$ rpki-client -vvf repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft File: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft (raw, json) Hash identifier: RJgblNMXYX3GZVqOsDsEbK/wluBO6HN5Y2DcQQB7nUA= Subject key identifier: 67:2B:EA:F6:F2:51:D4:B0:BA:01:DF:E5:EB:4D:57:B1:F8:67:A6:7E Authority key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD Certificate issuer: /CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Certificate serial: 0E3FE72BE9D396C5F588BB446C892187B92B3773 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft Manifest number: 04E3 Signing time: Fri 27 Jun 2025 13:41:28 +0000 Manifest this update: Fri 27 Jun 2025 13:36:28 +0000 Manifest next update: Tue 01 Jul 2025 00:00:28 +0000 Files and hashes: 1: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: Mn5S3vv0y8H86n0LvhDe7TG0qE+zI4uaMffW/k9fqwM=) 2: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl (hash: 3KxHzoS9FBnYiSq5GseCPdheNZcJPWT5jp+SEUYmHoI=) 3: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: IzC9oagOHS4dTtSBILXnwVll7fkLpQc9RpoCIiKjX8I=) 4: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: miixVejqadzJoJUmMD6XBggcBXEaUqaEEMBzMvAqTNc=) 5: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: 3vA9Os0MWzKrIxrdLvYkOp/ZA589dKUhNYNySSQbRyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3f:e7:2b:e9:d3:96:c5:f5:88:bb:44:6c:89:21:87:b9:2b:37:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Validity Not Before: Jun 27 13:36:28 2025 GMT Not After : Jul 1 00:00:28 2025 GMT Subject: CN=672BEAF6F251D4B0BA01DFE5EB4D57B1F867A67E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:48:af:1a:fd:13:52:b2:74:8a:31:91:ad: 62:f9:5d:08:41:e5:41:d6:46:c6:d1:cf:ec:71:94: 19:fb:90:40:ab:6e:4b:1d:b3:83:0d:b7:35:36:55: 6e:d2:0c:f6:e7:97:99:3a:5e:04:e3:41:4a:58:1c: 39:f9:da:20:13:85:61:5f:96:68:5a:d2:82:39:12: eb:da:2d:ec:a7:ce:3d:43:86:41:fe:33:2b:b1:97: 6e:52:30:45:0a:6d:60:7c:ee:8a:e5:6c:d7:87:4e: af:33:d4:f6:28:71:cd:b4:cc:ea:15:6d:46:3a:5d: 39:7f:e5:c2:8a:31:a5:04:3e:53:23:3e:7f:a1:4a: 82:09:c3:bd:b6:84:39:78:be:5b:10:0e:17:42:04: 87:03:e3:b4:3d:b7:74:41:6c:e9:b1:b6:8a:fb:3c: 81:30:27:d7:99:e9:5a:fc:ad:fa:0b:12:cd:38:7b: b0:49:73:77:dd:94:4e:31:0a:bb:98:5d:b5:62:01: bf:75:a9:e4:21:ff:68:75:13:8b:4e:52:8b:04:b7: 11:82:36:f1:3f:bd:25:88:08:5a:f3:c8:ba:a3:f1: 54:59:89:c8:a0:2f:52:e6:53:76:69:0c:f4:3e:fe: 58:5e:f2:cc:f3:65:c7:a5:69:84:c9:70:9e:80:80: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2B:EA:F6:F2:51:D4:B0:BA:01:DF:E5:EB:4D:57:B1:F8:67:A6:7E X509v3 Authority Key Identifier: keyid:E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:99:47:67:b5:03:f5:fd:56:af:f9:d7:6d:fe:27:6e:4e:82: c3:3e:86:9a:b7:d5:bd:8a:61:f0:74:ca:09:4a:52:33:80:77: 7c:1a:34:65:28:a0:40:c1:fe:a8:44:56:4e:ce:7f:4b:e6:fb: 2b:cf:eb:00:a6:7a:07:19:ce:1d:31:24:4c:11:6b:5f:2f:e2: dd:d0:ce:18:a5:f7:c3:09:5a:a4:52:da:f9:d4:82:03:51:21: ea:20:6c:64:63:ed:7d:24:11:3c:c0:64:f5:b8:69:9a:c2:df: bf:1e:38:8d:55:56:4c:db:da:8e:63:ac:e6:73:c6:3a:8c:9e: 5b:38:9f:b6:a7:c1:00:6b:1d:41:74:19:d6:7c:bd:73:93:03: 0c:30:6a:80:f6:05:3d:72:73:ae:1c:54:c4:8b:e3:f8:48:9e: 3e:d5:e6:68:1f:b2:38:0c:e8:2f:4a:ac:34:b6:7a:c4:6f:af: 71:59:9c:f3:b4:a5:75:93:b0:80:89:06:dd:03:a9:d7:c7:10: 5e:c4:df:e8:78:44:f2:fe:c0:04:5b:e8:c5:32:36:d7:18:7f: 33:8c:28:06:5f:01:cb:4e:fc:46:f6:3e:44:91:6e:cf:4a:fe: 22:65:36:09:4e:38:e0:2a:79:be:3e:71:b3:fe:83:94:73:c5: 1b:03:b3:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDj/nK+nTlsX1iLtEbIkhh7krN3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0Qw MThEMEFERDAeFw0yNTA2MjcxMzM2MjhaFw0yNTA3MDEwMDAwMjhaMDMxMTAvBgNV BAMTKDY3MkJFQUY2RjI1MUQ0QjBCQTAxREZFNUVCNEQ1N0IxRjg2N0E2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBEivGv0TUrJ0ijGRrWL5XQhB 5UHWRsbRz+xxlBn7kECrbksds4MNtzU2VW7SDPbnl5k6XgTjQUpYHDn52iAThWFf lmha0oI5EuvaLeynzj1DhkH+Myuxl25SMEUKbWB87orlbNeHTq8z1PYocc20zOoV bUY6XTl/5cKKMaUEPlMjPn+hSoIJw722hDl4vlsQDhdCBIcD47Q9t3RBbOmxtor7 PIEwJ9eZ6Vr8rfoLEs04e7BJc3fdlE4xCruYXbViAb91qeQh/2h1E4tOUosEtxGC NvE/vSWICFrzyLqj8VRZicigL1LmU3ZpDPQ+/lhe8szzZcelaYTJcJ6AgFrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZyvq9vJR1LC6Ad/l601Xsfhnpn4wHwYDVR0j BBgwFoAU4n8HCyfqsJbis1I/GhrNfQGNCt0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmEwMDJkZS0wY2RlLTQ2MmUtOTQwNC00NmJjNjI3MGUwNGYvMC9FMjdGMDcwQjI3 RUFCMDk2RTJCMzUyM0YxQTFBQ0Q3RDAxOEQwQURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0QwMThE MEFERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhMDAyZGUtMGNkZS00NjJlLTk0 MDQtNDZiYzYyNzBlMDRmLzAvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNE N0QwMThEMEFERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGZR2e1A/X9Vq/5123+J25OgsM+hpq31b2K YfB0yglKUjOAd3waNGUooEDB/qhEVk7Of0vm+yvP6wCmegcZzh0xJEwRa18v4t3Q zhil98MJWqRS2vnUggNRIeogbGRj7X0kETzAZPW4aZrC378eOI1VVkzb2o5jrOZz xjqMnls4n7anwQBrHUF0GdZ8vXOTAwwwaoD2BT1yc64cVMSL4/hInj7V5mgfsjgM 6C9KrDS2esRvr3FZnPO0pXWTsICJBt0DqdfHEF7E3+h4RPL+wARb6MUyNtcYfzOM KAZfActO/Eb2PkSRbs9K/iJlNglOOOAqeb4+cbP+g5RzxRsDs+A= -----END CERTIFICATE-----Generated at Sun Jun 29 19:56:30 2025 by rpki-client