$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json) Hash identifier: ANS5IlDCjk/oVvNRWS6vgnv6NwF3qRC4W18x4018XCk= Subject key identifier: 32:2D:59:3E:AC:DF:14:98:C2:82:11:DD:13:05:E0:91:BE:2B:1C:E6 Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Certificate serial: 12F68F350219FED214283ED843B37136D388401B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft Manifest number: 0138 Signing time: Sat 03 May 2025 09:11:18 +0000 Manifest this update: Sat 03 May 2025 09:06:18 +0000 Manifest next update: Tue 06 May 2025 16:37:18 +0000 Files and hashes: 1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: q/hpAwnIkpY9D6Z3V6a+xx4XN1V1js60frGRUo5xLDI=) 2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: 6LXlbR4cNb7e/a5cj5XOa29IvaWvdwclgoGKyPVr99g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 16:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f6:8f:35:02:19:fe:d2:14:28:3e:d8:43:b3:71:36:d3:88:40:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Validity Not Before: May 3 09:06:18 2025 GMT Not After : May 6 16:37:18 2025 GMT Subject: CN=322D593EACDF1498C28211DD1305E091BE2B1CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:08:ec:46:20:75:82:eb:0e:33:15:d7:6d:05: 79:33:3d:eb:7d:bf:1c:2e:1e:aa:a8:20:ab:a8:33: 17:3e:40:50:43:4b:9e:1a:cd:9c:ae:c6:c7:33:28: d0:a2:d1:8c:79:9c:58:86:fd:8f:43:c1:39:29:2b: aa:1e:b8:3c:16:2f:ab:7f:e6:4d:15:da:22:1b:dc: a6:75:89:7c:b1:a7:1e:7f:96:86:23:bc:b4:5c:f4: 6e:75:39:ef:f1:6c:eb:a0:10:9d:dd:70:21:be:2c: 9d:59:a8:88:a6:0d:19:79:c4:f1:c5:2e:cf:48:e4: 80:82:18:85:1d:5c:14:23:d7:87:34:c7:b0:ec:bd: a6:76:10:90:d6:b9:df:71:3b:29:a3:7d:45:08:8e: 69:17:43:92:98:e2:c5:67:5c:b3:da:29:3d:9d:fc: 0e:e7:cc:8b:91:64:37:c2:bf:0a:00:39:f3:da:7f: c6:7f:b5:e8:a8:21:61:4d:c1:0e:60:c3:c3:48:d0: 0e:f0:59:c4:78:ef:ba:e0:f4:1f:ef:28:80:fb:c9: 0b:38:5b:87:db:0c:fe:be:d1:d0:ba:b3:2c:fd:93: ce:9a:43:2a:0e:bd:e2:10:df:19:23:17:c2:23:df: 3d:cd:bf:99:4c:51:d6:b8:92:e9:db:0f:b7:32:91: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2D:59:3E:AC:DF:14:98:C2:82:11:DD:13:05:E0:91:BE:2B:1C:E6 X509v3 Authority Key Identifier: keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f8:ea:80:06:cb:41:86:dd:e5:5c:9b:66:f5:fd:f3:8e:83: c4:90:ba:49:10:f6:cb:42:c2:e9:3d:f2:20:d5:28:72:6e:eb: ee:7f:7a:13:47:83:c5:8b:77:fb:09:3d:e9:f3:fd:18:3d:7a: 77:7a:7a:0f:41:32:b2:53:23:3d:51:b8:de:a3:03:34:82:91: fc:52:57:96:12:56:54:b4:3c:17:da:21:87:82:7a:87:17:ff: 6d:1f:95:b7:41:e0:1f:a4:50:4a:a6:51:07:90:54:fa:de:ff: 28:54:c8:22:ac:94:52:c4:a7:a7:23:d4:03:25:d3:59:2b:cc: 7d:0e:d1:10:76:09:20:bd:f3:38:a2:fd:16:50:1e:f6:7f:87: d2:9a:26:f1:70:40:50:4f:20:7d:ef:3e:c7:cf:59:80:e4:34: be:53:16:e9:5b:63:82:d7:86:4e:12:79:e9:24:b7:44:b4:b5: 68:a3:d0:c4:92:b3:6c:3d:33:e2:26:61:2f:e0:2c:37:6d:c3: 07:4a:07:51:ce:8e:c0:76:c3:24:50:9e:68:3e:4d:fd:54:6c: 88:a1:79:bd:d9:32:76:c6:5e:8d:a3:48:f8:26:95:15:53:71: 3d:2d:04:be:15:8a:b4:fb:6e:e9:5d:c8:83:5d:b3:f4:6c:c0: de:7a:c3:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEvaPNQIZ/tIUKD7YQ7NxNtOIQBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQy RDEzN0Q1MTAeFw0yNTA1MDMwOTA2MThaFw0yNTA1MDYxNjM3MThaMDMxMTAvBgNV BAMTKDMyMkQ1OTNFQUNERjE0OThDMjgyMTFERDEzMDVFMDkxQkUyQjFDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCOxGIHWC6w4zFddtBXkzPet9 vxwuHqqoIKuoMxc+QFBDS54azZyuxsczKNCi0Yx5nFiG/Y9DwTkpK6oeuDwWL6t/ 5k0V2iIb3KZ1iXyxpx5/loYjvLRc9G51Oe/xbOugEJ3dcCG+LJ1ZqIimDRl5xPHF Ls9I5ICCGIUdXBQj14c0x7DsvaZ2EJDWud9xOymjfUUIjmkXQ5KY4sVnXLPaKT2d /A7nzIuRZDfCvwoAOfPaf8Z/teioIWFNwQ5gw8NI0A7wWcR477rg9B/vKID7yQs4 W4fbDP6+0dC6syz9k86aQyoOveIQ3xkjF8Ij3z3Nv5lMUda4kunbD7cykR0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMi1ZPqzfFJjCghHdEwXgkb4rHOYwHwYDVR0j BBgwFoAUJ8aohBdkGFGS07fj/G0avS0TfVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMC8yN0M2QTg4NDE3 NjQxODUxOTJEM0I3RTNGQzZEMUFCRDJEMTM3RDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQyRDEz N0Q1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFB QkQyRDEzN0Q1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJf46oAGy0GG3eVcm2b1/fOOg8SQukkQ9stC wuk98iDVKHJu6+5/ehNHg8WLd/sJPenz/Rg9end6eg9BMrJTIz1RuN6jAzSCkfxS V5YSVlS0PBfaIYeCeocX/20flbdB4B+kUEqmUQeQVPre/yhUyCKslFLEp6cj1AMl 01krzH0O0RB2CSC98zii/RZQHvZ/h9KaJvFwQFBPIH3vPsfPWYDkNL5TFulbY4LX hk4Seekkt0S0tWij0MSSs2w9M+ImYS/gLDdtwwdKB1HOjsB2wyRQnmg+Tf1UbIih eb3ZMnbGXo2jSPgmlRVTcT0tBL4VirT7buldyINds/RswN56wyc= -----END CERTIFICATE-----Generated at Tue May 6 15:17:02 2025 by rpki-client