$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: 00H/4VyeGUzvM96NWLeZwovm+Kjunb1IkDZSR88vMqA= Subject key identifier: 14:10:39:2C:65:48:40:01:F6:8C:1B:D8:FB:FC:91:A7:19:2D:3C:7A Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 5ACE1D0561F475350B5250AA5C952E28913699E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 01C4 Signing time: Fri 22 Aug 2025 22:31:32 +0000 Manifest this update: Fri 22 Aug 2025 22:26:32 +0000 Manifest next update: Tue 26 Aug 2025 04:08:32 +0000 Files and hashes: 1: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: WQermmKrjmkRkTYr0aG0+hIvHneRLS+rGSH7EGxbhwM=) 2: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: Qxvz6cLTsvkF/5QoPFib9ZcEBwW2jqzLdFAQealXxXU=) 3: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: aQ+bjBqPdR8nUnfuXDEa7Nai2NlBEaUQ8i0IDHS6Sr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ce:1d:05:61:f4:75:35:0b:52:50:aa:5c:95:2e:28:91:36:99:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Aug 22 22:26:32 2025 GMT Not After : Aug 26 04:08:32 2025 GMT Subject: CN=1410392C65484001F68C1BD8FBFC91A7192D3C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:df:49:49:be:31:d2:94:c8:38:c2:06:40: fb:c2:b0:1d:ff:cb:53:12:2d:f3:e3:cf:b9:cb:94: 5a:17:f6:9e:87:18:b9:3c:f1:da:df:86:70:25:16: 45:a8:ab:af:cc:93:9c:53:d8:fd:a6:59:25:68:04: e1:d7:0c:b2:eb:28:55:0e:42:c9:5e:2c:ac:ce:fa: 93:d3:b3:97:32:89:df:75:af:2c:6c:4f:75:59:73: 78:b4:41:90:63:07:27:59:7f:3d:37:42:c7:1c:5c: d8:e1:9d:c1:0c:32:56:1c:4e:20:61:ca:91:b5:18: 5b:c2:ce:5c:a9:c7:24:d8:d0:87:f7:10:93:6b:bd: 11:a4:b5:b0:6e:d5:f9:a9:fe:1d:9f:7d:55:a0:ed: 9e:63:2c:43:f4:7d:5b:4a:d2:56:20:36:cf:f4:19: fe:2c:b8:cb:33:5a:61:bc:92:7c:df:1c:6e:eb:e1: 74:e4:d8:f4:5c:5d:b6:0d:ca:30:dd:41:f2:ca:cd: 0b:8c:2c:70:30:f5:fb:0d:65:20:4c:90:95:ab:6b: 52:b7:da:2b:ab:74:92:53:9c:66:ed:33:d3:a5:b7: de:ad:cf:38:e2:54:7d:0c:46:78:9b:a0:0e:46:c5: 06:a4:20:46:4f:ab:da:ef:a9:bb:69:e3:e5:59:ca: 45:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:10:39:2C:65:48:40:01:F6:8C:1B:D8:FB:FC:91:A7:19:2D:3C:7A X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d0:44:9d:38:7f:c6:24:bc:38:b2:00:fe:d8:9b:2f:29:d2: bf:14:b1:a0:a8:99:6f:df:93:a7:44:06:3a:25:96:4e:77:29: 2a:eb:a2:06:b0:a8:dd:99:32:b2:35:51:74:fa:38:b8:b2:49: ff:05:57:f5:85:e5:71:4d:12:5c:4e:84:c8:32:65:0f:ba:98: 03:98:1e:af:df:dc:12:0a:d4:08:ff:e3:90:18:50:01:a5:ab: 52:7a:c9:0d:33:32:d7:b6:80:98:fd:ae:cc:ce:a2:d5:09:80: 64:af:45:3f:75:ca:8a:7e:d0:af:1f:8e:bf:4d:42:20:07:4a: 7f:93:2b:57:d6:b5:ab:9c:d8:a5:bf:19:9a:15:81:e8:2b:87: e0:0c:64:c7:f3:3b:03:33:4d:e6:b0:e3:9e:76:e3:fc:63:2d: 8b:56:a2:52:ae:df:99:29:3e:de:f9:a0:73:bc:bc:16:c2:7e: 6b:7e:4f:17:4d:a3:8a:0a:e1:a3:10:66:b3:94:1a:38:9a:29: 42:8d:fc:02:59:28:16:08:cb:d5:8a:15:c2:7c:d7:c1:cf:ce: 0e:58:35:85:58:1b:57:0e:b5:46:f8:a0:35:f2:c3:0e:41:0d: c1:1f:45:0b:78:f6:ec:22:c0:14:63:19:90:0a:75:f6:b7:68: ca:6e:fe:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWs4dBWH0dTULUlCqXJUuKJE2meAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNTA4MjIyMjI2MzJaFw0yNTA4MjYwNDA4MzJaMDMxMTAvBgNV BAMTKDE0MTAzOTJDNjU0ODQwMDFGNjhDMUJEOEZCRkM5MUE3MTkyRDNDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6N9JSb4x0pTIOMIGQPvCsB3/ y1MSLfPjz7nLlFoX9p6HGLk88drfhnAlFkWoq6/Mk5xT2P2mWSVoBOHXDLLrKFUO QsleLKzO+pPTs5cyid91ryxsT3VZc3i0QZBjBydZfz03QsccXNjhncEMMlYcTiBh ypG1GFvCzlypxyTY0If3EJNrvRGktbBu1fmp/h2ffVWg7Z5jLEP0fVtK0lYgNs/0 Gf4suMszWmG8knzfHG7r4XTk2PRcXbYNyjDdQfLKzQuMLHAw9fsNZSBMkJWra1K3 2iurdJJTnGbtM9Olt96tzzjiVH0MRniboA5GxQakIEZPq9rvqbtp4+VZykUpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFBA5LGVIQAH2jBvY+/yRpxktPHowHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArQRJ04f8YkvDiyAP7Ymy8p0r8UsaComW/f k6dEBjollk53KSrrogawqN2ZMrI1UXT6OLiySf8FV/WF5XFNElxOhMgyZQ+6mAOY Hq/f3BIK1Aj/45AYUAGlq1J6yQ0zMte2gJj9rszOotUJgGSvRT91yop+0K8fjr9N QiAHSn+TK1fWtauc2KW/GZoVgegrh+AMZMfzOwMzTeaw45524/xjLYtWolKu35kp Pt75oHO8vBbCfmt+TxdNo4oK4aMQZrOUGjiaKUKN/AJZKBYIy9WKFcJ818HPzg5Y NYVYG1cOtUb4oDXyww5BDcEfRQt49uwiwBRjGZAKdfa3aMpu/pI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:43 2025 by rpki-client