$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft File: 4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json) Hash identifier: LHO0ghDfSaIIUyUi4LxMRxaq6NTxE/LNChOzCnOZhv4= Subject key identifier: 9F:F2:DA:27:0A:AA:67:FB:9F:68:2D:D9:FD:46:42:14:59:40:B3:09 Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 Certificate issuer: /CN=4E27F034334E73C4B659862D683F564DB3AA9069 Certificate serial: 3AC227D5C9C57551002C8CC50951C3207AF1ACEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft Manifest number: 0151 Signing time: Tue 06 May 2025 22:40:05 +0000 Manifest this update: Tue 06 May 2025 22:35:05 +0000 Manifest next update: Sat 10 May 2025 05:02:05 +0000 Files and hashes: 1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: OwDE60k4TSOSIZ3L+wOf4ZkCsTTF/nF4iJESvAOl4gs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c2:27:d5:c9:c5:75:51:00:2c:8c:c5:09:51:c3:20:7a:f1:ac:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069 Validity Not Before: May 6 22:35:05 2025 GMT Not After : May 10 05:02:05 2025 GMT Subject: CN=9FF2DA270AAA67FB9F682DD9FD4642145940B309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:d5:5c:b2:2a:90:06:22:58:55:51:f9:a1: 63:7c:a1:27:7e:82:68:ea:24:23:0a:a5:05:34:91: dc:c0:65:14:0b:c8:9c:b2:c5:3e:34:a3:5a:60:34: 9a:9b:34:a7:0f:d7:00:25:4a:1f:16:83:ee:6f:59: a0:99:19:29:c8:14:38:97:31:aa:42:c6:35:2f:9f: e9:61:58:cc:e5:fe:2d:48:b3:20:f4:d0:d2:77:b8: 08:fa:7b:b2:57:49:77:e2:9d:8b:55:50:d0:d6:4d: 99:c2:db:03:d5:09:24:8c:ec:c1:78:22:6e:6c:c6: 28:cd:aa:2a:22:94:9b:69:0e:04:f2:27:53:ab:84: ab:d9:54:f3:76:4b:b9:18:22:1f:4e:7b:74:72:44: 57:7c:6e:8a:2c:47:ee:57:b4:9e:03:60:ad:6c:84: 5e:9f:55:0f:3f:fc:f9:04:3b:00:2b:b4:2b:0a:57: b0:de:b8:db:6d:72:dd:f3:e1:2c:f6:14:27:23:54: 87:1e:aa:85:3d:b3:94:d4:ab:05:88:a0:d6:21:a1: c3:9d:8a:8b:e9:92:95:ba:74:5c:06:19:ab:ef:8c: dc:6c:d4:d4:a0:f6:5c:fa:2d:0b:2e:46:92:55:d2: 3e:ad:d4:e4:bb:5d:e0:36:6f:f1:e2:91:75:c4:c8: 67:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F2:DA:27:0A:AA:67:FB:9F:68:2D:D9:FD:46:42:14:59:40:B3:09 X509v3 Authority Key Identifier: keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2c:dd:77:66:42:0c:12:58:c5:77:70:3c:9a:64:82:ae:16: b9:06:30:35:05:ca:43:04:2c:2c:de:ea:ae:06:cd:56:a6:19: 92:b5:86:58:b7:b3:2a:f5:a9:be:80:6a:13:73:9c:53:33:1f: 86:b4:d8:6a:05:7a:23:e1:6b:b5:6f:3c:97:6e:df:d2:f9:f9: e9:16:ac:ff:d1:dc:53:81:6f:f2:69:4b:22:82:6c:5b:87:a1: 5d:eb:9c:68:a5:f0:c4:da:27:69:75:4c:e7:5a:05:c2:6c:44: 62:17:85:38:bf:a8:a6:00:2e:10:24:cf:7f:ef:d2:7f:9d:58: f5:84:77:cb:6d:75:f9:d4:d5:ce:e6:14:22:a4:66:6e:88:d1: c8:6f:26:ba:90:1b:df:43:d5:3a:50:f4:f8:bc:2b:29:34:25: 59:f2:62:6c:72:a9:4f:66:d6:ab:50:58:c8:be:20:e9:57:75: d5:fc:3c:3b:6d:87:10:1c:73:11:b2:c8:ee:80:7a:77:a0:ff: 8b:a9:8b:3e:e5:51:94:97:36:fd:03:43:0c:4d:72:3b:17:41: c8:e4:e0:07:fc:6f:52:a5:1f:75:de:43:94:2b:1f:32:5b:7d: cf:3a:ea:c4:88:46:c3:ed:b6:6e:9f:95:62:4a:f5:5a:49:b3: 8e:b7:43:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsIn1cnFdVEALIzFCVHDIHrxrO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERC M0FBOTA2OTAeFw0yNTA1MDYyMjM1MDVaFw0yNTA1MTAwNTAyMDVaMDMxMTAvBgNV BAMTKDlGRjJEQTI3MEFBQTY3RkI5RjY4MkREOUZENDY0MjE0NTk0MEIzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXddVcsiqQBiJYVVH5oWN8oSd+ gmjqJCMKpQU0kdzAZRQLyJyyxT40o1pgNJqbNKcP1wAlSh8Wg+5vWaCZGSnIFDiX MapCxjUvn+lhWMzl/i1IsyD00NJ3uAj6e7JXSXfinYtVUNDWTZnC2wPVCSSM7MF4 Im5sxijNqioilJtpDgTyJ1OrhKvZVPN2S7kYIh9Oe3RyRFd8boosR+5XtJ4DYK1s hF6fVQ8//PkEOwArtCsKV7DeuNttct3z4Sz2FCcjVIceqoU9s5TUqwWIoNYhocOd iovpkpW6dFwGGavvjNxs1NSg9lz6LQsuRpJV0j6t1OS7XeA2b/HikXXEyGftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn/LaJwqqZ/ufaC3Z/UZCFFlAswkwHwYDVR0j BBgwFoAUTifwNDNOc8S2WYYtaD9WTbOqkGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTNiNjdlOC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC80RTI3RjAzNDMz NEU3M0M0QjY1OTg2MkQ2ODNGNTY0REIzQUE5MDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2NERCM0FB OTA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzYjY3ZTgtYTk3My00MGZlLWJh MDMtZjk1ZTg2Y2JkYTlmLzAvNEUyN0YwMzQzMzRFNzNDNEI2NTk4NjJENjgzRjU2 NERCM0FBOTA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcs3XdmQgwSWMV3cDyaZIKuFrkGMDUFykME LCze6q4GzVamGZK1hli3syr1qb6AahNznFMzH4a02GoFeiPha7VvPJdu39L5+ekW rP/R3FOBb/JpSyKCbFuHoV3rnGil8MTaJ2l1TOdaBcJsRGIXhTi/qKYALhAkz3/v 0n+dWPWEd8ttdfnU1c7mFCKkZm6I0chvJrqQG99D1TpQ9Pi8Kyk0JVnyYmxyqU9m 1qtQWMi+IOlXddX8PDtthxAccxGyyO6Aeneg/4upiz7lUZSXNv0DQwxNcjsXQcjk 4Af8b1KlH3XeQ5QrHzJbfc866sSIRsPttm6flWJK9VpJs463Q8M= -----END CERTIFICATE-----Generated at Thu May 8 08:06:21 2025 by rpki-client