$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft File: 4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json) Hash identifier: OiSAY6u7CkC6grH5tt9vCj7aQQYW7CUnvrlrIa20d38= Subject key identifier: 3D:61:81:2E:1A:96:02:94:72:A3:B0:D1:35:BD:A1:02:1F:8C:2E:95 Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 Certificate issuer: /CN=4E27F034334E73C4B659862D683F564DB3AA9069 Certificate serial: 3CF128B2D9912496E801110576F3D5F8AAB4B8B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft Manifest number: 0169 Signing time: Sun 29 Jun 2025 20:00:06 +0000 Manifest this update: Sun 29 Jun 2025 19:55:06 +0000 Manifest next update: Thu 03 Jul 2025 07:50:06 +0000 Files and hashes: 1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: FjvFxZhnjap6epRGc+7eyZh5jTgsjXMgkbCzLkfw9EU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f1:28:b2:d9:91:24:96:e8:01:11:05:76:f3:d5:f8:aa:b4:b8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069 Validity Not Before: Jun 29 19:55:06 2025 GMT Not After : Jul 3 07:50:06 2025 GMT Subject: CN=3D61812E1A96029472A3B0D135BDA1021F8C2E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4e:9d:d7:b9:ec:60:8f:4d:78:e2:32:d0:87: 22:7a:a9:3b:66:74:58:51:00:93:f0:b9:85:c6:bf: 2a:3f:80:f4:34:03:07:0e:3b:5a:de:d9:14:71:d0: 24:1c:1e:a9:3f:c8:e7:f6:bf:f6:5d:14:6c:cb:c5: d4:30:bc:b5:0b:79:78:31:22:4b:59:ff:ac:a2:d0: a5:37:8b:98:03:06:32:29:7c:7c:9a:ee:e0:65:6c: 28:60:08:20:a6:40:63:0c:a4:9b:bc:71:50:79:40: a1:d2:1c:03:be:9b:12:30:73:b9:f3:96:cf:36:ac: e5:12:ff:ac:74:1a:d2:e1:a1:da:02:cb:94:06:ec: 57:8a:31:af:b5:a2:c9:5b:a8:be:e1:87:73:d4:0d: 6c:57:6c:16:9e:13:79:51:42:e8:bf:ff:2b:84:39: 8b:71:05:81:c2:56:be:1b:1b:04:61:eb:3b:52:bc: bd:5e:7d:79:2f:17:f1:de:6f:d9:5b:4a:81:df:db: 88:d7:bc:10:2b:ea:89:28:22:59:56:e1:23:71:29: 3b:ac:5b:8e:fd:b9:2d:5a:88:5d:c4:b2:33:30:8e: fb:23:0d:b8:f1:18:62:70:fd:b8:91:2d:e1:4e:75: 2a:81:dc:3c:4f:7c:a4:c1:a0:57:ef:73:74:4a:d4: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:61:81:2E:1A:96:02:94:72:A3:B0:D1:35:BD:A1:02:1F:8C:2E:95 X509v3 Authority Key Identifier: keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:3b:56:93:2c:c1:a0:a6:4a:46:d3:15:e3:bd:b3:02:96:92: 2d:de:d5:21:05:32:dd:52:67:09:78:26:b4:34:b8:d0:c2:b0: a5:84:97:65:64:cb:61:5e:59:db:5b:a7:2e:9b:7a:25:fa:3c: a1:25:66:90:46:c4:26:5d:3b:43:03:56:cb:c9:f1:01:89:f5: f1:72:c7:c2:1b:35:b0:47:38:b2:a8:4e:4b:d8:dd:7c:68:d5: e4:d8:38:4c:e6:93:d5:fb:d7:5b:b9:0d:9f:24:68:dd:09:ed: 49:77:be:5b:0e:d3:c7:39:f2:46:38:59:28:56:aa:ba:2f:1b: 0a:7f:e1:c6:56:f9:e3:1a:20:ad:27:a5:c9:23:46:20:ba:92: 9e:6c:5b:cf:53:a3:0b:d3:27:fe:14:89:8a:cc:79:65:ea:40: a1:39:c0:e8:27:39:82:4c:6b:af:8e:38:4b:f7:12:6c:d7:6f: b8:de:27:22:9a:e7:37:c4:38:b3:61:fd:6d:e3:60:af:c5:d2: 74:25:de:e1:6d:20:84:8a:6c:cc:9e:d7:5f:e5:4f:27:87:e2: 3d:60:64:47:98:cb:9d:0b:e1:f8:33:65:64:66:55:27:07:1c: 46:9b:8b:4f:8b:df:a6:ad:43:72:06:be:49:cf:e7:9a:89:a5: 59:d9:16:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPEostmRJJboAREFdvPV+Kq0uLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERC M0FBOTA2OTAeFw0yNTA2MjkxOTU1MDZaFw0yNTA3MDMwNzUwMDZaMDMxMTAvBgNV BAMTKDNENjE4MTJFMUE5NjAyOTQ3MkEzQjBEMTM1QkRBMTAyMUY4QzJFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTp3Xuexgj0144jLQhyJ6qTtm dFhRAJPwuYXGvyo/gPQ0AwcOO1re2RRx0CQcHqk/yOf2v/ZdFGzLxdQwvLULeXgx IktZ/6yi0KU3i5gDBjIpfHya7uBlbChgCCCmQGMMpJu8cVB5QKHSHAO+mxIwc7nz ls82rOUS/6x0GtLhodoCy5QG7FeKMa+1oslbqL7hh3PUDWxXbBaeE3lRQui//yuE OYtxBYHCVr4bGwRh6ztSvL1efXkvF/Heb9lbSoHf24jXvBAr6okoIllW4SNxKTus W479uS1aiF3EsjMwjvsjDbjxGGJw/biRLeFOdSqB3DxPfKTBoFfvc3RK1BDVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPWGBLhqWApRyo7DRNb2hAh+MLpUwHwYDVR0j BBgwFoAUTifwNDNOc8S2WYYtaD9WTbOqkGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTNiNjdlOC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC80RTI3RjAzNDMz NEU3M0M0QjY1OTg2MkQ2ODNGNTY0REIzQUE5MDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERCM0FB OTA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2 NERCM0FBOTA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK07VpMswaCmSkbTFeO9swKWki3e1SEFMt1S Zwl4JrQ0uNDCsKWEl2Vky2FeWdtbpy6beiX6PKElZpBGxCZdO0MDVsvJ8QGJ9fFy x8IbNbBHOLKoTkvY3Xxo1eTYOEzmk9X711u5DZ8kaN0J7Ul3vlsO08c58kY4WShW qrovGwp/4cZW+eMaIK0npckjRiC6kp5sW89TowvTJ/4UiYrMeWXqQKE5wOgnOYJM a6+OOEv3EmzXb7jeJyKa5zfEOLNh/W3jYK/F0nQl3uFtIISKbMye11/lTyeH4j1g ZEeYy50L4fgzZWRmVScHHEabi0+L36atQ3IGvknP55qJpVnZFrQ= -----END CERTIFICATE-----Generated at Mon Jun 30 00:31:49 2025 by rpki-client