$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: 1f1xW0R/G1asHTYrByweCSMSkSfXppFQnL02BQ+6PgQ= Subject key identifier: E6:BA:4E:18:F5:C9:2E:1D:E9:7C:4A:F6:C5:6D:02:D0:AE:57:F5:BC Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 6B8CCB21742590C5E71525FF922630D61B8A57D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 01AB Signing time: Sat 28 Jun 2025 00:41:31 +0000 Manifest this update: Sat 28 Jun 2025 00:36:31 +0000 Manifest next update: Tue 01 Jul 2025 10:02:31 +0000 Files and hashes: 1: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: WQermmKrjmkRkTYr0aG0+hIvHneRLS+rGSH7EGxbhwM=) 2: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: mlQkv4kpkoovTjzycG6kBgiWtWTB/ag/Obm0ajltjsM=) 3: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: Qxvz6cLTsvkF/5QoPFib9ZcEBwW2jqzLdFAQealXxXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 10:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8c:cb:21:74:25:90:c5:e7:15:25:ff:92:26:30:d6:1b:8a:57:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Jun 28 00:36:31 2025 GMT Not After : Jul 1 10:02:31 2025 GMT Subject: CN=E6BA4E18F5C92E1DE97C4AF6C56D02D0AE57F5BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:d3:28:80:82:e0:22:5c:e7:57:37:02:53: ed:c8:03:9a:8d:03:06:ef:6a:40:a9:44:fa:28:2c: 09:f2:98:c1:8f:f7:0d:7c:9d:ee:44:ab:50:e6:f2: d2:d9:c8:71:33:3a:70:70:d8:88:6e:b4:92:cc:8e: 6c:a5:15:97:74:b3:55:c9:b5:70:9b:2c:38:a7:73: cd:c6:9c:bd:1e:ab:c2:36:ac:ea:61:f8:e4:c6:c6: b3:c3:48:17:87:d3:31:c4:54:50:21:81:26:1d:67: 37:10:af:80:5d:93:05:a1:18:1d:f2:0d:d8:de:9c: 2d:ac:eb:2a:3b:73:45:79:0a:53:1d:a4:a1:16:28: a0:63:c9:2f:6f:7d:4a:7c:cb:18:ef:a8:1d:c2:1d: c4:fd:39:5a:f8:2a:b8:51:b7:5a:ca:7d:80:ae:c1: ff:03:d9:7e:50:69:3c:a1:cb:56:29:e3:28:6d:0b: 74:7a:aa:95:86:09:e3:10:b2:4f:91:2e:d9:59:87: 8a:f3:0e:39:11:da:39:81:d6:db:18:75:e7:a6:db: 82:ba:ca:30:7b:c6:62:d0:6c:30:68:a5:44:c9:20: 4c:94:d3:bf:03:5c:60:1f:75:82:50:ee:45:5d:86: d5:db:33:f4:9e:00:f2:f4:32:d9:0a:40:5d:e8:c4: 40:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BA:4E:18:F5:C9:2E:1D:E9:7C:4A:F6:C5:6D:02:D0:AE:57:F5:BC X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7b:83:8c:29:9c:8a:e6:76:fb:46:6d:44:96:e3:f0:8f:7b: cd:1a:ef:2d:e3:bc:2c:3d:c1:d9:0d:25:ce:3d:52:4a:b4:6b: 7e:c3:17:79:80:17:f1:8e:cc:ca:f0:3c:52:b4:ab:b8:99:c0: d1:f7:23:9b:7a:83:61:24:60:b1:0a:8d:c2:22:d0:e4:af:b0: 69:64:cd:5d:27:a0:61:36:d1:52:c5:d0:24:2d:15:a3:be:97: 1c:c3:17:36:e6:b4:c5:3a:4e:20:36:f3:a0:2c:97:31:ad:b8: 0f:16:9b:be:e7:d5:a8:0e:50:b5:4a:a9:f9:63:9d:5f:dc:22: 29:7f:f1:7f:17:92:1a:eb:fb:35:03:30:f3:2d:d0:6e:80:55: 33:e4:9d:95:2b:40:47:e6:ff:55:f7:d3:bc:6c:53:85:9c:e8: 28:61:51:f5:51:82:b1:53:07:d6:c0:fc:6c:4e:da:4c:d8:d8: dc:43:5d:f0:24:59:f7:c6:98:3a:7c:7a:fe:03:8f:3c:4e:7b: a9:f2:ea:5b:07:db:3b:7f:c2:7e:77:f5:9e:77:54:2c:b3:1a: e0:a0:c4:f1:e8:18:71:18:9d:ce:98:62:c1:b3:b8:25:29:db: d3:1d:3b:dc:f8:29:df:70:6e:17:3a:2b:36:3b:66:97:f7:10: 08:43:75:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa4zLIXQlkMXnFSX/kiYw1huKV9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNTA2MjgwMDM2MzFaFw0yNTA3MDExMDAyMzFaMDMxMTAvBgNV BAMTKEU2QkE0RTE4RjVDOTJFMURFOTdDNEFGNkM1NkQwMkQwQUU1N0Y1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVetMogILgIlznVzcCU+3IA5qN AwbvakCpRPooLAnymMGP9w18ne5Eq1Dm8tLZyHEzOnBw2IhutJLMjmylFZd0s1XJ tXCbLDinc83GnL0eq8I2rOph+OTGxrPDSBeH0zHEVFAhgSYdZzcQr4BdkwWhGB3y DdjenC2s6yo7c0V5ClMdpKEWKKBjyS9vfUp8yxjvqB3CHcT9OVr4KrhRt1rKfYCu wf8D2X5QaTyhy1Yp4yhtC3R6qpWGCeMQsk+RLtlZh4rzDjkR2jmB1tsYdeem24K6 yjB7xmLQbDBopUTJIEyU078DXGAfdYJQ7kVdhtXbM/SeAPL0MtkKQF3oxEDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5rpOGPXJLh3pfEr2xW0C0K5X9bwwHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJp7g4wpnIrmdvtGbUSW4/CPe80a7y3jvCw9 wdkNJc49Ukq0a37DF3mAF/GOzMrwPFK0q7iZwNH3I5t6g2EkYLEKjcIi0OSvsGlk zV0noGE20VLF0CQtFaO+lxzDFzbmtMU6TiA286AslzGtuA8Wm77n1agOULVKqflj nV/cIil/8X8Xkhrr+zUDMPMt0G6AVTPknZUrQEfm/1X307xsU4Wc6ChhUfVRgrFT B9bA/GxO2kzY2NxDXfAkWffGmDp8ev4DjzxOe6ny6lsH2zt/wn539Z53VCyzGuCg xPHoGHEYnc6YYsGzuCUp29MdO9z4Kd9wbhc6KzY7Zpf3EAhDdQ8= -----END CERTIFICATE-----Generated at Sun Jun 29 19:35:42 2025 by rpki-client