f5:5c:aa:07:c5:1e:4f:16:e9:92:a5:fa:ad:8d: 6d:39:aa:a4:de:dc:eb:aa:c5:35:20:4e:be:e8:14: 21:79:e2:12:62:ae:72:ef:8f:21:08:6e:7c:24:2c: 00:d1:99:48:ea:a8:0c:59:a2:4d:b0:d3:9c:66:a1: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:42:4A:A0:64:5C:08:52:7E:3E:42:C7:B3:C6:80:57:58:05:52:36 X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5e:5b:e5:1d:ec:f6:a7:af:6c:50:56:6d:5b:ba:b3:bf:a4: 7d:e5:b4:45:75:05:16:0d:da:7a:49:3a:bc:26:2b:07:e6:76: 90:bc:4f:af:e5:03:ab:76:04:cd:46:b4:54:c6:92:93:76:ab: 8a:45:15:68:19:37:0f:be:7c:ae:80:09:32:70:09:10:86:25: ff:64:1b:b8:aa:f4:15:53:1b:af:9d:4f:07:54:14:4d:06:0d: 55:18:48:3f:25:3f:9c:7f:1c:45:c3:be:a2:df:d8:55:3d:13: c4:e9:04:c9:82:03:63:87:f3:c2:34:b5:a1:7b:c4:26:82:db: fb:3e:c9:62:d2:90:57:7d:d9:a5:ef:e5:1f:8e:15:ec:19:3a: 13:e5:11:d2:fe:41:ca:2c:53:a2:2d:cc:76:38:e4:ac:12:65: 47:ab:b1:48:84:b3:32:17:f8:59:c7:5b:95:85:ee:b1:97:9d: 2b:b9:c7:cc:8a:9a:f9:59:c1:7a:fe:39:a2:21:dd:4e:7d:b3: d8:73:3e:19:34:4c:3e:ee:dd:70:38:ea:f6:9b:38:9d:46:05: 9f:5d:5e:42:58:30:a7:42:24:70:ab:3f:08:a6:dc:e1:b3:a8: 12:c8:78:8f:b9:de:5d:84:03:80:ec:2a:81:ef:61:4d:ec:c4: 42:08:2c:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyMn8yg6ICvejHxQy9HZSiz4pjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTA3MTkxNjQ2MzlaFw0yNTA3MjMwMzUwMzlaMDMxMTAvBgNV BAMTKDU2NDI0QUEwNjQ1QzA4NTI3RTNFNDJDN0IzQzY4MDU3NTgwNTUyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UGqemXlFRvGrJr2x6fCn62bZ 064Gi9HwQycl5e9CqwdzXUGQMypAIr1bkCZoiwAmXItReno3+QoCDQfrsQMGLCsI gt0lvMnjNhWzDfOftTF2CE08pRGiTfG+hE4yiK7jbQMoip69UtI0OEqJ7n2J1Xby iUJfF48QZIPUY/azvfKCfrm34Whq2X9O5VzVfAwwmGcIipwBbuJzvSvlJt2ncgYM tB308eVv+b/SKgzlGZTdFO1YQY+OCo6gelOZstn7u+f1XKoHxR5PFumSpfqtjW05 qqTe3OuqxTUgTr7oFCF54hJirnLvjyEIbnwkLADRmUjqqAxZok2w05xmodpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVkJKoGRcCFJ+PkLHs8aAV1gFUjYwHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9eW+Ud7Panr2xQVm1burO/pH3ltEV1BRYN 2npJOrwmKwfmdpC8T6/lA6t2BM1GtFTGkpN2q4pFFWgZNw++fK6ACTJwCRCGJf9k G7iq9BVTG6+dTwdUFE0GDVUYSD8lP5x/HEXDvqLf2FU9E8TpBMmCA2OH88I0taF7 xCaC2/s+yWLSkFd92aXv5R+OFewZOhPlEdL+QcosU6ItzHY45KwSZUersUiEszIX +FnHW5WF7rGXnSu5x8yKmvlZwXr+OaIh3U59s9hzPhk0TD7u3XA46vabOJ1GBZ9d XkJYMKdCJHCrPwim3OGzqBLIeI+53l2EA4DsKoHvYU3sxEIILJk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:32 2025 by rpki-client