$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: qfSl7P5xr8UmtQ5VYVvwFfee2lDug8qVj82qom5AXZo= Subject key identifier: B5:83:64:9B:3F:27:42:AA:85:0D:6E:7F:04:7B:54:F1:6B:E8:99:AA Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 27FDC72E0BF212042C3E23854A1B66D7EEFDF00D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: FC Signing time: Sun 29 Jun 2025 02:10:04 +0000 Manifest this update: Sun 29 Jun 2025 02:05:04 +0000 Manifest next update: Wed 02 Jul 2025 03:31:04 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: Ywn1UEJnpT1UpuAh2VB4UnPn+99/TPlQAq9uS4gdn7I=) 2: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: Cf8zuOBPe5ne4FbCX/nB71vXdpt4+lQ9NgMPpci6uTA=) 3: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: chZgSebYL3AyASorKFgZxAtVxsXGef1bjWlqKc1bcs8=) 4: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: 7N/dqpy7XllJ/lUX6+MQaELCyNXLUFVYd2KjKyfrREM=) 5: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: M98dO/m+ycrBeg1CtOIteFJftV3RCXQ2eLl/At2g8+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:fd:c7:2e:0b:f2:12:04:2c:3e:23:85:4a:1b:66:d7:ee:fd:f0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Jun 29 02:05:04 2025 GMT Not After : Jul 2 03:31:04 2025 GMT Subject: CN=B583649B3F2742AA850D6E7F047B54F16BE899AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9f:53:90:ee:83:b6:c7:9b:bd:b3:93:8c:ee: c0:b1:38:1e:f9:19:b9:77:68:60:6b:2b:5c:48:c9: 31:5e:28:0d:30:7b:5f:9c:6e:a2:4e:4b:37:c9:75: a9:49:0f:ec:ef:e3:6a:b7:61:63:2e:9b:7b:9a:82: c0:02:10:3b:56:fb:a7:4f:6a:b8:c0:9c:87:8a:5e: 50:49:81:46:88:62:44:bb:4c:4a:b5:21:39:b9:87: 7a:a5:db:db:b4:87:bf:35:b2:09:1a:f5:39:88:10: 62:8f:c7:44:a9:43:cd:98:01:1b:a2:b5:e1:60:ff: 30:c3:00:95:de:30:9d:66:0b:49:e7:7a:fe:11:ee: 5d:26:ee:77:9d:3f:e0:45:a6:c9:fe:09:4c:9a:3d: fe:4f:d6:2c:d4:a0:f4:f9:7c:af:45:5e:bf:8b:1e: 58:cf:d8:e9:85:27:45:7f:96:78:4f:c5:1f:d0:0e: 61:17:6c:9e:22:91:d0:0d:d6:c8:2e:25:54:a5:3e: 33:a2:45:85:d3:70:43:1c:db:4d:40:2e:8b:df:94: 56:4c:1c:8c:c5:f6:45:d9:60:63:16:c5:5a:1e:28: a4:be:4c:82:fe:73:3b:c5:d1:6c:36:29:77:af:79: f7:51:d1:50:1a:2e:4c:83:c8:cd:e0:c2:18:20:6e: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:83:64:9B:3F:27:42:AA:85:0D:6E:7F:04:7B:54:F1:6B:E8:99:AA X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:31:2d:ee:49:3b:eb:02:87:b4:59:87:18:ef:d7:04:95:ca: 00:de:91:0d:51:ff:45:7c:d1:d8:41:de:75:c9:4f:7a:fc:10: e7:da:e8:f5:23:a3:e1:9f:7e:5a:45:e6:de:27:6a:34:2a:2c: af:f2:de:ad:43:ef:7e:00:78:dd:12:d3:47:ff:83:a5:bd:77: 22:9e:4d:89:15:c1:de:2f:67:80:c7:6c:cc:39:f8:b5:6d:d6: 6f:3b:25:cd:db:1d:31:58:f5:95:fe:c1:1c:0d:99:61:a0:87: 5e:b3:c1:d8:c4:c6:5b:5e:fe:5b:bf:0e:b2:79:90:b7:e0:9d: d1:6e:4b:1d:7f:a5:4b:62:31:be:35:45:ae:cd:1b:11:b2:f7: 53:07:df:df:df:3c:61:74:22:88:bf:ec:f0:a1:79:41:af:29: 8e:dd:1f:c4:1e:91:17:ee:f8:35:4b:88:66:f2:66:ae:1e:44: 54:7e:34:20:55:7b:bf:0a:fe:cc:1c:56:bb:80:b0:05:ed:03: c9:b6:3c:83:6b:2e:2b:94:4b:7b:20:77:e3:b5:12:42:61:35: 74:4e:fe:91:56:d1:0c:3c:3b:8c:a6:de:c7:cf:0b:b2:d5:06: 24:dc:b0:9d:f5:54:28:31:40:04:ca:40:c2:fb:7b:8b:09:2e: 18:98:dc:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/3HLgvyEgQsPiOFShtm1+798A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTA2MjkwMjA1MDRaFw0yNTA3MDIwMzMxMDRaMDMxMTAvBgNV BAMTKEI1ODM2NDlCM0YyNzQyQUE4NTBENkU3RjA0N0I1NEYxNkJFODk5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNn1OQ7oO2x5u9s5OM7sCxOB75 Gbl3aGBrK1xIyTFeKA0we1+cbqJOSzfJdalJD+zv42q3YWMum3uagsACEDtW+6dP arjAnIeKXlBJgUaIYkS7TEq1ITm5h3ql29u0h781sgka9TmIEGKPx0SpQ82YARui teFg/zDDAJXeMJ1mC0nnev4R7l0m7nedP+BFpsn+CUyaPf5P1izUoPT5fK9FXr+L HljP2OmFJ0V/lnhPxR/QDmEXbJ4ikdAN1sguJVSlPjOiRYXTcEMc201ALovflFZM HIzF9kXZYGMWxVoeKKS+TIL+czvF0Ww2KXevefdR0VAaLkyDyM3gwhggbkeLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtYNkmz8nQqqFDW5/BHtU8WvomaowHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0xLe5JO+sCh7RZhxjv1wSVygDekQ1R/0V8 0dhB3nXJT3r8EOfa6PUjo+GfflpF5t4najQqLK/y3q1D734AeN0S00f/g6W9dyKe TYkVwd4vZ4DHbMw5+LVt1m87Jc3bHTFY9ZX+wRwNmWGgh16zwdjExlte/lu/DrJ5 kLfgndFuSx1/pUtiMb41Ra7NGxGy91MH39/fPGF0Ioi/7PCheUGvKY7dH8QekRfu +DVLiGbyZq4eRFR+NCBVe78K/swcVruAsAXtA8m2PINrLiuUS3sgd+O1EkJhNXRO /pFW0Qw8O4ym3sfPC7LVBiTcsJ31VCgxQATKQML7e4sJLhiY3AI= -----END CERTIFICATE-----Generated at Sun Jun 29 19:12:34 2025 by rpki-client