$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft File: 4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json) Hash identifier: EvuHVfDNb3+SkGO7lI0jux1jhkc3TOMiEfTC36YxZXI= Subject key identifier: A5:C9:16:26:10:0E:D4:00:10:A9:92:11:49:3F:DD:47:5E:55:75:E5 Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 Certificate issuer: /CN=4E27F034334E73C4B659862D683F564DB3AA9069 Certificate serial: 2D8672292C03B3593FC0176EEC23643A272FDAA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft Manifest number: 015D Signing time: Mon 02 Jun 2025 19:00:05 +0000 Manifest this update: Mon 02 Jun 2025 18:55:05 +0000 Manifest next update: Fri 06 Jun 2025 02:14:05 +0000 Files and hashes: 1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: m4Cl3Cj+hVSHNQ4PbjQG0kw7IGqMYQ8eryocatKU0/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 02:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:86:72:29:2c:03:b3:59:3f:c0:17:6e:ec:23:64:3a:27:2f:da:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069 Validity Not Before: Jun 2 18:55:05 2025 GMT Not After : Jun 6 02:14:05 2025 GMT Subject: CN=A5C91626100ED40010A99211493FDD475E5575E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a9:fa:0a:11:fe:cc:0a:fa:4b:33:db:8c:84: be:a6:ba:7a:0f:17:51:24:5b:f0:60:76:46:9f:bd: a5:44:2f:c4:dd:1d:0d:04:7b:dc:3d:16:82:e7:7c: 39:e9:84:c7:07:78:06:b4:b5:f6:11:da:d0:bf:f2: d9:d9:09:1b:2a:46:1e:44:4f:f8:83:68:25:9e:a2: f9:15:51:60:64:34:3c:bf:05:ef:20:75:af:af:cd: ca:33:09:6d:b7:66:a6:e3:74:0f:1d:42:da:b1:03: 27:61:30:75:7c:9f:41:31:c7:19:e2:3a:5e:81:db: f4:00:a9:71:47:f2:f9:14:41:48:17:37:97:3e:63: 9f:e2:6d:bb:3f:5d:fc:2c:dd:79:a8:f6:d0:5c:8d: d0:8b:b7:00:3d:55:28:33:fb:61:41:66:a0:02:b9: fd:ba:a5:43:41:40:a2:9a:7d:ff:84:c9:94:33:a5: e1:8a:36:a1:c4:31:98:05:d0:92:f0:43:00:ff:af: 81:fd:41:bc:3d:c3:0c:b0:8e:29:f4:dd:24:e8:f3: fd:3c:b6:35:57:ea:dc:dc:1b:e0:78:99:cf:1c:a5: 1d:0c:96:bf:69:98:3a:c2:cf:8c:5e:f8:aa:02:49: 0c:af:98:c3:ad:3b:bd:e4:fd:a5:88:33:8a:70:74: 50:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C9:16:26:10:0E:D4:00:10:A9:92:11:49:3F:DD:47:5E:55:75:E5 X509v3 Authority Key Identifier: keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:90:18:66:97:7f:e4:be:56:96:f3:d5:5d:57:2b:96:01:6c: 4d:36:14:b4:a4:4a:60:ac:8a:fb:17:e2:38:7d:24:2b:ee:b0: 15:95:f2:f0:b8:47:a3:c2:70:2a:dd:b4:75:ef:5f:b9:22:d8: 53:85:a6:f3:b4:3a:00:ff:f2:02:8a:98:ac:b7:40:64:29:a5: 60:f1:ae:31:27:80:8e:00:42:29:dd:90:f0:17:e3:1e:07:db: b8:a5:22:b6:e4:53:08:8c:be:fe:df:6b:34:61:14:fe:64:b9: 33:f2:93:2b:63:c7:aa:7f:2b:47:95:08:94:f4:79:a1:96:72: 0e:6f:4c:b3:6a:35:af:13:de:df:76:d8:cd:e0:5d:c2:3f:d2: 7e:eb:7f:1f:25:40:3f:7c:65:78:fe:30:0e:1e:dd:24:fa:11: d4:a2:43:e9:13:bf:2b:d5:6b:4c:74:ea:5d:a4:7f:d5:c2:5f: 10:51:1b:e6:4f:8f:5f:41:47:62:86:69:dd:3a:52:ae:61:e5: 2c:de:99:29:57:5d:6a:6d:80:79:f4:f5:bb:f2:1f:95:57:ec: a6:c1:71:df:c0:0e:a3:e5:f6:f1:e4:ad:4a:3a:3a:9c:9c:bd: 3b:33:80:24:94:ae:8c:12:1d:fd:1b:46:0c:25:ad:c0:ee:25: f5:d8:01:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYZyKSwDs1k/wBdu7CNkOicv2qMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERC M0FBOTA2OTAeFw0yNTA2MDIxODU1MDVaFw0yNTA2MDYwMjE0MDVaMDMxMTAvBgNV BAMTKEE1QzkxNjI2MTAwRUQ0MDAxMEE5OTIxMTQ5M0ZERDQ3NUU1NTc1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUqfoKEf7MCvpLM9uMhL6munoP F1EkW/BgdkafvaVEL8TdHQ0Ee9w9FoLnfDnphMcHeAa0tfYR2tC/8tnZCRsqRh5E T/iDaCWeovkVUWBkNDy/Be8gda+vzcozCW23ZqbjdA8dQtqxAydhMHV8n0Exxxni Ol6B2/QAqXFH8vkUQUgXN5c+Y5/ibbs/Xfws3Xmo9tBcjdCLtwA9VSgz+2FBZqAC uf26pUNBQKKaff+EyZQzpeGKNqHEMZgF0JLwQwD/r4H9Qbw9wwywjin03STo8/08 tjVX6tzcG+B4mc8cpR0Mlr9pmDrCz4xe+KoCSQyvmMOtO73k/aWIM4pwdFBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpckWJhAO1AAQqZIRST/dR15VdeUwHwYDVR0j BBgwFoAUTifwNDNOc8S2WYYtaD9WTbOqkGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTNiNjdlOC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC80RTI3RjAzNDMz NEU3M0M0QjY1OTg2MkQ2ODNGNTY0REIzQUE5MDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERCM0FB OTA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2 NERCM0FBOTA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECQGGaXf+S+Vpbz1V1XK5YBbE02FLSkSmCs ivsX4jh9JCvusBWV8vC4R6PCcCrdtHXvX7ki2FOFpvO0OgD/8gKKmKy3QGQppWDx rjEngI4AQindkPAX4x4H27ilIrbkUwiMvv7fazRhFP5kuTPykytjx6p/K0eVCJT0 eaGWcg5vTLNqNa8T3t922M3gXcI/0n7rfx8lQD98ZXj+MA4e3ST6EdSiQ+kTvyvV a0x06l2kf9XCXxBRG+ZPj19BR2KGad06Uq5h5SzemSlXXWptgHn09bvyH5VX7KbB cd/ADqPl9vHkrUo6OpycvTszgCSUrowSHf0bRgwlrcDuJfXYATQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:09:38 2025 by rpki-client