$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: VpHI/HIoaOiRNdCLQjVFC4O7FJi7L77gtXu7vE7GXVA= Subject key identifier: EF:CC:B2:89:B9:32:03:23:0E:F8:9E:68:F0:5B:8C:C5:60:EC:EE:B7 Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 389F2B2BA3AC6CA13D36521DCC4B26B18DB9A940 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: E4 Signing time: Tue 06 May 2025 11:10:04 +0000 Manifest this update: Tue 06 May 2025 11:05:04 +0000 Manifest next update: Fri 09 May 2025 19:35:04 +0000 Files and hashes: 1: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: Cf8zuOBPe5ne4FbCX/nB71vXdpt4+lQ9NgMPpci6uTA=) 2: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: Ywn1UEJnpT1UpuAh2VB4UnPn+99/TPlQAq9uS4gdn7I=) 3: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: +ASkQ2REs3G92Cz9H6lP8vM63x//o8RYxGHPP8Mqyp8=) 4: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: chZgSebYL3AyASorKFgZxAtVxsXGef1bjWlqKc1bcs8=) 5: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: M98dO/m+ycrBeg1CtOIteFJftV3RCXQ2eLl/At2g8+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 19:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9f:2b:2b:a3:ac:6c:a1:3d:36:52:1d:cc:4b:26:b1:8d:b9:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: May 6 11:05:04 2025 GMT Not After : May 9 19:35:04 2025 GMT Subject: CN=EFCCB289B93203230EF89E68F05B8CC560ECEEB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7d:50:ab:e4:12:05:5b:e0:30:07:64:12:02: 0e:6b:c4:77:61:38:53:11:53:08:75:5d:75:df:d6: 12:0b:29:53:32:f7:a4:e6:95:99:c1:8e:ef:92:bd: 3b:75:2c:55:99:a3:3e:d6:1e:e8:52:bd:f3:cf:a8: 34:2c:c8:b9:f6:f5:da:31:b7:83:b5:c7:8b:76:f5: 79:f5:12:94:98:8a:ea:70:67:e3:b0:8c:51:b7:fc: ae:3f:b7:10:da:92:e9:9e:9f:a1:d0:f3:61:da:6d: 16:e5:d1:72:ec:ec:37:7c:99:73:5f:b3:20:fd:6d: 0b:7b:7b:73:14:7c:ff:eb:4d:47:57:7a:4b:4a:d6: 51:b8:ce:69:97:e5:23:f4:6d:88:3c:eb:9a:5b:7c: 24:78:df:c7:d4:8b:6f:37:1c:0a:41:ba:68:f6:00: f5:f6:9c:ce:32:6f:4b:6f:6b:94:d8:1d:01:01:b5: 9e:af:3a:b9:34:64:fd:e4:25:46:89:32:d7:9d:27: c1:5c:48:da:c6:10:ff:02:47:a3:af:69:fe:c3:8d: 01:5e:f5:c7:e2:30:f1:19:cf:94:60:ea:be:2b:6f: d9:cd:19:53:db:d1:92:95:6c:97:29:ce:0b:8a:5e: 02:f7:a1:91:b3:9b:cc:ab:e3:16:ae:f9:30:18:10: 01:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CC:B2:89:B9:32:03:23:0E:F8:9E:68:F0:5B:8C:C5:60:EC:EE:B7 X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8f:68:53:52:99:15:3e:98:31:e4:38:b3:e0:86:8d:dc:ab: 42:f9:92:ef:d0:6f:06:b8:88:0d:bf:ad:6a:d0:47:56:b3:29: 54:be:b5:4d:82:44:83:80:2f:b3:b8:75:8c:94:e9:a2:84:f0: bd:2c:01:2e:ed:1d:e3:f7:e1:d9:ed:11:3d:d9:91:d7:1c:ed: 31:d6:53:cf:28:ba:61:9e:8f:32:cd:ac:46:5c:aa:57:40:3a: 79:ab:98:bf:e7:e1:74:77:36:b3:a9:9e:4a:50:75:a9:c3:0b: d6:e3:56:85:36:f3:64:19:16:db:44:c4:37:2b:5b:2c:0f:db: b3:66:ab:69:1a:af:e7:b7:15:a8:4a:f7:27:cc:d3:fd:fe:34: cd:ac:65:80:d2:f7:80:cf:67:bf:e2:d2:98:65:aa:f1:d7:10: 50:69:97:85:57:71:95:62:29:1d:ae:a0:12:61:fa:e3:62:08: a4:7d:67:c7:17:5f:ca:76:81:e4:5b:d9:7c:4c:66:f3:0f:67: 69:d9:25:98:21:9e:87:88:db:cf:85:eb:cc:c5:a9:e3:c3:f6: da:83:c8:f5:2a:ed:98:fb:94:44:60:e0:14:18:d3:3e:e4:f9: 6e:77:3b:9e:9d:d7:c7:f1:f3:14:6f:b2:ca:09:b5:a5:00:c7: 4e:3c:af:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJ8rK6OsbKE9NlIdzEsmsY25qUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTA1MDYxMTA1MDRaFw0yNTA1MDkxOTM1MDRaMDMxMTAvBgNV BAMTKEVGQ0NCMjg5QjkzMjAzMjMwRUY4OUU2OEYwNUI4Q0M1NjBFQ0VFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdfVCr5BIFW+AwB2QSAg5rxHdh OFMRUwh1XXXf1hILKVMy96TmlZnBju+SvTt1LFWZoz7WHuhSvfPPqDQsyLn29dox t4O1x4t29Xn1EpSYiupwZ+OwjFG3/K4/txDakumen6HQ82HabRbl0XLs7Dd8mXNf syD9bQt7e3MUfP/rTUdXektK1lG4zmmX5SP0bYg865pbfCR438fUi283HApBumj2 APX2nM4yb0tva5TYHQEBtZ6vOrk0ZP3kJUaJMtedJ8FcSNrGEP8CR6Ovaf7DjQFe 9cfiMPEZz5Rg6r4rb9nNGVPb0ZKVbJcpzguKXgL3oZGzm8yr4xau+TAYEAGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU78yyibkyAyMO+J5o8FuMxWDs7rcwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOPaFNSmRU+mDHkOLPgho3cq0L5ku/Qbwa4 iA2/rWrQR1azKVS+tU2CRIOAL7O4dYyU6aKE8L0sAS7tHeP34dntET3Zkdcc7THW U88oumGejzLNrEZcqldAOnmrmL/n4XR3NrOpnkpQdanDC9bjVoU282QZFttExDcr WywP27Nmq2kar+e3FahK9yfM0/3+NM2sZYDS94DPZ7/i0phlqvHXEFBpl4VXcZVi KR2uoBJh+uNiCKR9Z8cXX8p2geRb2XxMZvMPZ2nZJZghnoeI28+F68zFqePD9tqD yPUq7Zj7lERg4BQY0z7k+W53O56d18fx8xRvssoJtaUAx048r+8= -----END CERTIFICATE-----Generated at Thu May 8 06:30:37 2025 by rpki-client