$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json) Hash identifier: mJIthoZmLDyxOQx+4aytB7+vR16vP2A00QZvwVsmkwo= Subject key identifier: 2E:05:E6:EC:CC:53:A0:42:2F:C3:33:26:AB:DC:59:11:ED:85:B7:B1 Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Certificate serial: 0C8582AB6169B700D590649ADA162D34D1323B2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft Manifest number: 0132 Signing time: Sat 19 Apr 2025 23:01:17 +0000 Manifest this update: Sat 19 Apr 2025 22:56:17 +0000 Manifest next update: Wed 23 Apr 2025 04:41:17 +0000 Files and hashes: 1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: YQolHtFdrjxyEdAi0ptMJtcO7teGJYhuoxoojGN0XWk=) 2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: 6LXlbR4cNb7e/a5cj5XOa29IvaWvdwclgoGKyPVr99g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 04:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:85:82:ab:61:69:b7:00:d5:90:64:9a:da:16:2d:34:d1:32:3b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Validity Not Before: Apr 19 22:56:17 2025 GMT Not After : Apr 23 04:41:17 2025 GMT Subject: CN=2E05E6ECCC53A0422FC33326ABDC5911ED85B7B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:04:43:b1:db:9a:a3:19:31:87:dd:04:5a:fd: 09:64:87:4a:ef:b4:67:c4:12:79:30:48:8f:1b:d9: c2:42:f6:a7:f0:f7:eb:06:cc:3c:89:ad:b0:ad:89: 7a:fc:51:dc:f9:c5:17:85:41:72:ce:80:c0:c0:dc: f3:a8:c2:25:c4:f0:be:b5:a1:28:95:ff:a8:29:1c: 80:e2:1f:a9:07:6c:06:46:f2:d2:46:99:45:91:62: 81:1d:0d:1d:d1:01:81:6d:0b:60:f0:96:b1:34:5b: 59:fc:a2:20:2a:72:79:0c:a9:d7:0e:78:62:ca:bf: 28:b7:7b:bc:33:d0:b3:64:41:5b:bd:fc:61:21:ab: 47:13:e4:c9:6a:74:2a:0c:00:3b:c9:72:1f:2a:69: 2b:42:72:f3:19:88:fd:d6:8e:c3:d7:9b:a6:68:08: 41:8f:a1:ed:f7:4b:8c:93:52:d2:8e:39:76:b1:ad: 4f:33:22:15:05:37:d0:0e:18:85:0f:e5:6d:8f:08: d9:1f:6a:ef:27:c5:5e:7f:4f:20:4f:02:99:fa:d5: 41:a1:60:0f:b5:6b:b8:3b:c5:5e:8d:3c:de:ea:12: dd:fc:38:6d:a5:06:a3:4a:9c:2d:ad:1a:d5:2b:48: 8b:ff:5f:fb:1c:6e:9b:62:70:8e:c0:fe:f1:f9:69: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:05:E6:EC:CC:53:A0:42:2F:C3:33:26:AB:DC:59:11:ED:85:B7:B1 X509v3 Authority Key Identifier: keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e8:45:19:26:d7:e6:ea:b8:2b:ad:9b:83:a7:e8:31:39:19: 06:95:e6:54:c1:6a:65:e3:10:f7:f6:86:a0:4f:f5:52:67:02: 47:4a:8b:5a:c7:40:03:86:e1:94:96:f6:38:98:a2:a0:10:7d: 65:cb:e1:f8:40:e0:d3:86:9c:40:47:26:0f:10:9d:d4:f8:e4: c6:df:34:7d:6b:b2:6b:5b:4b:20:17:00:47:58:13:00:47:37: 16:92:98:d9:1a:6f:b1:17:91:9e:16:8e:6b:51:cc:ca:8b:24: b8:b2:92:77:dc:3c:2c:1c:a0:f0:8a:fb:3a:39:69:dd:bb:36: 69:b9:3a:15:3a:42:d9:cf:02:04:ad:8b:e5:00:73:60:00:74: 3a:34:fd:7c:80:92:c7:36:c7:2c:fa:84:58:af:4b:c0:6d:ca: b1:e6:a6:c9:19:82:e8:ff:38:03:6f:2f:12:18:87:e1:3b:e3: 80:7f:9c:25:98:96:ba:8e:12:23:47:d4:89:da:fa:71:73:92: 05:28:ea:3b:8a:11:46:ca:5d:36:c2:33:59:af:a1:6a:62:75: 7d:b4:56:27:bb:44:0b:13:5c:b6:23:3a:c1:f8:51:18:2e:cc: 82:39:01:d4:e0:b6:07:a1:6b:0c:8b:be:40:aa:fd:91:9e:6b: 60:37:b0:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDIWCq2FptwDVkGSa2hYtNNEyOy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQy RDEzN0Q1MTAeFw0yNTA0MTkyMjU2MTdaFw0yNTA0MjMwNDQxMTdaMDMxMTAvBgNV BAMTKDJFMDVFNkVDQ0M1M0EwNDIyRkMzMzMyNkFCREM1OTExRUQ4NUI3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZBEOx25qjGTGH3QRa/Qlkh0rv tGfEEnkwSI8b2cJC9qfw9+sGzDyJrbCtiXr8Udz5xReFQXLOgMDA3POowiXE8L61 oSiV/6gpHIDiH6kHbAZG8tJGmUWRYoEdDR3RAYFtC2DwlrE0W1n8oiAqcnkMqdcO eGLKvyi3e7wz0LNkQVu9/GEhq0cT5MlqdCoMADvJch8qaStCcvMZiP3WjsPXm6Zo CEGPoe33S4yTUtKOOXaxrU8zIhUFN9AOGIUP5W2PCNkfau8nxV5/TyBPApn61UGh YA+1a7g7xV6NPN7qEt38OG2lBqNKnC2tGtUrSIv/X/scbpticI7A/vH5aRldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgXm7MxToEIvwzMmq9xZEe2Ft7EwHwYDVR0j BBgwFoAUJ8aohBdkGFGS07fj/G0avS0TfVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMC8yN0M2QTg4NDE3 NjQxODUxOTJEM0I3RTNGQzZEMUFCRDJEMTM3RDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQyRDEz N0Q1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFB QkQyRDEzN0Q1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjoRRkm1+bquCutm4On6DE5GQaV5lTBamXj EPf2hqBP9VJnAkdKi1rHQAOG4ZSW9jiYoqAQfWXL4fhA4NOGnEBHJg8QndT45Mbf NH1rsmtbSyAXAEdYEwBHNxaSmNkab7EXkZ4WjmtRzMqLJLiyknfcPCwcoPCK+zo5 ad27Nmm5OhU6QtnPAgSti+UAc2AAdDo0/XyAksc2xyz6hFivS8BtyrHmpskZguj/ OANvLxIYh+E744B/nCWYlrqOEiNH1Ina+nFzkgUo6juKEUbKXTbCM1mvoWpidX20 Vie7RAsTXLYjOsH4URguzII5AdTgtgehawyLvkCq/ZGea2A3sPA= -----END CERTIFICATE-----Generated at Sun Apr 20 12:17:04 2025 by rpki-client