$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft File: 027DBEC91021154263BB0CF1565833705023D987.mft (raw, json) Hash identifier: IwMN8b2XI+nnkW7IfAAGoGqHYeW1sC9VpwL+Z5lUH3g= Subject key identifier: F4:18:A1:CF:64:E1:54:00:E9:1A:06:BA:B8:C8:3C:3C:67:F4:29:79 Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987 Certificate serial: 1BCDED49D34FFB1520EE0F28D0BBC34AF3A573CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft Manifest number: 0153 Signing time: Fri 09 May 2025 11:01:31 +0000 Manifest this update: Fri 09 May 2025 10:56:31 +0000 Manifest next update: Mon 12 May 2025 13:22:31 +0000 Files and hashes: 1: 3230322e3136302e3133392e302f32342d3234203d3e20313334363337.roa (hash: yivIGajIGBwCERemZ/qApItbcLMFzhrw+o0muoO7pyo=) 2: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: 2BQG0lP9Zs1EjExB89HW6Zq7y6r/wXETmMZ3S/1VixI=) 3: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: r6mE1hwqe5AJWkOHIz2I388PWuZTnmkeKpmw8+YPM38=) 4: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: U7L8CMVLZEavXmnK/mp5PFEjMg9cgSL8vuQSoK3hk4M=) 5: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: +8j/+dJRSTef74GymJkmGO/MtwJTWy9qHlKrlCS2oR4=) 6: 027DBEC91021154263BB0CF1565833705023D987.crl (hash: C4/Clic6TQD4HgGXf4vN3nxRiEOD/tBw/Ib498fOnP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 13:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cd:ed:49:d3:4f:fb:15:20:ee:0f:28:d0:bb:c3:4a:f3:a5:73:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027DBEC91021154263BB0CF1565833705023D987 Validity Not Before: May 9 10:56:31 2025 GMT Not After : May 12 13:22:31 2025 GMT Subject: CN=F418A1CF64E15400E91A06BAB8C83C3C67F42979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e5:28:b6:c7:46:52:6a:69:9e:95:7b:ad:99: b3:f8:48:8c:b4:d1:94:1f:0c:b9:ee:7c:26:44:f7: 7c:51:bb:94:43:68:93:42:d0:ef:82:7a:25:fe:bd: 2f:de:43:b1:d2:cb:d3:26:4e:b3:bc:5c:f6:8e:12: 5e:73:aa:49:60:90:93:c7:8c:85:e8:62:70:2c:3b: 8f:39:8d:5f:d2:09:26:58:bc:8a:26:e6:b1:7c:6e: f9:97:d0:1d:fa:0c:d1:69:21:cb:2f:fb:b9:51:e6: 9b:6a:ef:fc:a2:94:db:9b:59:83:3d:39:4c:22:34: d8:e4:17:a1:c1:83:4d:eb:26:a7:eb:32:b1:8e:2e: 54:3f:63:72:81:08:b9:c8:06:54:0a:6c:3a:12:a3: f6:6f:1a:37:23:25:a8:e9:92:5c:de:07:42:86:45: b9:09:2a:8d:22:fa:59:3e:38:fe:59:55:4f:87:68: 6b:d6:75:8e:3a:a6:98:3a:6f:07:53:eb:59:d9:23: f4:06:66:25:bd:90:6f:23:30:a9:0d:80:ad:6d:df: 82:bb:0e:aa:4d:26:ab:48:a3:94:70:51:37:0a:1f: 1b:42:80:e6:f3:a6:11:6f:e5:91:7c:db:07:92:3b: 8e:e5:a6:32:5e:15:1e:de:8c:75:d2:45:42:0b:1d: 90:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:18:A1:CF:64:E1:54:00:E9:1A:06:BA:B8:C8:3C:3C:67:F4:29:79 X509v3 Authority Key Identifier: keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:58:a6:3e:99:69:76:17:eb:a8:b2:10:e6:3b:dd:92:7f:3d: e3:52:d3:8b:8e:36:64:43:15:19:f7:1c:e9:85:34:48:48:0d: e0:5f:aa:4f:06:ba:cd:10:15:5c:5f:a2:fb:56:d6:c3:59:c8: 11:0f:48:c5:84:c7:6d:7f:ee:17:d1:20:d1:6a:5b:c9:65:4d: 79:f9:23:8c:fe:dc:36:65:34:04:5c:5e:f6:55:87:7e:24:af: b2:45:b6:df:b3:1c:be:64:f1:3a:36:68:69:7b:84:97:68:32: 23:6e:41:68:23:b4:9b:42:7b:22:69:24:f5:75:c1:17:30:ae: 5b:90:22:5e:f9:19:21:f5:60:58:7a:c7:1b:ec:1c:5b:8c:d8: 53:a5:8f:79:38:1e:5c:eb:6b:85:a4:45:9b:c7:62:45:fe:59: b3:0e:ce:17:9c:61:d5:aa:8e:25:5b:32:4e:a6:51:85:c8:5a: c3:94:12:6e:0b:0c:98:8f:86:b9:9a:d3:8c:3a:d4:09:cd:16: 2c:48:98:dc:89:21:d7:45:d7:90:61:d2:0f:38:6d:1a:d6:9c: 95:17:de:b2:7a:7f:bb:a2:67:e2:db:b6:16:11:de:33:d3:e1: 75:33:4a:68:3e:1e:d7:ba:3c:f2:c2:39:d9:94:5d:4c:83:0e: 1d:f0:cf:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG83tSdNP+xUg7g8o0LvDSvOlc80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1 MDIzRDk4NzAeFw0yNTA1MDkxMDU2MzFaFw0yNTA1MTIxMzIyMzFaMDMxMTAvBgNV BAMTKEY0MThBMUNGNjRFMTU0MDBFOTFBMDZCQUI4QzgzQzNDNjdGNDI5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5Si2x0ZSammelXutmbP4SIy0 0ZQfDLnufCZE93xRu5RDaJNC0O+CeiX+vS/eQ7HSy9MmTrO8XPaOEl5zqklgkJPH jIXoYnAsO485jV/SCSZYvIom5rF8bvmX0B36DNFpIcsv+7lR5ptq7/yilNubWYM9 OUwiNNjkF6HBg03rJqfrMrGOLlQ/Y3KBCLnIBlQKbDoSo/ZvGjcjJajpklzeB0KG RbkJKo0i+lk+OP5ZVU+HaGvWdY46ppg6bwdT61nZI/QGZiW9kG8jMKkNgK1t34K7 DqpNJqtIo5RwUTcKHxtCgObzphFv5ZF82weSO47lpjJeFR7ejHXSRUILHZD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Bihz2ThVADpGga6uMg8PGf0KXkwHwYDVR0j BBgwFoAUAn2+yRAhFUJjuwzxVlgzcFAj2YcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMC8wMjdEQkVDOTEw MjExNTQyNjNCQjBDRjE1NjU4MzM3MDUwMjNEOTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1MDIz RDk4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc0ZjIxNGEtYmY1NS00MDQ4LTg0 NWQtMjA2NzVmYjVmMmE0LzAvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMz NzA1MDIzRDk4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZYpj6ZaXYX66iyEOY73ZJ/PeNS04uONmRD FRn3HOmFNEhIDeBfqk8Gus0QFVxfovtW1sNZyBEPSMWEx21/7hfRINFqW8llTXn5 I4z+3DZlNARcXvZVh34kr7JFtt+zHL5k8To2aGl7hJdoMiNuQWgjtJtCeyJpJPV1 wRcwrluQIl75GSH1YFh6xxvsHFuM2FOlj3k4Hlzra4WkRZvHYkX+WbMOzhecYdWq jiVbMk6mUYXIWsOUEm4LDJiPhrma04w61AnNFixImNyJIddF15Bh0g84bRrWnJUX 3rJ6f7uiZ+LbthYR3jPT4XUzSmg+Hte6PPLCOdmUXUyDDh3wz5s= -----END CERTIFICATE-----Generated at Sun May 11 12:11:18 2025 by rpki-client