$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft File: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft (raw, json) Hash identifier: iP3FyUq5p+G4cND04QLbvhpvhpmMwIY08FWjhGM3TBk= Subject key identifier: 51:70:88:BA:35:BE:80:F6:0A:58:F7:3D:52:23:49:F0:DB:5B:D4:FD Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Certificate serial: 2A5B8A2BADCCD48AEFE6B5F6CE3DCDFFE8B75B3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft Manifest number: 0165 Signing time: Tue 03 Jun 2025 13:53:28 +0000 Manifest this update: Tue 03 Jun 2025 13:48:28 +0000 Manifest next update: Fri 06 Jun 2025 17:15:28 +0000 Files and hashes: 1: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: JiNsqLJvEYFIyhrR6R0JR1hrj3KWiaaB75HG9L5QPcg=) 2: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: 6gVzJ3lnoTzbRecAFAnRC8x24kDXXXW3lAWqPBdz2dw=) 3: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: 6N2J2kg+Zlk+0sQHWC1BIhfECV5xjbZiRhQRFmUUNag=) 4: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: 1f4e1XEuXG9su40zHvwmNI+q39l2fKb22IFThBoIE0Y=) 5: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl (hash: ajUFTq1cRT3g9saPZFTbvgGy8Yx/6DQ5qg9ShjO2MzE=) 6: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: Q3xxSdQXC23vXFGFdHyLQV020HZB9BgH6IL3S5vtQAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5b:8a:2b:ad:cc:d4:8a:ef:e6:b5:f6:ce:3d:cd:ff:e8:b7:5b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Validity Not Before: Jun 3 13:48:28 2025 GMT Not After : Jun 6 17:15:28 2025 GMT Subject: CN=517088BA35BE80F60A58F73D522349F0DB5BD4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:30:da:52:2c:69:20:bc:07:07:ae:d8:0e: df:b4:11:6a:35:f7:c1:0c:80:83:0c:64:17:af:95: 9a:e4:c7:9c:76:0c:59:71:bc:34:6a:57:c3:4d:b7: c9:15:28:11:fc:5f:5b:fa:5d:38:88:dd:a3:c0:df: ec:ae:86:8c:38:e6:4c:38:fd:8a:50:1f:77:ab:44: f8:7f:be:a6:36:47:d6:dd:cf:0f:f1:b7:a8:bb:cf: e7:c6:6b:eb:3a:a8:da:5b:2f:c5:ae:84:ed:0b:63: 26:57:59:25:53:2e:ed:de:fc:2b:77:84:6a:d9:5c: 1b:97:81:56:ee:cf:e8:46:66:3d:82:b7:86:e6:b6: 97:27:83:66:45:3d:58:a5:8a:f1:30:ed:bb:6a:c3: b2:02:fb:30:d8:06:36:64:61:96:fd:3c:bd:5c:3d: 45:9d:4e:77:32:d0:67:b8:e0:2f:20:81:b3:5b:9d: c1:cd:a4:a9:d8:a4:24:74:fa:d5:26:fb:aa:24:ec: 61:07:23:fd:04:80:f0:67:35:9f:91:cb:66:78:97: 25:b1:c6:5b:f8:8f:04:81:f5:be:5c:d0:33:2c:25: 65:46:72:d2:b6:67:6b:92:4d:38:3a:20:cc:6f:7e: b8:28:9f:91:8f:95:d9:6e:15:a3:0b:6a:fe:7e:1e: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:70:88:BA:35:BE:80:F6:0A:58:F7:3D:52:23:49:F0:DB:5B:D4:FD X509v3 Authority Key Identifier: keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:69:97:2e:e6:e8:1c:3a:42:c1:dc:eb:08:ff:4b:72:35:d1: db:7e:37:b8:fd:82:f6:35:c9:4a:6e:51:15:5c:a3:c9:b0:d8: 16:85:c0:07:ac:71:da:d9:22:97:ca:6c:ac:ff:55:90:ef:04: a5:5b:40:d7:7b:ff:ef:3c:ad:64:d2:6c:e3:5d:96:ce:b2:f1: 43:43:ab:7d:cc:e9:d4:a7:a8:0a:09:dd:2e:ee:09:31:2f:7f: 93:a6:1c:53:1f:39:7f:30:89:da:b2:6a:6d:4e:78:1e:82:b9: 4b:ec:72:31:09:b1:80:71:de:51:b6:bf:23:5b:0f:43:a2:f9: b8:e9:0f:ef:bb:3f:c1:f1:ab:99:a5:53:4d:3f:93:a9:b4:78: 72:00:c8:5c:66:62:b8:16:74:3e:37:01:95:fa:6e:5c:49:f5: 99:28:3a:bc:88:5b:b2:7d:d5:b4:dd:71:dd:24:ee:d7:ab:c9: e8:f4:00:0b:be:da:bb:13:71:09:76:da:70:47:ae:60:c9:a8: 19:84:1a:9d:dc:05:0b:14:2a:6f:e7:f9:e5:65:ae:39:59:ec: 46:5a:79:08:2b:c8:e0:20:f1:b9:01:37:ec:fb:ad:3a:b3:44: 71:8b:1e:7f:ed:3d:5b:88:d4:85:23:97:4d:0e:4b:c5:ad:d0: d3:0b:49:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKluKK63M1Irv5rX2zj3N/+i3WzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC NTM2OTVGQzAeFw0yNTA2MDMxMzQ4MjhaFw0yNTA2MDYxNzE1MjhaMDMxMTAvBgNV BAMTKDUxNzA4OEJBMzVCRTgwRjYwQTU4RjczRDUyMjM0OUYwREI1QkQ0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCipDDaUixpILwHB67YDt+0EWo1 98EMgIMMZBevlZrkx5x2DFlxvDRqV8NNt8kVKBH8X1v6XTiI3aPA3+yuhow45kw4 /YpQH3erRPh/vqY2R9bdzw/xt6i7z+fGa+s6qNpbL8WuhO0LYyZXWSVTLu3e/Ct3 hGrZXBuXgVbuz+hGZj2Ct4bmtpcng2ZFPVilivEw7btqw7IC+zDYBjZkYZb9PL1c PUWdTncy0Ge44C8ggbNbncHNpKnYpCR0+tUm+6ok7GEHI/0EgPBnNZ+Ry2Z4lyWx xlv4jwSB9b5c0DMsJWVGctK2Z2uSTTg6IMxvfrgon5GPldluFaMLav5+HmrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUXCIujW+gPYKWPc9UiNJ8Ntb1P0wHwYDVR0j BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2 OTVGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4 MDlCNTM2OTVGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJply7m6Bw6QsHc6wj/S3I10dt+N7j9gvY1 yUpuURVco8mw2BaFwAescdrZIpfKbKz/VZDvBKVbQNd7/+88rWTSbONdls6y8UND q33M6dSnqAoJ3S7uCTEvf5OmHFMfOX8widqyam1OeB6CuUvscjEJsYBx3lG2vyNb D0Oi+bjpD++7P8Hxq5mlU00/k6m0eHIAyFxmYrgWdD43AZX6blxJ9ZkoOryIW7J9 1bTdcd0k7teryej0AAu+2rsTcQl22nBHrmDJqBmEGp3cBQsUKm/n+eVlrjlZ7EZa eQgryOAg8bkBN+z7rTqzRHGLHn/tPVuI1IUjl00OS8Wt0NMLScU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:24 2025 by rpki-client