$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft File: 4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json) Hash identifier: tls17pMLClF4cafnM/UQzymruW97CT6e4sM2EB8WFdM= Subject key identifier: 1F:71:95:DE:58:9F:EA:A8:21:DD:40:58:92:2C:68:F9:03:23:48:A4 Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 Certificate issuer: /CN=4E27F034334E73C4B659862D683F564DB3AA9069 Certificate serial: 6B337EFFC7D498CCA0BFC28D6463ED92DDD412E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft Manifest number: 019A Signing time: Sat 18 Oct 2025 16:00:05 +0000 Manifest this update: Sat 18 Oct 2025 15:55:05 +0000 Manifest next update: Tue 21 Oct 2025 23:13:05 +0000 Files and hashes: 1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: ECQyU1DALiqfhI1LhnMNtXLM0qDMRm0O23h6pGXwmzM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:33:7e:ff:c7:d4:98:cc:a0:bf:c2:8d:64:63:ed:92:dd:d4:12:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069 Validity Not Before: Oct 18 15:55:05 2025 GMT Not After : Oct 21 23:13:05 2025 GMT Subject: CN=1F7195DE589FEAA821DD4058922C68F9032348A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:84:cf:d0:5c:81:78:80:93:44:00:26:c3: f5:0a:a3:71:1d:ca:89:6f:fe:a2:80:5d:b7:e3:b2: 34:c1:cb:9a:bb:d6:c3:2f:6a:64:c3:8a:a5:60:49: 3a:7c:a4:05:3e:4a:52:57:1f:e1:dc:1e:9e:c1:59: fd:6b:ac:02:6e:a9:a6:f8:5a:1c:21:06:25:15:bb: 57:77:7d:e3:8b:38:2c:50:8e:a3:12:a7:20:82:03: c4:5d:a1:dc:e4:5b:a0:a9:a4:d5:85:7c:13:ee:55: f2:6a:68:79:8c:71:66:5b:78:c5:f0:d7:d4:94:85: 4d:6f:74:92:21:ae:4d:7b:b0:46:e3:ce:4e:7c:28: ef:12:ce:56:eb:be:d1:97:f2:24:e8:96:2b:b6:24: ec:44:2d:cf:81:e4:62:a9:ea:e5:61:a2:18:5d:22: 7f:b7:2d:fb:1f:f9:4b:8c:c5:b2:66:d7:50:5d:94: fc:67:91:62:76:72:18:10:86:72:62:d1:c8:6d:b3: be:cb:c0:7e:47:1f:cf:9c:c7:80:99:50:00:bd:f3: 32:57:2f:56:fb:13:b2:be:3a:ce:98:62:92:74:b6: 4e:3d:de:1c:59:e7:bb:49:1d:fa:be:5c:93:9e:d9: 2b:35:42:18:88:b3:47:51:4d:3d:1b:e2:32:7e:1c: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:71:95:DE:58:9F:EA:A8:21:DD:40:58:92:2C:68:F9:03:23:48:A4 X509v3 Authority Key Identifier: keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:1e:39:0c:a5:bf:e8:57:a2:a8:4c:bc:80:5b:cc:72:70:50: 5c:ad:1b:7a:7d:40:dd:85:56:e6:d4:a4:99:1a:dc:c9:4b:d6: 7f:49:9f:89:42:ae:05:a4:af:c8:6f:0c:57:f9:f3:66:f2:3d: db:ed:51:4a:0d:dc:fb:ad:02:11:d5:c9:ff:d6:50:33:80:b4: 14:63:3b:f5:17:c7:3e:07:e4:f0:c4:3d:15:24:55:c6:1c:e3: 26:0b:f6:06:c4:61:3b:f3:d2:f2:e3:fe:34:31:30:32:61:3e: 23:b4:03:84:e8:06:d8:70:f2:64:ca:81:a0:a0:26:1f:c1:d8: b0:dc:05:a6:1f:40:fe:5a:20:b4:7b:10:cc:9b:12:e3:53:cc: f4:cc:dd:0a:e9:d4:63:28:5a:0d:72:ea:1f:2e:37:72:63:9d: 67:e6:ea:b9:62:4b:0a:98:7a:e2:91:c5:4f:c2:e1:6c:7b:78: e3:9b:95:68:d0:da:86:0c:bd:c5:2d:0a:a8:f7:7e:88:17:83: 1a:29:32:d6:3e:96:4a:4d:c0:9f:9b:90:b0:b1:3f:d7:7e:7e: 32:20:d6:d4:53:6e:78:75:b3:e6:98:f8:98:3e:58:0c:d0:70: d5:6f:2d:ab:7a:78:4a:f7:32:74:25:0b:50:67:29:ff:a0:7a: 7b:c4:93:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUazN+/8fUmMygv8KNZGPtkt3UEuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERC M0FBOTA2OTAeFw0yNTEwMTgxNTU1MDVaFw0yNTEwMjEyMzEzMDVaMDMxMTAvBgNV BAMTKDFGNzE5NURFNTg5RkVBQTgyMURENDA1ODkyMkM2OEY5MDMyMzQ4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSoYTP0FyBeICTRAAmw/UKo3Ed yolv/qKAXbfjsjTBy5q71sMvamTDiqVgSTp8pAU+SlJXH+HcHp7BWf1rrAJuqab4 WhwhBiUVu1d3feOLOCxQjqMSpyCCA8RdodzkW6CppNWFfBPuVfJqaHmMcWZbeMXw 19SUhU1vdJIhrk17sEbjzk58KO8SzlbrvtGX8iToliu2JOxELc+B5GKp6uVhohhd In+3Lfsf+UuMxbJm11BdlPxnkWJ2chgQhnJi0chts77LwH5HH8+cx4CZUAC98zJX L1b7E7K+Os6YYpJ0tk493hxZ57tJHfq+XJOe2Ss1QhiIs0dRTT0b4jJ+HJWzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH3GV3lif6qgh3UBYkixo+QMjSKQwHwYDVR0j BBgwFoAUTifwNDNOc8S2WYYtaD9WTbOqkGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTNiNjdlOC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC80RTI3RjAzNDMz NEU3M0M0QjY1OTg2MkQ2ODNGNTY0REIzQUE5MDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERCM0FB OTA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2 NERCM0FBOTA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALceOQylv+hXoqhMvIBbzHJwUFytG3p9QN2F VubUpJka3MlL1n9Jn4lCrgWkr8hvDFf582byPdvtUUoN3PutAhHVyf/WUDOAtBRj O/UXxz4H5PDEPRUkVcYc4yYL9gbEYTvz0vLj/jQxMDJhPiO0A4ToBthw8mTKgaCg Jh/B2LDcBaYfQP5aILR7EMybEuNTzPTM3Qrp1GMoWg1y6h8uN3JjnWfm6rliSwqY euKRxU/C4Wx7eOOblWjQ2oYMvcUtCqj3fogXgxopMtY+lkpNwJ+bkLCxP9d+fjIg 1tRTbnh1s+aY+Jg+WAzQcNVvLat6eEr3MnQlC1BnKf+genvEk+c= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:36 2025 by rpki-client