$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: DKjRCZeyE9JZK84ZSZe20e69cHKtw4dulccAkzX5jPs= Subject key identifier: 1A:78:3E:C5:0E:E5:2C:CB:5C:70:A6:43:91:68:66:75:52:0B:18:48 Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 248E8FE7811CC4FAF7D7B2BAC6F3170AB431CBC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 0189 Signing time: Sat 28 Jun 2025 20:21:47 +0000 Manifest this update: Sat 28 Jun 2025 20:16:47 +0000 Manifest next update: Wed 02 Jul 2025 06:13:47 +0000 Files and hashes: 1: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=) 2: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=) 3: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: Qmvi7R9t9bmJKNZR+YsWI4pHrWaNfHm3ueg3M0z/Zcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8e:8f:e7:81:1c:c4:fa:f7:d7:b2:ba:c6:f3:17:0a:b4:31:cb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Jun 28 20:16:47 2025 GMT Not After : Jul 2 06:13:47 2025 GMT Subject: CN=1A783EC50EE52CCB5C70A64391686675520B1848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:36:41:85:5f:09:19:9c:6c:6e:b2:e4:ca: b4:59:8d:8e:e0:e3:01:81:c5:f2:87:6c:0b:33:a1: 97:9a:95:8d:e7:6b:de:18:0c:66:8b:2a:3f:db:6f: 6e:9b:06:36:0e:41:8e:0d:93:99:03:d2:8f:31:15: cf:15:6a:e2:ef:fd:24:b8:4c:e8:df:71:1a:0f:58: e6:46:42:8e:c6:c9:4a:40:5b:96:c4:a5:5b:3c:79: 1a:b1:0c:d6:64:23:b4:c7:ed:dc:b8:32:7f:50:72: bf:c0:93:a9:b7:c4:16:43:a5:5f:06:2d:e8:f6:91: 02:f0:98:35:eb:0b:e5:69:e7:06:89:7b:a5:1d:0c: ff:56:26:7b:eb:24:00:4c:37:09:03:10:69:d7:2b: 30:d5:b5:d6:d2:1c:4a:8f:ba:04:4b:ca:d9:77:31: bd:be:8f:16:66:41:5d:2b:1e:3f:14:77:e6:09:8e: 57:81:b3:84:08:53:17:3d:a0:72:70:61:62:36:41: 5c:ce:21:af:24:43:74:f1:19:f2:12:a6:14:30:22: 02:80:84:72:6a:e3:bf:38:32:12:e5:1b:ee:39:63: b2:0e:75:dc:14:fe:2e:19:1d:0a:e4:49:9a:ce:be: b8:e3:a2:76:ff:99:71:0c:9c:10:ee:00:2c:aa:d6: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:3E:C5:0E:E5:2C:CB:5C:70:A6:43:91:68:66:75:52:0B:18:48 X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c5:95:f0:6f:1e:37:6a:8b:b9:f7:2e:83:3e:39:77:ff:1b: 05:3b:51:8c:91:4b:dd:09:ec:6a:c0:02:64:3c:ac:25:35:5e: 5d:48:f9:64:26:3f:5b:99:0b:af:41:ed:b7:27:c9:5b:ed:e0: de:59:ce:fb:f3:ab:05:3d:7b:e9:ec:c7:fc:25:21:75:d5:67: 31:69:c4:7b:d6:c8:66:2f:b0:fa:e1:70:77:95:52:7d:bf:1a: 15:17:51:57:73:85:ea:ef:f0:b1:43:47:0b:38:66:47:00:35: 93:af:7a:f6:59:17:79:0f:04:03:d6:27:37:10:87:5d:98:37: bd:6f:fa:36:e2:e1:1e:99:76:2c:d0:01:46:a7:8f:0e:4d:5c: 64:79:bd:97:dd:01:53:43:3b:76:2f:75:dd:07:36:62:5d:76: ec:c7:75:af:87:9b:d9:9a:de:c4:34:06:e3:79:4f:36:a0:29: b7:32:af:d6:13:2e:08:da:ad:b2:5d:71:7c:d7:ff:e9:49:0a: 58:c7:a7:b9:d3:ef:da:10:6f:ed:3b:cd:00:96:37:e1:52:8a: af:ab:a7:f5:2e:70:4d:45:44:7b:d5:36:13:30:22:b7:8d:e4: 09:85:1e:a0:9b:62:92:f7:c4:c3:16:04:71:46:75:a8:a6:46: 0d:ae:62:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJI6P54EcxPr317K6xvMXCrQxy8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTA2MjgyMDE2NDdaFw0yNTA3MDIwNjEzNDdaMDMxMTAvBgNV BAMTKDFBNzgzRUM1MEVFNTJDQ0I1QzcwQTY0MzkxNjg2Njc1NTIwQjE4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OjZBhV8JGZxsbrLkyrRZjY7g 4wGBxfKHbAszoZealY3na94YDGaLKj/bb26bBjYOQY4Nk5kD0o8xFc8VauLv/SS4 TOjfcRoPWOZGQo7GyUpAW5bEpVs8eRqxDNZkI7TH7dy4Mn9Qcr/Ak6m3xBZDpV8G Lej2kQLwmDXrC+Vp5waJe6UdDP9WJnvrJABMNwkDEGnXKzDVtdbSHEqPugRLytl3 Mb2+jxZmQV0rHj8Ud+YJjleBs4QIUxc9oHJwYWI2QVzOIa8kQ3TxGfISphQwIgKA hHJq4784MhLlG+45Y7IOddwU/i4ZHQrkSZrOvrjjonb/mXEMnBDuACyq1pXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGng+xQ7lLMtccKZDkWhmdVILGEgwHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjFlfBvHjdqi7n3LoM+OXf/GwU7UYyRS90J 7GrAAmQ8rCU1Xl1I+WQmP1uZC69B7bcnyVvt4N5ZzvvzqwU9e+nsx/wlIXXVZzFp xHvWyGYvsPrhcHeVUn2/GhUXUVdzherv8LFDRws4ZkcANZOvevZZF3kPBAPWJzcQ h12YN71v+jbi4R6ZdizQAUanjw5NXGR5vZfdAVNDO3Yvdd0HNmJdduzHda+Hm9ma 3sQ0BuN5TzagKbcyr9YTLgjarbJdcXzX/+lJCljHp7nT79oQb+07zQCWN+FSiq+r p/UucE1FRHvVNhMwIreN5AmFHqCbYpL3xMMWBHFGdaimRg2uYi8= -----END CERTIFICATE-----Generated at Mon Jun 30 10:48:10 2025 by rpki-client