$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: vNIIcZAonwpZEiFTpT0GXeJm30HFM9s1Clf6cnOqrVM= Subject key identifier: 35:77:67:1C:59:F8:72:3E:63:E5:F7:EA:0A:3C:A1:C8:1D:3C:CF:74 Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 5E94E6A058C67B08D1B47A8B9F8593049ACB9C18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 1A Signing time: Wed 03 Sep 2025 08:51:55 +0000 Manifest this update: Wed 03 Sep 2025 08:46:55 +0000 Manifest next update: Sat 06 Sep 2025 20:48:55 +0000 Files and hashes: 1: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: Pb41Rp2HA8l+11y+/7C6FY4z3GecR6ZFpYni/elRU4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 20:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:94:e6:a0:58:c6:7b:08:d1:b4:7a:8b:9f:85:93:04:9a:cb:9c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Sep 3 08:46:55 2025 GMT Not After : Sep 6 20:48:55 2025 GMT Subject: CN=3577671C59F8723E63E5F7EA0A3CA1C81D3CCF74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:54:78:ce:01:46:76:91:c8:43:9e:41:32:02: 8e:23:21:05:19:58:94:75:58:34:64:d6:a4:40:7e: a9:85:aa:6b:41:3f:85:ae:f3:df:44:6e:2b:88:f9: d8:ec:81:7d:88:5d:ec:f9:2c:d7:dc:40:d1:fe:de: 82:7e:df:6f:07:d4:b2:94:44:f4:0f:f8:93:ba:7e: c2:0a:41:31:96:da:73:d0:07:0a:81:89:86:2c:c3: 07:8c:86:34:08:a3:25:d6:b8:40:5d:7f:16:79:db: e9:a3:e7:d5:73:b8:2a:56:2b:5a:12:aa:98:03:77: 2d:a2:06:62:7a:86:62:13:57:be:ff:09:dd:fa:b1: 03:03:a0:c3:dd:40:f2:45:36:88:1a:9e:b9:e7:27: 61:80:1a:75:34:dc:41:58:bc:8a:3e:bf:be:fe:6b: 03:df:9c:3a:01:ce:75:22:f1:a5:6e:68:bd:e5:60: 65:66:3b:42:97:9e:63:9d:57:e6:e9:a7:6f:a4:fe: c3:60:5b:83:ed:00:6d:81:66:35:db:17:27:39:8b: b6:78:c7:70:19:68:2b:ce:4a:6f:52:db:33:68:e1: 68:f0:3f:fb:ea:ff:4b:ce:13:d0:fb:43:f1:9b:4d: bf:a8:e1:8b:1f:16:a0:a6:b0:05:0e:23:99:89:15: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:77:67:1C:59:F8:72:3E:63:E5:F7:EA:0A:3C:A1:C8:1D:3C:CF:74 X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:83:f5:5e:77:01:c0:a4:32:09:9c:8b:17:47:cc:24:d7:66: 1b:8b:8d:a6:79:5d:46:36:a4:5f:75:43:db:7d:8b:c7:c5:99: 8d:ce:9e:bc:3a:d7:74:ee:0a:28:80:2f:26:77:98:34:da:37: 99:29:0a:4f:e4:0d:43:6f:14:f1:86:27:36:8b:7d:e1:3a:79: e1:50:c7:38:e7:16:11:c5:0e:80:7d:6d:fa:ef:34:db:24:cf: e5:c2:5a:67:c4:49:a0:83:bd:4d:2b:11:46:0e:f4:a9:ab:ce: de:15:0a:7d:8d:66:23:9d:ac:08:3b:3a:46:75:06:6a:c3:7a: 7f:d2:85:f8:87:c5:e7:94:8e:70:2e:6c:e9:18:67:1b:e2:bd: 31:ed:09:d3:3b:25:df:3a:7a:5d:32:32:af:b0:9e:5d:cc:49: 88:e7:17:50:8e:48:0f:69:d3:7c:a4:a0:41:fd:a6:58:3b:91: 24:81:63:fd:57:fd:c1:c5:57:9d:a0:f3:af:50:09:8c:66:60: 8a:37:3c:17:37:f4:ba:38:cd:bf:82:f6:5d:1a:f5:72:b6:ee: f8:79:1e:9b:ff:24:f8:b3:4d:d4:1e:ce:94:5a:15:73:db:80: 24:7d:c9:14:59:d3:c6:27:90:0f:3e:38:f9:9f:97:5b:63:51: c2:e0:af:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpTmoFjGewjRtHqLn4WTBJrLnBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNTA5MDMwODQ2NTVaFw0yNTA5MDYyMDQ4NTVaMDMxMTAvBgNV BAMTKDM1Nzc2NzFDNTlGODcyM0U2M0U1RjdFQTBBM0NBMUM4MUQzQ0NGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkVHjOAUZ2kchDnkEyAo4jIQUZ WJR1WDRk1qRAfqmFqmtBP4Wu899EbiuI+djsgX2IXez5LNfcQNH+3oJ+328H1LKU RPQP+JO6fsIKQTGW2nPQBwqBiYYswweMhjQIoyXWuEBdfxZ52+mj59VzuCpWK1oS qpgDdy2iBmJ6hmITV77/Cd36sQMDoMPdQPJFNoganrnnJ2GAGnU03EFYvIo+v77+ awPfnDoBznUi8aVuaL3lYGVmO0KXnmOdV+bpp2+k/sNgW4PtAG2BZjXbFyc5i7Z4 x3AZaCvOSm9S2zNo4WjwP/vq/0vOE9D7Q/GbTb+o4YsfFqCmsAUOI5mJFUzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNXdnHFn4cj5j5ffqCjyhyB08z3QwHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmD9V53AcCkMgmcixdHzCTXZhuLjaZ5XUY2 pF91Q9t9i8fFmY3Onrw613TuCiiALyZ3mDTaN5kpCk/kDUNvFPGGJzaLfeE6eeFQ xzjnFhHFDoB9bfrvNNskz+XCWmfESaCDvU0rEUYO9Kmrzt4VCn2NZiOdrAg7OkZ1 BmrDen/ShfiHxeeUjnAubOkYZxvivTHtCdM7Jd86el0yMq+wnl3MSYjnF1COSA9p 03ykoEH9plg7kSSBY/1X/cHFV52g869QCYxmYIo3PBc39Lo4zb+C9l0a9XK27vh5 Hpv/JPizTdQezpRaFXPbgCR9yRRZ08YnkA8+OPmfl1tjUcLgr34= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:41 2025 by rpki-client