$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft File: 4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json) Hash identifier: TnMR5ESKaGNR2HvtD1mFakBaGoBIEDAtIoOiMw9KWD0= Subject key identifier: 0E:CA:3E:E4:EB:DA:AB:01:0A:4A:09:5B:61:80:DA:E6:AA:0A:0A:4D Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 Certificate issuer: /CN=4E27F034334E73C4B659862D683F564DB3AA9069 Certificate serial: 6A6624E8B9AC9487740985D0915FD92974F7FC4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft Manifest number: 0143 Signing time: Sat 05 Apr 2025 16:20:04 +0000 Manifest this update: Sat 05 Apr 2025 16:15:04 +0000 Manifest next update: Tue 08 Apr 2025 23:00:04 +0000 Files and hashes: 1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: dqEeo8cLiVaQmd8fQoXQivVUyyjF9+3jrs4wavubrWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:66:24:e8:b9:ac:94:87:74:09:85:d0:91:5f:d9:29:74:f7:fc:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069 Validity Not Before: Apr 5 16:15:04 2025 GMT Not After : Apr 8 23:00:04 2025 GMT Subject: CN=0ECA3EE4EBDAAB010A4A095B6180DAE6AA0A0A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:db:33:a0:56:58:68:b7:37:a2:15:99:c3: 4c:77:9e:4e:ce:ff:c8:06:ed:b0:08:ec:1c:d1:dd: f5:ed:12:96:c7:92:ea:71:d4:4c:1e:1e:0b:77:e9: f3:2f:a1:8a:5d:d8:e0:52:a4:42:37:80:6f:44:72: 9c:71:dc:95:63:c6:94:8b:cf:68:80:25:c5:00:04: f4:e4:19:b0:08:e7:24:27:7b:ac:b1:6f:02:c5:28: 05:84:35:74:3b:46:98:b1:21:8a:aa:64:86:c9:32: 87:19:91:75:45:0a:c9:62:a8:28:f3:78:ae:9e:a0: 09:59:91:4a:cf:02:8c:71:d3:29:01:ad:44:66:99: 45:ba:1e:7d:96:e1:da:05:14:48:52:68:4a:d6:8a: fc:24:57:5a:d1:08:df:d0:9d:fb:02:79:b9:47:a9: 19:93:2a:23:13:1e:23:e1:bf:17:4f:69:02:7d:26: ab:ec:62:b3:b8:1d:ff:55:93:b1:99:57:3d:fc:31: d8:3f:cc:2d:e3:87:ae:0b:5b:0e:8f:6f:1b:0c:c5: f4:92:f2:3e:a7:7e:a5:fe:12:c6:b6:bf:32:ed:84: 09:a1:85:29:3e:fd:48:38:a4:0d:2b:82:29:33:ec: 78:ee:d9:84:82:e2:50:eb:7f:16:bf:a8:48:f2:cb: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CA:3E:E4:EB:DA:AB:01:0A:4A:09:5B:61:80:DA:E6:AA:0A:0A:4D X509v3 Authority Key Identifier: keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:82:b2:4c:25:0f:de:9f:1c:b8:1f:3a:9e:09:36:8d:31:f0: 2f:d8:eb:77:da:e6:6c:ff:82:c3:1b:d4:ce:fa:fb:15:de:27: 19:9f:37:fc:d2:ed:52:71:1a:91:f8:8a:0f:ad:42:3d:3a:7e: 1d:05:4f:53:49:e2:11:6a:29:1c:5e:3d:b1:3a:4a:62:ab:48: 59:44:38:7c:97:6f:38:b9:34:30:37:e4:9d:04:ed:23:b5:1e: 54:18:c4:71:38:b2:a6:82:4e:72:c4:1e:ae:67:f9:d6:26:e1: ff:d2:13:d7:5d:9c:f3:7c:76:b8:9b:bf:8e:c4:b7:78:27:f5: 36:a6:ed:13:fe:3a:2f:37:2d:75:df:8b:bf:5f:7e:53:59:47: 21:7b:65:fb:ea:02:8e:41:97:c6:21:e3:1e:ac:f4:fb:6b:ce: 16:ee:1a:a7:07:a5:7c:26:09:dd:54:5a:5f:f9:49:6e:c6:aa: ca:07:e8:2f:64:9b:f9:3d:dd:c8:8c:4d:87:9e:3d:5f:00:7f: 41:03:3e:8f:1e:0f:73:c1:94:88:79:40:8b:e7:7a:02:78:66: 50:e4:09:c5:9c:71:a3:18:13:d8:ae:bf:b2:04:11:19:ee:e8: fd:3c:fb:23:f9:fe:45:08:cb:89:37:82:4b:28:eb:2b:fa:fd: 4e:8e:fd:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamYk6LmslId0CYXQkV/ZKXT3/E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERC M0FBOTA2OTAeFw0yNTA0MDUxNjE1MDRaFw0yNTA0MDgyMzAwMDRaMDMxMTAvBgNV BAMTKDBFQ0EzRUU0RUJEQUFCMDEwQTRBMDk1QjYxODBEQUU2QUEwQTBBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSsNszoFZYaLc3ohWZw0x3nk7O /8gG7bAI7BzR3fXtEpbHkupx1EweHgt36fMvoYpd2OBSpEI3gG9Ecpxx3JVjxpSL z2iAJcUABPTkGbAI5yQne6yxbwLFKAWENXQ7RpixIYqqZIbJMocZkXVFCsliqCjz eK6eoAlZkUrPAoxx0ykBrURmmUW6Hn2W4doFFEhSaErWivwkV1rRCN/QnfsCeblH qRmTKiMTHiPhvxdPaQJ9JqvsYrO4Hf9Vk7GZVz38Mdg/zC3jh64LWw6PbxsMxfSS 8j6nfqX+Esa2vzLthAmhhSk+/Ug4pA0rgikz7Hju2YSC4lDrfxa/qEjyy/HTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDso+5OvaqwEKSglbYYDa5qoKCk0wHwYDVR0j BBgwFoAUTifwNDNOc8S2WYYtaD9WTbOqkGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTNiNjdlOC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC80RTI3RjAzNDMz NEU3M0M0QjY1OTg2MkQ2ODNGNTY0REIzQUE5MDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERCM0FB OTA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2 NERCM0FBOTA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCCskwlD96fHLgfOp4JNo0x8C/Y63fa5mz/ gsMb1M76+xXeJxmfN/zS7VJxGpH4ig+tQj06fh0FT1NJ4hFqKRxePbE6SmKrSFlE OHyXbzi5NDA35J0E7SO1HlQYxHE4sqaCTnLEHq5n+dYm4f/SE9ddnPN8dribv47E t3gn9Tam7RP+Oi83LXXfi79fflNZRyF7ZfvqAo5Bl8Yh4x6s9PtrzhbuGqcHpXwm Cd1UWl/5SW7GqsoH6C9km/k93ciMTYeePV8Af0EDPo8eD3PBlIh5QIvnegJ4ZlDk CcWccaMYE9iuv7IEERnu6P08+yP5/kUIy4k3gkso6yv6/U6O/dU= -----END CERTIFICATE-----Generated at Sun Apr 6 03:11:26 2025 by rpki-client