$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: g3laG4pie+kX9Thw/DwnbV5jCpI8nvnXCJzktakvrhI= Subject key identifier: C1:4A:57:9B:3A:B7:AC:11:19:32:34:86:AC:40:8C:BF:6C:26:6C:F1 Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 1825BBF3EAEC211D28ACEAC120410D6E3C13076B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 01A1 Signing time: Thu 05 Jun 2025 19:41:40 +0000 Manifest this update: Thu 05 Jun 2025 19:36:40 +0000 Manifest next update: Sun 08 Jun 2025 23:49:40 +0000 Files and hashes: 1: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: Qxvz6cLTsvkF/5QoPFib9ZcEBwW2jqzLdFAQealXxXU=) 2: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: NHvaYF0FFcqvCOA7BOq/0alUps5TM0LOEH7RPIZBUmo=) 3: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: WQermmKrjmkRkTYr0aG0+hIvHneRLS+rGSH7EGxbhwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 23:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:25:bb:f3:ea:ec:21:1d:28:ac:ea:c1:20:41:0d:6e:3c:13:07:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Jun 5 19:36:40 2025 GMT Not After : Jun 8 23:49:40 2025 GMT Subject: CN=C14A579B3AB7AC1119323486AC408CBF6C266CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:a3:c3:a9:60:f9:1e:5c:db:55:bb:bb:d9: 3e:7d:42:4d:7f:48:1c:51:75:02:79:62:39:11:5c: 7b:bb:21:a0:33:39:de:fa:c7:7c:61:8a:56:32:3d: f8:ef:2a:f1:c7:6b:c6:61:d3:be:73:63:fc:aa:86: a9:b1:bb:43:eb:c1:84:aa:9d:80:e0:63:b4:6e:c3: 7d:8a:98:26:95:00:eb:7a:0d:ce:78:13:3e:27:58: 0f:58:8f:9c:fc:33:7d:a9:b9:66:0a:c3:dc:9f:26: ba:05:9f:36:4c:34:88:1c:86:82:9e:7e:60:f9:0b: d0:45:e2:cc:ed:86:b5:17:fe:62:26:5f:40:15:0e: fb:7d:b6:52:78:cd:ce:30:e8:a8:82:da:8c:f7:3b: 74:46:94:64:24:4e:61:aa:09:c9:91:25:83:02:c5: 1b:36:f7:a4:4d:d8:eb:a3:14:d5:36:c0:09:06:4d: b1:c5:fa:2c:95:25:41:ae:32:3b:d5:5c:29:76:5c: d9:f9:01:87:b7:f9:82:f5:59:cb:a6:66:14:42:b3: f2:eb:01:f6:52:8f:73:12:c7:e6:f6:a0:01:0a:11: b8:9d:37:ed:b7:24:60:11:8e:b8:c9:22:29:40:3d: ce:1a:ff:07:46:07:6a:d6:2f:52:56:83:ad:35:9d: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4A:57:9B:3A:B7:AC:11:19:32:34:86:AC:40:8C:BF:6C:26:6C:F1 X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:58:cd:1e:4e:97:38:19:ab:44:9f:21:63:6f:3e:8a:b3:12: 10:55:f5:6a:ab:21:2f:95:f1:56:f1:0f:fc:f8:84:5b:bb:9d: 22:66:d2:62:45:4f:87:e5:66:48:4e:b4:c1:4e:92:a2:46:3e: 5d:0a:e8:29:cf:ff:1a:93:a9:ea:cf:91:a0:93:04:30:ce:54: 0b:ce:7d:0e:53:1c:b3:44:c1:ef:6d:0b:3f:a8:2a:20:07:9e: f9:8a:21:74:94:e2:6a:ad:0f:e5:03:1a:8f:07:f5:c1:37:da: 80:6d:22:bf:0e:f5:5a:a3:60:60:32:20:99:c8:2a:d2:0e:e9: 7b:51:4b:0d:fc:f2:5c:fa:e5:69:ce:9e:30:07:69:fb:25:c2: 1f:8f:d3:36:52:23:bf:fd:b0:cd:ea:cd:8d:cd:34:2a:1c:dc: e0:48:cf:3d:84:dd:7f:bc:96:2c:7e:bd:66:51:54:9e:63:68: 75:cd:40:64:54:29:47:c4:76:d4:a9:34:cd:7d:2c:fe:ea:12: 64:16:4d:6a:a3:79:62:00:e5:96:b7:e8:fe:f0:50:1b:23:6a: 01:52:e9:4a:82:c1:00:09:86:f1:b2:64:6e:78:be:bf:cd:16: c0:d5:4a:fe:8c:ca:f2:55:08:bd:09:66:4c:3c:86:73:7b:cb: 8d:d0:f2:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGCW78+rsIR0orOrBIEENbjwTB2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNTA2MDUxOTM2NDBaFw0yNTA2MDgyMzQ5NDBaMDMxMTAvBgNV BAMTKEMxNEE1NzlCM0FCN0FDMTExOTMyMzQ4NkFDNDA4Q0JGNkMyNjZDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQaPDqWD5HlzbVbu72T59Qk1/ SBxRdQJ5YjkRXHu7IaAzOd76x3xhilYyPfjvKvHHa8Zh075zY/yqhqmxu0PrwYSq nYDgY7Ruw32KmCaVAOt6Dc54Ez4nWA9Yj5z8M32puWYKw9yfJroFnzZMNIgchoKe fmD5C9BF4szthrUX/mImX0AVDvt9tlJ4zc4w6KiC2oz3O3RGlGQkTmGqCcmRJYMC xRs296RN2OujFNU2wAkGTbHF+iyVJUGuMjvVXCl2XNn5AYe3+YL1WcumZhRCs/Lr AfZSj3MSx+b2oAEKEbidN+23JGARjrjJIilAPc4a/wdGB2rWL1JWg601nbkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwUpXmzq3rBEZMjSGrECMv2wmbPEwHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1YzR5OlzgZq0SfIWNvPoqzEhBV9WqrIS+V 8VbxD/z4hFu7nSJm0mJFT4flZkhOtMFOkqJGPl0K6CnP/xqTqerPkaCTBDDOVAvO fQ5THLNEwe9tCz+oKiAHnvmKIXSU4mqtD+UDGo8H9cE32oBtIr8O9VqjYGAyIJnI KtIO6XtRSw388lz65WnOnjAHafslwh+P0zZSI7/9sM3qzY3NNCoc3OBIzz2E3X+8 lix+vWZRVJ5jaHXNQGRUKUfEdtSpNM19LP7qEmQWTWqjeWIA5Za36P7wUBsjagFS 6UqCwQAJhvGyZG54vr/NFsDVSv6MyvJVCL0JZkw8hnN7y43Q8kM= -----END CERTIFICATE-----Generated at Sat Jun 7 04:21:58 2025 by rpki-client