$ rpki-client -vvf repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft File: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft (raw, json) Hash identifier: vL0uVxa2WnHYdpD1ELMwOz7tlUe7U7FJziqdYlPo5bY= Subject key identifier: A4:B3:52:7C:10:D6:B3:44:30:AE:46:92:9A:64:3F:63:A6:9A:A0:0F Authority key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD Certificate issuer: /CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Certificate serial: 68EE8BC13ADF4CA53A711DC000E036A1EDE4D67D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft Manifest number: 04CD Signing time: Thu 08 May 2025 04:51:30 +0000 Manifest this update: Thu 08 May 2025 04:46:30 +0000 Manifest next update: Sun 11 May 2025 15:04:30 +0000 Files and hashes: 1: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: ofyHgVXrs2z0gkAGa3qia1zoofnQRmP85kGC1U8ByOo=) 2: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl (hash: e1juCHs+/pYXZk99BbZvnsJubFG+RrSwy/lUWwCRVqw=) 3: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: F9UE9rnwcKVmOyntgdFNCOZ/vDZrrcDlAHK/h3aRNAE=) 4: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: rGRG4oI6/1ffQYP10IaojPS8L+RUEUapRHZLsSECCd8=) 5: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: pEPx9GlfgVdff970wI4B5m8bQvmaU/OAu7JqFmxVjdc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ee:8b:c1:3a:df:4c:a5:3a:71:1d:c0:00:e0:36:a1:ed:e4:d6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Validity Not Before: May 8 04:46:30 2025 GMT Not After : May 11 15:04:30 2025 GMT Subject: CN=A4B3527C10D6B34430AE46929A643F63A69AA00F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:89:f3:24:60:53:45:52:d4:e4:56:f8:10: e9:73:2c:f4:d4:e1:16:74:30:c7:3c:d0:63:1e:3b: f7:1e:c0:2e:ff:00:0e:6c:0f:4d:8d:86:4b:26:da: 95:66:32:53:d7:89:1b:e0:2f:d5:be:54:10:cb:05: 97:07:08:74:94:7d:dd:ca:1b:2c:e6:f6:8a:18:ac: 70:44:4d:de:8c:33:d1:52:0a:84:0c:3e:fb:13:72: e0:8d:63:34:64:b8:5c:5a:0d:63:59:82:02:61:c0: 0a:59:e3:19:ce:8b:40:72:a5:63:0c:72:fb:69:9d: f5:1b:50:fd:74:63:fe:4d:de:06:84:10:ba:5e:ad: a1:b4:64:e6:9c:05:5c:30:0d:9d:f7:cd:1b:e2:4a: 51:f6:00:d4:68:c5:0d:f9:2e:a3:2b:d5:d3:20:75: 49:cc:e9:7d:b9:f4:4f:30:e9:e7:0c:77:b3:a2:b7: 81:31:c6:62:1d:fe:75:ec:58:8a:f5:eb:0f:8d:8c: c9:f9:05:44:b7:c2:2f:73:fe:34:b6:5a:ac:33:f3: 4f:f3:2e:7e:4a:54:02:48:38:79:c8:ea:2d:ae:72: b9:89:e2:65:51:4e:cd:80:16:01:27:c3:21:95:84: 84:83:30:ea:c2:7d:1f:c7:3f:0c:df:7c:12:ab:a2: 5f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B3:52:7C:10:D6:B3:44:30:AE:46:92:9A:64:3F:63:A6:9A:A0:0F X509v3 Authority Key Identifier: keyid:E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1b:f8:ef:48:a5:8c:19:1d:f4:20:69:be:95:8c:b8:fd:1d: 28:9d:ad:74:3c:a0:e1:8b:e5:fa:68:5a:c2:b7:d1:f3:0d:28: fc:5c:99:39:e5:bd:e0:3e:39:1a:1c:63:30:2a:81:3e:50:cb: 17:5e:bc:7b:ab:2f:b1:0b:1f:bd:e6:c4:95:09:c5:d2:45:62: 5b:b8:10:12:29:a4:97:dd:ba:82:fc:7d:53:b1:0a:ef:2d:de: ab:b2:ce:f9:bf:bf:1f:5f:ab:77:3b:b6:2e:26:b5:03:ff:22: bc:eb:f7:86:ae:99:5c:3e:d2:c8:62:36:19:53:f1:69:6a:ed: dc:28:c6:b7:05:71:c9:3b:0f:e2:a6:92:02:30:08:7b:9a:1a: 35:ee:32:f5:5f:58:59:78:e3:75:f4:b3:39:93:47:f1:28:72: 4c:3e:95:c7:65:9c:5a:fd:6d:32:1a:48:39:ee:88:65:70:b3: 13:ad:d0:09:9e:34:fe:b4:a9:aa:5d:7d:e7:22:87:82:48:17: 9e:25:7a:ac:d0:d9:70:8a:69:01:70:c6:3c:11:e0:cd:6f:c0: f8:fa:25:0d:a4:ce:5c:1c:e8:d6:ae:0c:8f:ee:1e:bb:58:a2: 10:b3:e3:eb:2f:a3:ae:7c:53:d3:87:30:2a:47:6d:8b:1b:60: 7b:cb:ee:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaO6LwTrfTKU6cR3AAOA2oe3k1n0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0Qw MThEMEFERDAeFw0yNTA1MDgwNDQ2MzBaFw0yNTA1MTExNTA0MzBaMDMxMTAvBgNV BAMTKEE0QjM1MjdDMTBENkIzNDQzMEFFNDY5MjlBNjQzRjYzQTY5QUEwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58YnzJGBTRVLU5Fb4EOlzLPTU 4RZ0MMc80GMeO/cewC7/AA5sD02Nhksm2pVmMlPXiRvgL9W+VBDLBZcHCHSUfd3K Gyzm9ooYrHBETd6MM9FSCoQMPvsTcuCNYzRkuFxaDWNZggJhwApZ4xnOi0BypWMM cvtpnfUbUP10Y/5N3gaEELperaG0ZOacBVwwDZ33zRviSlH2ANRoxQ35LqMr1dMg dUnM6X259E8w6ecMd7Oit4ExxmId/nXsWIr16w+NjMn5BUS3wi9z/jS2Wqwz80/z Ln5KVAJIOHnI6i2ucrmJ4mVRTs2AFgEnwyGVhISDMOrCfR/HPwzffBKrol8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpLNSfBDWs0QwrkaSmmQ/Y6aaoA8wHwYDVR0j BBgwFoAU4n8HCyfqsJbis1I/GhrNfQGNCt0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmEwMDJkZS0wY2RlLTQ2MmUtOTQwNC00NmJjNjI3MGUwNGYvMC9FMjdGMDcwQjI3 RUFCMDk2RTJCMzUyM0YxQTFBQ0Q3RDAxOEQwQURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0QwMThE MEFERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhMDAyZGUtMGNkZS00NjJlLTk0 MDQtNDZiYzYyNzBlMDRmLzAvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNE N0QwMThEMEFERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcb+O9IpYwZHfQgab6VjLj9HSidrXQ8oOGL 5fpoWsK30fMNKPxcmTnlveA+ORocYzAqgT5QyxdevHurL7ELH73mxJUJxdJFYlu4 EBIppJfduoL8fVOxCu8t3quyzvm/vx9fq3c7ti4mtQP/Irzr94aumVw+0shiNhlT 8Wlq7dwoxrcFcck7D+KmkgIwCHuaGjXuMvVfWFl443X0szmTR/Eockw+lcdlnFr9 bTIaSDnuiGVwsxOt0AmeNP60qapdfecih4JIF54leqzQ2XCKaQFwxjwR4M1vwPj6 JQ2kzlwc6NauDI/uHrtYohCz4+svo658U9OHMCpHbYsbYHvL7rk= -----END CERTIFICATE-----Generated at Thu May 8 19:18:00 2025 by rpki-client