$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft File: 4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json) Hash identifier: IaHYv0wx4SCvPysT8zicdSj4OdwCLcW/nnvIjZ+t3Yo= Subject key identifier: 72:D2:2B:0C:40:74:0D:FB:F8:95:6F:92:1B:1A:B0:70:2E:D9:05:1B Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 Certificate issuer: /CN=4E27F034334E73C4B659862D683F564DB3AA9069 Certificate serial: 70A9BDF3BDDED2C4FA42F80913F602C0404527B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft Manifest number: 0180 Signing time: Thu 21 Aug 2025 17:30:05 +0000 Manifest this update: Thu 21 Aug 2025 17:25:05 +0000 Manifest next update: Sun 24 Aug 2025 19:21:05 +0000 Files and hashes: 1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: 3MO0hpVYxTHJdWR8wv5fpCgkMbkxMV/p8ozotf9mT94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a9:bd:f3:bd:de:d2:c4:fa:42:f8:09:13:f6:02:c0:40:45:27:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069 Validity Not Before: Aug 21 17:25:05 2025 GMT Not After : Aug 24 19:21:05 2025 GMT Subject: CN=72D22B0C40740DFBF8956F921B1AB0702ED9051B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:52:43:38:e3:fd:0d:06:fd:06:aa:9c:d0:ee: 1d:dd:f6:03:0a:3c:85:49:22:2b:71:b9:4e:5b:ef: b1:cf:96:b8:54:de:ba:7a:0e:20:64:15:59:69:ae: 85:75:80:cf:78:4d:72:fb:fb:8d:e9:cd:3d:7c:0a: cd:df:4a:be:f7:0a:30:3b:8e:22:a7:b3:c1:44:14: a4:5f:ac:12:78:fe:85:a5:0b:eb:20:76:73:b1:d9: fd:d3:da:aa:81:6b:61:d1:c8:ec:38:31:85:45:76: ab:b0:e1:04:d9:89:7c:fd:3c:49:29:00:70:62:d8: 88:d3:65:41:84:a7:65:30:89:d8:dc:73:dd:43:a3: 29:f7:98:72:c1:c6:b5:9d:c5:c3:f0:e7:68:29:3b: c7:b8:47:aa:25:37:e3:05:bf:9f:6d:78:25:ab:7e: 85:f6:eb:b4:e2:d9:f2:c5:11:a7:8a:44:4b:af:80: d7:06:a3:21:8e:eb:2f:eb:28:1f:a4:c8:3d:28:f4: fd:ce:ce:e3:c2:f8:88:71:0a:81:4d:af:9a:ac:0e: 7e:8e:fd:ee:2e:31:ef:12:f0:82:dc:90:93:db:88: 4b:7e:98:9a:42:81:96:53:f9:07:64:fe:23:cd:87: fb:68:2e:f4:60:2f:19:39:5a:6e:98:d4:79:63:3a: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D2:2B:0C:40:74:0D:FB:F8:95:6F:92:1B:1A:B0:70:2E:D9:05:1B X509v3 Authority Key Identifier: keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:fd:35:a7:e6:c8:91:90:be:de:1c:ae:e0:79:52:d9:ec:ee: 93:0f:f0:dd:8e:52:b0:ae:e8:7c:83:38:b6:f5:23:4b:e3:bc: d4:b4:7d:47:60:15:7a:46:9b:55:c2:47:5b:c7:61:a8:b6:80: 3c:1a:f2:b9:90:f7:97:0a:6f:12:5a:df:50:8a:4c:0e:de:e1: 20:1d:1c:08:8e:5a:03:b4:ad:a8:c8:91:65:99:53:3f:a6:96: 51:10:0d:c5:c7:b5:70:02:90:83:1c:fb:c5:9d:2a:b0:e9:1b: 77:94:90:6a:7c:c6:40:a3:d0:a1:0a:e2:55:83:a4:44:e6:cb: 04:be:e4:61:4e:b6:74:22:7b:82:a5:4e:f0:b3:7b:25:8e:0c: 52:a5:43:a1:2d:e6:3d:46:31:87:68:37:87:14:2b:1a:95:dc: b8:3e:b9:3a:b8:ce:aa:08:9e:7f:32:1d:f2:f4:11:bc:78:f1: c4:21:d3:0e:74:bb:63:8f:10:33:df:c8:e0:56:e0:9b:e4:93: 8f:59:c9:a2:f0:f8:03:90:97:41:c9:41:08:02:ad:00:7d:fb: 7d:84:7a:5f:70:84:8d:0a:d3:48:fa:90:2e:28:27:f1:e6:b9: b5:78:41:5c:c1:db:ad:db:30:70:cf:a7:56:82:43:76:e0:88: 84:58:08:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKm9873e0sT6QvgJE/YCwEBFJ7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERC M0FBOTA2OTAeFw0yNTA4MjExNzI1MDVaFw0yNTA4MjQxOTIxMDVaMDMxMTAvBgNV BAMTKDcyRDIyQjBDNDA3NDBERkJGODk1NkY5MjFCMUFCMDcwMkVEOTA1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUkM44/0NBv0GqpzQ7h3d9gMK PIVJIitxuU5b77HPlrhU3rp6DiBkFVlproV1gM94TXL7+43pzT18Cs3fSr73CjA7 jiKns8FEFKRfrBJ4/oWlC+sgdnOx2f3T2qqBa2HRyOw4MYVFdquw4QTZiXz9PEkp AHBi2IjTZUGEp2Uwidjcc91Doyn3mHLBxrWdxcPw52gpO8e4R6olN+MFv59teCWr foX267Ti2fLFEaeKREuvgNcGoyGO6y/rKB+kyD0o9P3OzuPC+IhxCoFNr5qsDn6O /e4uMe8S8ILckJPbiEt+mJpCgZZT+Qdk/iPNh/toLvRgLxk5Wm6Y1HljOr0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUctIrDEB0Dfv4lW+SGxqwcC7ZBRswHwYDVR0j BBgwFoAUTifwNDNOc8S2WYYtaD9WTbOqkGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTNiNjdlOC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC80RTI3RjAzNDMz NEU3M0M0QjY1OTg2MkQ2ODNGNTY0REIzQUE5MDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERCM0FB OTA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2 NERCM0FBOTA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALT9NafmyJGQvt4cruB5Utns7pMP8N2OUrCu 6HyDOLb1I0vjvNS0fUdgFXpGm1XCR1vHYai2gDwa8rmQ95cKbxJa31CKTA7e4SAd HAiOWgO0rajIkWWZUz+mllEQDcXHtXACkIMc+8WdKrDpG3eUkGp8xkCj0KEK4lWD pETmywS+5GFOtnQie4KlTvCzeyWODFKlQ6Et5j1GMYdoN4cUKxqV3Lg+uTq4zqoI nn8yHfL0Ebx48cQh0w50u2OPEDPfyOBW4Jvkk49ZyaLw+AOQl0HJQQgCrQB9+32E el9whI0K00j6kC4oJ/HmubV4QVzB263bMHDPp1aCQ3bgiIRYCNk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:36:19 2025 by rpki-client