$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft File: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft (raw, json) Hash identifier: fAHMs9uEh1Mdq4+FijMf0Ar4GfTZ5zx71SvRSyQvshA= Subject key identifier: DA:E3:55:85:FB:1D:E3:F1:2D:9C:4D:4D:D9:DC:52:8C:3F:AB:86:33 Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Certificate serial: 298FB6506733ECBF8F01D345F83ECB18D81930EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft Manifest number: 0150 Signing time: Thu 17 Apr 2025 04:31:14 +0000 Manifest this update: Thu 17 Apr 2025 04:26:14 +0000 Manifest next update: Sun 20 Apr 2025 14:41:14 +0000 Files and hashes: 1: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: 6N2J2kg+Zlk+0sQHWC1BIhfECV5xjbZiRhQRFmUUNag=) 2: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: JiNsqLJvEYFIyhrR6R0JR1hrj3KWiaaB75HG9L5QPcg=) 3: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl (hash: OM4EPCPQg/Yb7V7SG2P+oy7iKkoktR1AnksByCTvzq0=) 4: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: 6gVzJ3lnoTzbRecAFAnRC8x24kDXXXW3lAWqPBdz2dw=) 5: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: 1f4e1XEuXG9su40zHvwmNI+q39l2fKb22IFThBoIE0Y=) 6: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: Q3xxSdQXC23vXFGFdHyLQV020HZB9BgH6IL3S5vtQAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 14:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8f:b6:50:67:33:ec:bf:8f:01:d3:45:f8:3e:cb:18:d8:19:30:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Validity Not Before: Apr 17 04:26:14 2025 GMT Not After : Apr 20 14:41:14 2025 GMT Subject: CN=DAE35585FB1DE3F12D9C4D4DD9DC528C3FAB8633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:ee:90:76:e6:46:c5:44:24:42:cf:9e:01: ce:d4:ea:12:3c:2c:06:7f:7d:35:b8:cd:20:f0:3b: 0a:c4:00:19:24:96:f8:9a:2d:b7:11:f7:1e:93:dc: 19:1e:89:53:4a:e8:0c:95:96:54:0e:04:7e:3a:37: cd:3b:44:8f:a0:95:1e:97:63:cc:6b:a6:51:5f:1d: 85:76:53:90:51:7d:0c:64:e9:7d:10:83:08:8e:25: 22:a0:66:0f:9d:48:bd:31:c4:f0:0a:5d:2b:b8:4b: 3e:86:0a:52:ad:9f:8d:35:60:fb:7d:9a:8f:0c:5c: 21:3b:a2:8d:48:a7:e6:da:8e:3b:05:65:77:47:1f: 86:b5:db:53:a6:28:af:ad:5a:7e:11:8f:93:65:b2: 3b:40:69:50:e5:b1:e9:72:30:37:d5:2f:45:1e:a3: af:e3:da:88:6b:25:c8:cd:1d:f5:e3:ab:37:1d:e5: 01:7e:23:ab:10:91:cf:5a:d0:69:03:59:71:19:e0: f5:82:d3:f6:2c:0e:72:6e:97:d1:ff:ee:b4:88:3b: 48:bc:e8:cb:62:27:d0:ab:f4:1e:7e:a0:00:83:45: ee:97:63:b3:52:d9:a9:11:43:23:13:dc:a6:ae:04: df:16:3e:a8:48:70:b6:df:85:a2:21:24:bb:05:c2: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E3:55:85:FB:1D:E3:F1:2D:9C:4D:4D:D9:DC:52:8C:3F:AB:86:33 X509v3 Authority Key Identifier: keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e5:27:27:14:45:41:af:bf:78:36:7b:20:b4:f9:4e:45:46: 49:f8:ac:19:6b:01:59:d9:83:25:b2:2b:ae:44:c1:f5:d2:26: 95:15:8a:37:71:a0:7e:25:b3:3f:8a:37:59:31:59:07:fb:09: 58:0a:7f:39:7e:99:f6:b8:41:0e:94:15:11:e6:2c:ff:7e:a8: 8c:6e:a9:6a:e2:4a:a9:45:63:84:58:e4:8e:0e:ed:27:f1:47: c2:9f:aa:2d:f1:83:83:64:82:80:48:17:19:a0:7f:6b:7c:b0: 77:98:c9:27:03:7e:50:66:15:be:0a:e7:12:e5:e6:12:90:47: 66:34:2f:68:4c:06:ce:84:33:1a:46:88:e2:e6:bf:91:02:dc: 95:a0:e5:c3:ad:96:e2:72:93:19:82:08:21:ee:dd:c6:f5:84: c2:f4:74:5d:86:2e:a7:a3:e4:ba:98:84:96:84:e0:ad:f7:7f: 43:d0:48:78:7d:58:5d:7d:89:70:39:9e:36:56:1a:54:d4:9c: 25:c3:6c:98:4e:80:8c:54:f7:4c:ab:a7:4d:f1:60:4b:f6:e9: 3c:ae:76:59:37:9e:ea:e3:68:bd:87:e0:9b:1b:91:85:a1:32: 68:3b:30:b6:9c:c9:f5:fc:8c:dc:6b:40:7d:9f:06:ef:bf:62: a4:05:a7:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKY+2UGcz7L+PAdNF+D7LGNgZMO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC NTM2OTVGQzAeFw0yNTA0MTcwNDI2MTRaFw0yNTA0MjAxNDQxMTRaMDMxMTAvBgNV BAMTKERBRTM1NTg1RkIxREUzRjEyRDlDNEQ0REQ5REM1MjhDM0ZBQjg2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmF+6QduZGxUQkQs+eAc7U6hI8 LAZ/fTW4zSDwOwrEABkklviaLbcR9x6T3BkeiVNK6AyVllQOBH46N807RI+glR6X Y8xrplFfHYV2U5BRfQxk6X0QgwiOJSKgZg+dSL0xxPAKXSu4Sz6GClKtn401YPt9 mo8MXCE7oo1Ip+bajjsFZXdHH4a121OmKK+tWn4Rj5NlsjtAaVDlselyMDfVL0Ue o6/j2ohrJcjNHfXjqzcd5QF+I6sQkc9a0GkDWXEZ4PWC0/YsDnJul9H/7rSIO0i8 6MtiJ9Cr9B5+oACDRe6XY7NS2akRQyMT3KauBN8WPqhIcLbfhaIhJLsFwldTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2uNVhfsd4/EtnE1N2dxSjD+rhjMwHwYDVR0j BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2 OTVGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4 MDlCNTM2OTVGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrlJycURUGvv3g2eyC0+U5FRkn4rBlrAVnZ gyWyK65EwfXSJpUVijdxoH4lsz+KN1kxWQf7CVgKfzl+mfa4QQ6UFRHmLP9+qIxu qWriSqlFY4RY5I4O7SfxR8Kfqi3xg4NkgoBIFxmgf2t8sHeYyScDflBmFb4K5xLl 5hKQR2Y0L2hMBs6EMxpGiOLmv5EC3JWg5cOtluJykxmCCCHu3cb1hML0dF2GLqej 5LqYhJaE4K33f0PQSHh9WF19iXA5njZWGlTUnCXDbJhOgIxU90yrp03xYEv26Tyu dlk3nurjaL2H4JsbkYWhMmg7MLacyfX8jNxrQH2fBu+/YqQFpy8= -----END CERTIFICATE-----Generated at Fri Apr 18 04:01:36 2025 by rpki-client