$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: 2OnrUa4eHwP8Re0skGAej9UvpLbIypXBHMgBn63fYlU= Subject key identifier: C5:51:26:BC:DB:B0:04:8C:F4:D8:68:B8:08:3A:EA:E0:7F:42:9D:0D Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 22F5B633E1E33A7EFA658D3A9C779059EDF52994 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 0194 Signing time: Wed 07 May 2025 00:01:30 +0000 Manifest this update: Tue 06 May 2025 23:56:30 +0000 Manifest next update: Sat 10 May 2025 11:28:30 +0000 Files and hashes: 1: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: Qxvz6cLTsvkF/5QoPFib9ZcEBwW2jqzLdFAQealXxXU=) 2: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: NYByLETe3GlmjwHtlNbSSlYcwg+I2wuWnU4sQ1rHr10=) 3: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: WQermmKrjmkRkTYr0aG0+hIvHneRLS+rGSH7EGxbhwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 11:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f5:b6:33:e1:e3:3a:7e:fa:65:8d:3a:9c:77:90:59:ed:f5:29:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: May 6 23:56:30 2025 GMT Not After : May 10 11:28:30 2025 GMT Subject: CN=C55126BCDBB0048CF4D868B8083AEAE07F429D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:76:d4:ba:31:53:eb:cf:6b:ea:67:da:fa:87: 4d:0c:aa:2f:95:bb:74:78:2d:2b:36:1b:27:8b:c2: bf:b8:7e:d5:a3:bc:cb:fb:b1:99:41:9a:b1:7c:5c: 2b:cf:31:2d:16:cd:1e:53:d9:cd:bc:8d:15:c6:74: fa:66:de:4a:ff:a1:f6:a8:2d:83:fd:a6:71:87:50: db:c7:ce:66:83:71:f9:10:fd:94:1a:39:0e:09:3f: c1:b0:9f:20:cf:40:3e:d1:a2:ad:0d:da:9a:aa:36: 08:59:e2:a3:89:f0:45:8b:f1:14:16:ad:28:9f:af: 6e:7d:58:ce:96:d1:fb:1d:a9:10:c4:2f:4d:25:aa: 5e:f6:e5:07:49:b6:a7:71:7d:d1:ac:54:4e:09:44: 8a:ce:7d:d8:06:36:77:ef:87:6d:5c:73:e9:bc:63: 50:80:b3:c9:90:ce:db:bf:81:df:c2:74:b6:d5:60: 21:18:b2:dc:ca:ed:fc:58:d1:04:3f:44:1d:43:20: 4f:5d:08:0d:5e:3c:12:3b:c5:5d:38:a6:7a:98:9e: 8d:ad:af:7c:ba:f0:a3:57:72:b1:8c:04:82:a9:a9: 7e:78:51:b7:42:a3:ff:ac:bd:2b:b6:12:a9:81:46: b8:0e:e7:ae:9d:ef:e1:8e:39:52:98:df:84:fd:50: 04:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:51:26:BC:DB:B0:04:8C:F4:D8:68:B8:08:3A:EA:E0:7F:42:9D:0D X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0b:42:17:67:c8:60:d4:d7:ec:4f:4e:3c:20:a3:40:4b:0a: 18:0c:df:4e:80:49:70:23:58:ee:7e:ba:8a:30:9b:f1:5f:3b: 6c:f3:8f:25:bc:76:12:18:e6:ce:97:51:81:86:4b:6e:f5:61: 55:ef:57:4f:5e:59:62:a4:f8:c0:c8:46:46:39:0e:10:59:f5: 60:5a:cd:ce:7b:e4:a3:79:5b:95:38:9b:c1:08:4e:5a:85:51: 44:87:cd:30:d9:89:a4:8a:7d:99:5e:1f:53:a2:bd:b2:96:59: 9e:0a:fd:ff:3e:64:d3:5c:fd:1f:f0:92:ff:38:87:ff:1e:fe: 36:92:57:1b:36:73:54:f2:86:4f:f9:25:38:79:7f:9c:31:92: e6:f8:d9:75:ec:15:1c:33:59:76:39:c4:c3:56:30:9f:8c:1c: 92:7b:a9:f4:3a:2d:0f:7d:2f:ff:73:82:4c:23:ae:26:82:63: 97:1c:d3:a5:2d:90:a8:bf:db:c2:88:fa:4d:21:16:89:29:03: 23:a6:b1:e7:ec:e7:8d:32:e6:87:8c:20:22:e2:70:dd:33:59: fe:5b:a6:1e:0e:86:5e:8d:7f:57:a7:52:28:4b:f5:e0:70:a9: 20:54:95:5a:81:8d:e8:ad:0b:79:70:f3:2f:ce:91:05:8e:3a: 43:a1:8a:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvW2M+HjOn76ZY06nHeQWe31KZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNTA1MDYyMzU2MzBaFw0yNTA1MTAxMTI4MzBaMDMxMTAvBgNV BAMTKEM1NTEyNkJDREJCMDA0OENGNEQ4NjhCODA4M0FFQUUwN0Y0MjlEMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwdtS6MVPrz2vqZ9r6h00Mqi+V u3R4LSs2GyeLwr+4ftWjvMv7sZlBmrF8XCvPMS0WzR5T2c28jRXGdPpm3kr/ofao LYP9pnGHUNvHzmaDcfkQ/ZQaOQ4JP8GwnyDPQD7Roq0N2pqqNghZ4qOJ8EWL8RQW rSifr259WM6W0fsdqRDEL00lql725QdJtqdxfdGsVE4JRIrOfdgGNnfvh21cc+m8 Y1CAs8mQztu/gd/CdLbVYCEYstzK7fxY0QQ/RB1DIE9dCA1ePBI7xV04pnqYno2t r3y68KNXcrGMBIKpqX54UbdCo/+svSu2EqmBRrgO566d7+GOOVKY34T9UARXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxVEmvNuwBIz02Gi4CDrq4H9CnQ0wHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKELQhdnyGDU1+xPTjwgo0BLChgM306ASXAj WO5+uoowm/FfO2zzjyW8dhIY5s6XUYGGS271YVXvV09eWWKk+MDIRkY5DhBZ9WBa zc575KN5W5U4m8EITlqFUUSHzTDZiaSKfZleH1OivbKWWZ4K/f8+ZNNc/R/wkv84 h/8e/jaSVxs2c1Tyhk/5JTh5f5wxkub42XXsFRwzWXY5xMNWMJ+MHJJ7qfQ6LQ99 L/9zgkwjriaCY5cc06UtkKi/28KI+k0hFokpAyOmsefs540y5oeMICLicN0zWf5b ph4Ohl6Nf1enUihL9eBwqSBUlVqBjeitC3lw8y/OkQWOOkOhiiE= -----END CERTIFICATE-----Generated at Thu May 8 11:26:14 2025 by rpki-client