$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft File: 027DBEC91021154263BB0CF1565833705023D987.mft (raw, json) Hash identifier: Z2P10nRKUN040qvirUXKbEO3kNn+MOLzbUuGTgRxc84= Subject key identifier: 23:E2:E3:0F:DB:71:E6:E1:31:D6:56:98:C2:CF:8D:E8:F4:EE:8C:CB Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987 Certificate serial: 13BABDDAED9DE80C0165E32E7ACAF7F16D8C45B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft Manifest number: 016A Signing time: Mon 30 Jun 2025 12:31:30 +0000 Manifest this update: Mon 30 Jun 2025 12:26:30 +0000 Manifest next update: Thu 03 Jul 2025 16:58:30 +0000 Files and hashes: 1: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: U7L8CMVLZEavXmnK/mp5PFEjMg9cgSL8vuQSoK3hk4M=) 2: 3230322e3136302e3133392e302f32342d3234203d3e20313334363337.roa (hash: yivIGajIGBwCERemZ/qApItbcLMFzhrw+o0muoO7pyo=) 3: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: 2BQG0lP9Zs1EjExB89HW6Zq7y6r/wXETmMZ3S/1VixI=) 4: 027DBEC91021154263BB0CF1565833705023D987.crl (hash: W7+CZ7ud9c+7qUXXacM5aoAqNH37PQ94heXp021Zd24=) 5: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: +8j/+dJRSTef74GymJkmGO/MtwJTWy9qHlKrlCS2oR4=) 6: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: r6mE1hwqe5AJWkOHIz2I388PWuZTnmkeKpmw8+YPM38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 16:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ba:bd:da:ed:9d:e8:0c:01:65:e3:2e:7a:ca:f7:f1:6d:8c:45:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027DBEC91021154263BB0CF1565833705023D987 Validity Not Before: Jun 30 12:26:30 2025 GMT Not After : Jul 3 16:58:30 2025 GMT Subject: CN=23E2E30FDB71E6E131D65698C2CF8DE8F4EE8CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:12:42:3c:23:a2:50:21:ef:fe:a1:4e:5c: 7a:1e:7b:38:e5:4f:08:9a:f5:49:16:cd:30:2b:36: 15:84:59:f9:63:1b:4f:1a:29:ac:02:2b:fc:b0:55: ed:57:70:8f:1f:84:e3:e6:5e:ce:12:42:7f:f9:c0: de:d5:91:2d:7d:4c:56:09:d8:4b:ce:c4:36:31:c3: 28:3e:08:98:ea:23:45:33:8f:61:44:02:0c:e5:58: 87:47:00:1d:49:40:72:92:f9:e8:b6:0d:8e:53:a8: 8d:0b:ca:48:db:4f:13:2d:b0:99:8e:1b:06:71:c8: 2b:b5:d5:20:39:c6:ac:e4:e6:87:7c:89:02:6e:9a: a1:c3:33:cb:c5:a9:d3:e0:f8:fa:8e:5c:b8:3c:1f: e1:fc:4d:dc:30:19:b1:27:29:9e:01:16:05:da:1b: d3:42:5b:60:92:0f:53:02:bf:54:ae:46:43:87:c9: 4d:dd:2b:04:4c:cb:50:92:b7:44:7f:e1:81:aa:40: 05:52:3b:21:16:f2:c4:16:d8:12:eb:8d:0a:60:10: 46:d1:1c:28:cf:c2:2a:70:6c:6e:23:5a:ef:fd:22: 9a:90:b5:2e:5a:f0:c5:73:c4:76:4e:20:31:21:e7: dc:1d:0a:8e:e9:e7:78:ee:aa:4e:5f:11:82:e0:0c: 27:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E2:E3:0F:DB:71:E6:E1:31:D6:56:98:C2:CF:8D:E8:F4:EE:8C:CB X509v3 Authority Key Identifier: keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:37:ed:b8:63:ac:b9:a4:81:f2:f0:72:8d:71:cd:19:ef:08: 6c:41:63:7a:bd:7e:4e:cb:db:32:71:7a:dd:18:60:a7:f1:a9: 7a:c6:43:b1:0e:5c:b7:29:e4:f9:44:b8:0e:77:c3:91:b7:27: d6:73:96:8d:5d:f5:25:0e:aa:8f:dc:4e:bf:d8:fd:13:6a:26: 59:44:ac:09:35:9d:38:2e:c1:0f:39:97:c4:7c:25:43:de:ec: e5:8d:9c:21:1c:bc:47:6b:85:8f:ee:cd:95:5b:c0:ea:9e:f6: 45:fb:37:a2:84:4c:d7:ba:26:0e:8e:36:62:29:aa:6f:91:3c: 29:f5:ec:39:8a:a2:bd:af:f0:07:8c:fe:95:5b:55:64:9f:2c: d2:4f:fe:99:ab:c3:d3:91:74:13:2d:96:1b:01:76:27:47:22: 8a:24:c1:b3:e2:24:f7:ab:de:ac:80:e2:a2:2a:0e:7e:24:8c: fd:72:20:ed:8d:a4:85:94:99:4e:b8:a9:b5:f5:20:3c:56:cc: 55:9b:04:53:82:1b:4d:f8:5c:ee:b9:b8:c9:e1:2c:de:f0:8e: c8:90:01:a8:a8:6c:4b:51:d3:91:b7:95:6e:8c:8f:f5:fd:bd: f7:bd:5f:ab:b6:36:b4:3e:57:f4:1f:86:57:89:e8:2d:ea:be: 37:88:96:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7q92u2d6AwBZeMuesr38W2MRbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1 MDIzRDk4NzAeFw0yNTA2MzAxMjI2MzBaFw0yNTA3MDMxNjU4MzBaMDMxMTAvBgNV BAMTKDIzRTJFMzBGREI3MUU2RTEzMUQ2NTY5OEMyQ0Y4REU4RjRFRThDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrIBJCPCOiUCHv/qFOXHoeezjl Twia9UkWzTArNhWEWfljG08aKawCK/ywVe1XcI8fhOPmXs4SQn/5wN7VkS19TFYJ 2EvOxDYxwyg+CJjqI0Uzj2FEAgzlWIdHAB1JQHKS+ei2DY5TqI0LykjbTxMtsJmO GwZxyCu11SA5xqzk5od8iQJumqHDM8vFqdPg+PqOXLg8H+H8TdwwGbEnKZ4BFgXa G9NCW2CSD1MCv1SuRkOHyU3dKwRMy1CSt0R/4YGqQAVSOyEW8sQW2BLrjQpgEEbR HCjPwipwbG4jWu/9IpqQtS5a8MVzxHZOIDEh59wdCo7p53juqk5fEYLgDCdnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI+LjD9tx5uEx1laYws+N6PTujMswHwYDVR0j BBgwFoAUAn2+yRAhFUJjuwzxVlgzcFAj2YcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMC8wMjdEQkVDOTEw MjExNTQyNjNCQjBDRjE1NjU4MzM3MDUwMjNEOTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1MDIz RDk4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc0ZjIxNGEtYmY1NS00MDQ4LTg0 NWQtMjA2NzVmYjVmMmE0LzAvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMz NzA1MDIzRDk4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFY37bhjrLmkgfLwco1xzRnvCGxBY3q9fk7L 2zJxet0YYKfxqXrGQ7EOXLcp5PlEuA53w5G3J9Zzlo1d9SUOqo/cTr/Y/RNqJllE rAk1nTguwQ85l8R8JUPe7OWNnCEcvEdrhY/uzZVbwOqe9kX7N6KETNe6Jg6ONmIp qm+RPCn17DmKor2v8AeM/pVbVWSfLNJP/pmrw9ORdBMtlhsBdidHIookwbPiJPer 3qyA4qIqDn4kjP1yIO2NpIWUmU64qbX1IDxWzFWbBFOCG034XO65uMnhLN7wjsiQ AaiobEtR05G3lW6Mj/X9vfe9X6u2NrQ+V/QfhleJ6C3qvjeIlgU= -----END CERTIFICATE-----Generated at Tue Jul 1 14:03:22 2025 by rpki-client